last executing test programs: 2.982327155s ago: executing program 4 (id=1068): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, 0x0, 0x5c8}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a5c000000060a09040000000000000000020000000900020073797a32000000000900010073797a"], 0x84}, 0x1, 0x0, 0x0, 0x880}, 0x8000) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 2.107789251s ago: executing program 4 (id=1092): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYRESHEX], 0x48) r1 = socket$netlink(0x10, 0x3, 0x14) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x8, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r3 = syz_io_uring_setup(0x3b, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r4, r5, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r7, 0x0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f0000000380)=""/197, 0xc5}], 0x1}, 0x0, 0x80002101}) clock_nanosleep(0x6, 0x0, &(0x7f0000000240)={0x0, 0x3938700}, &(0x7f0000000280)) r8 = gettid() rt_sigqueueinfo(r8, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x5}) io_uring_enter(r3, 0xd81, 0x0, 0x0, 0x0, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b7030000000000de850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r10 = socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000040)='kmem_cache_free\x00', r9, 0x0, 0x2}, 0x18) setsockopt$IPT_SO_SET_REPLACE(r10, 0x0, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x340, 0x11, 0x148, 0x340, 0x0, 0x440, 0x2a8, 0x2a8, 0x440, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x20000000, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00'}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x538) write(r6, &(0x7f0000000200)='~', 0xf5) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r11}, 0x10) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001040)={0x38, 0x1403, 0x1, 0x20000, 0x25dfdbff, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth0_virt_wifi\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x884}, 0x0) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r12}, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) 1.943143035s ago: executing program 4 (id=1095): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004"], 0x48) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, 0x0, 0x5c8}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a5c000000060a09040000000000000000020000000900020073797a32000000000900010073797a3000000000300004"], 0x84}, 0x1, 0x0, 0x0, 0x880}, 0x8000) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 1.318377938s ago: executing program 0 (id=1114): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@nouid32}, {@minixdf}, {@delalloc}, {@errors_continue}]}, 0x1, 0x504, &(0x7f0000000380)="$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") bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="00040000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) 1.208790847s ago: executing program 0 (id=1116): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x101800, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x20001439) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0x4004743d, 0x2000000b) read(r1, 0x0, 0x0) close(r1) close(r0) 1.096105507s ago: executing program 0 (id=1117): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000094000100"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='netlink_extack\x00', r2}, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000001040)=ANY=[@ANYBLOB="3c010000100013070000000000000000ac1414aa000000000000000081438ed1dc4cffaa00000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bbfffffffe32000000ff01000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000009000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c001400636d61632861657329"], 0x13c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x200c840, &(0x7f0000000240)={[{@discard}, {@noload}]}, 0x64, 0x537, &(0x7f0000000f80)="$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") bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_SIOCOUTQ(r4, 0x5411, &(0x7f0000001d40)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000010000b70400000000000085000000c3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001cc0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000010001000000004000000018110000", @ANYRES32=r7], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r8}, 0x10) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000080)=@o_path={&(0x7f0000000040)='./file0\x00', r8}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000001c0)='tlb_flush\x00', r6}, 0x18) syz_clone(0x240c7000, 0x0, 0x0, 0x0, 0x0, 0x0) llistxattr(&(0x7f0000000080)='./file1\x00', 0x0, 0x0) 1.092898097s ago: executing program 4 (id=1120): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000400)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0xfe, 0x0, 0x7ffc1ffb}]}) get_robust_list(0x0, &(0x7f0000000540)=0x0, &(0x7f0000000580)) 1.015246124s ago: executing program 4 (id=1123): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000002100), 0x200000, 0x0) fcntl$getflags(r0, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x3, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="090000000000000000809607dd92e46a", @ANYRESDEC=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0xfffffffc, 0x0, 0x0, 0x41100, 0x12, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6a9, @void, @value}, 0x94) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000020000000000000000018190000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) write$binfmt_script(r1, &(0x7f0000000540), 0x84) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) perf_event_open(&(0x7f0000000400)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff800}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x1e, 0x12, r4, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x8, 0x0) mmap(&(0x7f0000543000/0x1000)=nil, 0x1000, 0x0, 0x2031, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r5, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "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"}) ioctl$USBDEVFS_SUBMITURB(r5, 0x8038550a, &(0x7f0000000380)=@urb_type_bulk={0x3, {0x1, 0x1}, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x2804110, &(0x7f0000000000), 0x1, 0x52c, &(0x7f0000000f40)="$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") bind$unix(r7, &(0x7f0000003000)=@file={0x1}, 0x6e) connect$unix(r6, &(0x7f0000000280)=@file={0x1}, 0x6e) r8 = socket$unix(0x1, 0x1, 0x0) setresuid(0x0, 0x0, 0xee00) connect$unix(r8, &(0x7f0000000280)=@file={0x1}, 0x6e) 801.953772ms ago: executing program 4 (id=1126): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x5, &(0x7f0000000680)=ANY=[@ANYRESOCT=r0], &(0x7f0000000400)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="9800000010000008000000010001f9b8dd079ff8", @ANYRES32=0x0, @ANYBLOB="adffa88800000000700012800b00010067656e65766500006000028008000b4000000fff060005004e200000080001000400000008000200ffffffff05000d0001000000050009000000000008000b4000000007050008000100000014000700fe80000000000000000000000000001705000d000400000008000a00", @ANYRES32=r4, @ANYBLOB], 0x98}}, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000100)={0x28, 0x0, 0x2710}, 0x10) r6 = accept4$unix(r0, 0x0, 0x0, 0x0) writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000480)="7eef98a043e8fc63771132256d127172a0f9ef297e3fc21732132bdd3d66b50e37a347d376b8844ff76fb3608d1dca8092bf9a6775c96fb50041e0c00414128d3ac72d24aee2cda471054b6efbe038ef0d0f35c1", 0x54}], 0x1) recvmsg(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000300)=""/83, 0x53}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002a80)={0x4, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x1) r7 = socket$inet_udplite(0x2, 0x2, 0x88) bind$inet(r7, &(0x7f00000001c0)={0x2, 0x4e24, @empty}, 0x10) setsockopt$sock_int(r7, 0x1, 0x28, &(0x7f0000000200)=0x5, 0x4) sendto$inet(r7, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x38}}, 0x10) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x164e077801a2caba, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r8}, 0x10) r9 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r9, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6}]}, 0x10) bind$inet(r9, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) socket$nl_route(0x10, 0x3, 0x0) recvmsg(r7, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) 643.401926ms ago: executing program 2 (id=1131): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, 0x0, &(0x7f0000000200)}, 0x20) socket$xdp(0x2c, 0x3, 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r5}, &(0x7f0000000240), &(0x7f00000003c0)=r7}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r6, r3, 0x25, 0x2, @val=@tcx={@void, @value}}, 0x40) syz_emit_ethernet(0x2a, &(0x7f00000002c0)={@random="591a1d9a2bdb", @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @empty}}}}}, 0x0) 594.89662ms ago: executing program 2 (id=1133): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000400)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0xfe, 0x0, 0x7ffc1ffb}]}) get_robust_list(0x0, &(0x7f0000000540)=0x0, &(0x7f0000000580)) 558.077473ms ago: executing program 2 (id=1134): open(&(0x7f00000000c0)='./bus\x00', 0x40004c141, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x63d014, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x200000, &(0x7f00000003c0)={[], [{@rootcontext={'rootcontext', 0x3d, 'staff_u'}}, {@uid_lt}, {@context={'context', 0x3d, 'user_u'}}, {@uid_gt}, {@measure}, {@obj_role={'obj_role', 0x3d, '/dev/loop'}}, {@appraise_type}, {@obj_type}, {@subj_role={'subj_role', 0x3d, '/dev/loop'}}]}, 0xfc, 0x57c, &(0x7f00000013c0)="$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") r1 = open(&(0x7f0000000100)='./bus\x00', 0x103102, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x4000) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$vsock_stream(0x28, 0x1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mq_open(&(0x7f0000000000)='\x00', 0x1, 0xd4, &(0x7f0000000040)={0x8, 0x7, 0x2, 0x9}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x13, 0x6, &(0x7f00000002c0)=ANY=[@ANYBLOB="05000000000000006b113600000000008510000002000000850000000500000095000000000000009500a50500000000719837a62ecba6b4aca926"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'macsec0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="8b3300000000000015ffffff7f000000000000801c000d801800030014000300"/48], 0x38}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800c0001006d61637674617000040002800800", @ANYRES32=r3], 0x3c}}, 0x0) name_to_handle_at(0xffffffffffffffff, &(0x7f0000004740)='\x00', 0x0, 0x0, 0x1200) fadvise64(r0, 0x0, 0x0, 0x4) 446.316392ms ago: executing program 2 (id=1137): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd88500000004000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0xb, 0x100005, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x50) 434.332993ms ago: executing program 1 (id=1138): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0x4, 0xffff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x7, 0x0, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000000c0)={0x0, 0x0, 0x0, &(0x7f0000000140)="3f4ba0f137258763c79fd5b47c0d3983d5d7d57f", 0x9, r1}, 0x38) 380.859928ms ago: executing program 1 (id=1139): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x101800, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x20001439) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f00000000c0)=0x2050a0c) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x4004743d, 0x2000000b) read(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) close(r0) 365.125359ms ago: executing program 2 (id=1140): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYRESHEX], 0x48) r1 = socket$netlink(0x10, 0x3, 0x14) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x8, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r3 = syz_io_uring_setup(0x3b, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r4, r5, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r7, 0x0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f0000000380)=""/197, 0xc5}], 0x1}, 0x0, 0x80002101}) clock_nanosleep(0x6, 0x0, &(0x7f0000000240)={0x0, 0x3938700}, &(0x7f0000000280)) r8 = gettid() rt_sigqueueinfo(r8, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x5}) io_uring_enter(r3, 0xd81, 0x0, 0x0, 0x0, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b7030000000000de850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r10 = socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000040)='kmem_cache_free\x00', r9, 0x0, 0x2}, 0x18) setsockopt$IPT_SO_SET_REPLACE(r10, 0x0, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x340, 0x11, 0x148, 0x340, 0x0, 0x440, 0x2a8, 0x2a8, 0x440, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x20000000, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00'}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x538) write(r6, &(0x7f0000000200)='~', 0xf5) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r11}, 0x10) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001040)={0x38, 0x1403, 0x1, 0x20000, 0x25dfdbff, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth0_virt_wifi\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x884}, 0x0) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r12}, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) 288.111896ms ago: executing program 0 (id=1142): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0xb, 0x100005, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x50) 286.541576ms ago: executing program 2 (id=1143): io_uring_setup(0x79af, &(0x7f0000000100)={0x0, 0x0, 0x1000}) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1e000000000000"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005000000000000", @ANYBLOB, @ANYRES32=0x0], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x11, 0xc, &(0x7f0000000b00)=ANY=[@ANYBLOB="1800007265c800172000001811000078d75b66fa07c2dc1cd43eda545ce6ba3a0d345334fd66fc26774ba8ad3d13834ce624da9a712475e5e95adf64de9eb0991757c004f548cb70e72391170bc83c8590b9a841187770e1e41737352ec9b2f77d1edd5477cc1241455cd30d827357cb8b38b55948b3c358e7054bb10b7af20727ecdb79cac344f723342c3f7701f7de46e98ec33e21d96c9653f571997f738e86284caf71f71bae8746b8ba4278e9a3b3d7a8861325260c70e254c663259722d54fffb219503d9ca9092f68e53f941d6930", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe09c, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0, 0xffffffffffffffff}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x20) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000005c0)={{0x1, 0x1, 0x18, r2}, './file1\x00'}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000dc0)={0x11, 0x59, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r3}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800010009000000000000000a00"], 0x24}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="2000000069000305000000000000000000000000000000000800010002"], 0x20}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r6 = socket$netlink(0x10, 0x3, 0x14) sendmsg$NL80211_CMD_DISCONNECT(r6, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000640)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000025bd7000fddbdf25300000000c009900010000006100000006003600090000100600360005000000060036002000000006003600120000009c154db4fca36e37280f5bc9010b1a4ca86059dbd69fd5e75cd75465fa8cbfb36483c667fa88bf2a34ea83ce2fce657023485809319d9ec258d920b7d736e23268c6dcf40fbac0f16c503841c2a0f18c"], 0x40}, 0x1, 0x0, 0x0, 0x4081}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r7}, 0x18) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f00000002c0)={0x0, 0x4, &(0x7f0000001200)={&(0x7f0000001080)=ANY=[@ANYBLOB="380000000314010000000000000000000900020053797a310000000808004100736977001400330073797a6b616c6c657230"], 0x38}}, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0x8, &(0x7f0000000380), 0x1, 0x525, &(0x7f00000060c0)="$eJzs3U9sI1cZAPBvJsnau02bLfQAqNClFBa0WjvxtquqF8qpQqgSokcO25B4o2jtOIqd0oQ9ZI/ckajECU6cOSBxQOqJOxIHuHEpB6QCK9AGCYSRx3bW+ePYyh87G/9+0shv5o39vbejec/64p0XwMS6ERE7EXElIt6PiLnO8aSzxdvtrXXek8cPl3YfP1xKotl87+9JVt86Fj3vaXmu85n5iPjeOxE/SA4E/UNEfWv7wWKlUt7oHCo2quvF+tb27dXq4kp5pbxWKt1duDv/5p03SmfW11eqv/r0akT89jdf/OT3O9/4UatZs5263n6cpXbXZ/bitExHxHfOI9gYTHX6c+Ukbz7RmzhLaUR8JiJeze7/uZjKruZ++y/TN0fYOgDgPDSbc9Gc690HAC67NMuBJWmhkwuYjTQtFNo5vJfiWlqp1Ru37tc215bbubLrMZPeX62U5zu5wusxk9xfnS4vZOXufqVcOrB/JyJejIif5K5m+4WlWmV5nF98AGCCPXdg/v9Xrj3/AwCXXP5pMTfOdgAAo5MfdwMAgJEz/wPA5DH/A8DkMf8DwOQx/wPA5DH/A8BE+e6777a25m7n+dfLH2xtPqh9cHu5XH9QqG4uFZZqG+uFlVptJXtmT3XQ51VqtfWF12Pzw2KjXG8U61vb96q1zbXGvey53vfKMyPpFQBwnBdf+fhPSUTsvHU126Lnef8D5+qXz7t1wHlKx90AYGymxt0AYGwOr/YFTIpT5uP/e3BpT+DZ8b9msxk9a/dGxKO9Us/DQPv+ROijocKk1g2Fi+fm50+R/weeafL/MLlOlv/3XR4uA/l/mFzNZmLNfwCYMHL8wKDf8fT+/X++2bMz3N//AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4FKazbYkLXTWAp+NNC0UIp6PiOsxk9xfrZTnI+KFiPhjbibX2l+ICOsGAcCzLP1r0ln/6+bca7MHa6/k/p3LXiPihz9776cfLjYaGwsRV5J/7B1vfNQ5XhpH+wGAQbrzdHce73ry+OFSdxtlez79Vntx0Vbc3c7WrpmO6ew1n+Uarv0z6ey3tb6vTJ1B/J1HEfG5o/qfZLmR652VTw/Gb8V+fqTx033x06yu/dr6t/jsGbQFJs3HrfHn7aPuvzRuZK9H3//5bIQ6ve74t3to/Ev3xr+pPuPfjWFjvP67bx862Jxr1z2K+MJ0xG73w3vGn278pE/814aM/+eXv/Rqv7rmzyNuxlH9T/bFKjaq68X61vbt1eriSnmlvFYq3V24O//mnTdKxSxHXexmqg/721u3XugXv9X/a33i5wf0/6tD9v8X/3n/+18+Jv7Xv3L09X/pmPitOfFrQ8ZfvPbrfL+6VvzlPv0fdP1vDRn/k79sLw95KgAwAvWt7QeLlUp54/SF/LHnpGcRYohCErFzziGeFnK//PE7g0/Ojaw9JyxEv6qpi9LCi1g40b2TuyCNH1wY98gEnLenN/24WwIAAAAAAAAAAAAAAPQziv9ONO4+AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcHn9PwAA//+Kytdj") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='ext4_request_inode\x00'}, 0x10) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000000004e0e981ef50342dc5c99ce7b606f04f20c12656bf59d80e20ed0c642314101371acd577bfbc31ef8"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='ext4_request_inode\x00', r8}, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000700)='blkio.bfq.io_service_time_recursive\x00', 0x26e1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000f40)=""/4096, 0x2e, 0x1000, 0x1, 0x0, 0x0, @void, @value}, 0x28) 283.144947ms ago: executing program 3 (id=1144): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, 0x0, &(0x7f0000000200)}, 0x20) socket$xdp(0x2c, 0x3, 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r5}, &(0x7f0000000240), &(0x7f00000003c0)=r7}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r6, r3, 0x25, 0x2, @val=@tcx={@void, @value}}, 0x40) syz_emit_ethernet(0x2a, &(0x7f00000002c0)={@random="591a1d9a2bdb", @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @empty}}}}}, 0x0) 239.011991ms ago: executing program 1 (id=1145): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000400)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0xfe, 