last executing test programs: 1.993895996s ago: executing program 1 (id=672): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) fsmount(r3, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_WRITE={0x17, 0x0, 0x4004, @fd, 0x0, 0x0, 0x0, 0x0, 0x1}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, 0x0, 0x0) 1.930155142s ago: executing program 4 (id=675): socket$netlink(0x10, 0x3, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@base={0x6, 0x4, 0xfff, 0x7, 0x88, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0xa3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000e41621eb70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001340)={{r3}, &(0x7f00000012c0), &(0x7f0000001300)=r2}, 0x20) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='ext4_es_find_extent_range_exit\x00', r5}, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) write$cgroup_int(r6, &(0x7f0000000100), 0x1001) 1.929699912s ago: executing program 1 (id=676): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1, 0x0, 0x0, 0x1008}, 0x1f00) r2 = syz_io_uring_setup(0xf3b, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000080)=0x0, &(0x7f0000000540)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x14, 0x2007, @fd=r1, 0x0, 0x0}) io_uring_enter(r2, 0x47ba, 0x0, 0x0, 0x0, 0x0) 1.857548419s ago: executing program 4 (id=678): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000a40)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYRESDEC=r0], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001900)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) write$binfmt_script(0xffffffffffffffff, 0x0, 0x4e) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) tee(0xffffffffffffffff, r2, 0x3, 0x0) close(0xffffffffffffffff) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000140)='b', 0x1}], 0x1, 0x2) personality(0x4000005) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./bus\x00', 0x1200040, &(0x7f0000000140)=ANY=[@ANYBLOB="757466383d312c73686f72746e616d653d77696e6e742c73686f72746e616d653d6d697865642c6e6f6e756d7461696c3d302c73686f72746e616d653d6d697865642c73686f72746e616d653d77696e39352c757466383d312c696f636861727365743d63703433372c73686f72746e616d653d77696e39352c756e695f786c6174653d312c757466383d302c757466383d302c6e66732c0034003fc9cd02a9"], 0x3, 0x377, &(0x7f00000002c0)="$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") ftruncate(0xffffffffffffffff, 0x6) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events.local\x00', 0x275a, 0x0) r3 = getpgid(0xffffffffffffffff) waitid(0x1, r3, &(0x7f0000000640), 0x0, &(0x7f00000006c0)) syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x0, &(0x7f0000000280)={[{@stripe={'stripe', 0x3d, 0x10}}, {@stripe={'stripe', 0x3d, 0x4}}, {@dioread_nolock}, {@mblk_io_submit}, {@discard}, {@nogrpid}]}, 0x1, 0x3dd, &(0x7f00000008c0)="$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") setuid(0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x1db) ftruncate(0xffffffffffffffff, 0x4010040c000) 1.723694721s ago: executing program 0 (id=680): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001380)={0x5, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x1, @ANYBLOB="0200"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="04000000000000000200000000000000ed00"/28], 0x50) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000293a94cd06787b68822ad5688e5ca172d6cf46f725376df30eaebd7692f761524030f2c24b3c0bdb35a1c1660e16e93c323b"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, 0x0, &(0x7f0000000080)='GPL\x00', 0x8000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000000)='kmem_cache_free\x00', r4}, 0x10) socket$kcm(0x11, 0xa, 0x300) r5 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2688ca4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$vsock_stream(r3, &(0x7f0000000ec0)={0x28, 0x0, 0x2711, @local}, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000840)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x38, 0x2, {{}, [@TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18}]}]}}}]}, 0x68}}, 0x0) socketpair(0x23, 0x1, 0x8, &(0x7f0000000f00)) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, &(0x7f0000000e80)={&(0x7f0000000540), 0xc, &(0x7f0000000e40)={&(0x7f0000001180)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x8080) openat(0xffffffffffffffff, &(0x7f0000000000)='./bus\x00', 0x400, 0xa) bpf$MAP_CREATE(0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="1e0000006d000000000001000700000020a10100e819163eb2a70f9eb2c3f2408b5d57f6566413089e4ded9382fa90976a1ddd05f88bf728050000004e99a7cce7707cb72ad7252d5d7c15a73a1be09fa64abe", @ANYRES32=r1, @ANYBLOB='\t\x00'/20, @ANYRES32=r7, @ANYRES32, @ANYBLOB="00000000020000000400", @ANYRES32, @ANYBLOB, @ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYRESOCT, @ANYBLOB="df9f518a20f3a9019ae3849d9f7e91ba74474561be43433ba29c8e33517edb1511133cba20a8263afe04f7d67030c0c44ac484e426fbbe8ff8acddaf9565707ee18489750adb60bba6014d6152b1d1f79e4b12892078ddd681e8d1b825498720b147553f1e881038e93705583917246ef81153736cde7d3dfcefd3c360067d6c52fcbe3a48abbe32a64d581b3815aa9c50bae45c477cbf8caf5dddc7d0b0c3e66f62db7658a4c54bfc0f6d90d7db9037e5a42faa0a86d8dffeeb"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000880)='./bus\x00', 0x40, &(0x7f0000000f80)={[{@bsdgroups}, {@nodiscard}, {@data_journal}, {@grpjquota}, {@grpjquota}, {@nodelalloc}, {@abort}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x4c}}, {@noload}]}, 0x1, 0x50a, &(0x7f0000000900)="$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") r8 = syz_io_uring_setup(0x416f, &(0x7f0000000780)={0x0, 0x0, 0x10100}, &(0x7f0000001240)=0x0, &(0x7f0000001340)=0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000540)=ANY=[@ANYBLOB="1800"/15, @ANYBLOB="0000000000000000b7080000000000007b8af8ff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_io_uring_submit(r9, r10, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/4, 0x4}], 0x27}) io_uring_enter(r8, 0x567, 0x0, 0x0, 0x0, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0xe, &(0x7f00000000c0)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@nombcache}, {@errors_remount}]}, 0x3, 0x449, &(0x7f00000006c0)="$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") ptrace$poke(0x4, 0x0, 0x0, 0xb9) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0) 1.685753875s ago: executing program 3 (id=682): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e00000000000000050000000600000000000000", @ANYRES32=0x1, @ANYBLOB="0000000000000000ffffff7f0000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001040)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000e22130d2b42d070435aae0b864baa3688307e679c7724a57083b37085aad40c91f8d219e63fd70891dcdbefcd89ae04873f6b859bf6142a6f5bfb8553fdca56231b6e6e248a9a1cfb364f9bf0e31d2524e50746070d8fdbb0d364bbc36d807ccac80b672e1574feb0f9e06580bc52386bccaf060393cbfc4630a5b960301d5d3285e986e701ad9cfcc5058fb9455d32a131d20e294673415694bd6f47f61a7f9c031bb11247615847a187719bbdabafe3c624b7ade2528e7d53507d49f8d17b0721f82d40cf22e9b002cbc4ffedae346db45574353f7540edb4e6ee7c6f347269da3bda1eed02b88ddb87d239207c985bebe167de80bfc2257ec0882f7fdf299a400"/288, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000020000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) r4 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r4, &(0x7f0000000400)={'#! ', './file0', [], 0xa, "1f411d2552ad52cb07410969e814977e4f2c4a80522094786c8673fb61cf8b86bda4de504f5a3c7c04055f1f70e4064d46b2bb9e5100d446bb6a"}, 0x2) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @rand_addr=0x64010101}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000006b80)=[{{&(0x7f0000000040)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000180)="fd", 0x1}], 0x1}}, {{&(0x7f00000001c0)={0x2, 0x4e23, @local}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000780)="dd", 0x1}], 0x1}}], 0x2, 0x0) creat(0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x10e, &(0x7f0000000400)={[{@errors_remount}, {@jqfmt_vfsv0}, {@data_err_ignore}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x10000}}, {@resuid}, {@block_validity}]}, 0x1, 0x450, &(0x7f0000000bc0)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000060000004500000000100000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000500000000350000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000000)='ext4_allocate_inode\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) sendmsg$rds(r4, &(0x7f00000006c0)={&(0x7f00000002c0)={0x2, 0x4e21, @private=0xa010101}, 0x10, &(0x7f0000000680), 0x0, 0x0, 0x0, 0x810}, 0x8084) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='rdma.current\x00', 0x275a, 0x0) 1.479776434s ago: executing program 2 (id=684): socket$nl_generic(0x10, 0x3, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000200)) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x1, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffed0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$packet(0x11, 0x2, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) 1.479001244s ago: executing program 3 (id=685): r0 = socket(0x2, 0x3, 0xff) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000930a000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) sendto$inet(r0, &(0x7f00000002c0)="b401fcc8cd1bb8b66f7ee68e052af9c34b7d7494", 0x14, 0x0, &(0x7f0000000040)={0x2, 0x0, @dev}, 0x10) 1.392514581s ago: executing program 4 (id=686): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r2 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_int(r2, 0x29, 0x16, &(0x7f0000fcb000), 0x4) close_range(r1, 0xffffffffffffffff, 0x0) 1.340117196s ago: executing program 2 (id=687): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='cruft,block=0x0000000000000400\x00session=0x0000000000000006,check=relaxed,utf8,cruftAuid=', @ANYRES64, @ANYBLOB="2c8ef6fff25f71854bb02441c2edff2c66736dbdda08da0968bf8783e49a23113d3078303030303030303030303001003066581c000000000000bd2551db78fc65240062c543fd92499a55c4676e4ab57351fab1f21354c2000000000000a36961e03f1f9b339e1208fe76adf824d531e4f11e82cd11bccd3e4d4cd5b4502ba9708a2827923cada4e88ec20e806b355ece7f4afbdb8475f9b71f1eafd72d05729520434e51cc55317bb19441bd11c979ca9786b51118d9b1c2246f0b407eaa2083113d1bab6700000000000000", @ANYRES16, @ANYRESHEX, @ANYRESDEC], 0x0, 0x63b, &(0x7f0000000c80)="$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") 1.339552816s ago: executing program 3 (id=688): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000202300800000000000000000850000007b00000095"], &(0x7f00000002c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000004080)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r2], 0x18}}], 0x1, 0x0) r4 = dup3(r3, r2, 0x0) connect$unix(r4, &(0x7f0000000280)=@file={0x1, './file0\x00'}, 0x6e) 1.328522177s ago: executing program 4 (id=689): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='devpts\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000d00)=ANY=[@ANYBLOB="0a000000050000000800000008000000020000000eadc6f2c8daf6cf6586690be96485b301f644cc3673045ce14306020127ab2418770c5f8ab4bbc05a6447d9f13363d5e97f2abcf14c6151b66cae542d8f95d6bc25a488ffb9e6d47da20f9181e63f785616a4db25505f228b7592724c76a201a6e829528830b3af16bf7b1834b4fbe8d1e8afa73dd6dec03d55974d8ec4d42aaf71f54e0423fded3eb29c929bf690443e1b57b74009c2d922a2316972e8a89a01", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0100"/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYBLOB="0000000000000000b7080000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000005c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) pidfd_send_signal(r2, 0x26, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0b00000007000000080000000800000005000000478273d94de1cee9bcd494cac67a3ee68ed8ae87887b793a55494a6ae4bf9fc87bdac4a2fafd94b5d8bf115876e28a38ab19a8e3694baa", @ANYRES32, @ANYBLOB='\x00'/15, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file1\x00', 0x1018e58, &(0x7f0000000000), 0x1, 0x61d, &(0x7f0000001680)="$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") sendmsg$ETHTOOL_MSG_PAUSE_SET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000280)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000001c00000014", @ANYRES32=r6], 0x28}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001b80)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000afcd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f21ca0000cf920569c00cc1199684fa7c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c987d669f381faca0f9d9b24be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fca4e0b6eab1aa7d55545a34effa077faa56d59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afd8cc2e59a7d8b85a5e3d77ac463920e231b7ae0da8616d2b7958f91f5da6c025d0faab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c78fbfe5ab0255f347160ec83070000000000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72bc0480f94306720399379d9271cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2dc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78a602ca3cdf6a9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c8ad9433269af3be5fa6a9a5c24e392955f4e979ea13201bafe4f0f6ea508000000a0c548552b571bed5647223c78a992810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151ffdf6f7820549cda6cb799c6e924966a7f90bf8fd1e75ee76bd72346cfbb526890aa7fe5e68949a3b30567e54d3504723177d356c4604bca492ede62fc28839b5301160ecec37e83efceefd7ca2533659edc8be05cc85451c6a145074343caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffcebde1d9d3d35a142a9ec9a7a3755e0f209150a07682c4e14e3a83558df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e561a9845e4ff29e2bdb1d0b923b262341c5e093fd66a2946501559335781092cf8ce3c7c56cd31121624d76517fd3666276c3c0e812b28e2f30d035cee5d0e77a3c70008ec651cc0ae637fa474816bc59d2e2a00092419304b338a987e9d3044d856cf24f370030be3b5f79f030b8d3ebce68663ef5af469abe753314fae31651e0ecea5ece8fb11a4ee288eb149f1fa33669cc8d901fa8e46354c9c3a041a1e7b55c4e81dba1e12289ee34463baf28345bde0c195bc9f021da8f3025ee9c8e3168b4177ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f241262fa3f1dabeb4fc4bda345360200000001fbddeacd3adaa4d2715e21c772ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d419de1a7b5c9dc22c96295a4601adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb408c8a80f7f02f750d6c977a1919f9f69a6cfefdf879d447df53f3b9b70d10355b07466d1ef0056b5af553d18a6cc50feeb7bfad9b7be3283b6450d014e7712d2f1d7004548b19162cef04d18d4f5987baab97a9bfbd8f185b5671820420bf5b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe52734093ae5aa3c0b4f3f45bfff2418a18217747ae442e31560e5b741445ea2a1acee2e98c9f3427834ba0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa6623920dacc107f532348cc21164efe794874eac73381e961f3d9c8c21578fe3245097c280abe51427a7f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f8873522608c6fc01e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf50ee69a39265964279d17eb0000000000000000000000fa08ad0731c4b839688b22c4da2a6b00008a1949a6ba49fbf981f8265e7f1f4c2d97f4680b135f87c228ce69418a282bffff2481a0df1774fa7d94944bb92d2b89f73f0e8b63f6316c5762f3288bc970720f48b5647dd177db6810fae05334d5a44a020000001c0d882a564d74a7c72bf9a2152b261e58fea6d2f93589cfe261dc0410b5ccc92a5a0eab327a33431d62d2b7c75ce654d556c9e1817c1abca762ab53d40da51560351b673363652e1ecb56cfe4a746a45ab13c6014e9f361ab687d1cd1795ce9e05c817b83d76046bdb3709de5df7499a02d2f636a454b85b987580ada025d83bd7b8df28a540d5ec5537942e79f2f1ab25ea5f563bc77e4f9468bd309469880c7e34150ca886d1f9ac2f7e82dbe296c877d925c38c54cc8137b29028854b6bd57ca893927c331300e16aba792289e135589d93302fc37c73c303e383cdf8ef3f6d6265fe5ee01759d24027475c8901039a898582022bc95992b86dce0710887c8a625d9cbb897bdbfaf49a3f642a169827a9bae4fcfa5212461db000000000000e6ed75ca8fcda7ef3ee336189fef3b3ffb9f38fefc5ff39c4e69e3fa1f8b10ee97123e99b61eba065b1ad67530e7c4f11f9da7ae000002000000610101ad7f79cb9bbf64a0fc109f49fe8799fe266e2ccac80fefe750151f5ddfe51833ec65ece70e07ce8ab5d97db47da8f80000664dc0b86ae2b3ff9d4e220752a6b2f3ea9f793612386496dca5af7b8952aafa796ea7b156d19612297c63bb20e1e0469f7615f67a9218cbace38f5236821314f76302b98afa93044b83989339ca10e6ae30e70e17a82f03e915b8425e8e7a91614306d2ae0bc3550d856f2d7293672b5673d264fc886b0c8bdf436a0fcd21bf9da7bdca98e34cd6e59b0a7ce4ba1b466561aaa35448dff47bb1d7df23d467689a66"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, &(0x7f0000000200)={0x0, 'geneve1\x00', {0x3}, 0x5}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="5c00000012006b000040017ea608601602f3650440010008000000000002009ee517c356a7b0251e616859ad3a78a76e807c857e21bea297bff435cf01c937e786a6d0bdc7fcf50e4509c5cc68b7ed9c232d786c3500000000000074", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 1.266503843s ago: executing program 3 (id=690): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000079e02200850000006d00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xd, &(0x7f0000000040)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000200)='tlb_flush\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6) r3 = open(0x0, 0x14507e, 0x0) write$selinux_access(r3, &(0x7f0000000180)={'system_u:object_r:unconfined_execmem_exec_t:s0', 0x20, '/usr/lib/telepathy/mission-control-5', 0x20, 0x2}, 0x69) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffbfff, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x10, &(0x7f00000000c0)={[{@norecovery}, {@data_err_ignore}, {@resuid}, {@auto_da_alloc}]}, 0xee, 0x498, &(0x7f0000001b40)="$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") r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000d40)={0x0, 0x2904c, 0x3fffffffffffe52, 0x10003, '\x00', [{}, {0xffffffff}]}) 1.219970377s ago: executing program 0 (id=691): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x48, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x4}, @NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5}, {0x5}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x2}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x48}}, 0x0) 1.210912898s ago: executing program 2 (id=692): socket$netlink(0x10, 0x3, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@base={0x6, 0x4, 0xfff, 0x7, 0x88, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0xa3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000e41621eb70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001340)={{r3}, &(0x7f00000012c0), &(0x7f0000001300)=r2}, 0x20) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@minixdf}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000100), 0x1001) 1.157979623s ago: executing program 0 (id=693): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x1e) 1.000853397s ago: executing program 0 (id=694): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0xc9d7, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0}, 0x0, &(0x7f00000005c0)}, 0x20) 1.000482867s ago: executing program 0 (id=695): r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) dup3(r1, r2, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) 986.175299ms ago: executing program 1 (id=696): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r0}, &(0x7f0000000000), &(0x7f0000000040)=r1}, 0x20) r2 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000a00), 0x80402, 0x0) write$cgroup_int(r2, 0x0, 0x2) 913.741496ms ago: executing program 1 (id=697): socket$nl_generic(0x10, 0x3, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000200)) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x1, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffed0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$packet(0x11, 0x2, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) 893.135798ms ago: executing program 1 (id=698): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks}, {@minixdf}]}, 0x1, 0x4ff, &(0x7f0000000ac0)="$eJzs3c9vG1kdAPCvndhx0uwmu+wBEOwuuwsFVXUSdzda7QGWEwK0EmKPIHVD4kZR7DiKndKEHtIzVyQqcYIjfwDnnrhzQXDjUg5I/IhADRIHoxlPUje1m6hJ7Cj+fKTRvDdv6u97Tee9+pvEL4CR9XZE7EVEMSI+i4iZ7HouO+LjzpHc92T//vLB/v3lXLTbn/4zl7Yn16LrzySuZa9ZiogffifiJ7nn4zZ3dteXarXqVlafa9U355o7uzfX6kur1dXqRqWyuLA4/+GtDyrnNta36sWs9OXHf9j7xs+Sbk1nV7rHcZ46Qy8cxUmMR8T3LyLYEIxl4ykOuyO8lHxEvB4R76TP/0yMpV9NAOAqa7dnoj3TXQcArrp8mgPL5ctZLmA68vlyuZPDeyOm8rVGs3XjTmN7Y6WTK5uNQv7OWq06n+UKZ6OQS+oLaflpvXKsfisiXouIX0xMpvXycqO2Msz/+ADACLt2bP3/z0Rn/QcArrjSsDsAAAyc9R8ARo/1HwBGj/UfAEZPZ/2fHHY3AIAB8v4fAEaP9R8ARsoPPvkkOdoH2edfr9zd2V5v3L25Um2ul+vby+XlxtZmebXRWE0/s6d+0uvVGo3Nhfdj+97sNzebrbnmzu7temN7o3U7/Vzv29VCetfeAEYGAPTz2luP/pxLVuSPJtMjuvZyKAy1Z8BFyw+7A8DQjA27A8DQ2O0LRtcZ3uNLD8AV0WOL3meUev2CULvdbl9cl4ALdv0L8v8wqrry/34KGEaM/D+MLvl/GF3tdu60e/7HaW8EAC43OX6gz/f/X8/Ov82+OfDjleN3PLzIXgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDldrj/bznbC3w68vlyOeKViJiNQu7OWq06HxGvRsSfJgoTSX1hyH0GAM4q/7dctv/X9Zn3pp9pevPaUbEYET/91ae/vLfUam39MaKY+9fE4fXWw+x6ZfC9BwBOdrhOJ+dHXW/kn+zfXz48Btmfv387Ikqd+Af7xTg4ij8e4+m5FIWImPp3Lqt35LpyF2ex9yAiPt9r/LmYTnMgnZ1Pj8dPYr8y0Pj5Z+Ln07bOOfm7+Nw59AVGzaNk/vm41/OXj7fTc+/nv5TOUGeXzX/JSy0fpHPg0/iH899Yn/nv1DHe//13O6XJ59seRHxxPOIw9kHX/HMYP9cn/nunjP+XL735Tr+29q8jrkfv+N2x5lr1zbnmzu7NtfrSanW1ulGpLC4szn9464PKXJqjnuu/Gvzjoxuv9mtLxj/VJ37phPF/9ZTj/83/PvvRV14Q/+vv9oqfjzdeED9ZE792yvhLU78r9WtL4q/0Gf9JX/8bLw77vWJWePzX3ee2DQcAhqe5s7u+VKtVtxQULn8h+Sd7CbrRs/CtQcUqRu+mn7/beaaPNbXbLxWr34xxHlk34DI4eugj4r/D7gwAAAAAAAAAAAAAANDTIH5jadhjBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4Or6fwAAAP//sUPPoQ==") r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0xc9d7, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x107242, 0x0) 886.078118ms ago: executing program 2 (id=699): r0 = socket(0x2, 0x3, 0xff) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000930a000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) sendto$inet(r0, &(0x7f00000002c0)="b401fcc8cd1bb8b66f7ee68e052af9c34b7d7494", 0x14, 0x0, &(0x7f0000000040)={0x2, 0x0, @dev}, 0x10) 875.629299ms ago: executing program 3 (id=700): syz_mount_image$ext4(&(0x7f0000000080)='ext2\x00', &(0x7f0000000340)='./file0\x00', 0x0, &(0x7f0000001c40), 0x3, 0x43e, &(0x7f00000004c0)="$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") prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000001340)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, 0x0, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0500000004000000ff0f00005a49044d2c499f771a28f487b7f71f0700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/21], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000010000b70400000000000085000000c3000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x20c09a, &(0x7f0000000180), 0x7, 0x50d, &(0x7f00000010c0)="$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") r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sys_enter\x00', r3}, 0x10) getresuid(0x0, 0x0, 0x0) shmget$private(0x0, 0x400000, 0x20, &(0x7f000000e000/0x400000)=nil) mlockall(0x2) r4 = shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x7000) shmdt(r4) faccessat(r2, &(0x7f0000000000)='./file0\x00', 0x5) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r0, 0x8010661b, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r7}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={r5, 0x58, &(0x7f00000002c0)}, 0x10) 771.172009ms ago: executing program 2 (id=701): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180100000100a7d90000000000000000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001380)={0x5, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x1, @ANYBLOB="0200"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="04000000000000000200000000000000ed00"/28], 0x50) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000293a94cd06787b68822ad5688e5ca172d6cf46f725376df30eaebd7692f761524030f2c24b3c0bdb35a1c1660e16e93c323b"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000f00)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x8000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000000)='kmem_cache_free\x00', r4}, 0x10) socket$kcm(0x11, 0xa, 0x300) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2688ca4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$vsock_stream(r3, &(0x7f0000000ec0)={0x28, 0x0, 0x2711, @local}, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000840)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x38, 0x2, {{}, [@TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18}]}]}}}]}, 0x68}}, 0x0) socketpair(0x23, 0x1, 0x8, &(0x7f0000000f00)) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, &(0x7f0000000e80)={&(0x7f0000000540), 0xc, &(0x7f0000000e40)={&(0x7f0000001180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="00042cbd7000fb0062000000dc970d11eb8b6888bc3408a6134eb61da3bee0f0e8fe01f986eeefd4bfd2adf4b2f0946f3faa871c0415cb165283c50ee8781f4972b9037a4e2c2872e4f4f2be37637b2271bf6cf89fb18d05c913028a2e6bdaf77f9800aa03075fc48de1ab11593c37eb3388515d9248075ee32bfbea011add782779a9a65d0f004ed2c42f7718e14f129f5407c94a7d8882b63f52da62203187c8534ea380987a931572a674560000"], 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x8080) r8 = openat(0xffffffffffffffff, &(0x7f0000000000)='./bus\x00', 0x400, 0xa) bpf$MAP_CREATE(0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="1e0000006d000000000001000700000020a10100e819163eb2a70f9eb2c3f2408b5d57f6566413089e4ded9382fa90976a1ddd05f88bf728050000004e99a7cce7707cb72ad7252d5d7c15a73a1be09fa64abe", @ANYRES32=r1, @ANYBLOB='\t\x00'/20, @ANYRES32=r7, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB, @ANYRES32=r8, @ANYBLOB], 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYRESOCT, @ANYBLOB="df9f518a20f3a9019ae3849d9f7e91ba74474561be43433ba29c8e33517edb1511133cba20a8263afe04f7d67030c0c44ac484e426fbbe8ff8acddaf9565707ee18489750adb60bba6014d6152b1d1f79e4b12892078ddd681e8d1b825498720b147553f1e881038e93705583917246ef81153736cde7d3dfcefd3c360067d6c52fcbe3a48abbe32a64d581b3815aa9c50bae45c477cbf8caf5dddc7d0b0c3e66f62db7658a4c54bfc0f6d90d7db9037e5a42faa0a86d8dffeeb"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r9}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000880)='./bus\x00', 0x40, &(0x7f0000000f80)={[{@bsdgroups}, {@nodiscard}, {@data_journal}, {@grpjquota}, {@grpjquota}, {@nodelalloc}, {@abort}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x4c}}, {@noload}]}, 0x1, 0x50a, &(0x7f0000000900)="$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") r10 = syz_io_uring_setup(0x416f, &(0x7f0000000780)={0x0, 0x0, 0x10100}, &(0x7f0000001240)=0x0, &(0x7f0000001340)=0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000540)=ANY=[@ANYBLOB="1800"/15, @ANYBLOB="0000000000000000b7080000000000007b8af8ff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_io_uring_submit(r11, r12, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/4, 0x4}], 0x27}) io_uring_enter(r10, 0x567, 0x0, 0x0, 0x0, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0xe, &(0x7f00000000c0)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@nombcache}, {@errors_remount}]}, 0x3, 0x449, &(0x7f00000006c0)="$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") ptrace$poke(0x4, 0x0, 0x0, 0xb9) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0) 692.134366ms ago: executing program 4 (id=702): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001380)={0x5, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x1, @ANYBLOB="0200"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="04000000000000000200000000000000ed00"/28], 0x50) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000293a94cd06787b68822ad5688e5ca172d6cf46f725376df30eaebd7692f761524030f2c24b3c0bdb35a1c1660e16e93c323b"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, 0x0, &(0x7f0000000080)='GPL\x00', 0x8000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000000)='kmem_cache_free\x00', r4}, 0x10) socket$kcm(0x11, 0xa, 0x300) r5 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2688ca4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$vsock_stream(r3, &(0x7f0000000ec0)={0x28, 0x0, 0x2711, @local}, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000840)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x38, 0x2, {{}, [@TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18}]}]}}}]}, 0x68}}, 0x0) socketpair(0x23, 0x1, 0x8, &(0x7f0000000f00)) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, &(0x7f0000000e80)={&(0x7f0000000540), 0xc, &(0x7f0000000e40)={&(0x7f0000001180)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x8080) openat(0xffffffffffffffff, &(0x7f0000000000)='./bus\x00', 0x400, 0xa) bpf$MAP_CREATE(0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="1e0000006d000000000001000700000020a10100e819163eb2a70f9eb2c3f2408b5d57f6566413089e4ded9382fa90976a1ddd05f88bf728050000004e99a7cce7707cb72ad7252d5d7c15a73a1be09fa64abe", @ANYRES32=r1, @ANYBLOB='\t\x00'/20, @ANYRES32=r7, @ANYRES32, @ANYBLOB="000000000200000004000000030000", @ANYRES32, @ANYBLOB, @ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYRESOCT, @ANYBLOB="df9f518a20f3a9019ae3849d9f7e91ba74474561be43433ba29c8e33517edb1511133cba20a8263afe04f7d67030c0c44ac484e426fbbe8ff8acddaf9565707ee18489750adb60bba6014d6152b1d1f79e4b12892078ddd681e8d1b825498720b147553f1e881038e93705583917246ef81153736cde7d3dfcefd3c360067d6c52fcbe3a48abbe32a64d581b3815aa9c50bae45c477cbf8caf5dddc7d0b0c3e66f62db7658a4c54bfc0f6d90d7db9037e5a42faa0a86d8dffeeb"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000880)='./bus\x00', 0x40, &(0x7f0000000f80)={[{@bsdgroups}, {@nodiscard}, {@data_journal}, {@grpjquota}, {@grpjquota}, {@nodelalloc}, {@abort}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x4c}}, {@noload}]}, 0x1, 0x50a, &(0x7f0000000900)="$eJzs3VFrHFsdAPD/bHZr06Y3ueqDXvB6tZW0aHeTxrbBh1pB9Kmg1vcak00I2WRDdtM2oWiKH0AQUcEnffFF8AMIUvDFRxEK+qyoKKKtPvigncvuTtI03U227TabZn8/mMw5Z2b2f86GmZ0zc5gJYGC9FxHXI+JJmqYXImI0K89lU2y1psZ6jx/dm21MSaTpzX8mkWRl25+VZPPT2WYnI+JrX474ZvJ83NrG5tJMpVJey/Kl+vJqqbaxeXFxeWahvFBemZqavDJ9dfry9ERP2nkmIq598a8/+O7PvnTtV5+586dbfz//rUa1RrLlu9vxgvL7LWw1vdD8LnZvsPaSwY6ifLOFmeF2aww9V3L/NdcJAID2Guf4H4yIT0bEhRiNof1PZwEAAIA3UPr5kfhfEpG2d6JDOQAAAPAGyTXHwCa5YjYWYCRyuWKxNYb3w3EqV6nW6p+er66vzLXGyo5FITe/WClPZGOFx6KQNPKTzfTT/KU9+amIeDsivj863MwXZ6uVuX5f/AAAAIABcXpP//8/o63+PwAAAHDMjPW7AgAAAMBrp/8PAAAAx5/+PwAAABxrX7lxozGl2++/nru9sb5UvX1xrlxbKi6vzxZnq2urxYVqdaH5zL7lgz6vUq2ufjZW1u+W6uVavVTb2Ly1XF1fqd9afOYV2AAAAMAhevvjD/6QRMTW54abU8OJ7jbtcjXgqMrvpJJs3ma3/uNbrflfDqlSwKEY6ncFgL7J97sCQN8U+l0BoO+SA5Z3HLzz22z+id7WBwAA6L3xj3a+/5/bd8ut/RcDR56dGAaX+/8wuJr3/7sdyetkAY6VgjMAGHivfP//QGn6QhUCAAB6bqQ5JblidnlvJHK5YjHiTPO1AIVkfrFSnoiItyLi96OFDzTyk80tkwP7DAAAAAAAAAAAAAAAAAAAAAAAAABAS5omkQIAAADHWkTub8mvW8/yHx89N7L3+sCJ5L+jkb0i9M6Pb/7w7ky9vjbZKP/XTnn9R1n5pX5cwQAAAICB8EIv8N/up2/34wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACglx4/uje7PR1m3H98ISLG2sXPx8nm/GQUIuLUv5PI79ouiYihHsQfbvz5SLv4SaNaOyHbxR/uQfyt+/vGj7HsW2gX/3QP4sMge9A4/lxvt//l4r3mvP3+l494Jv+yOh//Yuf4N9Rh/z/TZYx3Hv6i1DH+/Yh38u2PP9vxkw7xz3YZ/xtf39zstCz9ScR429+f5JlYpfryaqm2sXlxcXlmobxQXpmamrwyfXX68vREaX6xUs7+to3xvY/98sl+7T/VIf7YAe0/12X7///w7qMPtZKFdvHPn20T/zc/zdZ4Pn4u++37VJZuLB/fTm+10ru9+/Pfvbtf++c6tP+g///5Ltt/4avf+XOXqwIAh6C2sbk0U6mU145totFLPwLVkDiCiW/39APTNE0b+9QrfE4SR+FraSb6fWQCAAB67elJf79rAgAAAAAAAAAAAAAAAAAAAIPrMB4ntjfm1k4q6cUjtAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeuL9AAAA//+GAdlV") r8 = syz_io_uring_setup(0x416f, &(0x7f0000000780)={0x0, 0x0, 0x10100}, &(0x7f0000001240)=0x0, &(0x7f0000001340)=0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000540)=ANY=[@ANYBLOB="1800"/15, @ANYBLOB="0000000000000000b7080000000000007b8af8ff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_io_uring_submit(r9, r10, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/4, 0x4}], 0x27}) io_uring_enter(r8, 0x567, 0x0, 0x0, 0x0, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0xe, &(0x7f00000000c0)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@nombcache}, {@errors_remount}]}, 0x3, 0x449, &(0x7f00000006c0)="$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") ptrace$poke(0x4, 0x0, 0x0, 0xb9) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0) 133.551847ms ago: executing program 0 (id=703): r0 = socket$inet6(0xa, 0x3, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r1}, &(0x7f0000000040), &(0x7f0000000140)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='vm_unmapped_area\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='vm_unmapped_area\x00', r3}, 0x10) io_setup(0x3, &(0x7f0000000340)) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000580)=ANY=[@ANYBLOB="0002020100000000ff020000000000000000000000000001"], 0x18) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000fd0f00000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000008000"/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000003fffffe218110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @private2}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x10, &(0x7f0000000000), 0x4) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xffdf}], 0x1) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x3000004, 0x110, 0xffffffffffffffff, 0x56afb000) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0), 0x4201, 0x0) sendmsg$NFT_MSG_GETSET(r6, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000400)={&(0x7f00000005c0)=ANY=[@ANYBLOB="280000000a0a010300000000000000000000000a0900010073797a300000000008000640ffffff002c47316a647504eef2c2173811e129abf161424f8de2a76327ea"], 0x28}, 0x1, 0x0, 0x0, 0x40004}, 0x4000100) r7 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r9, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000340)={0x2c, r8, 0x10ada85e65c25359, 0x0, 0x8000000, {{0x6b}, {@val={0x8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5}]}]}]}, 0x2c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000500)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r6, &(0x7f0000000680)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000540)={&(0x7f00000006c0)={0xbc, r8, 0x20, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x5b}, @val={0x8, 0x3, r10}, @void}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "9217979b0e7e8b9c954a27a42e3067304406cf16f2446de3"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "cc9fc6eeb6291ce3181dc09a26f7f52c7d130d138673f871"}, @NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "22f76e6c06573b6d4580d4277c03e53fd1d65eea95c1a01a"}, @NL80211_ATTR_MNTR_FLAGS={0x1c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}], @NL80211_ATTR_MESH_ID={0xa}]}, 0xbc}, 0x1, 0x0, 0x0, 0x2014}, 0x10) writev(r7, &(0x7f0000002800), 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r11}, 0x18) 91.266181ms ago: executing program 1 (id=704): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xea) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x3, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x14, &(0x7f0000000080)=0x8, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'wg2\x00', 0x0}) sendto$packet(r2, &(0x7f00000001c0)='7', 0x1, 0x0, &(0x7f0000000040)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @random="bf73a9e561c5"}, 0x14) 89.455091ms ago: executing program 3 (id=705): pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0xb, &(0x7f0000000700)=ANY=[@ANYRES32, @ANYRES32=r1, @ANYBLOB="dc248c5f165466f5ba69eea9a9b6840f339d74431deb110f4f275cec0f01517d352a7fefe2cd89d2d8b2916c0eef71f4029ae6d02543cb42b1c280d2fff69287f32c5b226d62f0a1084a7f1912a8f8ff16a1fae1ce11cd5924503c30a5abefc8bc0bd5d4f603fba2824ab07163b0a307cb37c1855b8f2b90f200af7c54a36f00e8fcdcc2"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r3) sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000009000000380003801400020076657468305f766972745f7769666900060007004e2400000800030000000000080001"], 0x4c}, 0x1, 0x0, 0x0, 0x20000054}, 0x20000080) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x2, &(0x7f0000000600)=[{0x0, 0x0, 0xf7, 0xfffffffc}, {0x800, 0x3, 0x4, 0x2}]}) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) munlockall() r6 = syz_io_uring_setup(0x2b9, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x2}) io_uring_enter(r6, 0x2def, 0x0, 0x0, 0x0, 0x0) r7 = socket(0x15, 0x5, 0x0) r8 = socket$inet(0x2, 0x80000, 0x80000000) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r10, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r10, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(r10, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000580)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010000000000000000001000000008000300", @ANYRES32=r13, @ANYBLOB="08000600", @ANYRES32=r12, @ANYBLOB='\b\x00:'], 0x34}}, 0x0) getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000280)=0x14) sendmsg$ETHTOOL_MSG_DEBUG_GET(r7, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="000426bd7000fedbdf25070000000c00018008000100", @ANYRES32=r12, @ANYBLOB="880001800800030002000000140002006d6163766c616e3000000000000000001400020076657468315f766972745f77696669001400020074756e6c3000000000000000000000001400020067656e65766530000000000000000000080003000100000014000200766972745f776966693000000000000008000100", @ANYRES32=r14, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB], 0xa8}, 0x1, 0x0, 0x0, 0x48001}, 0x0) ioctl$PPPIOCSDEBUG(r1, 0x40047440, &(0x7f0000000080)=0x5) setsockopt$inet_opts(r8, 0x0, 0x4, &(0x7f0000000000)="890704", 0x3) getdents(r8, &(0x7f0000000140)=""/125, 0x7d) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r1, &(0x7f00000005c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)=ANY=[@ANYBLOB="1e000000", @ANYRES16=r11, @ANYBLOB="00082cbd7000fedbdf250c0000000500380000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x40840d0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=r1, @ANYBLOB="9887834f0000433c210a50d883d21cb407dea9dab098305978f623fd0195d7", @ANYRES32=r12, @ANYRES8=r5, @ANYBLOB="010000000400"/28], 0x48) openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0) 88.578681ms ago: executing program 2 (id=706): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000080b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000004850000006d00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x18) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) write$binfmt_script(r3, &(0x7f0000000080), 0x76e5467) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x2, 0x4, 0x4, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x6, 0x4, 0x4, 0x3, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x3, 0x7, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018100000", @ANYRES32=r4, @ANYBLOB="000000000000000018100000", @ANYRES32=r5, @ANYBLOB="000000000000000095"], &(0x7f0000000a00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000280)={0xffffffffffffffff, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x10, &(0x7f0000000340), &(0x7f0000000300), 0x2e, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={r6, 0xe0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r7, &(0x7f00000000c0)={0xa, 0x14e22, 0x0, @loopback}, 0x1c) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r8, &(0x7f00000003c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) 0s ago: executing program 4 (id=707): r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) flock(r0, 0x5) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000240), &(0x7f00000002c0)=@v1={0x2, "94fe290fecac6b5e0f2b57bc48f618407bb6"}, 0x13, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0x200000000000010b, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000000)={0x57, &(0x7f0000000080)}) process_mrelease(0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) r5 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r5, &(0x7f0000002200), 