0x0, 0x7ffc1ffb}]}) get_robust_list(0x0, &(0x7f0000000540)=0x0, &(0x7f0000000580)) 238.06742ms ago: executing program 1 (id=1146): bpf$MAP_CREATE(0x0, 0x0, 0x50) socket$kcm(0x10, 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket$netlink(0x10, 0x3, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x34, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$inet6_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) write$sndseq(r2, 0x0, 0x0) socket$l2tp6(0xa, 0x2, 0x73) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000006c0)=ANY=[@ANYBLOB="380000000314010000000000000008000900020073797a310000000008004100736977001400330073797a6b616c6c657230"], 0x38}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000000c0)={'ip_vti0\x00', &(0x7f0000000040)={'syztnl0\x00', 0x0, 0x1, 0x78b7, 0x7, 0x7fff, {{0x11, 0x4, 0x1, 0x23, 0x44, 0x67, 0x0, 0x5, 0x29, 0x0, @remote, @broadcast, {[@ssrr={0x89, 0x7, 0xbd, [@private=0xa010102]}, @noop, @timestamp={0x44, 0x24, 0x5e, 0x0, 0x2, [0x8, 0x1f25cb0a, 0x3, 0x5, 0x4, 0x3, 0x10, 0xffffffff]}, @noop]}}}}}) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x8, 0x0) mbind(&(0x7f0000528000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x1) 221.672462ms ago: executing program 3 (id=1147): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socket$xdp(0x2c, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) close_range(r0, r3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r4}, &(0x7f0000000240), &(0x7f00000003c0)=r6}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r5, r2, 0x25, 0x2, @val=@tcx={@void, @value}}, 0x40) syz_emit_ethernet(0x2a, &(0x7f00000002c0)={@random="591a1d9a2bdb", @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @empty}}}}}, 0x0) 220.646132ms ago: executing program 0 (id=1148): open(&(0x7f00000000c0)='./bus\x00', 0x40004c141, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x63d014, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x200000, &(0x7f00000003c0)={[], [{@rootcontext={'rootcontext', 0x3d, 'staff_u'}}, {@uid_lt}, {@context={'context', 0x3d, 'user_u'}}, {@uid_gt}, {@measure}, {@obj_role={'obj_role', 0x3d, '/dev/loop'}}, {@appraise_type}, {@obj_type}, {@subj_role={'subj_role', 0x3d, '/dev/loop'}}]}, 0xfc, 0x57c, &(0x7f00000013c0)="$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") r1 = open(&(0x7f0000000100)='./bus\x00', 0x103102, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x4000) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$vsock_stream(0x28, 0x1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mq_open(&(0x7f0000000000)='\x00', 0x1, 0xd4, &(0x7f0000000040)={0x8, 0x7, 0x2, 0x9}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x13, 0x6, &(0x7f00000002c0)=ANY=[@ANYBLOB="05000000000000006b113600000000008510000002000000850000000500000095000000000000009500a50500000000719837a62ecba6b4aca926"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'macsec0\x00'}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="8b3300000000000015ffffff7f000000000000801c000d801800030014000300"/48], 0x38}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) name_to_handle_at(0xffffffffffffffff, &(0x7f0000004740)='\x00', 0x0, 0x0, 0x1200) fadvise64(r0, 0x0, 0x0, 0x4) 194.710144ms ago: executing program 3 (id=1149): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@nouid32}, {@minixdf}, {@delalloc}, {@errors_continue}]}, 0x1, 0x504, &(0x7f0000000380)="$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") r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000400121001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000002000083850000007100000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) bind$bt_hci(r1, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) 111.086071ms ago: executing program 3 (id=1150): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd88500000004000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0xb, 0x100005, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x50) 82.053454ms ago: executing program 0 (id=1151): bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYRESHEX], 0x48) socket$netlink(0x10, 0x3, 0x14) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x8, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) syz_io_uring_setup(0x3b, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f0000000380)=""/197, 0xc5}], 0x1}, 0x0, 0x80002101}) clock_nanosleep(0x6, 0x0, &(0x7f0000000240)={0x0, 0x3938700}, &(0x7f0000000280)) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x10) syz_mount_image$iso9660(&(0x7f0000000380), &(0x7f0000000800)='./file0\x00', 0x1480e, &(0x7f0000026180)=ANY=[@ANYBLOB="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", @ANYRES64], 0x20, 0x6a5, &(0x7f0000000f00)="$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") execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) 63.168166ms ago: executing program 1 (id=1152): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0x4, 0xffff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x7, 0x0, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000000c0)={0x0, 0x0, 0x0, &(0x7f0000000140)="3f4ba0f137258763c79fd5b47c0d3983d5d7d57f709d17d1cd167c38ef2d", 0x9, r1}, 0x38) 55.827526ms ago: executing program 3 (id=1153): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f0000000740)={[{@dax_never}, {@usrjquota}, {@resuid}, {@nodiscard}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6}}, {@jqfmt_vfsold}, {@noauto_da_alloc}, {@delalloc}], [{@smackfstransmute={'smackfstransmute', 0x3d, '#\'&/+[-@'}}, {@uid_eq}, {@euid_eq}, {@dont_hash}, {@audit}, {@context={'context', 0x3d, 'unconfined_u'}}, {@dont_appraise}]}, 0x1, 0x5e5, &(0x7f0000001cc0)="$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") getxattr(0x0, 0x0, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c00100000000000120000d1850000000500000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) request_key(&(0x7f0000000400)='blacklist\x00', &(0x7f0000000380)={'syz', 0x0}, &(0x7f00000003c0)=')\x00', 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') mkdir(&(0x7f0000000000)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) pipe2$9p(&(0x7f0000000140), 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYRES64=r0, @ANYRESHEX=r1], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x6, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRESOCT=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) 3.94642ms ago: executing program 3 (id=1154): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000094000100"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000002304e800000000000000ea850000"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='netlink_extack\x00', r2}, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000001040)=ANY=[@ANYBLOB="3c010000100013070000000000000000ac1414aa000000000000000081438ed1dc4cffaa00000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bbfffffffe32000000ff01000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000009000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c001400636d61632861657329"], 0x13c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x200c840, &(0x7f0000000240)={[{@discard}, {@noload}]}, 0x64, 0x537, &(0x7f0000000f80)="$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") bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_SIOCOUTQ(r4, 0x5411, &(0x7f0000001d40)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000010000b70400000000000085000000c3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001cc0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000010001000000004000000018110000", @ANYRES32=r7], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r8}, 0x10) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000080)=@o_path={&(0x7f0000000040)='./file0\x00', r8}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000001c0)='tlb_flush\x00', r6}, 0x18) syz_clone(0x240c7000, 0x0, 0x0, 0x0, 0x0, 0x0) llistxattr(&(0x7f0000000080)='./file1\x00', 0x0, 0x0) 0s ago: executing program 1 (id=1155): io_uring_setup(0x79af, &(0x7f0000000100)={0x0, 0x0, 0x1000}) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1e000000000000"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005000000000000", @ANYBLOB, @ANYRES32=0x0], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x11, 0xc, &(0x7f0000000b00)=ANY=[@ANYBLOB="1800007265c800172000001811000078d75b66fa07c2dc1cd43eda545ce6ba3a0d345334fd66fc26774ba8ad3d13834ce624da9a712475e5e95adf64de9eb0991757c004f548cb70e72391170bc83c8590b9a841187770e1e41737352ec9b2f77d1edd5477cc1241455cd30d827357cb8b38b55948b3c358e7054bb10b7af20727ecdb79cac344f723342c3f7701f7de46e98ec33e21d96c9653f571997f738e86284caf71f71bae8746b8ba4278e9a3b3d7a8861325260c70e254c663259722d54fffb219503d9ca9092f68e53f941d6930", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe09c, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0, 0xffffffffffffffff}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x20) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000005c0)={{0x1, 0x1, 0x18, r2}, './file1\x00'}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000dc0)={0x11, 0x59, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r3}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800010009000000000000000a00000000000000080001000200000004000b"], 0x24}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[], 0x20}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r6 = socket$netlink(0x10, 0x3, 0x14) sendmsg$NL80211_CMD_DISCONNECT(r6, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000640)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000025bd7000fddbdf25300000000c009900010000006100000006003600090000100600360005000000060036002000000006003600120000009c154db4fca36e37280f5bc9010b1a4ca86059dbd69fd5e75cd75465fa8cbfb36483c667fa88bf2a34ea83ce2fce657023485809319d9ec258d920b7d736e23268c6dcf40fbac0f16c503841c2a0f18c"], 0x40}, 0x1, 0x0, 0x0, 0x4081}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r7}, 0x18) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f00000002c0)={0x0, 0x4, &(0x7f0000001200)={&(0x7f0000001080)=ANY=[@ANYBLOB="380000000314010000000000000000000900020053797a310000000808004100736977001400330073797a6b616c6c657230"], 0x38}}, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0x8, &(0x7f0000000380), 0x1, 0x525, &(0x7f00000060c0)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='ext4_request_inode\x00'}, 0x10) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000000004e0e981ef50342dc5c99ce7b606f04f20c12656bf59d80e20ed0c642314101371acd577bfbc31ef8"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='ext4_request_inode\x00', r8}, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000700)='blkio.bfq.io_service_time_recursive\x00', 0x26e1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000f40)=""/4096, 0x2e, 0x1000, 0x1, 0x0, 0x0, @void, @value}, 0x28) kernel console output (not intermixed with test programs): ibute type 1 has an invalid length. [ 79.821122][ T5473] loop3: detected capacity change from 0 to 512 [ 79.826472][ T5474] netlink: 16150 bytes leftover after parsing attributes in process `syz.0.494'. [ 79.852545][ T5473] ext4 filesystem being mounted at /58/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 79.971472][ T5480] netlink: 56 bytes leftover after parsing attributes in process `syz.3.496'. [ 80.024254][ T5482] loop3: detected capacity change from 0 to 512 [ 80.039246][ T5484] loop2: detected capacity change from 0 to 512 [ 80.046278][ T5484] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 80.054361][ T5482] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 80.066210][ T5484] EXT4-fs (loop2): 1 truncate cleaned up [ 80.079614][ T5482] EXT4-fs error (device loop3): ext4_orphan_get:1388: inode #17: comm syz.3.497: iget: bad i_size value: -6917529027641081756 [ 80.099255][ T5482] EXT4-fs error (device loop3): ext4_orphan_get:1393: comm syz.3.497: couldn't read orphan inode 17 (err -117) [ 80.169903][ T5495] audit_log_lost: 581 callbacks suppressed [ 80.169916][ T5495] audit: audit_lost=3 audit_rate_limit=0 audit_backlog_limit=64 [ 80.183418][ T5495] audit: out of memory in audit_log_start [ 80.223034][ T5499] infiniband Syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 80.233602][ T29] audit: type=1400 audit(1728758775.735:7622): avc: denied { read } for pid=2953 comm="acpid" name="mouse9" dev="devtmpfs" ino=765 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 80.256753][ T29] audit: type=1400 audit(1728758775.735:7623): avc: denied { open } for pid=2953 comm="acpid" path="/dev/input/mouse9" dev="devtmpfs" ino=765 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 80.279529][ T29] audit: type=1400 audit(1728758775.735:7624): avc: denied { ioctl } for pid=2953 comm="acpid" path="/dev/input/mouse9" dev="devtmpfs" ino=765 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 80.309667][ T5499] loop3: detected capacity change from 0 to 512 [ 80.315660][ T5501] loop2: detected capacity change from 0 to 1024 [ 80.322810][ T5501] EXT4-fs: Ignoring removed orlov option [ 80.328541][ T5501] EXT4-fs: Ignoring removed nomblk_io_submit option [ 80.339525][ T5499] ext4 filesystem being mounted at /63/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 80.363155][ T29] audit: type=1400 audit(1728758775.865:7625): avc: denied { execute } for pid=5500 comm="syz.2.506" name="file0" dev="loop2" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 80.386009][ T29] audit: type=1400 audit(1728758775.865:7626): avc: denied { execute_no_trans } for pid=5500 comm="syz.2.506" path="/54/file1/file0/file0" dev="loop2" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 80.386038][ T29] audit: type=1400 audit(1728758775.865:7627): avc: denied { setattr } for pid=5500 comm="syz.2.506" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 80.486092][ T29] audit: type=1400 audit(1728758775.985:7628): avc: denied { write } for pid=5509 comm="syz.2.508" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 80.557292][ T5521] netlink: 8 bytes leftover after parsing attributes in process `syz.4.512'. [ 80.572168][ T5521] geneve2: entered promiscuous mode [ 80.577455][ T5521] geneve2: entered allmulticast mode [ 80.588496][ T5523] loop3: detected capacity change from 0 to 512 [ 80.597571][ T5523] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 80.621040][ T29] audit: type=1326 audit(1728758776.125:7629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5524 comm="syz.2.516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa73f8ddff9 code=0x7ffc0000 [ 80.656365][ T5523] EXT4-fs (loop3): 1 truncate cleaned up [ 80.664408][ T5527] FAULT_INJECTION: forcing a failure. [ 80.664408][ T5527] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 80.677669][ T5527] CPU: 1 UID: 0 PID: 5527 Comm: syz.0.515 Not tainted 6.12.0-rc2-syzkaller-00291-g09f6b0c8904b #0 [ 80.688319][ T5527] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 80.698445][ T5527] Call Trace: [ 80.701812][ T5527] [ 80.704747][ T5527] dump_stack_lvl+0xf2/0x150 [ 80.709403][ T5527] dump_stack+0x15/0x20 [ 80.713599][ T5527] should_fail_ex+0x223/0x230 [ 80.718318][ T5527] should_fail+0xb/0x10 [ 80.722517][ T5527] should_fail_usercopy+0x1a/0x20 [ 80.727578][ T5527] _copy_from_user+0x1e/0xd0 [ 80.732216][ T5527] __se_sys_mount+0x119/0x2d0 [ 80.736940][ T5527] ? ksys_write+0x17a/0x1b0 [ 80.741511][ T5527] __x64_sys_mount+0x67/0x80 [ 80.746134][ T5527] x64_sys_call+0x203e/0x2d60 [ 80.750899][ T5527] do_syscall_64+0xc9/0x1c0 [ 80.755413][ T5527] ? clear_bhb_loop+0x55/0xb0 [ 80.760154][ T5527] ? clear_bhb_loop+0x55/0xb0 [ 80.764891][ T5527] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.770817][ T5527] RIP: 0033:0x7f213642dff9 [ 80.775287][ T5527] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 80.794905][ T5527] RSP: 002b:00007f21350a1038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 80.803352][ T5527] RAX: ffffffffffffffda RBX: 00007f21365e5f80 RCX: 00007f213642dff9 [ 80.811329][ T5527] RDX: 0000000020000100 RSI: 00000000200006c0 RDI: 0000000000000000 [ 80.819302][ T5527] RBP: 00007f21350a1090 R08: 0000000020000200 R09: 0000000000000000 [ 80.827356][ T5527] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 80.835333][ T5527] R13: 0000000000000000 R14: 00007f21365e5f80 R15: 00007ffd8220cbc8 [ 80.843323][ T5527] [ 80.852477][ T5527] 9pnet_fd: Insufficient options for proto=fd [ 80.863804][ T5530] infiniband Syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 80.885083][ T5530] loop4: detected capacity change from 0 to 512 [ 80.899888][ T24] IPVS: starting estimator thread 0... [ 80.931707][ T5530] ext4 filesystem being mounted at /47/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 80.988344][ T5533] IPVS: using max 2496 ests per chain, 124800 per kthread [ 81.014138][ T5548] program syz.0.524 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 81.023998][ T5548] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 81.084041][ T5557] netlink: 8 bytes leftover after parsing attributes in process `syz.0.527'. [ 81.095644][ T5557] geneve2: entered promiscuous mode [ 81.100958][ T5557] geneve2: entered allmulticast mode [ 81.114077][ T5559] netlink: 'syz.4.526': attribute type 1 has an invalid length. [ 81.121814][ T5559] netlink: 16150 bytes leftover after parsing attributes in process `syz.4.526'. [ 81.238539][ T5575] loop3: detected capacity change from 0 to 512 [ 81.245700][ T5575] EXT4-fs (loop3): blocks per group (95) and clusters per group (32768) inconsistent [ 81.269557][ T5581] loop0: detected capacity change from 0 to 512 [ 81.293677][ T5583] infiniband Syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 81.316142][ T5581] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 81.324971][ T5581] System zones: 0-2, 18-18, 34-34 [ 81.336522][ T5581] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.537: bg 0: block 248: padding at end of block bitmap is not set [ 81.351192][ T5581] EXT4-fs error (device loop0): ext4_acquire_dquot:6879: comm syz.0.537: Failed to acquire dquot type 1 [ 81.355366][ T5583] loop3: detected capacity change from 0 to 512 [ 81.369321][ T5581] EXT4-fs (loop0): 1 truncate cleaned up [ 81.385558][ T5581] ext4 filesystem being mounted at /76/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 81.404050][ T5587] loop1: detected capacity change from 0 to 512 [ 81.411310][ T5587] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 81.429172][ T5583] ext4 filesystem being mounted at /74/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 81.460349][ T5587] EXT4-fs error (device loop1): ext4_orphan_get:1388: inode #17: comm syz.1.539: iget: bad i_size value: -6917529027641081756 [ 81.474051][ T5587] EXT4-fs error (device