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r6}, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) sched_setaffinity(0x0, 0x0, 0x0) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000b00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000006c4151d40000000000008500000084000000b70000000000000095000000000000f97c1cd83f2ef1856cbb671b42ca4c9d2b6204a648040d37e60f8af7bf38ac72d850be8ff45eab0400b6312cd19d7910390eb5574a62aedfb5bc28cdff2476013dd333193bee52d99d5cef52079a90a97fc9ff372892"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r9, &(0x7f0000000280)={0xa, 0x2, 0x0, @loopback, 0x9}, 0x1c) sendto$inet6(r9, &(0x7f0000000500)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5dac14e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34a9e42d07d80ec4500490af81ec29d06ff32465ad17a550f034fff344f609c9c3bd09aec89a9756c2de823523a0089d1bed", 0xfffffffffffffeca, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @rand_addr, 0x40}, 0x1c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kmem_cache_free\x00'}, 0x10) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000fbe000)={0x0, 0x0}, 0x10) recvmsg(r9, &(0x7f00000008c0)={0x0, 0x4, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6}, 0x40000110) gettid() kernel console output (not intermixed with test programs): ted [ 46.802549][ T4141] EXT4-fs (loop0): 1 truncate cleaned up [ 46.892103][ T4153] loop3: detected capacity change from 0 to 512 [ 46.930061][ T4153] ext4 filesystem being mounted at /50/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 46.936375][ T29] audit: type=1326 audit(1727162770.163:2628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4158 comm="syz.0.239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f7326def9 code=0x7ffc0000 [ 46.948062][ T4153] FAULT_INJECTION: forcing a failure. [ 46.948062][ T4153] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 46.972924][ T4161] loop0: detected capacity change from 0 to 256 [ 46.977039][ T4153] CPU: 1 UID: 0 PID: 4153 Comm: syz.3.236 Not tainted 6.11.0-syzkaller-09015-g18ba6034468e #0 [ 46.993592][ T4153] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 47.003674][ T4153] Call Trace: [ 47.005976][ T29] audit: type=1326 audit(1727162770.193:2629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4158 comm="syz.0.239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7f9f7326def9 code=0x7ffc0000 [ 47.007046][ T4153] [ 47.007057][ T4153] dump_stack_lvl+0xf2/0x150 [ 47.030371][ T29] audit: type=1326 audit(1727162770.193:2630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4158 comm="syz.0.239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f7326def9 code=0x7ffc0000 [ 47.033250][ T4153] dump_stack+0x15/0x20 [ 47.037853][ T29] audit: type=1326 audit(1727162770.193:2631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4158 comm="syz.0.239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f9f7326def9 code=0x7ffc0000 [ 47.061066][ T4153] should_fail_ex+0x223/0x230 [ 47.061137][ T4153] should_fail+0xb/0x10 [ 47.061168][ T4153] should_fail_usercopy+0x1a/0x20 [ 47.061289][ T4153] _copy_from_user+0x1e/0xd0 [ 47.061313][ T4153] vmemdup_user+0x12e/0x1b0 [ 47.061340][ T4153] path_setxattr+0x134/0x360 [ 47.061363][ T4153] ? get_pid_task+0x8e/0xc0 [ 47.061465][ T4153] __x64_sys_setxattr+0x6d/0x80 [ 47.061502][ T4153] x64_sys_call+0x2927/0x2d60 [ 47.061535][ T4153] do_syscall_64+0xc9/0x1c0 [ 47.061567][ T4153] ? clear_bhb_loop+0x55/0xb0 [ 47.065769][ T29] audit: type=1326 audit(1727162770.193:2632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4158 comm="syz.0.239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f7326def9 code=0x7ffc0000 [ 47.088854][ T4153] ? clear_bhb_loop+0x55/0xb0 [ 47.088908][ T4153] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 47.088940][ T4153] RIP: 0033:0x7f7c683edef9 [ 47.088962][ T4153] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 47.088981][ T4153] RSP: 002b:00007f7c67061038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc [ 47.089074][ T4153] RAX: ffffffffffffffda RBX: 00007f7c685a5f80 RCX: 00007f7c683edef9 [ 47.089089][ T4153] RDX: 0000000020000100 RSI: 0000000020000040 RDI: 0000000020000000 [ 47.089103][ T4153] RBP: 00007f7c67061090 R08: 0000000000000000 R09: 0000000000000000 [ 47.089116][ T4153] R10: 00000000000083c0 R11: 0000000000000246 R12: 0000000000000001 [ 47.093838][ T29] audit: type=1326 audit(1727162770.193:2633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4158 comm="syz.0.239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7f9f7326def9 code=0x7ffc0000 [ 47.093865][ T29] audit: type=1326 audit(1727162770.193:2634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4158 comm="syz.0.239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f7326def9 code=0x7ffc0000 [ 47.093915][ T29] audit: type=1326 audit(1727162770.193:2635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4158 comm="syz.0.239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=276 compat=0 ip=0x7f9f7326def9 code=0x7ffc0000 [ 47.098046][ T4153] R13: 0000000000000000 R14: 00007f7c685a5f80 R15: 00007ffc0d9e64e8 [ 47.098070][ T4153] [ 47.103086][ T29] audit: type=1326 audit(1727162770.193:2636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4158 comm="syz.0.239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f7326def9 code=0x7ffc0000 [ 47.163855][ T4164] loop4: detected capacity change from 0 to 2048 [ 47.216505][ T4161] FAT-fs (loop0): Directory bread(block 64) failed [ 47.358598][ T4161] FAT-fs (loop0): Directory bread(block 65) failed [ 47.365368][ T4161] FAT-fs (loop0): Directory bread(block 66) failed [ 47.372475][ T4161] FAT-fs (loop0): Directory bread(block 67) failed [ 47.391140][ T4164] Alternate GPT is invalid, using primary GPT. [ 47.394859][ T4161] FAT-fs (loop0): Directory bread(block 68) failed [ 47.397512][ T4164] loop4: p1 p2 p3 [ 47.409047][ T4170] loop3: detected capacity change from 0 to 2048 [ 47.415558][ T4161] FAT-fs (loop0): Directory bread(block 69) failed [ 47.422525][ T4161] FAT-fs (loop0): Directory bread(block 70) failed [ 47.429742][ T4161] FAT-fs (loop0): Directory bread(block 71) failed [ 47.436381][ T4161] FAT-fs (loop0): Directory bread(block 72) failed [ 47.443055][ T4161] FAT-fs (loop0): Directory bread(block 73) failed [ 47.461539][ T4170] Alternate GPT is invalid, using primary GPT. [ 47.468007][ T4170] loop3: p1 p2 p3 [ 47.496137][ T4175] loop2: detected capacity change from 0 to 1024 [ 47.510468][ T4175] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 47.521060][ T4177] netlink: 'syz.1.245': attribute type 1 has an invalid length. [ 47.537910][ T4177] loop1: detected capacity change from 0 to 128 [ 47.544425][ T4175] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 47.547905][ T4177] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 47.556534][ T4175] EXT4-fs (loop2): orphan cleanup on readonly fs [ 47.576636][ T4177] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 47.597112][ T4175] EXT4-fs error (device loop2): ext4_map_blocks:705: inode #3: block 3: comm syz.2.244: lblock 3 mapped to illegal pblock 3 (length 1) [ 47.618052][ T4180] loop4: detected capacity change from 0 to 512 [ 47.630007][ T4180] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 47.639196][ T4175] EXT4-fs error (device loop2): ext4_acquire_dquot:6879: comm syz.2.244: Failed to acquire dquot type 0 [ 47.656940][ T28] kworker/u8:1: attempt to access beyond end of device [ 47.656940][ T28] loop0: rw=1, sector=1224, nr_sectors = 4 limit=256 [ 47.665605][ T4180] EXT4-fs (loop4): 1 orphan inode deleted [ 47.676326][ T4180] EXT4-fs (loop4): 1 truncate cleaned up [ 47.705503][ T4175] EXT4-fs error (device loop2): ext4_map_blocks:671: inode #3: block 3: comm syz.2.244: lblock 3 mapped to illegal pblock 3 (length 1) [ 47.725602][ T4175] EXT4-fs error (device loop2): ext4_acquire_dquot:6879: comm syz.2.244: Failed to acquire dquot type 0 [ 47.736962][ T4175] EXT4-fs error (device loop2): ext4_free_blocks:6589: comm syz.2.244: Freeing blocks not in datazone - block = 0, count = 4096 [ 47.756976][ T4175] EXT4-fs error (device loop2): ext4_map_blocks:671: inode #3: block 3: comm syz.2.244: lblock 3 mapped to illegal pblock 3 (length 1) [ 47.774802][ T4187] __nla_validate_parse: 2 callbacks suppressed [ 47.774829][ T4187] netlink: 14 bytes leftover after parsing attributes in process `syz.0.250'. [ 47.794166][ T4189] netlink: 14 bytes leftover after parsing attributes in process `syz.3.251'. [ 47.806049][ T4175] EXT4-fs error (device loop2): ext4_acquire_dquot:6879: comm syz.2.244: Failed to acquire dquot type 0 [ 47.844028][ T4175] EXT4-fs (loop2): 1 orphan inode deleted [ 47.901691][ T4200] loop0: detected capacity change from 0 to 512 [ 47.916256][ T4200] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 47.949327][ T4200] EXT4-fs (loop0): can't mount with data=, fs mounted w/o journal [ 47.959900][ T4205] netlink: 12 bytes leftover after parsing attributes in process `syz.4.255'. [ 47.998176][ T4200] loop0: detected capacity change from 0 to 512 [ 48.009625][ T4200] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 48.031698][ T4212] loop2: detected capacity change from 0 to 512 [ 48.040794][ T4200] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.256: bg 0: block 264: padding at end of block bitmap is not set [ 48.062043][ T4215] loop4: detected capacity change from 0 to 1024 [ 48.072000][ T4215] EXT4-fs: Ignoring removed orlov option [ 48.077744][ T4215] EXT4-fs: Ignoring removed nomblk_io_submit option [ 48.085185][ T4200] EXT4-fs (loop0): Remounting filesystem read-only [ 48.086161][ T4212] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 48.091827][ T4200] EXT4-fs (loop0): 1 truncate cleaned up [ 48.106475][ T4200] SELinux: (dev loop0, type ext4) getxattr errno 5 [ 48.113604][ T4212] EXT4-fs (loop2): can't mount with data=, fs mounted w/o journal [ 48.133776][ T4203] loop2: detected capacity change from 0 to 512 [ 48.144610][ T4203] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 48.163237][ T4203] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.257: bg 0: block 264: padding at end of block bitmap is not set [ 48.191277][ T4203] EXT4-fs (loop2): Remounting filesystem read-only [ 48.198490][ T4203] EXT4-fs (loop2): 1 truncate cleaned up [ 48.204754][ T4203] SELinux: (dev loop2, type ext4) getxattr errno 5 [ 48.225428][ T4223] loop3: detected capacity change from 0 to 2048 [ 48.252808][ T4223] Alternate GPT is invalid, using primary GPT. [ 48.253286][ T4227] loop0: detected capacity change from 0 to 256 [ 48.259169][ T4223] loop3: p1 p2 p3 [ 48.299370][ T4227] FAT-fs (loop0): Directory bread(block 64) failed [ 48.306421][ T4227] FAT-fs (loop0): Directory bread(block 65) failed [ 48.325868][ T4227] FAT-fs (loop0): Directory bread(block 66) failed [ 48.345301][ T4227] FAT-fs (loop0): Directory bread(block 67) failed [ 48.367091][ T4227] FAT-fs (loop0): Directory bread(block 68) failed [ 48.391232][ T4227] FAT-fs (loop0): Directory bread(block 69) failed [ 48.401143][ T4227] FAT-fs (loop0): Directory bread(block 70) failed [ 48.416745][ T4227] FAT-fs (loop0): Directory bread(block 71) failed [ 48.425473][ T4227] FAT-fs (loop0): Directory bread(block 72) failed [ 48.452369][ T4238] netlink: 12 bytes leftover after parsing attributes in process `syz.4.269'. [ 48.474709][ T4227] FAT-fs (loop0): Directory bread(block 73) failed [ 48.498540][ T4245] xt_hashlimit: max too large, truncated to 1048576 [ 48.529641][ T4247] netlink: 8 bytes leftover after parsing attributes in process `syz.4.271'. [ 48.552541][ T4239] loop2: detected capacity change from 0 to 512 [ 48.553234][ T4249] SELinux: failure in selinux_parse_skb(), unable to parse packet [ 48.560006][ T4239] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 48.588809][ T4247] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.600390][ T4239] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.268: bg 0: block 264: padding at end of block bitmap is not set [ 48.606286][ T4251] loop1: detected capacity change from 0 to 1024 [ 48.631740][ T4251] EXT4-fs: Ignoring removed orlov option [ 48.637645][ T4251] EXT4-fs: Ignoring removed nomblk_io_submit option [ 48.645297][ T4256] SELinux: failure in selinux_parse_skb(), unable to parse packet [ 48.664208][ T4239] EXT4-fs (loop2): Remounting filesystem read-only [ 48.672103][ T4239] EXT4-fs (loop2): 1 truncate cleaned up [ 48.682168][ T4247] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.693199][ T4239] SELinux: (dev loop2, type ext4) getxattr errno 5 [ 48.750424][ T4247] team0: Port device netdevsim1 removed [ 48.761835][ T4247] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.804720][ T4266] loop0: detected capacity change from 0 to 2048 [ 48.838616][ T4266] Alternate GPT is invalid, using primary GPT. [ 48.845307][ T4266] loop0: p1 p2 p3 [ 48.861994][ T4247] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.872921][ T4279] netlink: 12 bytes leftover after parsing attributes in process `syz.2.281'. [ 48.925606][ T4247] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.953055][ T4283] loop1: detected capacity change from 0 to 164 [ 48.964430][ T4247] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.975888][ T4283] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 48.978690][ T4247] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.005840][ T4247] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.030198][ T4288] loop0: detected capacity change from 0 to 512 [ 49.049372][ T4288] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 49.081019][ T4288] EXT4-fs (loop0): failed to open journal device unknown-block(0,0) -6 [ 49.101718][ T4288] loop0: detected capacity change from 0 to 512 [ 49.116751][ T4288] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 49.119065][ T3339] udevd[3339]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system [ 49.154352][ T4288] EXT4-fs error (device loop0): ext4_orphan_get:1388: inode #15: comm syz.0.287: iget: bad extended attribute block 19 [ 49.167427][ T4298] netlink: 'syz.1.290': attribute type 10 has an invalid length. [ 49.168544][ T4288] EXT4-fs error (device loop0): ext4_orphan_get:1393: comm syz.0.287: couldn't read orphan inode 15 (err -117) [ 49.191937][ T4295] loop4: detected capacity change from 0 to 512 [ 49.205243][ T4295] EXT4-fs: Ignoring removed mblk_io_submit option [ 49.213177][ T4295] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2240: inode #15: comm syz.4.289: corrupted in-inode xattr: invalid ea_ino [ 49.219604][ T3339] udevd[3339]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system [ 49.239485][ T4295] EXT4-fs error (device loop4): ext4_orphan_get:1393: comm syz.4.289: couldn't read orphan inode 15 (err -117) [ 49.268859][ T4300] netlink: 4 bytes leftover after parsing attributes in process `syz.1.291'. [ 49.269283][ T4288] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.287: bg 0: block 65: padding at end of block bitmap is not set [ 49.293177][ T4288] EXT4-fs error (device loop0): ext4_acquire_dquot:6879: comm syz.0.287: Failed to acquire dquot type 0 [ 49.328455][ T3339] udevd[3339]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system [ 49.436543][ T4319] loop0: detected capacity change from 0 to 512 [ 49.460778][ T3339] udevd[3339]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system [ 49.475488][ T4319] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 49.503526][ T4322] loop4: detected capacity change from 0 to 164 [ 49.524963][ T3339] udevd[3339]: symlink '../../loop4' '/dev/disk/by-label/CDROM.tmp-b7:4' failed: Read-only file system [ 49.539878][ T3339] udevd[3339]: symlink '../../loop4' '/dev/disk/by-uuid/2022-11-22-16-59-57-00.tmp-b7:4' failed: Read-only file system [ 49.572464][ T4322] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 49.684422][ T4326] loop4: detected capacity change from 0 to 164 [ 49.709278][ T4326] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 49.750150][ T4319] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.295: bg 0: block 264: padding at end of block bitmap is not set [ 49.781867][ T4335] netlink: 'syz.2.301': attribute type 10 has an invalid length. [ 49.794951][ T4319] EXT4-fs (loop0): Remounting filesystem read-only [ 49.816613][ T4319] EXT4-fs (loop0): 1 truncate cleaned up [ 49.826712][ T4340] loop4: detected capacity change from 0 to 512 [ 49.827238][ T4319] SELinux: (dev loop0, type ext4) getxattr errno 5 [ 49.853015][ T4340] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 49.860371][ T3339] udevd[3339]: symlink '../../loop4' '/dev/disk/by-label/\x86\x5b.tmp-b7:4' failed: Read-only file system [ 49.881928][ T4340] EXT4-fs (loop4): failed to open journal device unknown-block(0,0) -6 [ 49.899976][ T4340] loop4: detected capacity change from 0 to 512 [ 49.908648][ T4340] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 49.927261][ T4349] loop2: detected capacity change from 0 to 164 [ 49.935315][ T4349] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 49.948977][ T3339] udevd[3339]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system [ 49.977931][ T3339] udevd[3339]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system [ 49.993225][ T3339] udevd[3339]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system [ 50.009535][ T4340] EXT4-fs error (device loop4): ext4_orphan_get:1388: inode #15: comm syz.4.303: iget: bad extended attribute block 19 [ 50.034670][ T4340] EXT4-fs error (device loop4): ext4_orphan_get:1393: comm syz.4.303: couldn't read orphan inode 15 (err -117) [ 50.067576][ T4360] loop2: detected capacity change from 0 to 164 [ 50.100178][ T4350] loop3: detected capacity change from 0 to 512 [ 50.128340][ T4340] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.303: bg 0: block 65: padding at end of block bitmap is not set [ 50.151267][ T4350] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 50.160430][ T4340] EXT4-fs error (device loop4): ext4_acquire_dquot:6879: comm syz.4.303: Failed to acquire dquot type 0 [ 50.224420][ T4360] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 50.242914][ T4350] EXT4-fs (loop3): can't mount with data=, fs mounted w/o journal [ 50.246565][ T4365] loop4: detected capacity change from 0 to 256 [ 50.259951][ T4367] loop1: detected capacity change from 0 to 512 [ 50.285538][ T4365] FAT-fs (loop4): Directory bread(block 64) failed [ 50.292602][ T4365] FAT-fs (loop4): Directory bread(block 65) failed [ 50.295774][ T4346] loop3: detected capacity change from 0 to 512 [ 50.301096][ T4365] FAT-fs (loop4): Directory bread(block 66) failed [ 50.321563][ T4365] FAT-fs (loop4): Directory bread(block 67) failed [ 50.329468][ T4367] ext4 filesystem being mounted at /67/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 50.341138][ T4365] FAT-fs (loop4): Directory bread(block 68) failed [ 50.344706][ T4373] loop2: detected capacity change from 0 to 2048 [ 50.347865][ T4365] FAT-fs (loop4): Directory bread(block 69) failed [ 50.354211][ T4346] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 50.361997][ T4365] FAT-fs (loop4): Directory bread(block 70) failed [ 50.378490][ T4365] FAT-fs (loop4): Directory bread(block 71) failed [ 50.385122][ T4365] FAT-fs (loop4): Directory bread(block 72) failed [ 50.391953][ T4365] FAT-fs (loop4): Directory bread(block 73) failed [ 50.400496][ T4346] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.306: bg 0: block 264: padding at end of block bitmap is not set [ 50.427455][ T4346] EXT4-fs (loop3): Remounting filesystem read-only [ 50.430510][ T4373] Alternate GPT is invalid, using primary GPT. [ 50.434393][ T4346] EXT4-fs (loop3): 1 truncate cleaned up [ 50.440314][ T4373] loop2: p1 p2 p3 [ 50.446201][ T4346] SELinux: (dev loop3, type ext4) getxattr errno 5 [ 50.678060][ T4400] loop2: detected capacity change from 0 to 164 [ 50.693100][ T4400] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 50.786041][ T4404] netlink: 'syz.2.321': attribute type 10 has an invalid length. [ 50.950208][ T4413] loop2: detected capacity change from 0 to 1024 [ 50.965698][ T4413] EXT4-fs: Ignoring removed orlov option [ 50.971525][ T4413] EXT4-fs: Ignoring removed nomblk_io_submit option [ 50.999335][ T4416] loop0: detected capacity change from 0 to 512 [ 51.006507][ T4416] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 51.018231][ T4416] EXT4-fs (loop0): can't mount with data=, fs mounted w/o journal [ 51.040076][ T4416] loop0: detected capacity change from 0 to 512 [ 51.057929][ T4416] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 51.076626][ T4416] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.327: bg 0: block 264: padding at end of block bitmap is not set [ 51.091357][ T4416] EXT4-fs (loop0): Remounting filesystem read-only [ 51.099360][ T4416] EXT4-fs (loop0): 1 truncate cleaned up [ 51.105581][ T4416] SELinux: (dev loop0, type ext4) getxattr errno 5 [ 51.140763][ T4424] netlink: 14 bytes leftover after parsing attributes in process `syz.0.328'. [ 51.171810][ T4426] loop0: detected capacity change from 0 to 256 [ 51.186717][ T4426] FAT-fs (loop0): Directory bread(block 64) failed [ 51.193361][ T4426] FAT-fs (loop0): Directory bread(block 65) failed [ 51.200006][ T4426] FAT-fs (loop0): Directory bread(block 66) failed [ 51.206554][ T4426] FAT-fs (loop0): Directory bread(block 67) failed [ 51.213189][ T4426] FAT-fs (loop0): Directory bread(block 68) failed [ 51.219837][ T4426] FAT-fs (loop0): Directory bread(block 69) failed [ 51.226385][ T4426] FAT-fs (loop0): Directory bread(block 70) failed [ 51.232938][ T4426] FAT-fs (loop0): Directory bread(block 71) failed [ 51.240120][ T4426] FAT-fs (loop0): Directory bread(block 72) failed [ 51.246640][ T4426] FAT-fs (loop0): Directory bread(block 73) failed [ 51.319824][ T4430] Illegal XDP return value 4294967274 on prog (id 294) dev N/A, expect packet loss! [ 51.332311][ T4430] vlan2: entered allmulticast mode [ 51.380462][ T4432] syz.3.332[4432] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 51.380537][ T4432] syz.3.332[4432] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 51.393814][ T4434] loop1: detected capacity change from 0 to 2048 [ 51.404063][ T4432] syz.3.332[4432] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 51.474032][ T4442] loop0: detected capacity change from 0 to 1024 [ 51.531782][ T4444] loop3: detected capacity change from 0 to 512 [ 51.533932][ T4442] EXT4-fs: Ignoring removed orlov option [ 51.543887][ T4442] EXT4-fs: Ignoring removed nomblk_io_submit option [ 51.568687][ T4444] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 51.607849][ T4444] EXT4-fs (loop3): can't mount with data=, fs mounted w/o journal [ 51.638990][ T4438] loop3: detected capacity change from 0 to 512 [ 51.648529][ T4438] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 51.668395][ T29] kauditd_printk_skb: 864 callbacks suppressed [ 51.668412][ T29] audit: type=1326 audit(1727162774.893:3490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4451 comm="syz.4.339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10485edef9 code=0x7ffc0000 [ 51.672128][ T4454] loop4: detected capacity change from 0 to 512 [ 51.674622][ T29] audit: type=1326 audit(1727162774.893:3491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4451 comm="syz.4.339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10485edef9 code=0x7ffc0000 [ 51.674650][ T29] audit: type=1326 audit(1727162774.903:3492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4451 comm="syz.4.339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f10485edef9 code=0x7ffc0000 [ 51.674674][ T29] audit: type=1326 audit(1727162774.903:3493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4451 comm="syz.4.339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10485edef9 code=0x7ffc0000 [ 51.742628][ T4454] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 51.750951][ T29] audit: type=1326 audit(1727162774.903:3494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4451 comm="syz.4.339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f10485edef9 code=0x7ffc0000 [ 51.789771][ T4454] EXT4-fs (loop4): invalid journal inode [ 51.805828][ T29] audit: type=1326 audit(1727162774.903:3495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4451 comm="syz.4.339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10485edef9 code=0x7ffc0000 [ 51.828519][ T4455] netlink: 88 bytes leftover after parsing attributes in process `syz.0.338'. [ 51.834909][ T29] audit: type=1326 audit(1727162774.903:3496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4451 comm="syz.4.339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10485edef9 code=0x7ffc0000 [ 51.859012][ T4438] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.336: bg 0: block 264: padding at end of block bitmap is not set [ 51.867109][ T29] audit: type=1326 audit(1727162774.903:3497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4451 comm="syz.4.339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f10485edef9 code=0x7ffc0000 [ 51.882640][ T4438] EXT4-fs (loop3): Remounting filesystem read-only [ 51.904502][ T29] audit: type=1326 audit(1727162774.903:3498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4451 comm="syz.4.339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f10485edf33 code=0x7ffc0000 [ 51.911275][ T4438] EXT4-fs (loop3): 1 truncate cleaned up [ 51.934118][ T29] audit: type=1326 audit(1727162774.903:3499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4451 comm="syz.4.339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f10485ec9df code=0x7ffc0000 [ 51.941146][ T4438] SELinux: (dev loop3, type ext4) getxattr errno 5 [ 51.964197][ T4454] EXT4-fs (loop4): can't get journal size [ 51.982637][ T4454] EXT4-fs (loop4): 1 truncate cleaned up [ 52.025775][ T4454] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.339: bg 0: block 255: padding at end of block bitmap is not set [ 52.049311][ T4460] loop3: detected capacity change from 0 to 512 [ 52.062358][ T4460] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 52.074683][ T4464] netlink: 12 bytes leftover after parsing attributes in process `syz.0.343'. [ 52.098324][ T4460] EXT4-fs (loop3): 1 orphan inode deleted [ 52.104140][ T4460] EXT4-fs (loop3): 1 truncate cleaned up [ 52.105919][ T4469] loop2: detected capacity change from 0 to 256 [ 52.142296][ T4471] FAULT_INJECTION: forcing a failure. [ 52.142296][ T4471] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 52.155427][ T4471] CPU: 0 UID: 0 PID: 4471 Comm: syz.4.344 Not tainted 6.11.0-syzkaller-09015-g18ba6034468e #0 [ 52.165698][ T4471] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 52.175753][ T4471] Call Trace: [ 52.179042][ T4471] [ 52.182011][ T4471] dump_stack_lvl+0xf2/0x150 [ 52.186120][ T4473] loop0: detected capacity change from 0 to 128 [ 52.186702][ T4471] dump_stack+0x15/0x20 [ 52.194723][ T4473] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 52.197084][ T4471] should_fail_ex+0x223/0x230 [ 52.213617][ T4471] should_fail+0xb/0x10 [ 52.217810][ T4471] should_fail_usercopy+0x1a/0x20 [ 52.222928][ T4471] _copy_to_user+0x1e/0xa0 [ 52.223360][ T4469] FAT-fs (loop2): Directory bread(block 64) failed [ 52.227364][ T4471] simple_read_from_buffer+0xa0/0x110 [ 52.227401][ T4471] proc_fail_nth_read+0xf9/0x140 [ 52.234055][ T4473] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 52.239268][ T4471] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 52.239319][ T4471] vfs_read+0x195/0x720 [ 52.245764][ T4469] FAT-fs (loop2): Directory bread(block 65) failed [ 52.253259][ T4471] ? __rcu_read_unlock+0x4e/0x70 [ 52.253320][ T4471] ? __fget_files+0x1d4/0x210 [ 52.279214][ T4471] ksys_read+0xeb/0x1b0 [ 52.283408][ T4471] __x64_sys_read+0x42/0x50 [ 52.287940][ T4471] x64_sys_call+0x27d3/0x2d60 [ 52.292666][ T4471] do_syscall_64+0xc9/0x1c0 [ 52.297185][ T4471] ? clear_bhb_loop+0x55/0xb0 [ 52.301919][ T4471] ? clear_bhb_loop+0x55/0xb0 [ 52.306650][ T4471] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.312645][ T4471] RIP: 0033:0x7f10485ec93c [ 52.317068][ T4471] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 52.336764][ T4471] RSP: 002b:00007f1047267030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 52.345231][ T4471] RAX: ffffffffffffffda RBX: 00007f10487a5f80 RCX: 00007f10485ec93c [ 52.353207][ T4471] RDX: 000000000000000f RSI: 00007f10472670a0 RDI: 0000000000000005 [ 52.361267][ T4471] RBP: 00007f1047267090 R08: 0000000000000000 R09: 0000000000000000 [ 52.369296][ T4471] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 52.377298][ T4471] R13: 0000000000000000 R14: 00007f10487a5f80 R15: 00007ffd9f21c488 [ 52.385422][ T4471] [ 52.389949][ T4469] FAT-fs (loop2): Directory bread(block 66) failed [ 52.397679][ T4469] FAT-fs (loop2): Directory bread(block 67) failed [ 52.404372][ T4469] FAT-fs (loop2): Directory bread(block 68) failed [ 52.411034][ T4469] FAT-fs (loop2): Directory bread(block 69) failed [ 52.417820][ T4469] FAT-fs (loop2): Directory bread(block 70) failed [ 52.424362][ T4469] FAT-fs (loop2): Directory bread(block 71) failed [ 52.430940][ T4469] FAT-fs (loop2): Directory bread(block 72) failed [ 52.438163][ T4469] FAT-fs (loop2): Directory bread(block 73) failed [ 52.502328][ T4479] loop3: detected capacity change from 0 to 512 [ 52.510806][ T4479] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 52.536419][ T4479] EXT4-fs (loop3): invalid journal inode [ 52.542278][ T4479] EXT4-fs (loop3): can't get journal size [ 52.556445][ T4479] EXT4-fs (loop3): 1 truncate cleaned up [ 52.602417][ T4479] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.349: bg 0: block 255: padding at end of block bitmap is not set [ 52.635425][ T4484] loop1: detected capacity change from 0 to 1024 [ 52.709737][ T4495] loop3: detected capacity change from 0 to 1024 [ 52.745186][ T4500] loop4: detected capacity change from 0 to 512 [ 52.838849][ T4500] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 52.868092][ T4500] EXT4-fs (loop4): can't mount with data=, fs mounted w/o journal [ 52.909561][ T4490] loop4: detected capacity change from 0 to 512 [ 52.917503][ T4490] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 52.932548][ T4490] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.352: bg 0: block 264: padding at end of block bitmap is not set [ 52.949041][ T4490] EXT4-fs (loop4): Remounting filesystem read-only [ 52.956016][ T4490] EXT4-fs (loop4): 1 truncate cleaned up [ 52.962585][ T4490] SELinux: (dev loop4, type ext4) getxattr errno 5 [ 52.977915][ T4509] loop0: detected capacity change from 0 to 512 [ 52.985547][ T4509] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 53.023504][ T4509] ext4 filesystem being mounted at /76/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 53.116110][ T4509] __nla_validate_parse: 2 callbacks suppressed [ 53.116126][ T4509] netlink: 20 bytes leftover after parsing attributes in process `syz.0.358'. [ 53.133345][ T4518] loop4: detected capacity change from 0 to 2048 [ 53.370962][ T4526] loop4: detected capacity change from 0 to 512 [ 53.386726][ T4526] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 53.451009][ T4526] EXT4-fs (loop4): failed to open journal device unknown-block(0,0) -6 [ 53.469345][ T4526] loop4: detected capacity change from 0 to 512 [ 53.478018][ T4526] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 53.513914][ T4526] EXT4-fs error (device loop4): ext4_orphan_get:1388: inode #15: comm syz.4.363: iget: bad extended attribute block 19 [ 53.541976][ T4526] EXT4-fs error (device loop4): ext4_orphan_get:1393: comm syz.4.363: couldn't read orphan inode 15 (err -117) [ 53.570139][ T4526] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.363: bg 0: block 65: padding at end of block bitmap is not set [ 53.588962][ T4539] loop2: detected capacity change from 0 to 512 [ 53.607350][ T4539] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 53.622111][ T4539] EXT4-fs (loop2): invalid journal inode [ 53.634894][ T4526] EXT4-fs error (device loop4): ext4_acquire_dquot:6879: comm syz.4.363: Failed to acquire dquot type 0 [ 53.653034][ T4539] EXT4-fs (loop2): can't get journal size [ 53.656525][ T4546] loop7: detected capacity change from 0 to 16384 [ 53.669211][ T4539] EXT4-fs (loop2): 1 truncate cleaned up [ 53.688704][ T4532] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.364: bg 0: block 255: padding at end of block bitmap is not set [ 53.724201][ T4548] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 53.755882][ T4548] batman_adv: batadv0: Adding interface: ip6gretap1 [ 53.762676][ T4548] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.788398][ T4548] batman_adv: batadv0: Not using interface ip6gretap1 (retrying later): interface not active [ 53.834744][ T4551] loop0: detected capacity change from 0 to 512 [ 53.865223][ T4551] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 53.898504][ T4556] FAULT_INJECTION: forcing a failure. [ 53.898504][ T4556] name failslab, interval 1, probability 0, space 0, times 0 [ 53.911325][ T4556] CPU: 1 UID: 0 PID: 4556 Comm: syz.2.372 Not tainted 6.11.0-syzkaller-09015-g18ba6034468e #0 [ 53.922000][ T4556] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 53.932098][ T4556] Call Trace: [ 53.935393][ T4556] [ 53.938374][ T4556] dump_stack_lvl+0xf2/0x150 [ 53.943076][ T4556] dump_stack+0x15/0x20 [ 53.947287][ T4556] should_fail_ex+0x223/0x230 [ 53.952075][ T4556] ? __se_sys_mount+0xf7/0x2d0 [ 53.957011][ T4556] should_failslab+0x8f/0xb0 [ 53.961639][ T4556] __kmalloc_cache_noprof+0x4b/0x2a0 [ 53.967009][ T4556] __se_sys_mount+0xf7/0x2d0 [ 53.971924][ T4556] ? fput+0x14e/0x190 [ 53.972501][ T4552] loop4: detected capacity change from 0 to 512 [ 53.975999][ T4556] ? ksys_write+0x17a/0x1b0 [ 53.986811][ T4556] __x64_sys_mount+0x67/0x80 [ 53.991438][ T4556] x64_sys_call+0x203e/0x2d60 [ 53.996164][ T4556] do_syscall_64+0xc9/0x1c0 [ 54.000691][ T4556] ? clear_bhb_loop+0x55/0xb0 [ 54.005415][ T4556] ? clear_bhb_loop+0x55/0xb0 [ 54.010129][ T4556] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.016040][ T4556] RIP: 0033:0x7f044b61def9 [ 54.020542][ T4556] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 54.040197][ T4556] RSP: 002b:00007f044a297038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 54.048691][ T4556] RAX: ffffffffffffffda RBX: 00007f044b7d5f80 RCX: 00007f044b61def9 [ 54.056666][ T4556] RDX: 0000000020000080 RSI: 0000000020000300 RDI: 0000000000000000 [ 54.064757][ T4556] RBP: 00007f044a297090 R08: 00000000200000c0 R09: 0000000000000000 [ 54.072747][ T4556] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 54.080749][ T4556] R13: 0000000000000000 R14: 00007f044b7d5f80 R15: 00007ffd75a027b8 [ 54.088784][ T4556] [ 54.092069][ T4551] EXT4-fs (loop0): can't mount with data=, fs mounted w/o journal [ 54.103759][ T4552] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 54.137824][ T4552] EXT4-fs (loop4): can't mount with data=, fs mounted w/o journal [ 54.195917][ T3339] udevd[3339]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system [ 54.196613][ T4551] loop0: detected capacity change from 0 to 512 [ 54.224723][ T4551] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 54.239046][ T4551] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.371: bg 0: block 264: padding at end of block bitmap is not set [ 54.245902][ T3339] udevd[3339]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system [ 54.262696][ T4551] EXT4-fs (loop0): Remounting filesystem read-only [ 54.269712][ T4564] loop2: detected capacity change from 0 to 512 [ 54.273262][ T4551] EXT4-fs (loop0): 1 truncate cleaned up [ 54.280001][ T3339] udevd[3339]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system [ 54.284283][ T4551] SELinux: (dev loop0, type ext4) getxattr errno 5 [ 54.301157][ T4564] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 54.305056][ T4552] loop4: detected capacity change from 0 to 512 [ 54.311486][ T3339] udevd[3339]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system [ 54.319948][ T3447] udevd[3447]: symlink '../../loop2' '/dev/disk/by-label/\x86\x5b.tmp-b7:2' failed: Read-only file system [ 54.340262][ T4552] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 54.347437][ T3339] udevd[3339]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system [ 54.354038][ T4552] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.370: bg 0: block 264: padding at end of block bitmap is not set [ 54.381586][ T4552] EXT4-fs (loop4): Remounting filesystem read-only [ 54.382705][ T3339] udevd[3339]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system [ 54.395659][ T4552] EXT4-fs (loop4): 1 truncate cleaned up [ 54.401887][ T4564] EXT4-fs (loop2): failed to open journal device unknown-block(0,0) -6 [ 54.405607][ T4552] SELinux: (dev loop4, type ext4) getxattr errno 5 [ 54.474976][ T4564] loop2: detected capacity change from 0 to 512 [ 54.488639][ T4545] I/O error, dev loop7, sector 14080 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 54.498737][ T4545] Buffer I/O error on dev loop7, logical block 1760, lost async page write [ 54.507420][ T4545] Buffer I/O error on dev loop7, logical block 1761, lost async page write [ 54.516106][ T4545] Buffer I/O error on dev loop7, logical block 1762, lost async page write [ 54.525091][ T4545] Buffer I/O error on dev loop7, logical block 1763, lost async page write [ 54.525965][ T4564] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 54.534068][ T4545] Buffer I/O error on dev loop7, logical block 1764, lost async page write [ 54.545310][ T4569] xt_cluster: node mask cannot exceed total number of nodes [ 54.551846][ T4545] Buffer I/O error on dev loop7, logical block 1765, lost async page write [ 54.568124][ T4545] Buffer I/O error on dev loop7, logical block 1766, lost async page write [ 54.576729][ T4545] Buffer I/O error on dev loop7, logical block 1767, lost async page write [ 54.585472][ T4545] Buffer I/O error on dev loop7, logical block 1768, lost async page write [ 54.594237][ T4545] Buffer I/O error on dev loop7, logical block 1769, lost async page write [ 54.600384][ T4569] netlink: 176 bytes leftover after parsing attributes in process `syz.1.375'. [ 54.610466][ T4545] I/O error, dev loop7, sector 15104 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 54.622885][ T4564] EXT4-fs error (device loop2): ext4_orphan_get:1388: inode #15: comm syz.2.374: iget: bad extended attribute block 19 [ 54.625670][ T4545] I/O error, dev loop7, sector 16128 op 0x1:(WRITE) flags 0x800 phys_seg 32 prio class 0 [ 54.653544][ T4578] loop4: detected capacity change from 0 to 512 [ 54.673127][ T4578] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 54.683389][ T4564] EXT4-fs error (device loop2): ext4_orphan_get:1393: comm syz.2.374: couldn't read orphan inode 15 (err -117) [ 54.695536][ T3339] udevd[3339]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system [ 54.722521][ T4578] EXT4-fs (loop4): 1 orphan inode deleted [ 54.728567][ T4578] EXT4-fs (loop4): 1 truncate cleaned up [ 54.783197][ T4564] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.374: bg 0: block 65: padding at end of block bitmap is not set [ 54.801272][ T4564] EXT4-fs error (device