loop1): ext4_orphan_get:1393: comm syz.1.539: couldn't read orphan inode 17 (err -117) [ 81.608516][ T5602] geneve2: entered promiscuous mode [ 81.613844][ T5602] geneve2: entered allmulticast mode [ 81.665910][ T5608] infiniband Syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 81.687449][ T5608] loop0: detected capacity change from 0 to 512 [ 81.710335][ T5608] ext4 filesystem being mounted at /79/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 81.717398][ T5612] loop1: detected capacity change from 0 to 512 [ 81.731760][ T5612] EXT4-fs (loop1): blocks per group (95) and clusters per group (32768) inconsistent [ 81.776224][ T5623] loop1: detected capacity change from 0 to 512 [ 81.790375][ T5623] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 81.811033][ T5623] System zones: 0-2, 18-18, 34-34 [ 81.817240][ T5623] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.551: bg 0: block 248: padding at end of block bitmap is not set [ 81.822929][ T5627] infiniband Syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 81.842439][ T5623] EXT4-fs error (device loop1): ext4_acquire_dquot:6879: comm syz.1.551: Failed to acquire dquot type 1 [ 81.844682][ T5629] loop2: detected capacity change from 0 to 512 [ 81.866709][ T5629] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 81.887774][ T5632] loop3: detected capacity change from 0 to 512 [ 81.899343][ T5629] EXT4-fs error (device loop2): ext4_orphan_get:1388: inode #17: comm syz.2.553: iget: bad i_size value: -6917529027641081756 [ 81.917960][ T5623] EXT4-fs (loop1): 1 truncate cleaned up [ 81.932014][ T5629] EXT4-fs error (device loop2): ext4_orphan_get:1393: comm syz.2.553: couldn't read orphan inode 17 (err -117) [ 81.935145][ T5623] ext4 filesystem being mounted at /55/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 81.969874][ T5632] ext4 filesystem being mounted at /80/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 82.042983][ T5649] geneve2: entered promiscuous mode [ 82.048267][ T5649] geneve2: entered allmulticast mode [ 82.082650][ T5651] FAULT_INJECTION: forcing a failure. [ 82.082650][ T5651] name failslab, interval 1, probability 0, space 0, times 0 [ 82.095394][ T5651] CPU: 1 UID: 0 PID: 5651 Comm: syz.4.561 Not tainted 6.12.0-rc2-syzkaller-00291-g09f6b0c8904b #0 [ 82.106014][ T5651] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 82.116157][ T5651] Call Trace: [ 82.119458][ T5651] [ 82.122406][ T5651] dump_stack_lvl+0xf2/0x150 [ 82.127029][ T5651] dump_stack+0x15/0x20 [ 82.131270][ T5651] should_fail_ex+0x223/0x230 [ 82.136064][ T5651] ? sidtab_sid2str_get+0xb8/0x140 [ 82.141194][ T5651] should_failslab+0x8f/0xb0 [ 82.145791][ T5651] __kmalloc_node_track_caller_noprof+0xa6/0x380 [ 82.152138][ T5651] ? vsnprintf+0xdd8/0xe30 [ 82.156631][ T5651] kmemdup_noprof+0x2a/0x60 [ 82.161143][ T5651] sidtab_sid2str_get+0xb8/0x140 [ 82.166125][ T5651] security_sid_to_context_core+0x1eb/0x2f0 [ 82.172081][ T5651] security_sid_to_context+0x27/0x30 [ 82.177488][ T5651] selinux_secid_to_secctx+0x22/0x30 [ 82.182804][ T5651] security_secid_to_secctx+0x48/0x90 [ 82.188205][ T5651] audit_log_task_context+0x8c/0x1b0 [ 82.193499][ T5651] audit_log_task+0xfb/0x180 [ 82.198141][ T5651] audit_seccomp+0x68/0x130 [ 82.202650][ T5651] __seccomp_filter+0x6fa/0x1180 [ 82.207663][ T5651] ? proc_fail_nth_write+0x12a/0x150 [ 82.212977][ T5651] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 82.218661][ T5651] ? vfs_write+0x580/0x910 [ 82.223236][ T5651] __secure_computing+0x9f/0x1c0 [ 82.228258][ T5651] syscall_trace_enter+0xd1/0x1f0 [ 82.233298][ T5651] do_syscall_64+0xaa/0x1c0 [ 82.237807][ T5651] ? clear_bhb_loop+0x55/0xb0 [ 82.242583][ T5651] ? clear_bhb_loop+0x55/0xb0 [ 82.247278][ T5651] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.253241][ T5651] RIP: 0033:0x7f16dea0dff9 [ 82.257660][ T5651] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 82.277500][ T5651] RSP: 002b:00007f16dd681038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 82.285952][ T5651] RAX: ffffffffffffffda RBX: 00007f16debc5f80 RCX: 00007f16dea0dff9 [ 82.293981][ T5651] RDX: 000000000000235c RSI: 0000000000000000 RDI: ffffffffffffffff [ 82.301962][ T5651] RBP: 00007f16dd681090 R08: 0000000000000000 R09: 0000000000000000 [ 82.310012][ T5651] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001 [ 82.318077][ T5651] R13: 0000000000000000 R14: 00007f16debc5f80 R15: 00007ffdab459bd8 [ 82.326140][ T5651] [ 82.362129][ T5659] loop0: detected capacity change from 0 to 512 [ 82.376755][ T5659] EXT4-fs (loop0): blocks per group (95) and clusters per group (32768) inconsistent [ 82.396259][ T5665] infiniband Syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 82.453828][ T5665] loop4: detected capacity change from 0 to 512 [ 82.454510][ T5669] loop3: detected capacity change from 0 to 128 [ 82.474673][ T5669] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1) [ 82.483448][ T5669] FAT-fs (loop3): Filesystem has been set read-only [ 82.504008][ T5669] loop3: detected capacity change from 0 to 512 [ 82.514605][ T5665] ext4 filesystem being mounted at /52/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 82.526831][ T5678] netlink: 'syz.1.565': attribute type 1 has an invalid length. [ 82.541882][ T5669] ext4 filesystem being mounted at /82/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 82.606946][ T5686] loop3: detected capacity change from 0 to 512 [ 82.614216][ T5686] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 82.621834][ T5684] infiniband Syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 82.656727][ T5684] loop0: detected capacity change from 0 to 512 [ 82.677667][ T5684] ext4 filesystem being mounted at /87/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 82.686926][ T5686] EXT4-fs error (device loop3): ext4_orphan_get:1388: inode #17: comm syz.3.570: iget: bad i_size value: -6917529027641081756 [ 82.712956][ T5686] EXT4-fs error (device loop3): ext4_orphan_get:1393: comm syz.3.570: couldn't read orphan inode 17 (err -117) [ 82.728764][ T3343] IPVS: starting estimator thread 0... [ 82.793149][ T5703] loop3: detected capacity change from 0 to 512 [ 82.832339][ T5703] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 82.843520][ T5701] loop0: detected capacity change from 0 to 512 [ 82.847580][ T5697] IPVS: using max 2544 ests per chain, 127200 per kthread [ 82.857831][ T5703] System zones: 0-2, 18-18, 34-34 [ 82.863989][ T5701] EXT4-fs (loop0): blocks per group (95) and clusters per group (32768) inconsistent [ 82.874471][ T5703] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.576: bg 0: block 248: padding at end of block bitmap is not set [ 82.906800][ T5703] EXT4-fs error (device loop3): ext4_acquire_dquot:6879: comm syz.3.576: Failed to acquire dquot type 1 [ 82.938587][ T5703] EXT4-fs (loop3): 1 truncate cleaned up [ 82.944651][ T5703] ext4 filesystem being mounted at /84/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 83.207699][ T5718] infiniband Syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 83.220822][ T5723] geneve3: entered promiscuous mode [ 83.226141][ T5723] geneve3: entered allmulticast mode [ 83.243535][ T5718] loop0: detected capacity change from 0 to 512 [ 83.270823][ T5718] ext4 filesystem being mounted at /92/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 83.276553][ T5725] loop3: detected capacity change from 0 to 512 [ 83.294318][ T5725] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 83.319054][ T5725] EXT4-fs error (device loop3): ext4_orphan_get:1388: inode #17: comm syz.3.586: iget: bad i_size value: -6917529027641081756 [ 83.353012][ T5725] EXT4-fs error (device loop3): ext4_orphan_get:1393: comm syz.3.586: couldn't read orphan inode 17 (err -117) [ 83.374825][ T5734] infiniband Syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 83.399468][ T5734] loop2: detected capacity change from 0 to 512 [ 83.412280][ T3346] IPVS: starting estimator thread 0... [ 83.449434][ T5734] ext4 filesystem being mounted at /67/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 83.457440][ T5738] loop4: detected capacity change from 0 to 512 [ 83.479889][ T5738] EXT4-fs (loop4): blocks per group (95) and clusters per group (32768) inconsistent [ 83.525267][ T5750] loop4: detected capacity change from 0 to 1024 [ 83.527736][ T5739] IPVS: using max 2400 ests per chain, 120000 per kthread [ 83.545894][ T5752] loop0: detected capacity change from 0 to 512 [ 83.569137][ T5752] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 83.577140][ T5752] System zones: 0-2, 18-18, 34-34 [ 83.592407][ T5752] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.594: bg 0: block 248: padding at end of block bitmap is not set [ 83.607353][ T5758] FAULT_INJECTION: forcing a failure. [ 83.607353][ T5758] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 83.607859][ T5752] EXT4-fs error (device loop0): ext4_acquire_dquot:6879: comm syz.0.594: Failed to acquire dquot type 1 [ 83.620418][ T5758] CPU: 0 UID: 0 PID: 5758 Comm: syz.2.595 Not tainted 6.12.0-rc2-syzkaller-00291-g09f6b0c8904b #0 [ 83.642200][ T5758] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 83.652291][ T5758] Call Trace: [ 83.655570][ T5758] [ 83.655582][ T5758] dump_stack_lvl+0xf2/0x150 [ 83.663136][ T5758] dump_stack+0x15/0x20 [ 83.667310][ T5758] should_fail_ex+0x223/0x230 [ 83.672095][ T5758] should_fail+0xb/0x10 [ 83.676290][ T5758] should_fail_usercopy+0x1a/0x20 [ 83.681431][ T5758] _copy_to_user+0x1e/0xa0 [ 83.685953][ T5758] simple_read_from_buffer+0xa0/0x110 [ 83.691362][ T5758] proc_fail_nth_read+0xf9/0x140 [ 83.696335][ T5758] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 83.701959][ T5758] vfs_read+0x195/0x720 [ 83.706186][ T5758] ? mntput_no_expire+0x70/0x3c0 [ 83.711145][ T5758] ? __rcu_read_unlock+0x4e/0x70 [ 83.716202][ T5758] ? __fget_files+0x1d4/0x210 [ 83.721117][ T5758] ksys_read+0xeb/0x1b0 [ 83.725305][ T5758] __x64_sys_read+0x42/0x50 [ 83.729859][ T5758] x64_sys_call+0x27d3/0x2d60 [ 83.734565][ T5758] do_syscall_64+0xc9/0x1c0 [ 83.739242][ T5758] ? clear_bhb_loop+0x55/0xb0 [ 83.743963][ T5758] ? clear_bhb_loop+0x55/0xb0 [ 83.748730][ T5758] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.754695][ T5758] RIP: 0033:0x7fa73f8dca3c [ 83.759186][ T5758] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 83.768417][ T5752] EXT4-fs (loop0): 1 truncate cleaned up [ 83.778864][ T5758] RSP: 002b:00007fa73e551030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 83.778892][ T5758] RAX: ffffffffffffffda RBX: 00007fa73fa95f80 RCX: 00007fa73f8dca3c [ 83.778910][ T5758] RDX: 000000000000000f RSI: 00007fa73e5510a0 RDI: 0000000000000007 [ 83.786489][ T5752] ext4 filesystem being mounted at /95/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 83.792924][ T5758] RBP: 00007fa73e551090 R08: 0000000000000000 R09: 0000000000000000 [ 83.827346][ T5758] R10: 0000000000001300 R11: 0000000000000246 R12: 0000000000000001 [ 83.835336][ T5758] R13: 0000000000000000 R14: 00007fa73fa95f80 R15: 00007ffc63c974e8 [ 83.843412][ T5758] [ 83.970801][ T5766] loop2: detected capacity change from 0 to 512 [ 83.991328][ T5766] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 84.017697][ T5766] EXT4-fs (loop2): 1 truncate cleaned up [ 84.096663][ T5770] loop2: detected capacity change from 0 to 512 [ 84.119087][ T5770] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 84.127331][ T5770] System zones: 0-2, 18-18, 34-34 [ 84.140132][ T5770] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.599: bg 0: block 248: padding at end of block bitmap is not set [ 84.157101][ T5770] EXT4-fs error (device loop2): ext4_acquire_dquot:6879: comm syz.2.599: Failed to acquire dquot type 1 [ 84.199985][ T5770] EXT4-fs (loop2): 1 truncate cleaned up [ 84.218416][ T5770] ext4 filesystem being mounted at /72/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 84.356658][ T5777] __nla_validate_parse: 7 callbacks suppressed [ 84.356674][ T5777] netlink: 4 bytes leftover after parsing attributes in process `syz.1.601'. [ 84.384636][ T3366] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 84.410029][ T3366] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 84.422863][ T3366] EXT4-fs (loop4): This should not happen!! Data will be lost [ 84.422863][ T3366] [ 84.432633][ T3366] EXT4-fs (loop4): Total free blocks count 0 [ 84.438672][ T3366] EXT4-fs (loop4): Free/Dirty block details [ 84.442492][ T5788] loop3: detected capacity change from 0 to 512 [ 84.444617][ T3366] EXT4-fs (loop4): free_blocks=68451041280 [ 84.444636][ T3366] EXT4-fs (loop4): dirty_blocks=6480 [ 84.444650][ T3366] EXT4-fs (loop4): Block reservation details [ 84.444661][ T3366] EXT4-fs (loop4): i_reserved_data_blocks=405 [ 84.482829][ T3366] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 2048 with error 28 [ 84.495660][ T3366] EXT4-fs (loop4): This should not happen!! Data will be lost [ 84.495660][ T3366] [ 84.511323][ T5788] EXT4-fs (loop3): blocks per group (95) and clusters per group (32768) inconsistent [ 84.640368][ T5805] infiniband Syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 84.666404][ T5805] loop4: detected capacity change from 0 to 512 [ 84.680098][ T5805] ext4 filesystem being mounted at /60/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 84.714881][ T5814] netlink: 'syz.2.613': attribute type 1 has an invalid length. [ 84.722597][ T5814] netlink: 16150 bytes leftover after parsing attributes in process `syz.2.613'. [ 84.787207][ T5818] loop4: detected capacity change from 0 to 512 [ 84.798645][ T5818] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 84.806907][ T5818] System zones: 0-2, 18-18, 34-34 [ 84.813477][ T5818] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.615: bg 0: block 248: padding at end of block bitmap is not set [ 84.828085][ T5818] EXT4-fs error (device loop4): ext4_acquire_dquot:6879: comm syz.4.615: Failed to acquire dquot type 1 [ 84.840090][ T5818] EXT4-fs (loop4): 1 truncate cleaned up [ 84.846267][ T5818] ext4 filesystem being mounted at /62/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 85.368505][ T5826] infiniband Syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 85.391851][ T5826] loop1: detected capacity change from 0 to 512 [ 85.429901][ T5826] ext4 filesystem being mounted at /61/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 85.490983][ T29] kauditd_printk_skb: 615 callbacks suppressed [ 85.490998][ T29] audit: type=1326 audit(1728758780.995:8232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5831 comm="syz.3.619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99fe67dff9 code=0x7ffc0000 [ 85.562675][ T29] audit: type=1326 audit(1728758781.035:8233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5831 comm="syz.3.619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99fe67dff9 code=0x7ffc0000 [ 85.586239][ T29] audit: type=1326 audit(1728758781.035:8234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5831 comm="syz.3.619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f99fe67dff9 code=0x7ffc0000 [ 85.609822][ T29] audit: type=1326 audit(1728758781.045:8235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5831 comm="syz.3.619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99fe67dff9 code=0x7ffc0000 [ 85.633163][ T29] audit: type=1326 audit(1728758781.045:8236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5831 comm="syz.3.619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99fe67dff9 code=0x7ffc0000 [ 85.656658][ T29] audit: type=1326 audit(1728758781.045:8237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5831 comm="syz.3.619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f99fe67dff9 code=0x7ffc0000 [ 85.679935][ T29] audit: type=1326 audit(1728758781.045:8238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5831 comm="syz.3.619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99fe67dff9 code=0x7ffc0000 [ 85.703345][ T29] audit: type=1326 audit(1728758781.045:8239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5831 comm="syz.3.619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99fe67dff9 code=0x7ffc0000 [ 85.713815][ T5840] loop3: detected capacity change from 0 to 512 [ 85.726962][ T29] audit: type=1326 audit(1728758781.045:8240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5831 comm="syz.3.619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f99fe67dff9 code=0x7ffc0000 [ 85.743001][ T5840] EXT4-fs (loop3): blocks per group (95) and clusters per group (32768) inconsistent [ 85.756371][ T29] audit: type=1326 audit(1728758781.045:8241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5831 comm="syz.3.619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99fe67dff9 code=0x7ffc0000 [ 85.779782][ T5842] infiniband Syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 85.823657][ T5842] loop0: detected capacity change from 0 to 512 [ 85.851642][ T5842] ext4 filesystem being mounted at /103/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 85.874936][ T5848] loop2: detected capacity change from 0 to 512 [ 85.883626][ T5850] netlink: 8 bytes leftover after parsing attributes in process `syz.3.625'. [ 85.909576][ T5848] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 85.942980][ T5852] loop1: detected capacity change from 0 to 512 [ 85.943115][ T5848] System zones: 0-2, 18-18, 34-34 [ 85.970328][ T5848] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.626: bg 0: block 248: padding at end of block bitmap is not set [ 85.985601][ T5852] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 85.991073][ T5861] loop4: detected capacity change from 0 to 2048 [ 85.994712][ T5852] System zones: 0-2, 18-18, 34-34 [ 86.007382][ T5848] EXT4-fs error (device loop2): ext4_acquire_dquot:6879: comm syz.2.626: Failed to acquire dquot type 1 [ 86.023162][ T5852] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.627: bg 0: block 248: padding at end of block bitmap is not set [ 86.045326][ T5852] EXT4-fs error (device loop1): ext4_acquire_dquot:6879: comm syz.1.627: Failed to acquire dquot type 1 [ 86.057162][ T5848] EXT4-fs (loop2): 1 truncate cleaned up [ 86.063425][ T5852] EXT4-fs (loop1): 1 truncate cleaned up [ 86.069846][ T5848] ext4 filesystem being mounted at /75/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 86.136740][ T5852] ext4 filesystem being mounted at /63/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 86.150098][ T5870] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 86.157628][ T5870] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 86.173475][ T5870] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 86.181012][ T5870] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 86.245080][ T5873] netlink: 4 bytes leftover after parsing attributes in process `syz.0.632'. [ 86.341659][ T5880] loop0: detected capacity change from 0 to 512 [ 86.359618][ T5880] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 86.373218][ T5880] System zones: 0-2, 18-18, 34-34 [ 86.380326][ T5880] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.635: bg 0: block 248: padding at end of block bitmap is not set [ 86.387818][ T5883] loop2: detected capacity change from 0 to 512 [ 86.395621][ T5880] EXT4-fs error (device loop0): ext4_acquire_dquot:6879: comm syz.0.635: Failed to acquire dquot type 1 [ 86.412683][ T5883] EXT4-fs (loop2): blocks per group (95) and clusters per group (32768) inconsistent [ 86.423160][ T5880] EXT4-fs (loop0): 1 truncate cleaned up [ 86.447758][ T5880] ext4 filesystem being mounted at /106/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 86.460158][ T5887] FAULT_INJECTION: forcing a failure. [ 86.460158][ T5887] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 86.473294][ T5887] CPU: 0 UID: 0 PID: 5887 Comm: syz.2.638 Not tainted 6.12.0-rc2-syzkaller-00291-g09f6b0c8904b #0 [ 86.484023][ T5887] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 86.494108][ T5887] Call Trace: [ 86.497402][ T5887] [ 86.500343][ T5887] dump_stack_lvl+0xf2/0x150 [ 86.504971][ T5887] dump_stack+0x15/0x20 [ 86.509180][ T5887] should_fail_ex+0x223/0x230 [ 86.513896][ T5887] should_fail+0xb/0x10 [ 86.518093][ T5887] should_fail_usercopy+0x1a/0x20 [ 86.523139][ T5887] _copy_to_user+0x1e/0xa0 [ 86.527678][ T5887] rng_dev_read+0x3ad/0x6c0 [ 86.532286][ T5887] vfs_readv+0x3e2/0x660 [ 86.536551][ T5887] ? __pfx_rng_dev_read+0x10/0x10 [ 86.541725][ T5887] __x64_sys_preadv+0x100/0x1c0 [ 86.546608][ T5887] x64_sys_call+0x1d5c/0x2d60 [ 86.551356][ T5887] do_syscall_64+0xc9/0x1c0 [ 86.555895][ T5887] ? clear_bhb_loop+0x55/0xb0 [ 86.560612][ T5887] ? clear_bhb_loop+0x55/0xb0 [ 86.565329][ T5887] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.571262][ T5887] RIP: 0033:0x7fa73f8ddff9 [ 86.575780][ T5887] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 86.595432][ T5887] RSP: 002b:00007fa73e551038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 86.603957][ T5887] RAX: ffffffffffffffda RBX: 00007fa73fa95f80 RCX: 00007fa73f8ddff9 [ 86.612029][ T5887] RDX: 0000000000000001 RSI: 0000000020000240 RDI: 0000000000000004 [ 86.620079][ T5887] RBP: 00007fa73e551090 R08: 0000000000000000 R09: 0000000000000000 [ 86.628491][ T5887] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 86.636480][ T5887] R13: 0000000000000000 R14: 00007fa73fa95f80 R15: 00007ffc63c974e8 [ 86.644491][ T5887] [ 86.696335][ T5895] netlink: 8 bytes leftover after parsing attributes in process `syz.1.639'. [ 86.711133][ T5895] geneve2: entered promiscuous mode [ 86.716644][ T5895] geneve2: entered allmulticast mode [ 86.826403][ T5899] infiniband Syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 86.837269][ T5904] loop3: detected capacity change from 0 to 512 [ 86.850961][ T5905] loop2: detected capacity change from 0 to 512 [ 86.852771][ T5899] loop0: detected capacity change from 0 to 512 [ 86.881006][ T5899] ext4 filesystem being mounted at /107/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 86.893944][ T5904] ext4 filesystem being mounted at /94/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 86.907305][ T5905] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 86.923712][ T5919] netlink: 4 bytes leftover after parsing attributes in process `syz.1.646'. [ 86.961617][ T5905] System zones: 0-2, 18-18, 34-34 [ 86.971602][ T5905] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.644: bg 0: block 248: padding at end of block bitmap is not set [ 87.009723][ T5905] EXT4-fs error (device loop2): ext4_acquire_dquot:6879: comm syz.2.644: Failed to acquire dquot type 1 [ 87.028535][ T5905] EXT4-fs (loop2): 1 truncate cleaned up [ 87.038884][ T5905] ext4 filesystem being mounted at /80/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 87.046421][ T5923] loop3: detected capacity change from 0 to 512 [ 87.055965][ T5924] netlink: 'syz.1.647': attribute type 1 has an invalid length. [ 87.063768][ T5924] netlink: 15382 bytes leftover after parsing attributes in process `syz.1.647'. [ 87.100023][ T5923] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 87.108873][ T5923] System zones: 0-2, 18-18, 34-34 [ 87.114587][ T5923] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.648: bg 0: block 248: padding at end of block bitmap is not set [ 87.129849][ T5923] EXT4-fs error (device loop3): ext4_acquire_dquot:6879: comm syz.3.648: Failed to acquire dquot type 1 [ 87.143818][ T5923] EXT4-fs (loop3): 1 truncate cleaned up [ 87.150669][ T5923] ext4 filesystem being mounted at /95/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 87.281265][ T5937] netlink: 12 bytes leftover after parsing attributes in process `syz.2.651'. [ 87.309044][ T5939] loop2: detected capacity change from 0 to 512 [ 87.339787][ T5939] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 87.348248][ T5939] System zones: 0-2, 18-18, 34-34 [ 87.354592][ T5939] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.652: bg 0: block 248: padding at end of block bitmap is not set [ 87.375044][ T5939] EXT4-fs error (device loop2): ext4_acquire_dquot:6879: comm syz.2.652: Failed to acquire dquot type 1 [ 87.388207][ T5939] EXT4-fs (loop2): 1 truncate cleaned up [ 87.394993][ T5939] ext4 filesystem being mounted at /83/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 87.459132][ T5947] FAULT_INJECTION: forcing a failure. [ 87.459132][ T5947] name failslab, interval 1, probability 0, space 0, times 0 [ 87.471846][ T5947] CPU: 0 UID: 0 PID: 5947 Comm: syz.3.655 Not tainted 6.12.0-rc2-syzkaller-00291-g09f6b0c8904b #0 [ 87.482524][ T5947] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 87.492613][ T5947] Call Trace: [ 87.495910][ T5947] [ 87.498888][ T5947] dump_stack_lvl+0xf2/0x150 [ 87.503524][ T5947] dump_stack+0x15/0x20 [ 87.507714][ T5947] should_fail_ex+0x223/0x230 [ 87.512560][ T5947] ? kernfs_fop_write_iter+0xe1/0x2c0 [ 87.518124][ T5947] should_failslab+0x8f/0xb0 [ 87.522894][ T5947] __kmalloc_noprof+0xa5/0x370 [ 87.527718][ T5947] kernfs_fop_write_iter+0xe1/0x2c0 [ 87.532954][ T5947] iter_file_splice_write+0x5f1/0x980 [ 87.538392][ T5947] ? __pfx_iter_file_splice_write+0x10/0x10 [ 87.544304][ T5947] direct_splice_actor+0x160/0x2c0 [ 87.549474][ T5947] splice_direct_to_actor+0x302/0x670 [ 87.554850][ T5947] ? __pfx_direct_splice_actor+0x10/0x10 [ 87.560539][ T5947] do_splice_direct+0xd7/0x150 [ 87.565435][ T5947] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 87.571446][ T5947] do_sendfile+0x39b/0x970 [ 87.575889][ T5947] __x64_sys_sendfile64+0x110/0x150 [ 87.581237][ T5947] x64_sys_call+0xed5/0x2d60 [ 87.585984][ T5947] do_syscall_64+0xc9/0x1c0 [ 87.590519][ T5947] ? clear_bhb_loop+0x55/0xb0 [ 87.595275][ T5947] ? clear_bhb_loop+0x55/0xb0 [ 87.600213][ T5947] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.606163][ T5947] RIP: 0033:0x7f99fe67dff9 [ 87.610597][ T5947] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 87.630262][ T5947] RSP: 002b:00007f99fd2f7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 87.638712][ T5947] RAX: ffffffffffffffda RBX: 00007f99fe835f80 RCX: 00007f99fe67dff9 [ 87.646711][ T5947] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 87.654710][ T5947] RBP: 00007f99fd2f7090 R08: 0000000000000000 R09: 0000000000000000 [ 87.662691][ T5947] R10: 00008000fffffffe R11: 0000000000000246 R12: 0000000000000001 [ 87.670667][ T5947] R13: 0000000000000000 R14: 00007f99fe835f80 R15: 00007ffffb66e698 [ 87.678656][ T5947] [ 87.759183][ T5955] netlink: 4 bytes leftover after parsing attributes in process `syz.2.658'. [ 87.776354][ T5955] hsr_slave_1 (unregistering): left promiscuous mode [ 87.789086][ T5958] infiniband Syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 87.804350][ T5958] loop3: detected capacity change from 0 to 512 [ 87.822939][ T5958] ext4 filesystem being mounted at /101/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 87.871864][ T5964] loop1: detected capacity change from 0 to 512 [ 87.883585][ T5966] netlink: 12 bytes leftover after parsing attributes in process `syz.2.662'. [ 87.903869][ T5964] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 87.914161][ T5964] System zones: 0-2, 18-18, 34-34 [ 87.935887][ T5964] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.661: bg 0: block 248: padding at end of block bitmap is not set [ 87.950799][ T5964] EXT4-fs error (device loop1): ext4_acquire_dquot:6879: comm syz.1.661: Failed to acquire dquot type 1 [ 87.981304][ T5964] EXT4-fs (loop1): 1 truncate cleaned up [ 87.997721][ T5964] ext4 filesystem being mounted at /71/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 88.016734][ T5980] FAULT_INJECTION: forcing a failure. [ 88.016734][ T5980] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 88.029945][ T5980] CPU: 1 UID: 0 PID: 5980 Comm: syz.0.668 Not tainted 6.12.0-rc2-syzkaller-00291-g09f6b0c8904b #0 [ 88.040564][ T5980] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 88.050719][ T5980] Call Trace: [ 88.054048][ T5980] [ 88.056994][ T5980] dump_stack_lvl+0xf2/0x150 [ 88.061619][ T5980] dump_stack+0x15/0x20 [ 88.065875][ T5980] should_fail_ex+0x223/0x230 [ 88.070675][ T5980] should_fail+0xb/0x10 [ 88.074905][ T5980] should_fail_usercopy+0x1a/0x20 [ 88.080068][ T5980] strncpy_from_user+0x25/0x200 [ 88.085003][ T5980] ? __fget_files+0x1d4/0x210 [ 88.089711][ T5980] __se_sys_add_key+0x81/0x320 [ 88.094533][ T5980] ? fput+0x14e/0x190 [ 88.098568][ T5980] __x64_sys_add_key+0x67/0x80 [ 88.103394][ T5980] x64_sys_call+0x157d/0x2d60 [ 88.108093][ T5980] do_syscall_64+0xc9/0x1c0 [ 88.112621][ T5980] ? clear_bhb_loop+0x55/0xb0 [ 88.117344][ T5980] ? clear_bhb_loop+0x55/0xb0 [ 88.122139][ T5980] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.128164][ T5980] RIP: 0033:0x7f213642dff9 [ 88.132604][ T5980] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 88.152245][ T5980] RSP: 002b:00007f21350a1038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 88.160697][ T5980] RAX: ffffffffffffffda RBX: 00007f21365e5f80 RCX: 00007f213642dff9 [ 88.168777][ T5980] RDX: 00000000200000c0 RSI: 0000000020000080 RDI: 0000000020000040 [ 88.176753][ T5980] RBP: 00007f21350a1090 R08: ffffffffffffffff R09: 0000000000000000 [ 88.184805][ T5980] R10: 00000000000052ba R11: 0000000000000246 R12: 0000000000000001 [ 88.192872][ T5980] R13: 0000000000000000 R14: 00007f21365e5f80 R15: 00007ffd8220cbc8 [ 88.200919][ T5980] [ 88.297894][ T5987] loop0: detected capacity change from 0 to 512 [ 88.307711][ T5728] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 88.342818][ T5987] loop0: detected capacity change from 0 to 512 [ 88.376374][ T5997] netlink: 'syz.1.672': attribute type 1 has an invalid length. [ 88.399228][ T5987] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.670: bg 0: block 393: padding at end of block bitmap is not set [ 88.413784][ T5987] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 88.423340][ T5987] EXT4-fs (loop0): 2 truncates cleaned up [ 88.518441][ T6009] infiniband Syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 88.534812][ T6009] loop0: detected capacity change from 0 to 512 [ 88.559253][ T6009] ext4 filesystem being mounted at /113/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 88.662428][ T6015] loop0: detected capacity change from 0 to 512 [ 88.690683][ T6015] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 88.699266][ T6015] System zones: 0-2, 18-18, 34-34 [ 88.705044][ T6015] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.679: bg 0: block 248: padding at end of block bitmap is not set [ 88.720034][ T6015] EXT4-fs error (device loop0): ext4_acquire_dquot:6879: comm syz.0.679: Failed to acquire dquot type 1 [ 88.731959][ T6015] EXT4-fs (loop0): 1 truncate cleaned up [ 88.738268][ T6015] ext4 filesystem being mounted at /115/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 88.997183][ T6034] netlink: 'syz.0.683': attribute type 1 has an invalid length. [ 89.042185][ T6039] loop3: detected capacity change from 0 to 512 [ 89.049444][ T6039] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 89.060320][ T6039] EXT4-fs (loop3): 1 truncate cleaned up [ 89.073204][ T6042] loop4: detected capacity change from 0 to 512 [ 89.102865][ T6042] loop4: detected capacity change from 0 to 512 [ 89.122965][ T6042] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.688: bg 0: block 393: padding at end of block bitmap is not set [ 89.150870][ T6042] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 89.164871][ T6047] loop3: detected capacity change from 0 to 512 [ 89.168562][ T6048] infiniband Syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 89.173276][ T6047] EXT4-fs: Ignoring removed bh option [ 89.187276][ T6042] EXT4-fs (loop4): 2 truncates cleaned up [ 89.190500][ T6047] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 89.209239][ T6047] EXT4-fs error (device loop3): ext4_orphan_get:1414: comm syz.3.689: bad orphan inode 17 [ 89.222749][ T6048] loop1: detected capacity change from 0 to 512 [ 89.229962][ T6047] EXT4-fs (loop3): Remounting filesystem read-only [ 89.236537][ T6047] ext4_test_bit(bit=16, block=4) = 1 [ 89.242008][ T6047] is_bad_inode(inode)=0 [ 89.246177][ T6047] NEXT_ORPHAN(inode)=1048336 [ 89.250848][ T6047] max_ino=32 [ 89.254122][ T6047] i_nlink=0 [ 89.261586][ T6047] SELinux: (dev loop3, type ext4) getxattr errno 5 [ 89.299208][ T6048] ext4 filesystem being mounted at /73/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 89.462095][ T6066] __nla_validate_parse: 6 callbacks suppressed [ 89.462189][ T6066] netlink: 4 bytes leftover after parsing attributes in process `syz.1.696'. [ 89.487120][ T6069] loop3: detected capacity change from 0 to 512 [ 89.494686][ T6077] infiniband Syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 89.502236][ T6069] EXT4-fs (loop3): blocks per group (95) and clusters per group (32768) inconsistent [ 89.541337][ T6077] loop4: detected capacity change from 0 to 512 [ 89.551744][ T6079] siw: device registration error -23 [ 89.576178][ T6079] loop2: detected capacity change from 0 to 512 [ 89.589505][ T6077] ext4 filesystem being mounted at /71/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 89.609922][ T6079] ext4 filesystem being mounted at /98/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 89.626397][ T6089] loop3: detected capacity change from 0 to 512 [ 89.644993][ T6089] loop3: detected capacity change from 0 to 512 [ 89.654047][ T6089] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.705: bg 0: block 393: padding at end of block bitmap is not set [ 89.669033][ T6089] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 89.678137][ T6089] EXT4-fs (loop3): 2 truncates cleaned up [ 89.805828][ T6100] loop0: detected capacity change from 0 to 512 [ 89.839276][ T6100] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 89.848653][ T6100] System zones: 0-2, 18-18, 34-34 [ 89.890771][ T6100] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.709: bg 0: block 248: padding at end of block bitmap is not set [ 89.920651][ T6100] EXT4-fs error (device loop0): ext4_acquire_dquot:6879: comm syz.0.709: Failed to acquire dquot type 1 [ 89.935878][ T6100] EXT4-fs (loop0): 1 truncate cleaned up [ 89.942313][ T6100] ext4 filesystem being mounted at /117/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 90.185794][ T6118] infiniband Syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 90.228786][ T6118] loop3: detected capacity change from 0 to 512 [ 90.284411][ T6118] ext4 filesystem being mounted at /119/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 90.336335][ T6125] loop0: detected capacity change from 0 to 512 [ 90.352458][ T6125] ext4 filesystem being mounted at /119/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 90.365512][ T6127] infiniband Syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 90.390262][ T6127] loop4: detected capacity change from 0 to 512 [ 90.413193][ T6127] ext4 filesystem being mounted at /73/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 90.427751][ T6134] siw: device registration error -23 [ 90.436723][ T6134] loop3: detected capacity change from 0 to 512 [ 90.451321][ T6140] loop1: detected capacity change from 0 to 512 [ 90.474760][ T6140] loop1: detected capacity change from 0 to 512 [ 90.518987][ T6140] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.719: bg 0: block 393: padding at end of block bitmap is not set [ 90.527842][ T6134] ext4 filesystem being mounted at /120/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 90.543620][ T6140] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 90.543825][ T6140] EXT4-fs (loop1): 2 truncates cleaned up [ 90.631587][ T29] kauditd_printk_skb: 270 callbacks suppressed [ 90.631605][ T29] audit: type=1326 audit(1728758786.105:8494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6155 comm="syz.0.724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f213642dff9 code=0x7ffc0000 [ 90.661320][ T29] audit: type=1326 audit(1728758786.105:8495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6155 comm="syz.0.724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f213642dff9 code=0x7ffc0000 [ 90.684869][ T29] audit: type=1326 audit(1728758786.105:8496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6155 comm="syz.0.724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f213642dff9 code=0x7ffc0000 [ 90.702500][ T6159] loop0: detected capacity change from 0 to 512 [ 90.708260][ T29] audit: type=1326 audit(1728758786.105:8497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6155 comm="syz.0.724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f213642dff9 code=0x7ffc0000 [ 90.738085][ T29] audit: type=1326 audit(1728758786.105:8498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6155 comm="syz.0.724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f213642dff9 code=0x7ffc0000 [ 90.739333][ T6159] EXT4-fs (loop0): blocks per group (95) and clusters per group (32768) inconsistent [ 90.761314][ T29] audit: type=1326 audit(1728758786.105:8499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6155 comm="syz.0.724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f213642dff9 code=0x7ffc0000 [ 90.783014][ T6161] loop4: detected capacity change from 0 to 512 [ 90.794100][ T29] audit: type=1326 audit(1728758786.115:8500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6155 comm="syz.0.724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f213642dff9 code=0x7ffc0000 [ 90.828505][ T29] audit: type=1326 audit(1728758786.145:8501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6155 comm="syz.0.724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f213642dff9 code=0x7ffc0000 [ 90.851971][ T29] audit: type=1326 audit(1728758786.145:8502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6155 comm="syz.0.724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f213642dff9 code=0x7ffc0000 [ 90.875406][ T29] audit: type=1326 audit(1728758786.145:8503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6155 comm="syz.0.724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f213642dff9 code=0x7ffc0000 [ 90.918900][ T6161] ext4 filesystem being mounted at /74/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 90.968986][ T6171] infiniband Syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 90.980931][ T6177] FAULT_INJECTION: forcing a failure. [ 90.980931][ T6177] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 90.994132][ T6177] CPU: 1 UID: 0 PID: 6177 Comm: syz.1.734 Not tainted 6.12.0-rc2-syzkaller-00291-g09f6b0c8904b #0 [ 91.004752][ T6177] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 91.009992][ T6171] loop2: detected capacity change from 0 to 512 [ 91.014807][ T6177] Call Trace: [ 91.014817][ T6177] [ 91.014826][ T6177] dump_stack_lvl+0xf2/0x150 [ 91.031966][ T6177] dump_stack+0x15/0x20 [ 91.036147][ T6177] should_fail_ex+0x223/0x230 [ 91.040937][ T6177] should_fail+0xb/0x10 [ 91.045175][ T6177] should_fail_usercopy+0x1a/0x20 [ 91.050233][ T6177] _copy_from_user+0x1e/0xd0 [ 91.054831][ T6177] perf_copy_attr+0x146/0x5b0 [ 91.059526][ T6177] ? 