loop2): ext4_acquire_dquot:6879: comm syz.2.374: Failed to acquire dquot type 0 [ 54.814125][ T4587] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 54.822541][ T4587] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 54.855163][ T4591] loop4: detected capacity change from 0 to 512 [ 54.875431][ T4591] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 54.880636][ T4589] loop0: detected capacity change from 0 to 512 [ 54.893680][ T3339] udevd[3339]: symlink '../../loop4' '/dev/disk/by-label/\x86\x5b.tmp-b7:4' failed: Read-only file system [ 54.924072][ T4589] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 54.957011][ T3447] udevd[3447]: symlink '../../loop0' '/dev/disk/by-label/\x86\x5b.tmp-b7:0' failed: Read-only file system [ 54.965102][ T4589] EXT4-fs (loop0): invalid journal inode [ 54.981452][ T4589] EXT4-fs (loop0): can't get journal size [ 54.990245][ T4591] EXT4-fs (loop4): failed to open journal device unknown-block(0,0) -6 [ 55.017564][ T4589] EXT4-fs (loop0): 1 truncate cleaned up [ 55.024983][ T4591] loop4: detected capacity change from 0 to 512 [ 55.038845][ T4591] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 55.049301][ T4589] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.382: bg 0: block 255: padding at end of block bitmap is not set [ 55.069882][ T4602] can0: slcan on ttyS3. [ 55.081837][ T4591] EXT4-fs error (device loop4): ext4_orphan_get:1388: inode #15: comm syz.4.381: iget: bad extended attribute block 19 [ 55.110486][ T4591] EXT4-fs error (device loop4): ext4_orphan_get:1393: comm syz.4.381: couldn't read orphan inode 15 (err -117) [ 55.126432][ T4606] loop3: detected capacity change from 0 to 512 [ 55.135409][ T4606] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 55.158508][ T4602] can0 (unregistered): slcan off ttyS3. [ 55.164821][ T4602] Falling back ldisc for ttyS3. [ 55.177437][ T4606] EXT4-fs (loop3): can't mount with data=, fs mounted w/o journal [ 55.190583][ T4591] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.381: bg 0: block 65: padding at end of block bitmap is not set [ 55.205722][ T4591] EXT4-fs error (device loop4): ext4_acquire_dquot:6879: comm syz.4.381: Failed to acquire dquot type 0 [ 55.230486][ T4610] netlink: 14 bytes leftover after parsing attributes in process `syz.0.387'. [ 55.232032][ T4606] loop3: detected capacity change from 0 to 512 [ 55.261496][ T4606] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 55.302765][ T4614] loop2: detected capacity change from 0 to 512 [ 55.311374][ T4606] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.386: bg 0: block 264: padding at end of block bitmap is not set [ 55.349500][ T4606] EXT4-fs (loop3): Remounting filesystem read-only [ 55.356417][ T4606] EXT4-fs (loop3): 1 truncate cleaned up [ 55.362848][ T4606] SELinux: (dev loop3, type ext4) getxattr errno 5 [ 55.368298][ T4614] ext4 filesystem being mounted at /71/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 55.418586][ T4623] loop0: detected capacity change from 0 to 512 [ 55.440730][ T4623] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 55.450666][ T4626] loop4: detected capacity change from 0 to 164 [ 55.470366][ T4626] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 55.480745][ T4623] EXT4-fs (loop0): can't mount with data=, fs mounted w/o journal [ 55.514514][ T4617] loop0: detected capacity change from 0 to 512 [ 55.521396][ T4617] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 55.545807][ T4636] loop3: detected capacity change from 0 to 164 [ 55.564360][ T4636] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 55.581739][ T4617] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.390: bg 0: block 264: padding at end of block bitmap is not set [ 55.633820][ T4643] loop3: detected capacity change from 0 to 512 [ 55.646419][ T4617] EXT4-fs (loop0): Remounting filesystem read-only [ 55.656133][ T4617] EXT4-fs (loop0): 1 truncate cleaned up [ 55.662364][ T4617] SELinux: (dev loop0, type ext4) getxattr errno 5 [ 55.664273][ T4643] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 55.729545][ T4643] EXT4-fs (loop3): failed to open journal device unknown-block(0,0) -6 [ 55.733229][ T4639] loop4: detected capacity change from 0 to 512 [ 55.760760][ T4646] can0: slcan on ttyS3. [ 55.785049][ T4639] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 55.785068][ T4643] loop3: detected capacity change from 0 to 512 [ 55.807540][ T4646] can0 (unregistered): slcan off ttyS3. [ 55.813621][ T4639] EXT4-fs (loop4): can't mount with data=, fs mounted w/o journal [ 55.825469][ T4646] Falling back ldisc for ttyS3. [ 55.841153][ T4643] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 55.851721][ T4639] loop4: detected capacity change from 0 to 512 [ 55.873709][ T4639] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 55.897015][ T4663] loop1: detected capacity change from 0 to 512 [ 55.906955][ T4643] EXT4-fs error (device loop3): ext4_orphan_get:1388: inode #15: comm syz.3.399: iget: bad extended attribute block 19 [ 55.921286][ T4663] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 55.921382][ T4639] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.397: bg 0: block 264: padding at end of block bitmap is not set [ 55.929686][ T4643] EXT4-fs error (device loop3): ext4_orphan_get:1393: comm syz.3.399: couldn't read orphan inode 15 (err -117) [ 55.963499][ T4639] EXT4-fs (loop4): Remounting filesystem read-only [ 55.977387][ T4639] EXT4-fs (loop4): 1 truncate cleaned up [ 55.983527][ T4639] SELinux: (dev loop4, type ext4) getxattr errno 5 [ 56.016434][ T4663] EXT4-fs (loop1): failed to open journal device unknown-block(0,0) -6 [ 56.092112][ T4663] loop1: detected capacity change from 0 to 512 [ 56.118436][ T4663] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 56.134549][ T4643] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.399: bg 0: block 65: padding at end of block bitmap is not set [ 56.165265][ T4663] EXT4-fs error (device loop1): ext4_orphan_get:1388: inode #15: comm syz.1.403: iget: bad extended attribute block 19 [ 56.173628][ T4686] loop4: detected capacity change from 0 to 2048 [ 56.221420][ T4643] EXT4-fs error (device loop3): ext4_acquire_dquot:6879: comm syz.3.399: Failed to acquire dquot type 0 [ 56.263944][ T4663] EXT4-fs error (device loop1): ext4_orphan_get:1393: comm syz.1.403: couldn't read orphan inode 15 (err -117) [ 56.501417][ T4663] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.403: bg 0: block 65: padding at end of block bitmap is not set [ 56.549371][ T4663] EXT4-fs error (device loop1): ext4_acquire_dquot:6879: comm syz.1.403: Failed to acquire dquot type 0 [ 56.597611][ T4726] netlink: 14 bytes leftover after parsing attributes in process `syz.4.417'. [ 56.630336][ T4727] xt_hashlimit: max too large, truncated to 1048576 [ 56.728003][ T4737] loop3: detected capacity change from 0 to 2048 [ 56.762481][ T4740] loop1: detected capacity change from 0 to 512 [ 56.772669][ T29] kauditd_printk_skb: 810 callbacks suppressed [ 56.772686][ T29] audit: type=1326 audit(1727162780.003:4300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4742 comm="syz.4.424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10485edef9 code=0x7ffc0000 [ 56.804547][ T4743] netlink: 20 bytes leftover after parsing attributes in process `syz.2.421'. [ 56.818797][ T29] audit: type=1326 audit(1727162780.053:4301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4742 comm="syz.4.424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f10485ec890 code=0x7ffc0000 [ 56.846229][ T4740] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 56.867555][ T29] audit: type=1326 audit(1727162780.053:4302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4742 comm="syz.4.424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f10485ec890 code=0x7ffc0000 [ 56.891098][ T29] audit: type=1326 audit(1727162780.053:4303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4742 comm="syz.4.424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10485edef9 code=0x7ffc0000 [ 56.914532][ T29] audit: type=1326 audit(1727162780.053:4304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4742 comm="syz.4.424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10485edef9 code=0x7ffc0000 [ 56.938138][ T29] audit: type=1326 audit(1727162780.053:4305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4742 comm="syz.4.424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=8 compat=0 ip=0x7f10485edef9 code=0x7ffc0000 [ 56.961564][ T29] audit: type=1326 audit(1727162780.053:4306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4742 comm="syz.4.424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10485edef9 code=0x7ffc0000 [ 56.985057][ T29] audit: type=1326 audit(1727162780.053:4307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4742 comm="syz.4.424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10485edef9 code=0x7ffc0000 [ 57.008468][ T29] audit: type=1326 audit(1727162780.053:4308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4742 comm="syz.4.424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=295 compat=0 ip=0x7f10485edef9 code=0x7ffc0000 [ 57.032074][ T29] audit: type=1326 audit(1727162780.053:4309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4742 comm="syz.4.424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10485edef9 code=0x7ffc0000 [ 57.056967][ T4740] EXT4-fs (loop1): can't mount with data=, fs mounted w/o journal [ 57.190974][ T4731] loop1: detected capacity change from 0 to 512 [ 57.207102][ T4731] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 57.239554][ T4731] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.418: bg 0: block 264: padding at end of block bitmap is not set [ 57.296881][ T4731] EXT4-fs (loop1): Remounting filesystem read-only [ 57.344290][ T4731] EXT4-fs (loop1): 1 truncate cleaned up [ 57.373129][ T4731] SELinux: (dev loop1, type ext4) getxattr errno 5 [ 57.397133][ T4768] loop3: detected capacity change from 0 to 512 [ 57.440074][ T4768] ext4 filesystem being mounted at /93/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 57.496680][ T4773] netlink: 14 bytes leftover after parsing attributes in process `syz.1.431'. [ 57.599811][ T4778] netlink: 8 bytes leftover after parsing attributes in process `syz.3.433'. [ 57.628265][ T4778] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.642132][ T4783] syz.0.436[4783] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 57.642240][ T4783] syz.0.436[4783] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 57.657189][ T4784] loop1: detected capacity change from 0 to 512 [ 57.657198][ T4783] syz.0.436[4783] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 57.679184][ T4784] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 57.706870][ T4778] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.745715][ T4784] EXT4-fs (loop1): 1 orphan inode deleted [ 57.751587][ T4784] EXT4-fs (loop1): 1 truncate cleaned up [ 57.772466][ T4778] team0: Port device netdevsim1 removed [ 57.790631][ T4792] xt_hashlimit: max too large, truncated to 1048576 [ 57.801928][ T4778] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.894783][ T4778] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.932083][ T4807] loop1: detected capacity change from 0 to 2048 [ 57.985604][ T4778] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.999246][ T4807] Alternate GPT is invalid, using primary GPT. [ 58.005613][ T4807] loop1: p1 p2 p3 [ 58.021705][ T4778] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.089327][ T4778] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.113812][ T4778] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.226616][ T4816] loop1: detected capacity change from 0 to 512 [ 58.242926][ T4819] loop3: detected capacity change from 0 to 164 [ 58.265384][ T4819] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 58.282392][ T4816] ext4 filesystem being mounted at /84/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 58.466220][ T4830] netlink: 12 bytes leftover after parsing attributes in process `syz.1.447'. [ 58.506276][ T4834] loop2: detected capacity change from 0 to 512 [ 58.515086][ T4834] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 58.525172][ T4837] loop3: detected capacity change from 0 to 512 [ 58.532362][ T4834] EXT4-fs (loop2): invalid journal inode [ 58.534931][ T4836] loop1: detected capacity change from 0 to 1024 [ 58.538983][ T4834] EXT4-fs (loop2): can't get journal size [ 58.550859][ T4837] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 58.573859][ T4834] EXT4-fs (loop2): 1 truncate cleaned up [ 58.595721][ T4829] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.448: bg 0: block 255: padding at end of block bitmap is not set [ 58.620774][ T4837] EXT4-fs (loop3): 1 orphan inode deleted [ 58.626604][ T4837] EXT4-fs (loop3): 1 truncate cleaned up [ 58.656147][ T4844] loop4: detected capacity change from 0 to 164 [ 58.665217][ T4844] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 58.728651][ T4850] loop4: detected capacity change from 0 to 2048 [ 58.777615][ T4854] loop3: detected capacity change from 0 to 512 [ 58.788688][ T4850] Alternate GPT is invalid, using primary GPT. [ 58.795060][ T4850] loop4: p1 p2 p3 [ 58.828513][ T4858] loop0: detected capacity change from 0 to 256 [ 58.846211][ T4854] ext4 filesystem being mounted at /102/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 58.895133][ T4864] loop2: detected capacity change from 0 to 1024 [ 58.912583][ T4858] FAT-fs (loop0): Directory bread(block 64) failed [ 58.931496][ T4858] FAT-fs (loop0): Directory bread(block 65) failed [ 58.944983][ T4858] FAT-fs (loop0): Directory bread(block 66) failed [ 58.981173][ T4858] FAT-fs (loop0): Directory bread(block 67) failed [ 58.998917][ T4858] FAT-fs (loop0): Directory bread(block 68) failed [ 59.016332][ T4858] FAT-fs (loop0): Directory bread(block 69) failed [ 59.023165][ T4858] FAT-fs (loop0): Directory bread(block 70) failed [ 59.032226][ T4869] netlink: 12 bytes leftover after parsing attributes in process `syz.3.460'. [ 59.037615][ T4858] FAT-fs (loop0): Directory bread(block 71) failed [ 59.048339][ T4858] FAT-fs (loop0): Directory bread(block 72) failed [ 59.055109][ T4858] FAT-fs (loop0): Directory bread(block 73) failed [ 59.072927][ T4858] FAULT_INJECTION: forcing a failure. [ 59.072927][ T4858] name failslab, interval 1, probability 0, space 0, times 0 [ 59.085613][ T4858] CPU: 0 UID: 0 PID: 4858 Comm: syz.0.457 Not tainted 6.11.0-syzkaller-09015-g18ba6034468e #0 [ 59.095898][ T4858] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 59.106325][ T4858] Call Trace: [ 59.109728][ T4858] [ 59.112715][ T4858] dump_stack_lvl+0xf2/0x150 [ 59.117366][ T4858] dump_stack+0x15/0x20 [ 59.121640][ T4858] should_fail_ex+0x223/0x230 [ 59.126360][ T4858] ? security_file_alloc+0x32/0x100 [ 59.131683][ T4858] should_failslab+0x8f/0xb0 [ 59.136317][ T4858] kmem_cache_alloc_noprof+0x4c/0x290 [ 59.141817][ T4858] security_file_alloc+0x32/0x100 [ 59.146965][ T4858] alloc_empty_file+0x121/0x2f0 [ 59.151855][ T4858] path_openat+0x6a/0x1fa0 [ 59.156313][ T4858] ? mntput+0x49/0x70 [ 59.160320][ T4858] ? terminate_walk+0x260/0x280 [ 59.165297][ T4858] ? path_openat+0x1a5a/0x1fa0 [ 59.170154][ T4858] ? _parse_integer_limit+0x167/0x180 [ 59.175627][ T4858] do_filp_open+0xf7/0x200 [ 59.180088][ T4858] alloc_bprm+0xd5/0x740 [ 59.184422][ T4858] ? should_fail_ex+0xd7/0x230 [ 59.189228][ T4858] do_execveat_common+0x134/0x800 [ 59.194294][ T4858] __x64_sys_execve+0x5a/0x70 [ 59.199077][ T4858] x64_sys_call+0x1277/0x2d60 [ 59.203840][ T4858] do_syscall_64+0xc9/0x1c0 [ 59.208382][ T4858] ? clear_bhb_loop+0x55/0xb0 [ 59.213187][ T4858] ? clear_bhb_loop+0x55/0xb0 [ 59.217905][ T4858] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 59.223863][ T4858] RIP: 0033:0x7f9f7326def9 [ 59.228338][ T4858] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 59.248092][ T4858] RSP: 002b:00007f9f71ee7038 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 59.256586][ T4858] RAX: ffffffffffffffda RBX: 00007f9f73425f80 RCX: 00007f9f7326def9 [ 59.264584][ T4858] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000340 [ 59.272640][ T4858] RBP: 00007f9f71ee7090 R08: 0000000000000000 R09: 0000000000000000 [ 59.280678][ T4858] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 59.288740][ T4858] R13: 0000000000000000 R14: 00007f9f73425f80 R15: 00007ffeecdcf278 [ 59.296775][ T4858] [ 59.328142][ T4874] SELinux: failure in selinux_parse_skb(), unable to parse packet [ 59.382525][ T4882] netlink: 28 bytes leftover after parsing attributes in process `syz.4.462'. [ 59.391498][ T4882] netlink: 28 bytes leftover after parsing attributes in process `syz.4.462'. [ 59.427034][ T4886] netlink: 14 bytes leftover after parsing attributes in process `syz.3.465'. [ 59.438404][ T4889] loop0: detected capacity change from 0 to 512 [ 59.447459][ T4889] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 59.461826][ T3339] udevd[3339]: symlink '../../loop0' '/dev/disk/by-label/\x86\x5b.tmp-b7:0' failed: Read-only file system [ 59.480039][ T4885] loop1: detected capacity change from 0 to 512 [ 59.493272][ T4885] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 59.502533][ T4889] EXT4-fs (loop0): failed to open journal device unknown-block(0,0) -6 [ 59.514153][ T3339] udevd[3339]: symlink '../../loop1' '/dev/disk/by-label/\x86\x5b.tmp-b7:1' failed: Read-only file system [ 59.534439][ T4885] EXT4-fs (loop1): invalid journal inode [ 59.543962][ T4889] loop0: detected capacity change from 0 to 512 [ 59.560326][ T3447] udevd[3447]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system [ 59.571881][ T4885] EXT4-fs (loop1): can't get journal size [ 59.576348][ T4889] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 59.593460][ T3339] udevd[3339]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system [ 59.606234][ T4885] EXT4-fs (loop1): 1 truncate cleaned up [ 59.613655][ T4889] EXT4-fs error (device loop0): ext4_orphan_get:1388: inode #15: comm syz.0.466: iget: bad extended attribute block 19 [ 59.629005][ T4885] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.464: bg 0: block 255: padding at end of block bitmap is not set [ 59.646039][ T4889] EXT4-fs error (device loop0): ext4_orphan_get:1393: comm syz.0.466: couldn't read orphan inode 15 (err -117) [ 59.724987][ T4889] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.466: bg 0: block 65: padding at end of block bitmap is not set [ 59.744570][ T4889] EXT4-fs error (device loop0): ext4_acquire_dquot:6879: comm syz.0.466: Failed to acquire dquot type 0 [ 59.785064][ T4901] loop3: detected capacity change from 0 to 8192 [ 59.810626][ T4905] loop0: detected capacity change from 0 to 512 [ 59.842419][ T3339] udevd[3339]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system [ 59.846912][ T4909] netlink: 8 bytes leftover after parsing attributes in process `syz.1.471'. [ 59.856735][ T4872] syz.2.459 (4872) used greatest stack depth: 9464 bytes left [ 59.871481][ T4901] loop3: p1 < > p4 < > [ 59.879849][ T2963] loop3: p1 < > p4 < > [ 59.887322][ T4909] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.906784][ T3339] udevd[3339]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 59.917881][ T3447] udevd[3447]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 59.928020][ T4905] ext4 filesystem being mounted at /95/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 59.949236][ T3446] udevd[3446]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system [ 59.984349][ T4909] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.003237][ T3447] udevd[3447]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 60.003772][ T3339] udevd[3339]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 60.014809][ T4913] loop2: detected capacity change from 0 to 512 [ 60.041477][ T4917] loop3: detected capacity change from 0 to 512 [ 60.042286][ T4913] EXT4-fs: Ignoring removed oldalloc option [ 60.059215][ T4909] team0: Port device netdevsim1 removed [ 60.066703][ T4909] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.069119][ T4913] EXT4-fs error (device loop2): ext4_xattr_inode_iget:436: comm syz.2.472: Parent and EA inode have the same ino 15 [ 60.091113][ T4913] EXT4-fs error (device loop2): ext4_xattr_inode_iget:436: comm syz.2.472: Parent and EA inode have the same ino 15 [ 60.103906][ T4919] netlink: 'syz.0.475': attribute type 58 has an invalid length. [ 60.111758][ T4919] netlink: 20 bytes leftover after parsing attributes in process `syz.0.475'. [ 60.117485][ T4913] EXT4-fs (loop2): 1 orphan inode deleted [ 60.132263][ T4913] netlink: 8 bytes leftover after parsing attributes in process `syz.2.472'. [ 60.141117][ T4913] netlink: 8 bytes leftover after parsing attributes in process `syz.2.472'. [ 60.152354][ T4917] ext4 filesystem being mounted at /109/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 60.165289][ T4913] geneve2: entered promiscuous mode [ 60.170637][ T4913] geneve2: entered allmulticast mode [ 60.174181][ T4925] loop4: detected capacity change from 0 to 164 [ 60.191041][ T4909] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.212275][ T4925] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 60.212599][ T4927] loop0: detected capacity change from 0 to 512 [ 60.227769][ T4927] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 60.287987][ T4927] EXT4-fs (loop0): failed to open journal device unknown-block(0,0) -6 [ 60.293540][ T4931] loop4: detected capacity change from 0 to 2048 [ 60.313749][ T4909] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.331768][ T4937] xt_hashlimit: max too large, truncated to 1048576 [ 60.344633][ T4927] loop0: detected capacity change from 0 to 512 [ 60.354891][ T4909] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.375441][ T4927] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 60.402635][ T4909] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.422053][ T4909] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.433661][ T4944] FAULT_INJECTION: forcing a failure. [ 60.433661][ T4944] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 60.446926][ T4944] CPU: 0 UID: 0 PID: 4944 Comm: syz.4.482 Not tainted 6.11.0-syzkaller-09015-g18ba6034468e #0 [ 60.457183][ T4944] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 60.467239][ T4944] Call Trace: [ 60.470514][ T4944] [ 60.473463][ T4944] dump_stack_lvl+0xf2/0x150 [ 60.478079][ T4944] dump_stack+0x15/0x20 [ 60.482278][ T4944] should_fail_ex+0x223/0x230 [ 60.487136][ T4944] should_fail+0xb/0x10 [ 60.491311][ T4944] should_fail_usercopy+0x1a/0x20 [ 60.496353][ T4944] _copy_from_user+0x1e/0xd0 [ 60.501031][ T4944] memdup_user+0x64/0xc0 [ 60.501720][ T4949] loop3: detected capacity change from 0 to 512 [ 60.505282][ T4944] strndup_user+0x68/0xa0 [ 60.515898][ T4944] __se_sys_mount+0x4e/0x2d0 [ 60.520549][ T4944] ? xfd_validate_state+0x46/0xf0 [ 60.525635][ T4944] __x64_sys_mount+0x67/0x80 [ 60.530308][ T4944] x64_sys_call+0x203e/0x2d60 [ 60.535003][ T4944] do_syscall_64+0xc9/0x1c0 [ 60.539663][ T4944] ? clear_bhb_loop+0x55/0xb0 [ 60.544457][ T4944] ? clear_bhb_loop+0x55/0xb0 [ 60.549216][ T4944] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 60.555213][ T4944] RIP: 0033:0x7f10485edef9 [ 60.559655][ T4944] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 60.579423][ T4944] RSP: 002b:00007f1047267038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 60.587965][ T4944] RAX: ffffffffffffffda RBX: 00007f10487a5f80 RCX: 00007f10485edef9 [ 60.595991][ T4944] RDX: 0000000020000100 RSI: 0000000020000040 RDI: 0000000000000000 [ 60.604113][ T4944] RBP: 00007f1047267090 R08: 0000000020000300 R09: 0000000000000000 [ 60.612134][ T4944] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 60.620304][ T4944] R13: 0000000000000000 R14: 00007f10487a5f80 R15: 00007ffd9f21c488 [ 60.628404][ T4944] [ 60.636888][ T4949] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 60.637121][ T4951] netlink: 14 bytes leftover after parsing attributes in process `syz.1.483'. [ 60.656035][ T4927] EXT4-fs error (device loop0): ext4_orphan_get:1388: inode #15: comm syz.0.478: iget: bad extended attribute block 19 [ 60.678716][ T4949] EXT4-fs (loop3): can't mount with data=, fs mounted w/o journal [ 60.686678][ T4927] EXT4-fs error (device loop0): ext4_orphan_get:1393: comm syz.0.478: couldn't read orphan inode 15 (err -117) [ 60.724276][ T4927] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.478: bg 0: block 65: padding at end of block bitmap is not set [ 60.739106][ T4927] EXT4-fs error (device loop0): ext4_acquire_dquot:6879: comm syz.0.478: Failed to acquire dquot type 0 [ 60.796589][ T4942] loop3: detected capacity change from 0 to 512 [ 60.802782][ T4966] loop1: detected capacity change from 0 to 256 [ 60.820329][ T4966] FAT-fs (loop1): Directory bread(block 64) failed [ 60.831340][ T4966] FAT-fs (loop1): Directory bread(block 65) failed [ 60.847991][ T4942] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 60.856937][ T4966] FAT-fs (loop1): Directory bread(block 66) failed [ 60.873298][ T4966] FAT-fs (loop1): Directory bread(block 67) failed [ 60.889009][ T4942] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.481: bg 0: block 264: padding at end of block bitmap is not set [ 60.902087][ T4966] FAT-fs (loop1): Directory bread(block 68) failed [ 60.908128][ T4942] EXT4-fs (loop3): Remounting filesystem read-only [ 60.922416][ T4942] EXT4-fs (loop3): 1 truncate cleaned up [ 60.930375][ T4942] SELinux: (dev loop3, type ext4) getxattr errno 5 [ 60.936913][ T4966] FAT-fs (loop1): Directory bread(block 69) failed [ 60.936965][ T4966] FAT-fs (loop1): Directory bread(block 70) failed [ 60.968996][ T4966] FAT-fs (loop1): Directory bread(block 71) failed [ 60.989303][ T4966] FAT-fs (loop1): Directory bread(block 72) failed [ 61.006224][ T4966] FAT-fs (loop1): Directory bread(block 73) failed [ 61.062786][ T4983] loop3: detected capacity change from 0 to 1024 [ 61.160909][ T4987] loop2: detected capacity change from 0 to 512 [ 61.238895][ T4992] loop1: detected capacity change from 0 to 256 [ 61.279248][ T4987] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 61.310401][ T4987] ext4 filesystem being mounted at /87/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 61.345954][ T4992] FAT-fs (loop1): Directory bread(block 64) failed [ 61.361865][ T4992] FAT-fs (loop1): Directory bread(block 65) failed [ 61.373557][ T4992] FAT-fs (loop1): Directory bread(block 66) failed [ 61.381578][ T4992] FAT-fs (loop1): Directory bread(block 67) failed [ 61.388489][ T4992] FAT-fs (loop1): Directory bread(block 68) failed [ 61.395204][ T4992] FAT-fs (loop1): Directory bread(block 69) failed [ 61.402389][ T4992] FAT-fs (loop1): Directory bread(block 70) failed [ 61.411130][ T4992] FAT-fs (loop1): Directory bread(block 71) failed [ 61.418239][ T4992] FAT-fs (loop1): Directory bread(block 72) failed [ 61.424865][ T4992] FAT-fs (loop1): Directory bread(block 73) failed [ 61.472610][ T4990] syz.1.494: attempt to access beyond end of device [ 61.472610][ T4990] loop1: rw=524288, sector=1736, nr_sectors = 32 limit=256 [ 61.486553][ T4990] syz.1.494: attempt to access beyond end of device [ 61.486553][ T4990] loop1: rw=0, sector=1736, nr_sectors = 8 limit=256 [ 61.567784][ T4998] loop4: detected capacity change from 0 to 164 [ 61.590103][ T4998] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 61.850126][ T5011] loop4: detected capacity change from 0 to 512 [ 61.859658][ T5011] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 61.888508][ T5011] EXT4-fs (loop4): can't mount with data=, fs mounted w/o journal [ 61.955240][ T5011] loop4: detected capacity change from 0 to 512 [ 61.970715][ T5011] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 62.003950][ T5025] loop3: detected capacity change from 0 to 2048 [ 62.017507][ T29] kauditd_printk_skb: 1033 callbacks suppressed [ 62.017522][ T29] audit: type=1326 audit(1727162785.243:5340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5026 comm="syz.2.505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f044b61def9 code=0x7ffc0000 [ 62.047307][ T29] audit: type=1326 audit(1727162785.243:5341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5026 comm="syz.2.505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7f044b61def9 code=0x7ffc0000 [ 62.070664][ T29] audit: type=1326 audit(1727162785.243:5342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5026 comm="syz.2.505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f044b61def9 code=0x7ffc0000 [ 62.080345][ T5011] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.501: bg 0: block 264: padding at end of block bitmap is not set [ 62.093980][ T29] audit: type=1326 audit(1727162785.243:5343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5026 comm="syz.2.505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f044b61def9 code=0x7ffc0000 [ 62.094011][ T29] audit: type=1326 audit(1727162785.243:5344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5026 comm="syz.2.505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f044b61def9 code=0x7ffc0000 [ 62.109909][ T5011] EXT4-fs (loop4): Remounting filesystem read-only [ 62.132165][ T29] audit: type=1326 audit(1727162785.243:5345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5026 comm="syz.2.505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7f044b61def9 code=0x7ffc0000 [ 62.155837][ T5011] EXT4-fs (loop4): 1 truncate cleaned up [ 62.162329][ T29] audit: type=1326 audit(1727162785.243:5346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5026 comm="syz.2.505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f044b61def9 code=0x7ffc0000 [ 62.189964][ T5028] loop2: detected capacity change from 0 to 256 [ 62.191299][ T29] audit: type=1326 audit(1727162785.243:5347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5026 comm="syz.2.505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=276 compat=0 ip=0x7f044b61def9 code=0x7ffc0000 [ 62.216854][ T5011] SELinux: (dev loop4, type ext4) getxattr errno 5 [ 62.247172][ T5025] Alternate GPT is invalid, using primary GPT. [ 62.257175][ T5025] loop3: p1 p2 p3 [ 62.296150][ T5028] FAT-fs (loop2): Directory bread(block 64) failed [ 62.313529][ T5028] FAT-fs (loop2): Directory bread(block 65) failed [ 62.321503][ T29] audit: type=1326 audit(1727162785.243:5348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5026 comm="syz.2.505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f044b61def9 code=0x7ffc0000 [ 62.344952][ T29] audit: type=1326 audit(1727162785.263:5349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5026 comm="syz.2.505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f044b61def9 code=0x7ffc0000 [ 62.375621][ T5028] FAT-fs (loop2): Directory bread(block 66) failed [ 62.382351][ T5028] FAT-fs (loop2): Directory bread(block 67) failed [ 62.388967][ T5028] FAT-fs (loop2): Directory bread(block 68) failed [ 62.395591][ T5028] FAT-fs (loop2): Directory bread(block 69) failed [ 62.402282][ T5028] FAT-fs (loop2): Directory bread(block 70) failed [ 62.409847][ T5028] FAT-fs (loop2): Directory bread(block 71) failed [ 62.416444][ T5028] FAT-fs (loop2): Directory bread(block 72) failed [ 62.460503][ T5028] FAT-fs (loop2): Directory bread(block 73) failed [ 62.570288][ T5058] loop4: detected capacity change from 0 to 512 [ 62.614268][ T5063] SELinux: failure in selinux_parse_skb(), unable to parse packet [ 62.626371][ T5058] ext4 filesystem being mounted at /105/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 62.766912][ T5075] loop3: detected capacity change from 0 to 2048 [ 62.856988][ T5075] Alternate GPT is invalid, using primary GPT. [ 62.863413][ T5075] loop3: p1 p2 p3 [ 62.913694][ T2963] Alternate GPT is invalid, using primary GPT. [ 62.920172][ T2963] loop3: p1 p2 p3 [ 63.041488][ T5091] loop4: detected capacity change from 0 to 164 [ 63.049647][ T5091] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 63.105137][ T5092] loop1: detected capacity change from 0 to 512 [ 63.118624][ T5092] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 63.140750][ T5092] EXT4-fs (loop1): can't mount with data=, fs mounted w/o journal [ 63.196591][ T5089] loop1: detected capacity change from 0 to 512 [ 63.235681][ T5089] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 63.253398][ T5100] loop3: detected capacity change from 0 to 2048 [ 63.261789][ T5089] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.526: bg 0: block 264: padding at end of block bitmap is not set [ 63.287420][ T5089] EXT4-fs (loop1): Remounting filesystem read-only [ 63.309579][ T5111] loop4: detected capacity change from 0 to 512 [ 63.319911][ T5089] EXT4-fs (loop1): 1 truncate cleaned up [ 63.325927][ T5089] SELinux: (dev loop1, type ext4) getxattr errno 5 [ 63.360521][ T5111] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 63.392318][ T5122] loop0: detected capacity change from 0 to 512 [ 63.406329][ T5111] EXT4-fs (loop4): can't mount with data=, fs mounted w/o journal [ 63.423752][ T5122] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 63.436860][ T5126] IPv6: NLM_F_CREATE should be specified when creating new route [ 63.465590][ T5104] loop4: detected capacity change from 0 to 512 [ 63.469028][ T5129] capability: warning: `syz.1.538' uses deprecated v2 capabilities in a way that may be insecure [ 63.473169][ T5122] EXT4-fs (loop0): 1 orphan inode deleted [ 63.488244][ T5122] EXT4-fs (loop0): 1 truncate cleaned up [ 63.498507][ T5104] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 63.513742][ T5104] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.532: bg 0: block 264: padding at end of block bitmap is not set [ 63.547334][ T5104] EXT4-fs (loop4): Remounting filesystem read-only [ 63.554760][ T5104] EXT4-fs (loop4): 1 truncate cleaned up [ 63.558756][ T5132] loop1: detected capacity change from 0 to 1024 [ 63.567804][ T5104] SELinux: (dev loop4, type ext4) getxattr errno 5 [ 63.577782][ T5132] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 63.598665][ T5136] loop0: detected capacity change from 0 to 512 [ 63.613228][ T5132] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 63.621546][ T5132] EXT4-fs (loop1): orphan cleanup on readonly fs [ 63.630260][ T5132] EXT4-fs error (device loop1): ext4_map_blocks:705: inode #3: block 3: comm syz.1.539: lblock 3 mapped to illegal pblock 3 (length 1) [ 63.633370][ T5136] ext4 filesystem being mounted at /109/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 63.672092][ T5132] EXT4-fs error (device loop1): ext4_acquire_dquot:6879: comm syz.1.539: Failed to acquire dquot type 0 [ 63.686007][ T5142] loop4: detected capacity change from 0 to 164 [ 63.689698][ T5132] EXT4-fs error (device loop1): ext4_map_blocks:671: inode #3: block 3: comm syz.1.539: lblock 3 mapped to illegal pblock 3 (length 1) [ 63.710549][ T5132] EXT4-fs error (device loop1): ext4_acquire_dquot:6879: comm syz.1.539: Failed to acquire dquot type 0 [ 63.721742][ T5142] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 63.732095][ T5132] EXT4-fs error (device loop1): ext4_free_blocks:6589: comm syz.1.539: Freeing blocks not in datazone - block = 0, count = 4096 [ 63.758266][ T5132] EXT4-fs error (device loop1): ext4_map_blocks:671: inode #3: block 3: comm syz.1.539: lblock 3 mapped to illegal pblock 3 (length 1) [ 63.787956][ T5132] EXT4-fs error (device loop1): ext4_acquire_dquot:6879: comm syz.1.539: Failed to acquire dquot type 0 [ 63.799815][ T5132] EXT4-fs (loop1): 1 orphan inode deleted [ 63.850866][ T5150] xt_hashlimit: max too large, truncated to 1048576 [ 63.856349][ T5152] loop1: detected capacity change from 0 to 2048 [ 64.205982][ T5182] __nla_validate_parse: 4 callbacks suppressed [ 64.206001][ T5182] netlink: 8 bytes leftover after parsing attributes in process `syz.0.555'. [ 64.236974][ T5182] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.272422][ T5186] loop3: detected capacity change from 0 to 512 [ 64.279609][ T5186] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 64.295619][ T5186] EXT4-fs (loop3): 1 orphan inode deleted [ 64.301467][ T5186] EXT4-fs (loop3): 1 truncate cleaned up [ 64.310453][ T5182] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.371288][ T5182] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.429830][ T5182] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.440632][ T5193] loop3: detected capacity change from 0 to 512 [ 64.476325][ T3339] udevd[3339]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system [ 64.494968][ T5193] ext4 filesystem being mounted at /125/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 64.548970][ T5182] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.582999][ T5182] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.632576][ T5182] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.644951][ T5198] loop2: detected capacity change from 0 to 256 [ 64.666273][ T5198] FAT-fs (loop2): Directory bread(block 64) failed [ 64.679578][ T5182] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.691003][ T5198] FAT-fs (loop2): Directory bread(block 65) failed [ 64.698516][ T5198] FAT-fs (loop2): Directory bread(block 66) failed [ 64.709967][ T5198] FAT-fs (loop2): Directory bread(block 67) failed [ 64.725326][ T5198] FAT-fs (loop2): Directory bread(block 68) failed [ 64.731991][ T5198] FAT-fs (loop2): Directory bread(block 69) failed [ 64.740157][ T5198] FAT-fs (loop2): Directory bread(block 70) failed [ 64.746734][ T5198] FAT-fs (loop2): Directory bread(block 71) failed [ 64.779452][ T5198] FAT-fs (loop2): Directory bread(block 72) failed [ 64.786021][ T5198] FAT-fs (loop2): Directory bread(block 73) failed [ 64.900095][ T5204] loop0: detected capacity change from 0 to 1024 [ 64.951166][ T3339] udevd[3339]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system [ 64.978106][ T5216] loop4: detected capacity change from 0 to 256 [ 65.106128][ T5226] loop3: detected capacity change from 0 to 512 [ 65.144246][ T5226] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 65.156664][ T5230] netlink: 28 bytes leftover after parsing attributes in process `syz.2.571'. [ 65.165689][ T5230] netlink: 28 bytes leftover after parsing attributes in process `syz.2.571'. [ 65.176723][ T3339] udevd[3339]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system [ 65.193105][ T5180] coredump: 272(syz.1.548): written to core: VMAs: 31, size 89161728; core: 60146462 bytes, pos 89169920 [ 65.215867][ T5226] EXT4-fs (loop3): can't mount with data=, fs mounted w/o journal [ 65.230878][ T3339] udevd[3339]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system [ 65.234904][ T5214] loop3: detected capacity change from 0 to 512 [ 65.259372][ T5234] loop1: detected capacity change from 0 to 512 [ 65.266575][ T5234] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 65.278460][ T5214] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 65.281854][ T3447] udevd[3447]: symlink '../../loop1' '/dev/disk/by-label/syzkaller.tmp-b7:1' failed: Read-only file system [ 65.321855][ T3339] udevd[3339]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system [ 65.344733][ T5214] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.569: bg 0: block 264: padding at end of block bitmap is not set [ 65.363367][ T3339] udevd[3339]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system [ 65.375833][ T5234] EXT4-fs (loop1): can't mount with data=, fs mounted w/o journal [ 65.392683][ T3339] udevd[3339]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system [ 65.407438][ T5214] EXT4-fs (loop3): Remounting filesystem read-only [ 65.433585][ T3339] udevd[3339]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:1' failed: Read-only file system [ 65.479559][ T5214] EXT4-fs (loop3): 1 truncate cleaned up [ 65.548754][ T5214] SELinux: (dev loop3, type ext4) getxattr errno 5 [ 65.589208][ T3339] udevd[3339]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system [ 65.622027][ T5232] loop1: detected capacity change from 0 to 512 [ 65.642001][ T5232] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 65.659213][ T5232] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.572: bg 0: block 264: padding at end of block bitmap is not set [ 65.674673][ T5232] EXT4-fs (loop1): Remounting filesystem read-only [ 65.688194][ T5232] EXT4-fs (loop1): 1 truncate cleaned up [ 65.694941][ T5232] SELinux: (dev loop1, type ext4) getxattr errno 5 [ 65.768755][ T5244] loop3: detected capacity change from 0 to 512 [ 65.784395][ T5244] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 65.795722][ T5246] loop1: detected capacity change from 0 to 164 [ 65.821738][ T5246] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 65.848560][ T5244] ext4 filesystem being mounted at /131/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 65.960315][ T5262] loop1: detected capacity change from 0 to 512 [ 65.971219][ T5262] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 65.971424][ T5264] loop4: detected capacity change from 0 to 512 [ 65.992176][ T5266] loop2: detected capacity change from 0 to 1024 [ 66.021330][ T5264] ext4 filesystem being mounted at /123/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 66.036017][ T5262] EXT4-fs (loop1): failed to open journal device unknown-block(0,0) -6 [ 66.053009][ T5262] loop1: detected capacity change from 0 to 512 [ 66.070991][ T5262] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 66.090069][ T5262] EXT4-fs error (device loop1): ext4_orphan_get:1388: inode #15: comm syz.1.582: iget: bad extended attribute block 19 [ 66.102872][ T5262] EXT4-fs error (device loop1): ext4_orphan_get:1393: comm syz.1.582: couldn't read orphan inode 15 (err -117) [ 66.128966][ T5262] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.582: bg 0: block 65: padding at end of block bitmap is not set [ 66.152676][ T5264] netlink: 4 bytes leftover after parsing attributes in process `syz.4.583'. [ 66.161674][ T5264] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 66.163494][ T5279] xt_hashlimit: max too large, truncated to 1048576 [ 66.169122][ T5264] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 66.174667][ T5262] EXT4-fs error (device loop1): ext4_acquire_dquot:6879: comm syz.1.582: Failed to acquire dquot type 0 [ 66.195434][ T5264] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 66.202958][ T5264] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 66.215532][ T5281] syz.4.583: attempt to access beyond end of device [ 66.215532][ T5281] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 66.295611][ T5287] loop1: detected capacity change from 0 to 164 [ 66.304901][ T5287] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 66.421144][ T5299] loop1: detected capacity change from 0 to 1024 [ 66.454456][ T5299] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 66.468308][ T3266] EXT4-fs unmount: 170 callbacks suppressed [ 66.468326][ T3266] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.497772][ T5299] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 66.541485][ T5306] loop3: detected capacity change from 0 to 1024 [ 66.551090][ T5299] EXT4-fs (loop1): orphan cleanup on readonly fs [ 66.557835][ T5306] EXT4-fs: Ignoring removed orlov option [ 66.563622][ T5306] EXT4-fs: Ignoring removed nomblk_io_submit option [ 66.574258][ T5309] netlink: 12 bytes leftover after parsing attributes in process `syz.4.593'. [ 66.589256][ T5299] EXT4-fs error (device loop1): ext4_map_blocks:705: inode #3: block 3: comm syz.1.590: lblock 3 mapped to illegal pblock 3 (length 1) [ 66.640675][ T5299] EXT4-fs error (device loop1): ext4_acquire_dquot:6879: comm syz.1.590: Failed to acquire dquot type 0 [ 66.657959][ T5299] EXT4-fs error (device loop1): ext4_map_blocks:671: inode #3: block 3: comm syz.1.590: lblock 3 mapped to illegal pblock 3 (length 1) [ 66.677214][ T5299] EXT4-fs error (device loop1): ext4_acquire_dquot:6879: comm syz.1.590: Failed to acquire dquot type 0 [ 66.696934][ T5306] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 66.709214][ T5299] EXT4-fs error (device loop1): ext4_free_blocks:6589: comm syz.1.590: Freeing blocks not in datazone - block = 0, count = 4096 [ 66.724009][ T5299] EXT4-fs error (device loop1): ext4_map_blocks:671: inode #3: block 3: comm syz.1.590: lblock 3 mapped to illegal pblock 3 (length 1) [ 66.741233][ T5299] EXT4-fs error (device loop1): ext4_acquire_dquot:6879: comm syz.1.590: Failed to acquire dquot type 0 [ 66.772905][ T5299] EXT4-fs (loop1): 1 orphan inode deleted [ 66.779918][ T5315] loop4: detected capacity change from 0 to 2048 [ 66.786381][ T5299] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 66.805103][ T5296] netlink: 20 bytes leftover after parsing attributes in process `syz.1.590'. [ 66.840898][ T3268] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.851812][ T5315] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 66.881688][ T3264] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.912684][ T3262] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.914803][ T5324] loop1: detected capacity change from 0 to 512 [ 66.936729][ T5324] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 66.957928][ T5327] loop2: detected capacity change from 0 to 512 [ 66.963352][ T5326] loop4: detected capacity change from 0 to 512 [ 66.965233][ T5327] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 66.983834][ T5327] EXT4-fs (loop2): invalid journal inode [ 66.990952][ T5327] EXT4-fs (loop2): can't get journal size [ 67.001066][ T5324] EXT4-fs (loop1): failed to open journal device unknown-block(0,0) -6 [ 67.010600][ T5326] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.026745][ T5327] EXT4-fs (loop2): 1 truncate cleaned up [ 67.027418][ T5326] ext4 filesystem being mounted at /128/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 67.033757][ T5324] loop1: detected capacity change from 0 to 512 [ 67.049725][ T5327] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 67.063800][ T29] kauditd_printk_skb: 1497 callbacks suppressed [ 67.063818][ T29] audit: type=1326 audit(1727162790.293:6835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5321 comm="syz.2.598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f044b61c890 code=0x7ffc0000 [ 67.093580][ T29] audit: type=1326 audit(1727162790.293:6836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5321 comm="syz.2.598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7f044b61cc77 code=0x7ffc0000 [ 67.116856][ T29] audit: type=1326 audit(1727162790.293:6837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5321 comm="syz.2.598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f044b61c890 code=0x7ffc0000 [ 67.140216][ T29] audit: type=1326 audit(1727162790.293:6838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5321 comm="syz.2.598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f044b61def9 code=0x7ffc0000 [ 67.163524][ T29] audit: type=1326 audit(1727162790.293:6839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5321 comm="syz.2.598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f044b61def9 code=0x7ffc0000 [ 67.197633][ T29] audit: type=1326 audit(1727162790.303:6840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5323 comm="syz.1.597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f937d35cb8a code=0x7ffc0000 [ 67.201128][ T5324] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 67.221339][ T29] audit: type=1326 audit(1727162790.303:6841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5323 comm="syz.1.597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f937d35cb8a code=0x7ffc0000 [ 67.253659][ T29] audit: type=1326 audit(1727162790.393:6842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5321 comm="syz.2.598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f044b61def9 code=0x7ffc0000 [ 67.277308][ T29] audit: type=1326 audit(1727162790.393:6843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5321 comm="syz.2.598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f044b61def9 code=0x7ffc0000 [ 67.278643][ T5324] EXT4-fs error (device loop1): ext4_orphan_get:1388: inode #15: comm syz.1.597: iget: bad extended attribute block 19 [ 67.300797][ T29] audit: type=1326 audit(1727162790.393:6844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5321 comm="syz.2.598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f044b61def9 code=0x7ffc0000 [ 67.328585][ T5324] EXT4-fs error (device loop1): ext4_orphan_get:1393: comm syz.1.597: couldn't read orphan inode 15 (err -117) [ 67.350602][ T3262] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.351863][ T3268] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.367930][ T5324] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.433455][ T5324] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.597: bg 0: block 65: padding at end of block bitmap is not set [ 67.445171][ T5348] loop4: detected capacity change from 0 to 164 [ 67.451981][ T5342] loop2: detected capacity change from 0 to 256 [ 67.455273][ T3266] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.475687][ T5348] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 67.482987][ T5342] FAT-fs (loop2): Directory bread(block 64) failed [ 67.497216][ T5346] loop0: detected capacity change from 0 to 512 [ 67.504428][ T5324] EXT4-fs error (device loop1): ext4_acquire_dquot:6879: comm syz.1.597: Failed to acquire dquot type 0 [ 67.525258][ T5342] FAT-fs (loop2): Directory bread(block 65) failed [ 67.552284][ T5346] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.557111][ T5342] FAT-fs (loop2): Directory bread(block 66) failed [ 67.572595][ T5342] FAT-fs (loop2): Directory bread(block 67) failed [ 67.573721][ T3264] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.587103][ T5342] FAT-fs (loop2): Directory bread(block 68) failed [ 67.595090][ T5342] FAT-fs (loop2): Directory bread(block 69) failed [ 67.597824][ T5364] netlink: 12 bytes leftover after parsing attributes in process `syz.3.605'. [ 67.601751][ T5342] FAT-fs (loop2): Directory bread(block 70) failed [ 67.617435][ T5346] ext4 filesystem being mounted at /128/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 67.617897][ T5342] FAT-fs (loop2): Directory bread(block 71) failed [ 67.634133][ T5365] loop4: detected capacity change from 0 to 1024 [ 67.634436][ T5342] FAT-fs (loop2): Directory bread(block 72) failed [ 67.650221][ T5342] FAT-fs (loop2): Directory bread(block 73) failed [ 67.674632][ T5365] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 67.708731][ T5368] loop1: detected capacity change from 0 to 256 [ 67.726351][ T5369] can0: slcan on ttyS3. [ 67.730126][ T3260] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.745378][ T5365] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 67.754254][ T5365] EXT4-fs (loop4): orphan cleanup on readonly fs [ 67.758242][ T5368] FAT-fs (loop1): Directory bread(block 64) failed [ 67.761383][ T5365] EXT4-fs error (device loop4): ext4_map_blocks:705: inode #3: block 3: comm syz.4.607: lblock 3 mapped to illegal pblock 3 (length 1) [ 67.781172][ T5368] FAT-fs (loop1): Directory bread(block 65) failed [ 67.798378][ T5368] FAT-fs (loop1): Directory bread(block 66) failed [ 67.804953][ T5368] FAT-fs (loop1): Directory bread(block 67) failed [ 67.813712][ T5372] xt_hashlimit: max too large, truncated to 1048576 [ 67.828192][ T5369] can0 (unregistered): slcan off ttyS3. [ 67.834092][ T5369] Falling back ldisc for ttyS3. [ 67.844606][ T5365] EXT4-fs error (device loop4): ext4_acquire_dquot:6879: comm syz.4.607: Failed to acquire dquot type 0 [ 67.856202][ T5368] FAT-fs (loop1): Directory bread(block 68) failed [ 67.878414][ T5368] FAT-fs (loop1): Directory bread(block 69) failed [ 67.893388][ T5365] EXT4-fs error (device loop4): ext4_map_blocks:671: inode #3: block 3: comm syz.4.607: lblock 3 mapped to illegal pblock 3 (length 1) [ 67.913600][ T5387] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 67.917507][ T5368] FAT-fs (loop1): Directory bread(block 70) failed [ 67.921831][ T5387] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 67.942669][ T5368] FAT-fs (loop1): Directory bread(block 71) failed [ 67.945987][ T5385] loop3: detected capacity change from 0 to 512 [ 67.949401][ T5365] EXT4-fs error (device loop4): ext4_acquire_dquot:6879: comm syz.4.607: Failed to acquire dquot type 0 [ 67.965938][ T5368] FAT-fs (loop1): Directory bread(block 72) failed [ 67.973593][ T5368] FAT-fs (loop1): Directory bread(block 73) failed [ 67.982998][ T5390] loop0: detected capacity change from 0 to 512 [ 67.999717][ T5365] EXT4-fs error (device loop4): ext4_free_blocks:6589: comm syz.4.607: Freeing blocks not in datazone - block = 0, count = 4096 [ 68.026843][ T5385] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.035365][ T5396] loop2: detected capacity change from 0 to 164 [ 68.039396][ T5365] EXT4-fs error (device loop4): ext4_map_blocks:671: inode #3: block 3: comm syz.4.607: lblock 3 mapped to illegal pblock 3 (length 1) [ 68.059819][ T5385] ext4 filesystem being mounted at /135/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 68.070012][ T5390] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.085234][ T5365] EXT4-fs error (device loop4): ext4_acquire_dquot:6879: comm syz.4.607: Failed to acquire dquot type 0 [ 68.096697][ T5396] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 68.133739][ T5409] loop2: detected capacity change from 0 to 512 [ 68.135227][ T5390] ext4 filesystem being mounted at /131/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 68.151562][ T5365] EXT4-fs (loop4): 1 orphan inode deleted [ 68.158354][ T5409] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 68.167130][ T5365] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 68.195121][ T5409] EXT4-fs (loop2): failed to open journal device unknown-block(0,0) -6 [ 68.230527][ T5418] SELinux: failure in selinux_parse_skb(), unable to parse packet [ 68.234966][ T5409] loop2: detected capacity change from 0 to 512 [ 68.250494][ T5360] netlink: 20 bytes leftover after parsing attributes in process `syz.4.607'. [ 68.262038][ T5409] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 68.262850][ T3266] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.314472][ T5409] EXT4-fs error (device loop2): ext4_orphan_get:1388: inode #15: comm syz.2.618: iget: bad extended attribute block 19 [ 68.317403][ T5430] loop3: detected capacity change from 0 to 164 [ 68.335612][ T3260] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.354875][ T5409] EXT4-fs error (device loop2): ext4_orphan_get:1393: comm syz.2.618: couldn't read orphan inode 15 (err -117) [ 68.367490][ T3262] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.389697][ T5430] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 68.401701][ T5409] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.431436][ T5425] loop1: detected capacity change from 0 to 256 [ 68.486094][ T5425] FAT-fs (loop1): Directory bread(block 64) failed [ 68.496649][ T5425] FAT-fs (loop1): Directory bread(block 65) failed [ 68.513941][ T5425] FAT-fs (loop1): Directory bread(block 66) failed [ 68.526836][ T5425] FAT-fs (loop1): Directory bread(block 67) failed [ 68.536848][ T5425] FAT-fs (loop1): Directory bread(block 68) failed [ 68.539149][ T5409] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.618: bg 0: block 65: padding at end of block bitmap is not set [ 68.550396][ T5425] FAT-fs (loop1): Directory bread(block 69) failed [ 68.570084][ T5409] EXT4-fs error (device loop2): ext4_acquire_dquot:6879: comm syz.2.618: Failed to acquire dquot type 0 [ 68.576831][ T5425] FAT-fs (loop1): Directory bread(block 70) failed [ 68.591604][ T5425] FAT-fs (loop1): Directory bread(block 71) failed [ 68.598360][ T5425] FAT-fs (loop1): Directory bread(block 72) failed [ 68.604899][ T5425] FAT-fs (loop1): Directory bread(block 73) failed [ 68.661156][ T3268] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.669828][ T5458] SELinux: failure in selinux_parse_skb(), unable to parse packet [ 68.720033][ T5459] netlink: 28 bytes leftover after parsing attributes in process `syz.3.629'. [ 68.729064][ T5459] netlink: 28 bytes leftover after parsing attributes in process `syz.3.629'. [ 68.764156][ T5461] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 68.771754][ T5461] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 68.781147][ T5470] xt_hashlimit: max too large, truncated to 1048576 [ 68.794794][ T5461] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 68.802283][ T5461] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 68.821116][ T5454] loop0: detected capacity change from 0 to 512 [ 68.856619][ T5476] loop4: detected capacity change from 0 to 1024 [ 68.876822][ T5454] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 68.971878][ T5479] loop3: detected capacity change from 0 to 164 [ 68.982242][ T5479] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 69.037343][ T5454] EXT4-fs (loop0): can't mount with data=, fs mounted w/o journal [ 69.050856][ T5484] loop1: detected capacity change from 0 to 8192 [ 69.102626][ T5486] loop3: detected capacity change from 0 to 2048 [ 69.137762][ T5476] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.153032][ T5454] loop0: detected capacity change from 0 to 512 [ 69.167706][ T5484] bridge0: entered allmulticast mode [ 69.187371][ T5454] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 69.207072][ T5486] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.248833][ T5454] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.630: bg 0: block 264: padding at end of block bitmap is not set [ 69.284161][ T5467] coredump: 1(syz.2.632): written to core: VMAs: 29, size 91127808; core: 62108334 bytes, pos 91136000 [ 69.315756][ T5454] EXT4-fs (loop0): Remounting filesystem read-only [ 69.356989][ T5454] EXT4-fs (loop0): 1 truncate cleaned up [ 69.379720][ T3266] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.390049][ T5454] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.409230][ T5454] SELinux: (dev loop0, type ext4) getxattr errno 5 [ 69.416434][ T5454] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.444904][ T5496] loop1: detected capacity change from 0 to 512 [ 69.460289][ T5496] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 69.490676][ T3339] udevd[3339]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system [ 69.505715][ T5499] loop2: detected capacity change from 0 to 512 [ 69.513898][ T5499] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 69.515829][ T3447] udevd[3447]: symlink '../../loop1' '/dev/disk/by-label/\x86\x5b.tmp-b7:1' failed: Read-only file system [ 69.533738][ T5503] loop0: detected capacity change from 0 to 256 [ 69.559603][ T5499] EXT4-fs (loop2): failed to open journal device unknown-block(0,0) -6 [ 