0xffffffff81000000 [ 91.063682][ T6177] ? __rcu_read_unlock+0x4e/0x70 [ 91.068719][ T6177] __se_sys_perf_event_open+0x6d/0x21f0 [ 91.074357][ T6177] ? proc_fail_nth_write+0x12a/0x150 [ 91.079706][ T6177] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 91.085402][ T6177] ? vfs_write+0x580/0x910 [ 91.089927][ T6177] ? __fget_files+0x1d4/0x210 [ 91.094700][ T6177] __x64_sys_perf_event_open+0x67/0x80 [ 91.100257][ T6177] x64_sys_call+0x18d7/0x2d60 [ 91.104946][ T6177] do_syscall_64+0xc9/0x1c0 [ 91.109537][ T6177] ? clear_bhb_loop+0x55/0xb0 [ 91.114235][ T6177] ? clear_bhb_loop+0x55/0xb0 [ 91.119102][ T6177] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.125025][ T6177] RIP: 0033:0x7f3d0196dff9 [ 91.129445][ T6177] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 91.149590][ T6177] RSP: 002b:00007f3d005e7038 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 91.158044][ T6177] RAX: ffffffffffffffda RBX: 00007f3d01b25f80 RCX: 00007f3d0196dff9 [ 91.166107][ T6177] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000040 [ 91.174094][ T6177] RBP: 00007f3d005e7090 R08: 0000000000000003 R09: 0000000000000000 [ 91.182191][ T6177] R10: 0000000000000006 R11: 0000000000000246 R12: 0000000000000001 [ 91.190168][ T6177] R13: 0000000000000000 R14: 00007f3d01b25f80 R15: 00007ffddaf85d48 [ 91.198197][ T6177] [ 91.217121][ T6178] loop0: detected capacity change from 0 to 512 [ 91.228730][ T6178] EXT4-fs (loop0): blocks per group (95) and clusters per group (32768) inconsistent [ 91.259578][ T6171] ext4 filesystem being mounted at /105/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 91.264098][ T6183] loop4: detected capacity change from 0 to 512 [ 91.294103][ T6183] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 91.302399][ T6183] System zones: 0-2, 18-18, 34-34 [ 91.308768][ T6183] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.736: bg 0: block 248: padding at end of block bitmap is not set [ 91.323431][ T6183] EXT4-fs error (device loop4): ext4_acquire_dquot:6879: comm syz.4.736: Failed to acquire dquot type 1 [ 91.324503][ T6191] loop0: detected capacity change from 0 to 512 [ 91.336633][ T6189] loop1: detected capacity change from 0 to 1024 [ 91.347614][ T6189] EXT4-fs: dax option not supported [ 91.370624][ T6183] EXT4-fs (loop4): 1 truncate cleaned up [ 91.372013][ T6191] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 91.387508][ T6191] EXT4-fs (loop0): 1 truncate cleaned up [ 91.393502][ T6183] ext4 filesystem being mounted at /75/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 91.475705][ T6194] loop1: detected capacity change from 0 to 512 [ 91.512421][ T6194] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 91.521759][ T6194] System zones: 0-2, 18-18, 34-34 [ 91.529240][ T6194] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.749: bg 0: block 248: padding at end of block bitmap is not set [ 91.543692][ T6198] loop0: detected capacity change from 0 to 1024 [ 91.544627][ T6202] loop2: detected capacity change from 0 to 512 [ 91.551005][ T6194] EXT4-fs error (device loop1): ext4_acquire_dquot:6879: comm syz.1.749: Failed to acquire dquot type 1 [ 91.563244][ T6202] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 91.593691][ T6202] EXT4-fs (loop2): 1 truncate cleaned up [ 91.594433][ T6198] ext4 filesystem being mounted at /127/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 91.623715][ T6194] EXT4-fs (loop1): 1 truncate cleaned up [ 91.633974][ T6194] ext4 filesystem being mounted at /81/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 91.700952][ T6209] xt_hashlimit: max too large, truncated to 1048576 [ 91.722321][ T6209] rdma_rxe: rxe_newlink: failed to add veth0_virt_wifi [ 91.732553][ T6209] loop2: detected capacity change from 0 to 164 [ 91.753063][ T6209] rock: corrupted directory entry. extent=28, offset=0, size=16777216 [ 91.765181][ T6215] loop0: detected capacity change from 0 to 512 [ 91.766902][ T6209] rock: corrupted directory entry. extent=28, offset=0, size=16777216 [ 91.781052][ T6216] netlink: 'syz.4.744': attribute type 1 has an invalid length. [ 91.788777][ T6216] netlink: 15382 bytes leftover after parsing attributes in process `syz.4.744'. [ 91.822655][ T6215] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 91.858005][ T6218] infiniband Syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 91.866416][ T6215] System zones: 0-2, 18-18, 34-34 [ 91.878024][ T6215] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.745: bg 0: block 248: padding at end of block bitmap is not set [ 91.901743][ T6215] EXT4-fs error (device loop0): ext4_acquire_dquot:6879: comm syz.0.745: Failed to acquire dquot type 1 [ 91.906760][ T6218] loop2: detected capacity change from 0 to 512 [ 91.919698][ T6215] EXT4-fs (loop0): 1 truncate cleaned up [ 91.925735][ T6215] ext4 filesystem being mounted at /129/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 91.998808][ T6226] siw: device registration error -23 [ 92.014618][ T6226] loop3: detected capacity change from 0 to 512 [ 92.023640][ T6218] ext4 filesystem being mounted at /109/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 92.031134][ T6233] loop1: detected capacity change from 0 to 512 [ 92.042099][ T6233] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 92.058695][ T6233] EXT4-fs (loop1): 1 truncate cleaned up [ 92.065498][ T6226] ext4 filesystem being mounted at /124/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 92.216027][ T6240] netlink: 4 bytes leftover after parsing attributes in process `syz.2.753'. [ 92.220231][ T6246] loop3: detected capacity change from 0 to 512 [ 92.243692][ T6246] EXT4-fs (loop3): blocks per group (95) and clusters per group (32768) inconsistent [ 92.282157][ T6253] loop3: detected capacity change from 0 to 512 [ 92.299315][ T6253] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 92.312349][ T6253] EXT4-fs (loop3): 1 truncate cleaned up [ 92.324276][ T6255] loop2: detected capacity change from 0 to 1024 [ 92.336095][ T6255] EXT4-fs: dax option not supported [ 92.412438][ T6258] netlink: 4 bytes leftover after parsing attributes in process `syz.0.755'. [ 92.421420][ T6241] netlink: 4 bytes leftover after parsing attributes in process `syz.1.752'. [ 92.431025][ T6268] xt_hashlimit: max too large, truncated to 1048576 [ 92.438288][ T6241] bridge_slave_1: left allmulticast mode [ 92.443997][ T6241] bridge_slave_1: left promiscuous mode [ 92.449933][ T6241] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.465957][ T6241] bridge_slave_0: left allmulticast mode [ 92.472709][ T6241] bridge_slave_0: left promiscuous mode [ 92.478554][ T6241] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.488279][ T6268] rdma_rxe: rxe_newlink: failed to add veth0_virt_wifi [ 92.497942][ T6268] loop3: detected capacity change from 0 to 164 [ 92.514869][ T6268] rock: corrupted directory entry. extent=28, offset=0, size=16777216 [ 92.525491][ T6268] rock: corrupted directory entry. extent=28, offset=0, size=16777216 [ 92.561832][ T6274] infiniband Syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 92.581037][ T6275] siw: device registration error -23 [ 92.592924][ T6274] loop0: detected capacity change from 0 to 512 [ 92.600628][ T6277] netlink: 4 bytes leftover after parsing attributes in process `syz.3.765'. [ 92.613768][ T6275] loop2: detected capacity change from 0 to 512 [ 92.632904][ T6275] ext4 filesystem being mounted at /115/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 92.652867][ T6274] ext4 filesystem being mounted at /131/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 92.664618][ T6286] loop4: detected capacity change from 0 to 512 [ 92.691515][ T6286] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 92.709149][ T6286] EXT4-fs error (device loop4): ext4_orphan_get:1388: inode #17: comm syz.4.767: iget: bad i_size value: -6917529027641081756 [ 92.723114][ T6286] EXT4-fs error (device loop4): ext4_orphan_get:1393: comm syz.4.767: couldn't read orphan inode 17 (err -117) [ 92.746182][ T6290] netlink: 4 bytes leftover after parsing attributes in process `syz.1.768'. [ 92.864117][ T6307] netlink: 56 bytes leftover after parsing attributes in process `syz.2.773'. [ 92.933048][ T6316] loop1: detected capacity change from 0 to 2048 [ 92.968047][ T6320] netlink: 'syz.4.776': attribute type 1 has an invalid length. [ 92.975748][ T6320] netlink: 15382 bytes leftover after parsing attributes in process `syz.4.776'. [ 93.023636][ T6325] infiniband Syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 93.044582][ T6325] loop0: detected capacity change from 0 to 512 [ 93.067394][ T6325] ext4 filesystem being mounted at /133/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 93.122712][ T6330] netlink: 4 bytes leftover after parsing attributes in process `syz.2.781'. [ 93.168006][ T6337] infiniband Syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 93.177348][ T6336] loop2: detected capacity change from 0 to 512 [ 93.197788][ T6337] loop0: detected capacity change from 0 to 512 [ 93.214987][ T6336] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 93.219154][ T6337] ext4 filesystem being mounted at /134/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 93.233532][ T6336] System zones: 0-2, 18-18, 34-34 [ 93.239531][ T6336] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.782: bg 0: block 248: padding at end of block bitmap is not set [ 93.254052][ T6336] EXT4-fs error (device loop2): ext4_acquire_dquot:6879: comm syz.2.782: Failed to acquire dquot type 1 [ 93.267643][ T6336] EXT4-fs (loop2): 1 truncate cleaned up [ 93.273760][ T6336] ext4 filesystem being mounted at /121/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 93.550875][ T6359] loop0: detected capacity change from 0 to 512 [ 93.565586][ T6359] EXT4-fs (loop0): blocks per group (95) and clusters per group (32768) inconsistent [ 93.590677][ T6368] infiniband Syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 93.599450][ T6370] loop2: detected capacity change from 0 to 512 [ 93.608713][ T6370] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 93.622611][ T6370] EXT4-fs (loop2): 1 truncate cleaned up [ 93.644326][ T6368] loop3: detected capacity change from 0 to 512 [ 93.663950][ T6368] ext4 filesystem being mounted at /132/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 93.738274][ T6385] loop0: detected capacity change from 0 to 1024 [ 93.744974][ T6385] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 93.771822][ T6387] loop3: detected capacity change from 0 to 512 [ 93.781043][ T6383] loop2: detected capacity change from 0 to 1024 [ 93.799604][ T6385] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 93.830766][ T6387] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 93.855454][ T6387] System zones: 0-2, 18-18, 34-34 [ 93.871005][ T6387] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.801: bg 0: block 248: padding at end of block bitmap is not set [ 93.888903][ T6387] EXT4-fs error (device loop3): ext4_acquire_dquot:6879: comm syz.3.801: Failed to acquire dquot type 1 [ 93.901685][ T6387] EXT4-fs (loop3): 1 truncate cleaned up [ 93.908497][ T6387] ext4 filesystem being mounted at /133/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 93.949096][ T6401] loop2: detected capacity change from 0 to 512 [ 93.979356][ T6401] ext4 filesystem being mounted at /128/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 94.036778][ T6399] loop4: detected capacity change from 0 to 512 [ 94.045866][ T6399] EXT4-fs (loop4): blocks per group (95) and clusters per group (32768) inconsistent [ 94.135786][ T6411] loop0: detected capacity change from 0 to 512 [ 94.169564][ T6415] infiniband Syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 94.188068][ T6415] loop3: detected capacity change from 0 to 512 [ 94.189060][ T6421] loop4: detected capacity change from 0 to 512 [ 94.201290][ T6411] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 94.209682][ T6411] System zones: 0-2, 18-18, 34-34 [ 94.221503][ T6415] ext4 filesystem being mounted at /135/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 94.232790][ T6411] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.818: bg 0: block 248: padding at end of block bitmap is not set [ 94.248591][ T6411] EXT4-fs error (device loop0): ext4_acquire_dquot:6879: comm syz.0.818: Failed to acquire dquot type 1 [ 94.260748][ T6411] EXT4-fs (loop0): 1 truncate cleaned up [ 94.266874][ T6411] ext4 filesystem being mounted at /146/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 94.288603][ T6421] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 94.296889][ T6421] System zones: 0-2, 18-18, 34-34 [ 94.303025][ T6421] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.813: bg 0: block 248: padding at end of block bitmap is not set [ 94.318682][ T6421] EXT4-fs error (device loop4): ext4_acquire_dquot:6879: comm syz.4.813: Failed to acquire dquot type 1 [ 94.336491][ T6421] EXT4-fs (loop4): 1 truncate cleaned up [ 94.355350][ T6421] ext4 filesystem being mounted at /85/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 94.404633][ T6429] infiniband Syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 94.445947][ T6429] loop3: detected capacity change from 0 to 512 [ 94.482825][ T6429] ext4 filesystem being mounted at /136/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 94.591330][ T6440] loop0: detected capacity change from 0 to 1024 [ 94.601510][ T6440] EXT4-fs: dax option not supported [ 94.606047][ T6444] loop3: detected capacity change from 0 to 512 [ 94.615793][ T6442] loop4: detected capacity change from 0 to 1024 [ 94.636941][ T6444] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 94.649746][ T6444] System zones: 0-2, 18-18, 34-34 [ 94.672530][ T6444] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.819: bg 0: block 248: padding at end of block bitmap is not set [ 94.696249][ T6444] EXT4-fs error (device loop3): ext4_acquire_dquot:6879: comm syz.3.819: Failed to acquire dquot type 1 [ 94.708430][ T6448] __nla_validate_parse: 2 callbacks suppressed [ 94.708442][ T6448] netlink: 4 bytes leftover after parsing attributes in process `syz.0.821'. [ 94.739987][ T6444] EXT4-fs (loop3): 1 truncate cleaned up [ 94.746403][ T6444] ext4 filesystem being mounted at /137/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 94.798475][ T6457] loop4: detected capacity change from 0 to 512 [ 94.807056][ T6457] EXT4-fs (loop4): blocks per group (95) and clusters per group (32768) inconsistent [ 94.897106][ T6460] loop0: detected capacity change from 0 to 512 [ 94.906748][ T6460] EXT4-fs (loop0): blocks per group (95) and clusters per group (32768) inconsistent [ 94.935211][ T6466] netlink: 'syz.4.825': attribute type 1 has an invalid length. [ 94.943002][ T6466] netlink: 15382 bytes leftover after parsing attributes in process `syz.4.825'. [ 94.984138][ T6468] loop0: detected capacity change from 0 to 512 [ 94.991572][ T6468] EXT4-fs (loop0): blocks per group (95) and clusters per group (32768) inconsistent [ 95.023554][ T6472] loop0: detected capacity change from 0 to 512 [ 95.043455][ T6472] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 95.051846][ T6472] System zones: 0-2, 18-18, 34-34 [ 95.058250][ T6472] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.827: bg 0: block 248: padding at end of block bitmap is not set [ 95.072855][ T6472] EXT4-fs error (device loop0): ext4_acquire_dquot:6879: comm syz.0.827: Failed to acquire dquot type 1 [ 95.080421][ T6473] netlink: 4 bytes leftover after parsing attributes in process `syz.3.826'. [ 95.093476][ T6472] EXT4-fs (loop0): 1 truncate cleaned up [ 95.100121][ T6472] ext4 filesystem being mounted at /154/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 95.116439][ T6482] A link change request failed with some changes committed already. Interface veth1_to_batadv may have been left with an inconsistent configuration, please check. [ 95.147444][ T6484] netlink: 12 bytes leftover after parsing attributes in process `syz.3.829'. [ 95.162884][ T6484] infiniband Syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 95.180728][ T6484] loop3: detected capacity change from 0 to 512 [ 95.219048][ T6484] ext4 filesystem being mounted at /139/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 95.290360][ T6490] xt_hashlimit: max too large, truncated to 1048576 [ 95.301241][ T6490] loop0: detected capacity change from 0 to 164 [ 95.308755][ T6490] rock: corrupted directory entry. extent=28, offset=0, size=16777216 [ 95.317925][ T6490] rock: corrupted directory entry. extent=28, offset=0, size=16777216 [ 95.384758][ T6496] infiniband Syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 95.400640][ T6496] loop3: detected capacity change from 0 to 512 [ 95.419274][ T6496] ext4 filesystem being mounted at /141/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 95.496892][ T6505] loop3: detected capacity change from 0 to 512 [ 95.520910][ T6505] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 95.529230][ T6505] System zones: 0-2, 18-18, 34-34 [ 95.534984][ T6505] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.838: bg 0: block 248: padding at end of block bitmap is not set [ 95.550163][ T6505] EXT4-fs error (device loop3): ext4_acquire_dquot:6879: comm syz.3.838: Failed to acquire dquot type 1 [ 95.561832][ T6505] EXT4-fs (loop3): 1 truncate cleaned up [ 95.568430][ T6505] ext4 filesystem being mounted at /143/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 95.739301][ T6511] xt_hashlimit: max too large, truncated to 1048576 [ 95.741407][ T29] kauditd_printk_skb: 666 callbacks suppressed [ 95.741424][ T29] audit: type=1326 audit(1728758791.245:9150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6512 comm="syz.3.839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99fe67dff9 code=0x7ffc0000 [ 95.750357][ T6511] loop4: detected capacity change from 0 to 164 [ 95.762270][ T29] audit: type=1326 audit(1728758791.255:9151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6512 comm="syz.3.839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99fe67dff9 code=0x7ffc0000 [ 95.778983][ T6513] loop3: detected capacity change from 0 to 512 [ 95.781744][ T29] audit: type=1326 audit(1728758791.255:9152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6512 comm="syz.3.839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f99fe67dff9 code=0x7ffc0000 [ 95.811590][ T6511] rock: corrupted directory entry. extent=28, offset=0, size=16777216 [ 95.834713][ T29] audit: type=1326 audit(1728758791.255:9153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6512 comm="syz.3.839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99fe67dff9 code=0x7ffc0000 [ 95.834747][ T29] audit: type=1326 audit(1728758791.255:9154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6512 comm="syz.3.839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99fe67dff9 code=0x7ffc0000 [ 95.834803][ T29] audit: type=1326 audit(1728758791.255:9155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6512 comm="syz.3.839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f99fe67dff9 code=0x7ffc0000 [ 95.834828][ T29] audit: type=1326 audit(1728758791.255:9156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6512 comm="syz.3.839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99fe67dff9 code=0x7ffc0000 [ 95.868363][ T6513] EXT4-fs (loop3): blocks per group (95) and clusters per group (32768) inconsistent [ 95.890035][ T29] audit: type=1326 audit(1728758791.255:9157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6512 comm="syz.3.839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99fe67dff9 code=0x7ffc0000 [ 95.913647][ T6001] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, [ 95.936711][ T29] audit: type=1326 audit(1728758791.255:9158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6512 comm="syz.3.839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f99fe67dff9 code=0x7ffc0000 [ 95.946155][ T6001] block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 95.969525][ T29] audit: type=1326 audit(1728758791.255:9159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6512 comm="syz.3.839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99fe67dff9 code=0x7ffc0000 [ 96.084902][ T6516] loop2: detected capacity change from 0 to 512 [ 96.119779][ T6516] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 96.124604][ T6521] loop3: detected capacity change from 0 to 1024 [ 96.137887][ T6521] EXT4-fs: dax option not supported [ 96.149024][ T6516] System zones: 0-2, 18-18, 34-34 [ 96.163386][ T6527] xt_hashlimit: max too large, truncated to 1048576 [ 96.178221][ T6527] loop4: detected capacity change from 0 to 164 [ 96.211293][ T6516] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.843: bg 0: block 248: padding at end of block bitmap is not set [ 96.212566][ T6523] netlink: 4 bytes leftover after parsing attributes in process `syz.1.842'. [ 96.230522][ T6516] EXT4-fs error (device loop2): ext4_acquire_dquot:6879: comm syz.2.843: Failed to acquire dquot type 1 [ 96.246043][ T6527] rock: corrupted directory entry. extent=28, offset=0, size=16777216 [ 96.267234][ T6534] loop3: detected capacity change from 0 to 512 [ 96.277334][ T6527] rock: corrupted directory entry. extent=28, offset=0, size=16777216 [ 96.294080][ T6534] EXT4-fs (loop3): blocks per group (95) and clusters per group (32768) inconsistent [ 96.316616][ T6538] loop1: detected capacity change from 0 to 512 [ 96.329696][ T6516] EXT4-fs (loop2): 1 truncate cleaned up [ 96.336193][ T6516] ext4 filesystem being mounted at /132/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 96.349976][ T6536] infiniband Syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 96.375403][ T6538] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 96.386281][ T6536] loop0: detected capacity change from 0 to 512 [ 96.409362][ T6538] System zones: 0-2, 18-18, 34-34 [ 96.435688][ T6538] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.849: bg 0: block 248: padding at end of block bitmap is not set [ 96.453102][ T6547] netlink: 'syz.3.851': attribute type 1 has an invalid length. [ 96.460842][ T6547] netlink: 15382 bytes leftover after parsing attributes in process `syz.3.851'. [ 96.466638][ T6538] EXT4-fs error (device loop1): ext4_acquire_dquot:6879: comm syz.1.849: Failed to acquire dquot type 1 [ 96.486515][ T6538] EXT4-fs (loop1): 1 truncate cleaned up [ 96.489449][ T6536] ext4 filesystem being mounted at /158/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 96.494325][ T6538] ext4 filesystem being mounted at /89/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 96.535970][ T6554] netlink: 'syz.4.853': attribute type 1 has an invalid length. [ 96.543681][ T6554] netlink: 15382 bytes leftover after parsing attributes in process `syz.4.853'. [ 96.611729][ T6556] loop0: detected capacity change from 0 to 512 [ 96.623745][ T6556] EXT4-fs (loop0): blocks per group (95) and clusters per group (32768) inconsistent [ 96.755296][ T6570] xt_hashlimit: max too large, truncated to 1048576 [ 96.766513][ T6570] syz1: rxe_newlink: already configured on veth0_virt_wifi [ 96.784035][ T6570] loop0: detected capacity change from 0 to 164 [ 96.791371][ T4133] EXT4-fs unmount: 225 callbacks suppressed [ 96.791389][ T4133] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.791903][ T6572] loop2: detected capacity change from 0 to 1024 [ 96.823290][ T6570] rock: corrupted directory entry. extent=28, offset=0, size=16777216 [ 96.840443][ T6572] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 96.841345][ T6570] rock: corrupted directory entry. extent=28, offset=0, size=16777216 [ 97.290782][ T6578] infiniband Syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 97.326937][ T6587] loop4: detected capacity change from 0 to 1024 [ 97.336564][ T6578] loop1: detected capacity change from 0 to 512 [ 97.337955][ T6587] EXT4-fs: dax option not supported [ 97.387020][ T6578] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 97.413017][ T6589] loop0: detected capacity change from 0 to 512 [ 97.421914][ T6578] ext4 filesystem being mounted at /91/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 97.440459][ T6589] EXT4-fs (loop0): blocks per group (95) and clusters per group (32768) inconsistent [ 97.516056][ T6595] netlink: 4 bytes leftover after parsing attributes in process `syz.4.869'. [ 97.534829][ T4133] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 97.625127][ T4131] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.691998][ T6610] netlink: 56 bytes leftover after parsing attributes in process `syz.0.876'. [ 97.701743][ T6613] netlink: 'syz.2.874': attribute type 1 has an invalid length. [ 97.709474][ T6613] netlink: 15334 bytes leftover after parsing attributes in process `syz.2.874'. [ 97.790880][ T6624] netlink: 'syz.1.878': attribute type 1 has an invalid length. [ 97.868194][ T6634] loop0: detected capacity change from 0 to 1024 [ 97.879474][ T6634] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 98.156514][ T6640] infiniband Syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 98.178091][ T6640] loop3: detected capacity change from 0 to 512 [ 98.209419][ T6640] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 98.222346][ T6640] ext4 filesystem being mounted at /151/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 98.298053][ T4138] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 98.395321][ T6648] loop3: detected capacity change from 0 to 512 [ 98.409468][ T6648] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 98.418220][ T6648] System zones: 0-2, 18-18, 34-34 [ 98.426791][ T6648] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.890: bg 0: block 248: padding at end of block bitmap is not set [ 98.441951][ T6648] EXT4-fs error (device loop3): ext4_acquire_dquot:6879: comm syz.3.890: Failed to acquire dquot type 1 [ 98.454169][ T6648] EXT4-fs (loop3): 1 truncate cleaned up [ 98.460692][ T6648] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.473561][ T6648] ext4 filesystem being mounted at /154/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 98.664524][ T6659] loop4: detected capacity change from 0 to 512 [ 98.684937][ T6665] infiniband Syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 98.732505][ T6659] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.746095][ T4126] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.751213][ T6665] loop2: detected capacity change from 0 to 512 [ 98.785423][ T6659] ext4 filesystem being mounted at /104/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 98.812518][ T4138] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.826954][ T6674] loop1: detected capacity change from 0 to 512 [ 98.838958][ T6676] xt_hashlimit: max too large, truncated to 1048576 [ 98.854446][ T6674] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 98.856229][ T6676] loop0: detected capacity change from 0 to 164 [ 98.870235][ T6674] System zones: 0-2, 18-18, 34-34 [ 98.880927][ T6676] rock: corrupted directory entry. extent=28, offset=0, size=16777216 [ 98.886394][ T6674] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.898: bg 0: block 248: padding at end of block bitmap is not set [ 98.899192][ T6665] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 98.916046][ T6665] ext4 filesystem being mounted at /139/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 98.927655][ T4136] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.931227][ T6674] EXT4-fs error (device loop1): ext4_acquire_dquot:6879: comm syz.1.898: Failed to acquire dquot type 1 [ 98.959411][ T6674] EXT4-fs (loop1): 1 truncate cleaned up [ 98.968023][ T6684] loop0: detected capacity change from 0 to 1024 [ 98.968174][ T6674] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.974602][ T6684] EXT4-fs: dax option not supported [ 98.990425][ T6674] ext4 filesystem being mounted at /96/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 99.007808][ T6682] loop3: detected capacity change from 0 to 512 [ 99.024452][ T6682] EXT4-fs (loop3): blocks per group (95) and clusters per group (32768) inconsistent [ 99.063759][ T4131] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 99.105451][ T6689] siw: device registration error -23 [ 99.125880][ T6694] netlink: 'syz.0.903': attribute type 1 has an invalid length. [ 99.168983][ T6692] loop4: detected capacity change from 0 to 512 [ 99.178376][ T6692] EXT4-fs (loop4): blocks per group (95) and clusters per group (32768) inconsistent [ 99.237216][ T6698] loop2: detected capacity change from 0 to 512 [ 99.252512][ T6702] loop4: detected capacity change from 0 to 512 [ 99.264709][ T6698] EXT4-fs (loop2): blocks per group (95) and clusters per group (32768) inconsistent [ 99.306427][ T6702] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 99.330484][ T6712] xt_hashlimit: max too large, truncated to 1048576 [ 99.339918][ T6702] System zones: 0-2, 18-18, 34-34 [ 99.342905][ T6713] loop3: detected capacity change from 0 to 512 [ 99.348466][ T6702] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.908: bg 0: block 248: padding at end of block bitmap is not set [ 99.352981][ T4133] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.366110][ T6702] EXT4-fs error (device loop4): ext4_acquire_dquot:6879: comm syz.4.908: Failed to acquire dquot type 1 [ 99.388105][ T6712] rdma_rxe: rxe_newlink: failed to add veth0_virt_wifi [ 99.395461][ T6702] EXT4-fs (loop4): 1 truncate cleaned up [ 99.397136][ T6712] loop2: detected capacity change from 0 to 164 [ 99.402599][ T6713] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 99.415667][ T6713] System zones: 0-2, 18-18, 34-34 [ 99.415926][ T6702] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.422116][ T6713] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.910: bg 0: block 248: padding at end of block bitmap is not set [ 99.447925][ T6713] EXT4-fs error (device loop3): ext4_acquire_dquot:6879: comm syz.3.910: Failed to acquire dquot type 1 [ 99.449833][ T6702] ext4 filesystem being mounted at /106/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 99.472527][ T6713] EXT4-fs (loop3): 1 truncate cleaned up [ 99.479092][ T6713] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.493176][ T6712] rock: corrupted directory entry. extent=28, offset=0, size=16777216 [ 99.503538][ T6717] xt_hashlimit: max too large, truncated to 1048576 [ 99.512086][ T6713] ext4 filesystem being mounted at /158/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 99.523357][ T6712] rock: corrupted directory entry. extent=28, offset=0, size=16777216 [ 99.529532][ T6717] loop1: detected capacity change from 0 to 164 [ 99.548381][ T6717] rock: corrupted directory entry. extent=28, offset=0, size=16777216 [ 99.635979][ T6719] loop2: detected capacity change from 0 to 1024 [ 99.656586][ T6719] EXT4-fs: dax option not supported [ 99.720671][ T6725] loop1: detected capacity change from 0 to 1024 [ 99.737661][ T6725] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 99.780056][ T4138] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.787813][ T6727] loop2: detected capacity change from 0 to 512 [ 99.798461][ T6727] EXT4-fs (loop2): blocks per group (95) and clusters per group (32768) inconsistent [ 99.863374][ T6735] loop3: detected capacity change from 0 to 512 [ 99.871303][ T6725] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 99.899258][ T6735] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.911995][ T6735] ext4 filesystem being mounted at /160/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 99.916750][ T6733] loop2: detected capacity change from 0 to 512 [ 99.938138][ T4136] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.947492][ T6733] EXT4-fs (loop2): blocks per group (95) and clusters per group (32768) inconsistent [ 99.957652][ T4138] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.996267][ T6743] infiniband Syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 100.008892][ T6746] xt_hashlimit: max too large, truncated to 1048576 [ 100.018333][ T6743] loop4: detected capacity change from 0 to 512 [ 100.025501][ T6746] rdma_rxe: rxe_newlink: failed to add veth0_virt_wifi [ 100.034932][ T6746] loop2: detected capacity change from 0 to 164 [ 100.044672][ T6746] rock: corrupted directory entry. extent=28, offset=0, size=16777216 [ 100.054451][ T6746] rock: corrupted directory entry. extent=28, offset=0, size=16777216 [ 100.085269][ T6743] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 100.111711][ T6748] loop3: detected capacity change from 0 to 512 [ 100.118324][ T6743] ext4 filesystem being mounted at /108/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 100.141500][ T6748] EXT4-fs (loop3): blocks per group (95) and clusters per group (32768) inconsistent [ 100.198961][ T6762] loop1: detected capacity change from 0 to 512 [ 100.205800][ T6763] netlink: 'syz.2.927': attribute type 1 has an invalid length. [ 100.213512][ T6763] __nla_validate_parse: 7 callbacks suppressed [ 100.213527][ T6763] netlink: 15334 bytes leftover after parsing attributes in process `syz.2.927'. [ 100.248661][ T6762] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 100.256763][ T6762] System zones: 0-2, 18-18, 34-34 [ 100.263264][ T6762] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.929: bg 0: block 248: padding at end of block bitmap is not set [ 100.278358][ T4136] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 100.278370][ T6762] EXT4-fs error (device loop1): ext4_acquire_dquot:6879: comm syz.1.929: Failed to acquire dquot type 1 [ 100.314716][ T6762] EXT4-fs (loop1): 1 truncate cleaned up [ 100.321203][ T6762] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.334036][ T6762] ext4 filesystem being mounted at /102/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 100.354590][ T6770] loop4: detected capacity change from 0 to 512 [ 100.371984][ T6770] EXT4-fs (loop4): blocks per group (95) and clusters per group (32768) inconsistent [ 100.431025][ T6772] infiniband Syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 100.453484][ T6772] loop4: detected capacity change from 0 to 512 [ 100.482499][ T6772] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 100.495338][ T6772] ext4 filesystem being mounted at /110/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 100.558245][ T4136] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 100.573757][ T4133] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.648402][ T6784] loop4: detected capacity change from 0 to 1024 [ 100.657686][ T6784] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 100.705574][ T6788] loop1: detected capacity change from 0 to 512 [ 100.712942][ T6788] EXT4-fs (loop1): blocks per group (95) and clusters per group (32768) inconsistent [ 100.723585][ T6784] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 100.756780][ T6790] loop1: detected capacity change from 0 to 512 [ 100.780329][ T6790] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 100.789637][ T6790] System zones: 0-2, 18-18, 34-34 [ 100.797096][ T6790] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.940: bg 0: block 248: padding at end of block bitmap is not set [ 100.812892][ T6790] __quota_error: 970 callbacks suppressed [ 100.812907][ T6790] Quota error (device loop1): write_blk: dquota write failed [ 100.816339][ T6794] loop0: detected capacity change from 0 to 512 [ 100.818706][ T6790] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 100.847007][ T6790] EXT4-fs error (device loop1): ext4_acquire_dquot:6879: comm syz.1.940: Failed to acquire dquot type 1 [ 100.859209][ T6790] EXT4-fs (loop1): 1 truncate cleaned up [ 100.865091][ T6790] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.878204][ T6790] ext4 filesystem being mounted at /106/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 100.898816][ T6794] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.922791][ T6794] ext4 filesystem being mounted at /179/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 100.956055][ T6798] loop4: detected capacity change from 0 to 1024 [ 100.962944][ T6798] EXT4-fs: dax option not supported [ 101.008825][ T4126] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.028302][ T29] audit: type=1326 audit(1728758796.535:10116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6799 comm="syz.2.943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa73f8ddff9 code=0x7ffc0000 [ 101.052005][ T29] audit: type=1326 audit(1728758796.535:10117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6799 comm="syz.2.943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa73f8ddff9 code=0x7ffc0000 [ 101.053228][ T6802] infiniband Syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 101.075807][ T29] audit: type=1326 audit(1728758796.535:10118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6799 comm="syz.2.943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa73f8ddff9 code=0x7ffc0000 [ 101.106302][ T29] audit: type=1326 audit(1728758796.535:10119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6799 comm="syz.2.943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa73f8ddff9 code=0x7ffc0000 [ 101.111563][ T6804] loop4: detected capacity change from 0 to 512 [ 101.129758][ T29] audit: type=1326 audit(1728758796.535:10120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6799 comm="syz.2.943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa73f8ddff9 code=0x7ffc0000 [ 101.136258][ T6803] loop2: detected capacity change from 0 to 512 [ 101.159455][ T29] audit: type=1326 audit(1728758796.535:10121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6799 comm="syz.2.943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7fa73f8ddff9 code=0x7ffc0000 [ 101.159493][ T29] audit: type=1326 audit(1728758796.535:10122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6799 comm="syz.2.943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa73f8ddff9 code=0x7ffc0000 [ 101.212469][ T29] audit: type=1326 audit(1728758796.535:10123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6799 comm="syz.2.943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa73f8ddff9 code=0x7ffc0000 [ 101.258108][ T6803] EXT4-fs (loop2): blocks per group (95) and clusters per group (32768) inconsistent [ 101.269009][ T6808] loop3: detected capacity change from 0 to 512 [ 101.281298][ T6804] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 101.299432][ T4133] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.315576][ T6808] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 101.317638][ T6804] ext4 filesystem being mounted at /115/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 101.323937][ T6808] System zones: 0-2, 18-18, 34-34 [ 101.344930][ T6808] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.946: bg 0: block 248: padding at end of block bitmap is not set [ 101.363918][ T6808] EXT4-fs error (device loop3): ext4_acquire_dquot:6879: comm syz.3.946: Failed to acquire dquot type 1 [ 101.379871][ T6808] EXT4-fs (loop3): 1 truncate cleaned up [ 101.385989][ T6808] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.410006][ T6817] netlink: 4 bytes leftover after parsing attributes in process `syz.0.944'. [ 101.412501][ T6808] ext4 filesystem being mounted at /164/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 101.453376][ T6826] xt_hashlimit: max too large, truncated to 1048576 [ 101.465694][ T6826] loop1: detected capacity change from 0 to 164 [ 101.474244][ T6826] rock: corrupted directory entry. extent=28, offset=0, size=16777216 [ 101.483484][ T6826] rock: corrupted directory entry. extent=28, offset=0, size=16777216 [ 101.586715][ T4136] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 101.596952][ T4138] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.638507][ T6836] siw: device registration error -23 [ 101.655349][ T6837] infiniband Syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 101.680235][ T6837] loop4: detected capacity change from 0 to 512 [ 101.701904][ T6837] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 101.722363][ T6837] ext4 filesystem being mounted at /116/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 101.791421][ T4136] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 101.856897][ T6853] netlink: 'syz.1.958': attribute type 1 has an invalid length. [ 101.864664][ T6853] netlink: 15382 bytes leftover after parsing attributes in process `syz.1.958'. [ 101.971836][ T6860] infiniband Syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 102.002045][ T6860] loop4: detected capacity change from 0 to 512 [ 102.039600][ T6860] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 102.067764][ T6860] ext4 filesystem being mounted at /121/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 102.136036][ T4136] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 102.183489][ T6866] xt_hashlimit: max too large, truncated to 1048576 [ 102.195471][ T6866] loop4: detected capacity change from 0 to 164 [ 102.207458][ T6866] rock: corrupted directory entry. extent=28, offset=0, size=16777216 [ 102.222525][ T6866] rock: corrupted directory entry. extent=28, offset=0, size=16777216 [ 102.256636][ T6868] loop4: detected capacity change from 0 to 512 [ 102.280392][ T6868] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 102.291872][ T6868] System zones: 0-2, 18-18, 34-34 [ 102.298302][ T6868] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.966: bg 0: block 248: padding at end of block bitmap is not set [ 102.314031][ T6868] EXT4-fs error (device loop4): ext4_acquire_dquot:6879: comm syz.4.966: Failed to acquire dquot type 1 [ 102.333441][ T6868] EXT4-fs (loop4): 1 truncate cleaned up [ 102.339805][ T6868] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.352474][ T6868] ext4 filesystem being mounted at /124/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 102.382526][ T6874] loop3: detected capacity change from 0 to 512 [ 102.434293][ T6874] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 102.450365][ T6874] System zones: 0-2, 18-18, 34-34 [ 102.463106][ T6874] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.968: bg 0: block 248: padding at end of block bitmap is not set [ 102.479374][ T6878] siw: device registration error -23 [ 102.513530][ T6874] EXT4-fs error (device loop3): ext4_acquire_dquot:6879: comm syz.3.968: Failed to acquire dquot type 1 [ 102.526978][ T6881] loop0: detected capacity change from 0 to 1024 [ 102.533560][ T6881] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 102.544896][ T6874] EXT4-fs (loop3): 1 truncate cleaned up [ 102.553510][ T6874] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.566479][ T6874] ext4 filesystem being mounted at /168/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 102.608603][ T6881] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 102.665381][ T4136] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.726378][ T6888] netlink: 4 bytes leftover after parsing attributes in process `syz.1.974'. [ 102.775757][ T6896] loop4: detected capacity change from 0 to 512 [ 102.791615][ T6896] EXT4-fs (loop4): blocks per group (95) and clusters per group (32768) inconsistent [ 102.810770][ T6900] loop1: detected capacity change from 0 to 512 [ 102.812355][ T6901] loop2: detected capacity change from 0 to 1024 [ 102.851215][ T6903] xt_hashlimit: max too large, truncated to 1048576 [ 102.869555][ T6900] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.886017][ T6903] loop0: detected capacity change from 0 to 164 [ 102.893112][ T6900] ext4 filesystem being mounted at /114/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 102.904656][ T6903] rock: corrupted directory entry. extent=28, offset=0, size=16777216 [ 102.918035][ T6903] rock: corrupted directory entry. extent=28, offset=0, size=16777216 [ 102.927714][ T6901] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 102.954216][ T4133] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.001968][ T6914] loop0: detected capacity change from 0 to 512 [ 103.014181][ T4138] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.039438][ T6914] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 103.050749][ T6914] System zones: 0-2, 18-18, 34-34 [ 103.074006][ T6914] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.982: bg 0: block 248: padding at end of block bitmap is not set [ 103.095455][ T6921] loop3: detected capacity change from 0 to 1024 [ 103.101962][ T6914] EXT4-fs error (device loop0): ext4_acquire_dquot:6879: comm syz.0.982: Failed to acquire dquot type 1 [ 103.107699][ T6528] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 103.113684][ T6921] EXT4-fs: dax option not supported [ 103.137700][ T6924] netlink: 'syz.1.984': attribute type 1 has an invalid length. [ 103.145356][ T6924] netlink: 15382 bytes leftover after parsing attributes in process `syz.1.984'. [ 103.157570][ T6914] EXT4-fs (loop0): 1 truncate cleaned up [ 103.163637][ T6914] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.176617][ T6914] ext4 filesystem being mounted at /185/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 103.291495][ T3366] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 103.304063][ T3366] EXT4-fs (loop2): This should not happen!! Data will be lost [ 103.304063][ T3366] [ 103.313874][ T3366] EXT4-fs (loop2): Total free blocks count 0 [ 103.319940][ T3366] EXT4-fs (loop2): Free/Dirty block details [ 103.325847][ T3366] EXT4-fs (loop2): free_blocks=68451041280 [ 103.331799][ T3366] EXT4-fs (loop2): dirty_blocks=3024 [ 103.337109][ T3366] EXT4-fs (loop2): Block reservation details [ 103.343168][ T3366] EXT4-fs (loop2): i_reserved_data_blocks=189 [ 103.358220][ T11] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 956 with error 28 [ 103.376728][ T6931] netlink: 4 bytes leftover after parsing attributes in process `syz.3.987'. [ 103.417266][ T6939] loop3: detected capacity change from 0 to 1024 [ 103.424640][ T6939] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 103.468158][ T6939] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 103.493303][ T4126] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.529699][ T6947] xt_hashlimit: max too large, truncated to 1048576 [ 103.541280][ T6947] loop2: detected capacity change from 0 to 164 [ 103.548871][ T6945] loop0: detected capacity change from 0 to 512 [ 103.555507][ T6947] rock: corrupted directory entry. extent=28, offset=0, size=16777216 [ 103.564582][ T6945] EXT4-fs (loop0): blocks per group (95) and clusters per group (32768) inconsistent [ 103.574524][ T6947] rock: corrupted directory entry. extent=28, offset=0, size=16777216 [ 103.613567][ T6949] loop2: detected capacity change from 0 to 512 [ 103.650749][ T6949] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.665056][ T6949] ext4 filesystem being mounted at /161/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 103.673649][ T6955] loop3: detected capacity change from 0 to 512 [ 103.691195][ T4131] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.714839][ T6955] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 103.723615][ T6959] loop2: detected capacity change from 0 to 2048 [ 103.733843][ T6955] System zones: 0-2, 18-18, 34-34 [ 103.744219][ T6955] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.997: bg 0: block 248: padding at end of block bitmap is not set [ 103.765664][ T6964] loop4: detected capacity change from 0 to 164 [ 103.773320][ T6964] rock: corrupted directory entry. extent=28, offset=0, size=16777216 [ 103.782996][ T6955] EXT4-fs error (device loop3): ext4_acquire_dquot:6879: comm syz.3.997: Failed to acquire dquot type 1 [ 103.783037][ T6959] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.807458][ T6957] loop0: detected capacity change from 0 to 512 [ 103.828172][ T6957] EXT4-fs (loop0): blocks per group (95) and clusters per group (32768) inconsistent [ 103.842818][ T6955] EXT4-fs (loop3): 1 truncate cleaned up [ 103.854660][ T6955] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.875871][ T6955] ext4 filesystem being mounted at /174/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 103.991321][ T6977] loop1: detected capacity change from 0 to 512 [ 104.010226][ T6977] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 104.010277][ T6979] siw: device registration error -23 [ 104.023800][ T6975] loop0: detected capacity change from 0 to 512 [ 104.030742][ T6977] System zones: 0-2, 18-18, 34-34 [ 104.038299][ T6975] EXT4-fs (loop0): blocks per group (95) and clusters per group (32768) inconsistent [ 104.060387][ T6977] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1004: bg 0: block 248: padding at end of block bitmap is not set [ 104.088811][ T6977] EXT4-fs error (device loop1): ext4_acquire_dquot:6879: comm syz.1.1004: Failed to acquire dquot type 1 [ 104.123986][ T6977] EXT4-fs (loop1): 1 truncate cleaned up [ 104.130579][ T6977] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.155589][ T6977] ext4 filesystem being mounted at /118/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 104.238098][ T6991] loop0: detected capacity change from 0 to 1024 [ 104.254963][ T6991] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 104.308335][ T6991] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 104.322697][ T4138] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.345458][ T6997] loop3: detected capacity change from 0 to 164 [ 104.353505][ T6997] rock: corrupted directory entry. extent=28, offset=0, size=16777216 [ 104.398586][ T7000] infiniband Syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 104.418797][ T4133] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.419240][ T7000] loop3: detected capacity change from 0 to 512 [ 104.449924][ T7000] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 104.462570][ T7000] ext4 filesystem being mounted at /176/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 104.500913][ T7006] netlink: 'syz.1.1013': attribute type 1 has an invalid length. [ 104.508796][ T7006] netlink: 15382 bytes leftover after parsing attributes in process `syz.1.1013'. [ 104.546409][ T4138] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 104.606675][ T7010] loop3: detected capacity change from 0 to 512 [ 104.613875][ T7010] EXT4-fs (loop3): blocks per group (95) and clusters per group (32768) inconsistent [ 104.631673][ T7014] loop0: detected capacity change from 0 to 512 [ 104.639449][ T7014] EXT4-fs (loop0): blocks per group (95) and clusters per group (32768) inconsistent [ 104.680920][ T7019] siw: device registration error -23 [ 104.712871][ T7016] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1017'. [ 104.738422][ T7023] xt_hashlimit: max too large, truncated to 1048576 [ 104.749303][ T7023] loop3: detected capacity change from 0 to 164 [ 104.756742][ T7023] rock: corrupted directory entry. extent=28, offset=0, size=16777216 [ 104.765709][ T7023] rock: corrupted directory entry. extent=28, offset=0, size=16777216 [ 104.802855][ T7025] infiniband Syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 104.823396][ T7025] loop0: detected capacity change from 0 to 512 [ 104.840624][ T7025] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 104.853513][ T7025] ext4 filesystem being mounted at /197/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 104.870469][ T7027] loop3: detected capacity change from 0 to 512 [ 104.881990][ T7027] EXT4-fs (loop3): blocks per group (95) and clusters per group (32768) inconsistent [ 104.935546][ T7033] loop3: detected capacity change from 0 to 164 [ 104.942800][ T7033] rock: corrupted directory entry. extent=28, offset=0, size=16777216 [ 104.963029][ T4126] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 104.994201][ T7035] infiniband Syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 105.011301][ T7035] loop0: detected capacity change from 0 to 512 [ 105.029265][ T7035] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 105.042331][ T7035] ext4 filesystem being mounted at /198/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 105.107904][ T4126] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 105.139612][ T7041] infiniband Syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 105.179033][ T7041] loop0: detected capacity change from 0 to 512 [ 105.190252][ T7041] ext4 filesystem being mounted at /199/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 105.210493][ T7045] loop3: detected capacity change from 0 to 512 [ 105.217689][ T7045] EXT4-fs (loop3): blocks per group (95) and clusters per group (32768) inconsistent [ 105.263129][ T7052] siw: device registration error -23 [ 105.300144][ T7054] loop0: detected capacity change from 0 to 512 [ 105.323654][ T7054] ext4 filesystem being mounted at /200/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 105.328834][ T7058] loop4: detected capacity change from 0 to 1024 [ 105.340795][ T7058] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 105.387924][ T7058] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 105.423127][ T7067] loop3: detected capacity change from 0 to 1024 [ 105.435350][ T7069] xt_hashlimit: max too large, truncated to 1048576 [ 105.441382][ T7067] EXT4-fs: dax option not supported [ 105.447261][ T7069] loop0: detected capacity change from 0 to 164 [ 105.454773][ T7069] rock: corrupted directory entry. extent=28, offset=0, size=16777216 [ 105.530350][ T7075] loop3: detected capacity change from 0 to 1024 [ 105.642006][ T7082] usb usb7: usbfs: process 7082 (syz.4.1042) did not claim interface 0 before use [ 105.656421][ T7082] loop4: detected capacity change from 0 to 512 [ 105.665599][ T7082] EXT4-fs (loop4): blocks per group (95) and clusters per group (32768) inconsistent [ 105.774095][ T7086] netlink: 'syz.4.1044': attribute type 1 has an invalid length. [ 105.781954][ T7086] netlink: 15382 bytes leftover after parsing attributes in process `syz.4.1044'. [ 105.824403][ T3366] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 105.840103][ T3366] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 105.852639][ T3366] EXT4-fs (loop3): This should not happen!! Data will be lost [ 105.852639][ T3366] [ 105.862407][ T3366] EXT4-fs (loop3): Total free blocks count 0 [ 105.868526][ T3366] EXT4-fs (loop3): Free/Dirty block details [ 105.874430][ T3366] EXT4-fs (loop3): free_blocks=68451041280 [ 105.880266][ T3366] EXT4-fs (loop3): dirty_blocks=3376 [ 105.885555][ T3366] EXT4-fs (loop3): Block reservation details [ 105.891588][ T3366] EXT4-fs (loop3): i_reserved_data_blocks=211 [ 105.905371][ T3366] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 1316 with error 28 [ 105.918215][ T3366] EXT4-fs (loop3): This should not happen!! Data will be lost [ 105.918215][ T3366] [ 105.949068][ T29] kauditd_printk_skb: 810 callbacks suppressed [ 105.949083][ T29] audit: type=1326 audit(1728758801.455:10922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7087 comm="syz.3.1045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99fe67dff9 code=0x7ffc0000 [ 105.969168][ T7090] loop3: detected capacity change from 0 to 512 [ 105.978967][ T29] audit: type=1326 audit(1728758801.455:10923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7087 comm="syz.3.1045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f99fe67dff9 code=0x7ffc0000 [ 106.008922][ T29] audit: type=1326 audit(1728758801.455:10924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7087 comm="syz.3.1045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99fe67dff9 code=0x7ffc0000 [ 106.009005][ T7090] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 106.032499][ T29] audit: type=1326 audit(1728758801.455:10925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7087 comm="syz.3.1045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=107 compat=0 ip=0x7f99fe67dff9 code=0x7ffc0000 [ 106.041541][ T7090] System zones: [ 106.064105][ T29] audit: type=1326 audit(1728758801.455:10926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7087 comm="syz.3.1045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99fe67dff9 code=0x7ffc0000 [ 106.091241][ T7090] 0-2, 18-18, 34-34 [ 106.096306][ T7090] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1046: bg 0: block 248: padding at end of block bitmap is not set [ 106.111223][ T7090] Quota error (device loop3): write_blk: dquota write failed [ 106.118674][ T7090] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 106.128690][ T7090] EXT4-fs error (device loop3): ext4_acquire_dquot:6879: comm syz.3.1046: Failed to acquire dquot type 1 [ 106.140676][ T7090] EXT4-fs (loop3): 1 truncate cleaned up [ 106.147152][ T7090] ext4 filesystem being mounted at /191/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 106.172067][ T7094] siw: device registration error -23 [ 106.301010][ T7098] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1048'. [ 106.339810][ T7105] xt_hashlimit: max too large, truncated to 1048576 [ 106.351849][ T7103] xt_hashlimit: max too large, truncated to 1048576 [ 106.354738][ T7105] loop1: detected capacity change from 0 to 164 [ 106.369540][ T7103] loop3: detected capacity change from 0 to 164 [ 106.372180][ T7105] rock: corrupted directory entry. extent=28, offset=0, size=16777216 [ 106.393774][ T7103] rock: corrupted directory entry. extent=28, offset=0, size=16777216 [ 106.399407][ T7107] loop0: detected capacity change from 0 to 1024 [ 106.402932][ T7103] rock: corrupted directory entry. extent=28, offset=0, size=16777216 [ 106.419554][ T7107] EXT4-fs: dax option not supported [ 106.480593][ T7111] loop3: detected capacity change from 0 to 1024 [ 106.487159][ T7111] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 106.512049][ T29] audit: type=1326 audit(1728758802.015:10927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7114 comm="syz.1.1055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d0196dff9 code=0x7ffc0000 [ 106.535662][ T29] audit: type=1326 audit(1728758802.015:10928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7114 comm="syz.1.1055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d0196dff9 code=0x7ffc0000 [ 106.548059][ T7111] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 106.559367][ T29] audit: type=1326 audit(1728758802.015:10929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7114 comm="syz.1.1055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=274 compat=0 ip=0x7f3d0196dff9 code=0x7ffc0000 [ 106.614287][ T7120] infiniband Syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 106.627067][ T7122] loop4: detected capacity change from 0 to 512 [ 106.634048][ T7120] loop1: detected capacity change from 0 to 512 [ 106.646170][ T7124] loop0: detected capacity change from 0 to 512 [ 106.666397][ T7120] ext4 filesystem being mounted at /127/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 106.678716][ T7124] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 106.686750][ T7124] System zones: 0-2, 18-18, 34-34 [ 106.692752][ T7122] ext4 filesystem being mounted at /139/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 106.704379][ T7124] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.1059: bg 0: block 248: padding at end of block bitmap is not set [ 106.724913][ T7124] EXT4-fs error (device loop0): ext4_acquire_dquot:6879: comm syz.0.1059: Failed to acquire dquot type 1 [ 106.737348][ T7124] EXT4-fs (loop0): 1 truncate cleaned up [ 106.744318][ T7124] ext4 filesystem being mounted at /207/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 106.831941][ T7134] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1060'. [ 106.871862][ T7142] loop1: detected capacity change from 0 to 164 [ 106.894123][ T7142] rock: corrupted directory entry. extent=28, offset=0, size=16777216 [ 106.905388][ T7144] loop4: detected capacity change from 0 to 164 [ 106.916465][ T7146] xt_hashlimit: max too large, truncated to 1048576 [ 106.925501][ T7144] rock: corrupted directory entry. extent=28, offset=0, size=16777216 [ 106.946048][ T7146] rdma_rxe: rxe_newlink: failed to add veth0_virt_wifi [ 106.957946][ T7144] rock: corrupted directory entry. extent=28, offset=0, size=16777216 [ 107.067201][ T7160] netlink: 'syz.4.1068': attribute type 1 has an invalid length. [ 107.075046][ T7160] netlink: 15382 bytes leftover after parsing attributes in process `syz.4.1068'. [ 107.096854][ T7159] loop3: detected capacity change from 0 to 512 [ 107.104512][ T7159] EXT4-fs (loop3): blocks per group (95) and clusters per group (32768) inconsistent [ 107.164480][ T7166] siw: device registration error -23 [ 107.167770][ T7164] infiniband Syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 107.201017][ T7164] loop0: detected capacity change from 0 to 512 [ 107.219349][ T7164] ext4 filesystem being mounted at /209/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 107.310949][ T7172] loop3: detected capacity change from 0 to 164 [ 107.321379][ T7172] rock: corrupted directory entry. extent=28, offset=0, size=16777216 [ 107.354109][ T7174] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1075'. [ 107.362439][ T7179] loop3: detected capacity change from 0 to 512 [ 107.379681][ T7179] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 107.389956][ T7179] System zones: 0-2, 18-18, 34-34 [ 107.395764][ T7179] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1077: bg 0: block 248: padding at end of block bitmap is not set [ 107.410569][ T7179] EXT4-fs error (device loop3): ext4_acquire_dquot:6879: comm syz.3.1077: Failed to acquire dquot type 1 [ 107.422835][ T7179] EXT4-fs (loop3): 1 truncate cleaned up [ 107.429068][ T7179] ext4 filesystem being mounted at /202/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 107.488326][ T7189] loop0: detected capacity change from 0 to 1024 [ 107.495408][ T7189] EXT4-fs: dax option not supported [ 107.538622][ T7191] loop0: detected capacity change from 0 to 512 [ 107.581254][ T7191] ext4 filesystem being mounted at /215/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 107.656005][ T7197] loop0: detected capacity change from 0 to 512 [ 107.677694][ T7197] EXT4-fs (loop0): blocks per group (95) and clusters per group (32768) inconsistent [ 107.694952][ T7203] siw: device registration error -23 [ 107.731836][ T7205] loop3: detected capacity change from 0 to 1024 [ 107.803920][ T7211] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1089'. [ 107.812206][ T7216] loop1: detected capacity change from 0 to 1024 [ 107.831955][ T7216] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 107.919260][ T7221] xt_hashlimit: max too large, truncated to 1048576 [ 107.938648][ T7223] infiniband Syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 107.956816][ T7225] loop0: detected capacity change from 0 to 512 [ 107.963778][ T7216] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 107.973173][ T7223] loop2: detected capacity change from 0 to 512 [ 107.973219][ T7221] rdma_rxe: rxe_newlink: failed to add veth0_virt_wifi [ 108.005596][ T7225] ext4 filesystem being mounted at /220/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 108.016530][ T7223] ext4 filesystem being mounted at /166/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 108.074959][ T3366] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 108.090152][ T3366] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 108.102693][ T3366] EXT4-fs (loop3): This should not happen!! Data will be lost [ 108.102693][ T3366] [ 108.112451][ T3366] EXT4-fs (loop3): Total free blocks count 0 [ 108.118488][ T3366] EXT4-fs (loop3): Free/Dirty block details [ 108.124460][ T3366] EXT4-fs (loop3): free_blocks=68451041280 [ 108.130419][ T3366] EXT4-fs (loop3): dirty_blocks=2560 [ 108.135715][ T3366] EXT4-fs (loop3): Block reservation details [ 108.141789][ T3366] EXT4-fs (loop3): i_reserved_data_blocks=160 [ 108.155480][ T11] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 492 with error 28 [ 108.168274][ T11] EXT4-fs (loop3): This should not happen!! Data will be lost [ 108.168274][ T11] [ 108.188510][ T7236] loop0: detected capacity change from 0 to 1024 [ 108.195116][ T7236] EXT4-fs: dax option not supported [ 108.310040][ T7248] loop1: detected capacity change from 0 to 512 [ 108.329211][ T7250] xt_hashlimit: max too large, truncated to 1048576 [ 108.341623][ T7250] loop3: detected capacity change from 0 to 164 [ 108.359460][ T7250] rock: corrupted directory entry. extent=28, offset=0, size=16777216 [ 108.376488][ T7254] xt_hashlimit: max too large, truncated to 1048576 [ 108.389686][ T7254] loop0: detected capacity change from 0 to 164 [ 108.394399][ T7248] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 108.404132][ T7248] System zones: 0-2, 18-18, 34-34 [ 108.405272][ T7254] rock: corrupted directory entry. extent=28, offset=0, size=16777216 [ 108.410181][ T7256] loop2: detected capacity change from 0 to 1024 [ 108.428383][ T7248] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1103: bg 0: block 248: padding at end of block bitmap is not set [ 108.444931][ T7248] EXT4-fs error (device loop1): ext4_acquire_dquot:6879: comm syz.1.1103: Failed to acquire dquot type 1 [ 108.466108][ T7262] loop3: detected capacity change from 0 to 164 [ 108.476600][ T7248] EXT4-fs (loop1): 1 truncate cleaned up [ 108.483133][ T7248] ext4 filesystem being mounted at /132/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 108.493724][ T7262] rock: corrupted directory entry. extent=28, offset=0, size=16777216 [ 108.502974][ T7262] rock: corrupted directory entry. extent=28, offset=0, size=16777216 [ 108.611127][ T7268] loop0: detected capacity change from 0 to 512 [ 108.623454][ T7268] EXT4-fs (loop0): blocks per group (95) and clusters per group (32768) inconsistent [ 108.693771][ T7275] loop0: detected capacity change from 0 to 512 [ 108.730165][ T7275] ext4 filesystem being mounted at /228/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 108.794694][ T7278] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1115'. [ 108.897854][ T7291] loop0: detected capacity change from 0 to 512 [ 108.916098][ T7295] xt_hashlimit: max too large, truncated to 1048576 [ 108.936198][ T7295] loop1: detected capacity change from 0 to 164 [ 108.946233][ T7295] rock: corrupted directory entry. extent=28, offset=0, size=16777216 [ 108.955988][ T7291] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 108.972509][ T7300] loop3: detected capacity change from 0 to 164 [ 108.976572][ T7291] System zones: 0-2, 18-18, 34-34 [ 108.988342][ T36] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 109.004509][ T7291] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.1117: bg 0: block 248: padding at end of block bitmap is not set [ 109.007411][ T36] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 109.031704][ T36] EXT4-fs (loop2): This should not happen!! Data will be lost [ 109.031704][ T36] [ 109.041378][ T36] EXT4-fs (loop2): Total free blocks count 0 [ 109.042692][ T7300] rock: corrupted directory entry. extent=28, offset=0, size=16777216 [ 109.047442][ T36] EXT4-fs (loop2): Free/Dirty block details [ 109.047458][ T36] EXT4-fs (loop2): free_blocks=68451041280 [ 109.047472][ T36] EXT4-fs (loop2): dirty_blocks=3440 [ 109.047484][ T36] EXT4-fs (loop2): Block reservation details [ 109.047494][ T36] EXT4-fs (loop2): i_reserved_data_blocks=215 [ 109.055170][ T7291] EXT4-fs error (device loop0): ext4_acquire_dquot:6879: comm syz.0.1117: Failed to acquire dquot type 1 [ 109.058654][ T28] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 1380 with error 28 [ 109.078739][ T28] EXT4-fs (loop2): This should not happen!! Data will be lost [ 109.078739][ T28] [ 109.085387][ T7291] EXT4-fs (loop0): 1 truncate cleaned up [ 109.125190][ T7300] rock: corrupted directory entry. extent=28, offset=0, size=16777216 [ 109.133664][ T7303] xt_hashlimit: max too large, truncated to 1048576 [ 109.140995][ T7301] loop4: detected capacity change from 0 to 512 [ 109.154743][ T7301] EXT4-fs (loop4): blocks per group (95) and clusters per group (32768) inconsistent [ 109.184868][ T7303] rdma_rxe: rxe_newlink: failed to add veth0_virt_wifi [ 109.202018][ T7291] ext4 filesystem being mounted at /230/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 109.225136][ T7309] loop2: detected capacity change from 0 to 1024 [ 109.242120][ T7309] EXT4-fs: dax option not supported [ 109.293405][ T7319] siw: device registration error -23 [ 109.316756][ T7312] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1127'. [ 109.374301][ T7326] xt_hashlimit: max too large, truncated to 1048576 [ 109.398998][ T7326] loop3: detected capacity change from 0 to 164 [ 109.412784][ T7326] rock: corrupted directory entry. extent=28, offset=0, size=16777216 [ 109.446857][ T7330] loop2: detected capacity change from 0 to 1024 [ 109.459219][ T7332] loop1: detected capacity change from 0 to 512 [ 109.466025][ T7330] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 109.491984][ T7334] loop3: detected capacity change from 0 to 164 [ 109.500935][ T7332] ext4 filesystem being mounted at /137/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 109.548739][ T7334] rock: corrupted directory entry. extent=28, offset=0, size=16777216 [ 109.563383][ T7334] rock: corrupted directory entry. extent=28, offset=0, size=16777216 [ 109.632248][ T7346] xt_hashlimit: max too large, truncated to 1048576 [ 109.644668][ T7348] loop3: detected capacity change from 0 to 1024 [ 109.653565][ T7348] EXT4-fs: dax option not supported [ 109.659647][ T7346] rdma_rxe: rxe_newlink: failed to add veth0_virt_wifi [ 109.725514][ T7352] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1143'. [ 109.772567][ T7358] siw: device registration error -23 [ 109.783370][ T7352] infiniband Syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 109.796573][ T7361] loop0: detected capacity change from 0 to 1024 [ 109.804254][ T7364] loop3: detected capacity change from 0 to 512 [ 109.806347][ T7361] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 109.843538][ T7364] ext4 filesystem being mounted at /220/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 109.844773][ T7352] loop2: detected capacity change from 0 to 512 [ 109.872713][ T7352] ext4 filesystem being mounted at /178/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 109.919358][ T7372] loop0: detected capacity change from 0 to 164 [ 109.939693][ T7374] loop3: detected capacity change from 0 to 1024 [ 109.946254][ T7372] rock: corrupted directory entry. extent=28, offset=0, size=16777216 [ 109.948550][ T7374] EXT4-fs: dax option not supported [ 109.976648][ T4138] ================================================================== [ 109.984776][ T4138] BUG: KCSAN: data-race in fsnotify_detach_mark / fsnotify_handle_inode_event [ 109.986798][ T7372] rock: corrupted directory entry. extent=28, offset=0, size=16777216 [ 109.993644][ T4138] [ 109.993653][ T4138] write to 0xffff888104509b34 of 4 bytes by task 3572 on cpu 1: [ 109.993674][ T4138] fsnotify_detach_mark+0xba/0x160 [ 110.016889][ T4138] fsnotify_destroy_mark+0x6e/0x140 [ 110.022130][ T4138] __se_sys_inotify_rm_watch+0xf1/0x170 [ 110.025243][ T7378] infiniband Syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 110.027698][ T4138] __x64_sys_inotify_rm_watch+0x31/0x40 [ 110.027736][ T4138] x64_sys_call+0x1ae0/0x2d60 [ 110.027768][ T4138] do_syscall_64+0xc9/0x1c0 [ 110.027791][ T4138] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.049609][ T7378] loop1: detected capacity change from 0 to 512 [ 110.061782][ T4138] [ 110.064120][ T4138] read to 0xffff888104509b34 of 4 bytes by task 4138 on cpu 0: [ 110.071665][ T4138] fsnotify_handle_inode_event+0xf6/0x1f0 [ 110.077393][ T4138] fsnotify+0x10b0/0x11a0 [ 110.081726][ T4138] __fsnotify_parent+0x285/0x380 [ 110.086668][ T4138] __fput+0x5a6/0x6d0 [ 110.090663][ T4138] __fput_sync+0x43/0x60 [ 110.094920][ T4138] __se_sys_close+0xf9/0x1a0 [ 110.099523][ T4138] __x64_sys_close+0x1f/0x30 [ 110.104123][ T4138] x64_sys_call+0x25cb/0x2d60 [ 110.108813][ T4138] do_syscall_64+0xc9/0x1c0 [ 110.113323][ T4138] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.119233][ T4138] [ 110.121554][ T4138] value changed: 0x00000003 -> 0x00000000 [ 110.127301][ T4138] [ 110.129621][ T4138] Reported by Kernel Concurrency Sanitizer on: [ 110.135856][ T4138] CPU: 0 UID: 0 PID: 4138 Comm: syz-executor Not tainted 6.12.0-rc2-syzkaller-00291-g09f6b0c8904b #0 [ 110.146736][ T4138] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 110.156798][ T4138] ================================================================== [ 110.187668][ T7378] ext4 filesystem being mounted at /143/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 110.198073][ T7380] loop3: detected capacity change from 0 to 512 [ 110.226379][ T7380] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 110.234952][ T7380] System zones: 0-2, 18-18, 34-34 [ 110.241390][ T7380] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1154: bg 0: block 248: padding at end of block bitmap is not set [ 110.256294][ T7380] EXT4-fs error (device loop3): ext4_acquire_dquot:6879: comm syz.3.1154: Failed to acquire dquot type 1 [ 110.271665][ T7380] EXT4-fs (loop3): 1 truncate cleaned up [ 110.278002][ T7380] ext4 filesystem being mounted at /223/file0 supports timestamps until 2038-01-19 (0x7fffffff)