69.580512][ T5496] EXT4-fs (loop1): failed to open journal device unknown-block(0,0) -6 [ 69.595678][ T3339] udevd[3339]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system [ 69.615606][ T5499] loop2: detected capacity change from 0 to 512 [ 69.631824][ T5496] loop1: detected capacity change from 0 to 512 [ 69.642097][ T5499] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 69.646154][ T5496] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 69.654165][ T3446] udevd[3446]: symlink '../../loop1' '/dev/disk/by-label/syzkaller.tmp-b7:1' failed: Read-only file system [ 69.680678][ T3339] udevd[3339]: symlink '../../loop1' '/dev/disk/by-label/syzkaller.tmp-b7:1' failed: Read-only file system [ 69.695735][ T5499] EXT4-fs error (device loop2): ext4_orphan_get:1388: inode #15: comm syz.2.641: iget: bad extended attribute block 19 [ 69.715731][ T5499] EXT4-fs error (device loop2): ext4_orphan_get:1393: comm syz.2.641: couldn't read orphan inode 15 (err -117) [ 69.717505][ T5503] FAT-fs (loop0): Directory bread(block 64) failed [ 69.732027][ T5499] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.753587][ T5496] EXT4-fs error (device loop1): ext4_orphan_get:1388: inode #15: comm syz.1.644: iget: bad extended attribute block 19 [ 69.758721][ T5503] FAT-fs (loop0): Directory bread(block 65) failed [ 69.770746][ T5496] EXT4-fs error (device loop1): ext4_orphan_get:1393: comm syz.1.644: couldn't read orphan inode 15 (err -117) [ 69.787956][ T5499] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.641: bg 0: block 65: padding at end of block bitmap is not set [ 69.800879][ T5503] FAT-fs (loop0): Directory bread(block 66) failed [ 69.804631][ T5499] EXT4-fs error (device loop2): ext4_acquire_dquot:6879: comm syz.2.641: Failed to acquire dquot type 0 [ 69.811017][ T5496] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.833510][ T3262] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.835316][ T5503] FAT-fs (loop0): Directory bread(block 67) failed [ 69.856240][ T3339] udevd[3339]: symlink '../../loop1' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system [ 69.872661][ T5503] FAT-fs (loop0): Directory bread(block 68) failed [ 69.881466][ T5503] FAT-fs (loop0): Directory bread(block 69) failed [ 69.889109][ T5503] FAT-fs (loop0): Directory bread(block 70) failed [ 69.889761][ T3268] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.896133][ T5503] FAT-fs (loop0): Directory bread(block 71) failed [ 69.926791][ T5503] FAT-fs (loop0): Directory bread(block 72) failed [ 69.933677][ T5503] FAT-fs (loop0): Directory bread(block 73) failed [ 69.963686][ T5496] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.644: bg 0: block 65: padding at end of block bitmap is not set [ 69.993269][ T3339] udevd[3339]: symlink '../../loop1' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system [ 70.009251][ T5496] EXT4-fs error (device loop1): ext4_acquire_dquot:6879: comm syz.1.644: Failed to acquire dquot type 0 [ 70.025084][ T5528] loop2: detected capacity change from 0 to 164 [ 70.055731][ T5528] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 70.070411][ T5532] loop3: detected capacity change from 0 to 164 [ 70.091122][ T5532] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 70.101483][ T3447] udevd[3447]: symlink '../../loop2' '/dev/disk/by-label/CDROM.tmp-b7:2' failed: Read-only file system [ 70.115328][ T3446] udevd[3446]: symlink '../../loop3' '/dev/disk/by-label/CDROM.tmp-b7:3' failed: Read-only file system [ 70.137697][ T3446] udevd[3446]: symlink '../../loop3' '/dev/disk/by-uuid/2022-11-22-16-59-57-00.tmp-b7:3' failed: Read-only file system [ 70.153959][ T5534] loop0: detected capacity change from 0 to 512 [ 70.165281][ T3264] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.184850][ T5534] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.193300][ T5536] loop2: detected capacity change from 0 to 512 [ 70.200249][ T5534] ext4 filesystem being mounted at /137/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 70.224777][ T5536] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 70.232909][ T5543] __nla_validate_parse: 1 callbacks suppressed [ 70.232927][ T5543] netlink: 28 bytes leftover after parsing attributes in process `syz.3.659'. [ 70.235079][ T5536] EXT4-fs (loop2): invalid journal inode [ 70.239130][ T5543] netlink: 28 bytes leftover after parsing attributes in process `syz.3.659'. [ 70.249181][ T5536] EXT4-fs (loop2): can't get journal size [ 70.270478][ T5536] EXT4-fs (loop2): 1 truncate cleaned up [ 70.276435][ T5536] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.292863][ T5536] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.657: bg 0: block 255: padding at end of block bitmap is not set [ 70.318577][ T3268] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.334204][ T3260] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.357747][ T5553] xt_hashlimit: max too large, truncated to 1048576 [ 70.402114][ T5559] loop0: detected capacity change from 0 to 2048 [ 70.402765][ T5561] loop2: detected capacity change from 0 to 256 [ 70.432927][ T5559] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.437256][ T5561] FAT-fs (loop2): Directory bread(block 64) failed [ 70.451589][ T5561] FAT-fs (loop2): Directory bread(block 65) failed [ 70.454798][ T5563] loop1: detected capacity change from 0 to 512 [ 70.458239][ T5561] FAT-fs (loop2): Directory bread(block 66) failed [ 70.471172][ T5561] FAT-fs (loop2): Directory bread(block 67) failed [ 70.478068][ T5561] FAT-fs (loop2): Directory bread(block 68) failed [ 70.478808][ T5563] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 70.484573][ T5561] FAT-fs (loop2): Directory bread(block 69) failed [ 70.500280][ T5561] FAT-fs (loop2): Directory bread(block 70) failed [ 70.502795][ T5563] EXT4-fs (loop1): can't mount with data=, fs mounted w/o journal [ 70.506814][ T5561] FAT-fs (loop2): Directory bread(block 71) failed [ 70.521351][ T5561] FAT-fs (loop2): Directory bread(block 72) failed [ 70.528970][ T5561] FAT-fs (loop2): Directory bread(block 73) failed [ 70.560990][ T3260] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.574814][ T5563] loop1: detected capacity change from 0 to 512 [ 70.582203][ T5563] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 70.593608][ T5563] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.666: bg 0: block 264: padding at end of block bitmap is not set [ 70.608373][ T5563] EXT4-fs (loop1): Remounting filesystem read-only [ 70.617205][ T5563] EXT4-fs (loop1): 1 truncate cleaned up [ 70.623439][ T5563] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.630909][ T5570] netlink: 4 bytes leftover after parsing attributes in process `syz.2.668'. [ 70.635626][ T5563] SELinux: (dev loop1, type ext4) getxattr errno 5 [ 70.655570][ T5563] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.670289][ T5570] hsr_slave_1 (unregistering): left promiscuous mode [ 70.836003][ T5589] loop0: detected capacity change from 0 to 512 [ 70.845934][ T5589] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 70.872410][ T5589] EXT4-fs (loop0): invalid journal inode [ 70.879293][ T5589] EXT4-fs (loop0): can't get journal size [ 70.887046][ T5589] EXT4-fs (loop0): 1 truncate cleaned up [ 70.893494][ T5589] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.897487][ T5595] loop4: detected capacity change from 0 to 256 [ 70.913304][ T5584] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.673: bg 0: block 255: padding at end of block bitmap is not set [ 70.965371][ T5595] FAT-fs (loop4): Directory bread(block 64) failed [ 70.972328][ T5595] FAT-fs (loop4): Directory bread(block 65) failed [ 70.980295][ T5595] FAT-fs (loop4): Directory bread(block 66) failed [ 70.988201][ T5595] FAT-fs (loop4): Directory bread(block 67) failed [ 70.998773][ T3260] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.027664][ T5595] FAT-fs (loop4): Directory bread(block 68) failed [ 71.058593][ T5595] FAT-fs (loop4): Directory bread(block 69) failed [ 71.078706][ T5609] loop0: detected capacity change from 0 to 512 [ 71.079110][ T5606] loop3: detected capacity change from 0 to 512 [ 71.085114][ T5595] FAT-fs (loop4): Directory bread(block 70) failed [ 71.102524][ T5603] netlink: 4 bytes leftover after parsing attributes in process `syz.2.681'. [ 71.105314][ T5595] FAT-fs (loop4): Directory bread(block 71) failed [ 71.120652][ T5609] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 71.123651][ T5606] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 71.135703][ T5595] FAT-fs (loop4): Directory bread(block 72) failed [ 71.146013][ T5595] FAT-fs (loop4): Directory bread(block 73) failed [ 71.159315][ T5609] EXT4-fs (loop0): can't mount with data=, fs mounted w/o journal [ 71.179372][ T5606] EXT4-fs (loop3): 1 orphan inode deleted [ 71.185161][ T5606] EXT4-fs (loop3): 1 truncate cleaned up [ 71.197003][ T5606] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.203258][ T5609] loop0: detected capacity change from 0 to 512 [ 71.246039][ T5609] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 71.261246][ T3266] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.288699][ T5609] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.680: bg 0: block 264: padding at end of block bitmap is not set [ 71.305751][ T5609] EXT4-fs (loop0): Remounting filesystem read-only [ 71.333446][ T5622] SELinux: failure in selinux_parse_skb(), unable to parse packet [ 71.348793][ T5609] EXT4-fs (loop0): 1 truncate cleaned up [ 71.354957][ T5609] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.399745][ T5609] SELinux: (dev loop0, type ext4) getxattr errno 5 [ 71.409317][ T5627] loop2: detected capacity change from 0 to 164 [ 71.432445][ T5609] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.445113][ T5631] loop4: detected capacity change from 0 to 1024 [ 71.460182][ T5627] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 71.466426][ T5631] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 71.491504][ T5631] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 71.514335][ T5635] loop3: detected capacity change from 0 to 512 [ 71.524018][ T5631] EXT4-fs (loop4): orphan cleanup on readonly fs [ 71.538625][ T5631] EXT4-fs error (device loop4): ext4_map_blocks:705: inode #3: block 3: comm syz.4.689: lblock 3 mapped to illegal pblock 3 (length 1) [ 71.552766][ T5635] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 71.570713][ T5640] loop2: detected capacity change from 0 to 512 [ 71.588178][ T5635] EXT4-fs (loop3): invalid journal inode [ 71.593897][ T5635] EXT4-fs (loop3): can't get journal size [ 71.611904][ T5631] EXT4-fs error (device loop4): ext4_acquire_dquot:6879: comm syz.4.689: Failed to acquire dquot type 0 [ 71.626582][ T5640] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.637463][ T5631] EXT4-fs error (device loop4): ext4_map_blocks:671: inode #3: block 3: comm syz.4.689: lblock 3 mapped to illegal pblock 3 (length 1) [ 71.640193][ T5640] ext4 filesystem being mounted at /116/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 71.738888][ T5635] EXT4-fs (loop3): 1 truncate cleaned up [ 71.744827][ T5635] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.769745][ T5577] coredump: 1(syz.1.670): written to core: VMAs: 29, size 89030656; core: 60002990 bytes, pos 89038848 [ 71.781119][ T5631] EXT4-fs error (device loop4): ext4_acquire_dquot:6879: comm syz.4.689: Failed to acquire dquot type 0 [ 71.785154][ T5635] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.690: bg 0: block 255: padding at end of block bitmap is not set [ 71.808344][ T5631] EXT4-fs error (device loop4): ext4_free_blocks:6589: comm syz.4.689: Freeing blocks not in datazone - block = 0, count = 4096 [ 71.835618][ T3268] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.847574][ T5631] EXT4-fs error (device loop4): ext4_map_blocks:671: inode #3: block 3: comm syz.4.689: lblock 3 mapped to illegal pblock 3 (length 1) [ 71.848669][ T3266] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.865802][ T5659] loop1: detected capacity change from 0 to 512 [ 71.877668][ T5631] EXT4-fs error (device loop4): ext4_acquire_dquot:6879: comm syz.4.689: Failed to acquire dquot type 0 [ 71.907228][ T5663] loop3: detected capacity change from 0 to 512 [ 71.913064][ T5631] EXT4-fs (loop4): 1 orphan inode deleted [ 71.918423][ T5664] SELinux: failure in selinux_parse_skb(), unable to parse packet [ 71.928173][ T5631] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 71.958446][ T5663] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 71.978204][ T5631] netlink: 20 bytes leftover after parsing attributes in process `syz.4.689'. [ 72.001467][ T5659] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.037049][ T3262] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.043646][ T5666] loop2: detected capacity change from 0 to 512 [ 72.052488][ T5663] EXT4-fs (loop3): failed to open journal device unknown-block(0,0) -6 [ 72.067370][ T29] kauditd_printk_skb: 928 callbacks suppressed [ 72.067387][ T29] audit: type=1326 audit(1727162795.293:7755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5661 comm="syz.3.700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c683edef9 code=0x7ffc0000 [ 72.073988][ T5663] loop3: detected capacity change from 0 to 512 [ 72.096939][ T29] audit: type=1326 audit(1727162795.293:7756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5661 comm="syz.3.700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c683edef9 code=0x7ffc0000 [ 72.096972][ T29] audit: type=1326 audit(1727162795.293:7757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5661 comm="syz.3.700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f7c683edef9 code=0x7ffc0000 [ 72.118276][ T5659] ext4 filesystem being mounted at /133/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 72.126572][ T29] audit: type=1326 audit(1727162795.293:7758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5661 comm="syz.3.700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f7c683edf33 code=0x7ffc0000 [ 72.187419][ T5666] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 72.193003][ T5663] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 72.209911][ T29] audit: type=1326 audit(1727162795.303:7759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5661 comm="syz.3.700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f7c683ec9df code=0x7ffc0000 [ 72.222141][ T5666] EXT4-fs (loop2): can't mount with data=, fs mounted w/o journal [ 72.233234][ T29] audit: type=1326 audit(1727162795.303:7760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5661 comm="syz.3.700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f7c683edf87 code=0x7ffc0000 [ 72.242150][ T5674] loop4: detected capacity change from 0 to 512 [ 72.264170][ T29] audit: type=1326 audit(1727162795.303:7761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5661 comm="syz.3.700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7c683ec890 code=0x7ffc0000 [ 72.293804][ T29] audit: type=1326 audit(1727162795.303:7762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5661 comm="syz.3.700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f7c683edafb code=0x7ffc0000 [ 72.317222][ T29] audit: type=1326 audit(1727162795.413:7763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5661 comm="syz.3.700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f7c683ecb8a code=0x7ffc0000 [ 72.323894][ T5663] EXT4-fs error (device loop3): ext4_orphan_get:1388: inode #15: comm syz.3.700: iget: bad extended attribute block 19 [ 72.340460][ T29] audit: type=1326 audit(1727162795.413:7764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5661 comm="syz.3.700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f7c683ecb8a code=0x7ffc0000 [ 72.377234][ T5674] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 72.390734][ T5663] EXT4-fs error (device loop3): ext4_orphan_get:1393: comm syz.3.700: couldn't read orphan inode 15 (err -117) [ 72.406635][ T5663] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.410509][ T5666] loop2: detected capacity change from 0 to 512 [ 72.426571][ T5674] EXT4-fs (loop4): can't mount with data=, fs mounted w/o journal [ 72.435482][ T5666] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 72.457855][ T5674] loop4: detected capacity change from 0 to 512 [ 72.467045][ T5666] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.701: bg 0: block 264: padding at end of block bitmap is not set [ 72.490491][ T5674] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 72.502171][ T5666] EXT4-fs (loop2): Remounting filesystem read-only [ 72.512759][ T5663] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.700: bg 0: block 65: padding at end of block bitmap is not set [ 72.512794][ T5666] EXT4-fs (loop2): 1 truncate cleaned up [ 72.513196][ T5666] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.529415][ T5663] EXT4-fs error (device loop3): ext4_acquire_dquot:6879: comm syz.3.700: Failed to acquire dquot type 0 [ 72.533293][ T5666] SELinux: (dev loop2, type ext4) getxattr errno 5 [ 72.553729][ T5674] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.702: bg 0: block 264: padding at end of block bitmap is not set [ 72.557641][ T5666] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.590668][ T5674] EXT4-fs (loop4): Remounting filesystem read-only [ 72.601033][ T5674] EXT4-fs (loop4): 1 truncate cleaned up [ 72.607047][ T5674] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.619526][ T5674] SELinux: (dev loop4, type ext4) getxattr errno 5 [ 72.636841][ T5674] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.648874][ T3266] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.663107][ T3264] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.679947][ T3339] ================================================================== [ 72.688093][ T3339] BUG: KCSAN: data-race in generic_fillattr / shmem_unlink [ 72.695321][ T3339] [ 72.697659][ T3339] write to 0xffff888104259834 of 4 bytes by task 3447 on cpu 0: [ 72.700212][ T5689] netlink: 8 bytes leftover after parsing attributes in process `syz.3.705'. [ 72.705289][ T3339] shmem_unlink+0x14a/0x180 [ 72.705318][ T3339] vfs_unlink+0x275/0x430 [ 72.722955][ T3339] do_unlinkat+0x236/0x4c0 [ 72.727412][ T3339] __x64_sys_unlink+0x2e/0x40 [ 72.730428][ T5689] netlink: 8 bytes leftover after parsing attributes in process `syz.3.705'. [ 72.732148][ T3339] x64_sys_call+0x280f/0x2d60 [ 72.745600][ T3339] do_syscall_64+0xc9/0x1c0 [ 72.750151][ T3339] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 72.756076][ T3339] [ 72.758411][ T3339] read to 0xffff888104259834 of 4 bytes by task 3339 on cpu 1: [ 72.765967][ T3339] generic_fillattr+0x1a6/0x2f0 [ 72.770851][ T3339] shmem_getattr+0x17b/0x200 [ 72.775462][ T3339] vfs_getattr+0x19b/0x1e0 [ 72.779905][ T3339] vfs_statx+0x134/0x2f0 [ 72.784255][ T3339] vfs_fstatat+0xec/0x110 [ 72.788587][ T3339] __se_sys_newfstatat+0x58/0x260 [ 72.793618][ T3339] __x64_sys_newfstatat+0x55/0x70 [ 72.798650][ T3339] x64_sys_call+0x141f/0x2d60 [ 72.803331][ T3339] do_syscall_64+0xc9/0x1c0 [ 72.807850][ T3339] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 72.813740][ T3339] [ 72.816057][ T3339] value changed: 0x35da49a6 -> 0x3672e026 [ 72.821786][ T3339] [ 72.824099][ T3339] Reported by Kernel Concurrency Sanitizer on: [ 72.830242][ T3339] CPU: 1 UID: 0 PID: 3339 Comm: udevd Not tainted 6.11.0-syzkaller-09015-g18ba6034468e #0 [ 72.840138][ T3339] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 72.850193][ T3339] ==================================================================