last executing test programs: 1m41.4114698s ago: executing program 1 (id=129): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) fsetxattr$security_selinux(r1, &(0x7f0000000000), &(0x7f0000000040)='system_u:object_r:mouse_device_t:s0\x00', 0x1001, 0x0) 1m41.38190552s ago: executing program 1 (id=130): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) mlock(&(0x7f0000ffa000/0x4000)=nil, 0x4000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) mknod(&(0x7f00000003c0)='./file1\x00', 0x8000, 0xfffffff7) newfstatat(0xffffffffffffff9c, &(0x7f00000009c0)='./file1\x00', &(0x7f0000000f00)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setreuid(r1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) r3 = gettid() r4 = gettid() tkill(r3, 0x12) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r5, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000180)}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffe00}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10) tkill(r4, 0xd) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x0, &(0x7f0000000380)}) 1m41.30193491s ago: executing program 1 (id=132): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x1) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000080)={0x1e26, 0xa8f4, 0x1, 0x3, 0x2, "8c9088a6201a6a1c9feae588c7dcba0de2b343", 0x4, 0x55}) 1m41.06213489s ago: executing program 1 (id=134): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./bus\x00', 0x200000, &(0x7f0000000100)={[{@quota}, {@noquota}]}, 0xfc, 0x56d, &(0x7f0000000240)="$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") bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='leases_conflict\x00', r1}, 0x10) ioctl$FS_IOC_FIEMAP(r2, 0xc020660b, &(0x7f0000000f80)={0x7fffffffffffffff, 0x6, 0x0, 0x0, 0x6, 0x0, [{0xe, 0xffffffffffffffff, 0x3, '\x00', 0x204}, {0x6, 0xfef9, 0x9, '\x00', 0xa01}, {0xffffffff, 0xaf3, 0x1, '\x00', 0x340a}, {0x8, 0xffffffffffffff9b, 0x401, '\x00', 0x108}, {0x3, 0x1, 0xee3, '\x00', 0x1080}, {0x8, 0x3, 0x6886, '\x00', 0x1400}]}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r4 = syz_clone(0x20a00000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$getregset(0x4204, r4, 0x202, &(0x7f0000000180)={&(0x7f0000000340)=""/32, 0x20}) (async) ptrace$getregset(0x4204, r4, 0x202, &(0x7f0000000180)={&(0x7f0000000340)=""/32, 0x20}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r6, 0x0, 0x80, &(0x7f00000000c0)=@broute={'broute\x00', 0x20, 0x1, 0x220, [0x0, 0x0, 0x0, 0x0, 0x96f0, 0x20000500], 0x7, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0100000011000000000000000000a22a30456b880000145b41fe69e3ffff78616d3000000000000000000000000079616d3000000000000000000000000076657468315f742f5f626f6e640000000180c20000000000000000000180c20000000800000000000000b100000067010000900100007374617469737469630000000000000000000000000000000000000000000000180000000000000000000000000000000000000000000000000000000000646e61740000060000000000ff0300000000000000000000000000000000000010000000000000000180c20000000000bb8e66505c1aa6d062c3b52cffffffff000000006e666c6f670000000000000000000000000000000000000050000000121b6eb244c4f0fffbf04a000000007e4b000022569e338e2c551c2fc4a19597ba4c501c8b1f16fb7809c40aeea768e825383d2afb577ed2bb6dd99fd43741089cca6edb0041555449540000000000000000000000000626967e000000000000000000000008000000000000200000000000000000840200"/544]}, 0x298) (async) setsockopt$EBT_SO_SET_ENTRIES(r6, 0x0, 0x80, &(0x7f00000000c0)=@broute={'broute\x00', 0x20, 0x1, 0x220, [0x0, 0x0, 0x0, 0x0, 0x96f0, 0x20000500], 0x7, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="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"/544]}, 0x298) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r7, 0x400, 0x0) fsetxattr$trusted_overlay_redirect(r7, &(0x7f0000000040), 0x0, 0x0, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) (async) r8 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) pwritev2(r8, &(0x7f0000000000)=[{0x0}, {&(0x7f00000007c0)="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", 0x742}], 0x2, 0x1002020, 0x1020884, 0x12) (async) pwritev2(r8, &(0x7f0000000000)=[{0x0}, {&(0x7f00000007c0)="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", 0x742}], 0x2, 0x1002020, 0x1020884, 0x12) 1m40.624959979s ago: executing program 1 (id=138): socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000020000000400000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x440200, 0x0) ioctl$TUNSETSTEERINGEBPF(r2, 0x800454e0, &(0x7f00000004c0)=r1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1, 0x0, 0xfffffffffffffffe}, 0x18) socket$inet(0x2, 0x2, 0x1) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000810"], 0x50) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="5c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800e00010069703665727370616e0000002000028006000200300000001400060000000000000000000000ffff7f00000108000a00", @ANYRES32], 0x5c}}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd"], 0xfdef) r9 = socket$kcm(0x11, 0x200000000000002, 0x300) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='memory.current\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r9, 0x107, 0x12, &(0x7f0000000100)=r10, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r11 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r11, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) connect$netlink(r8, &(0x7f0000000280)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) sendmsg$nl_route(r8, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x1f, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c00000021000f0000f901000000000002"], 0x1c}, 0x1, 0x0, 0x0, 0xa011}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000dc0)={0x1a, 0xb, &(0x7f0000000540)=@raw=[@map_idx={0x18, 0x2, 0x5, 0x0, 0x9}, @exit, @map_val={0x18, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1ff}, @cb_func={0x18, 0xb, 0x4, 0x0, 0x7}, @map_idx={0x18, 0x2, 0x5, 0x0, 0x6}, @map_idx={0x18, 0xb, 0x5, 0x0, 0x6}], &(0x7f00000005c0)='GPL\x00', 0x100, 0xeb, &(0x7f00000006c0)=""/235, 0x41000, 0x68, '\x00', 0x0, @tracing=0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000980)={0x0, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1, &(0x7f0000000d40)=[r3], &(0x7f0000000d80)=[{0x4, 0x4, 0x10, 0x3}], 0x10, 0x4, @void, @value}, 0x94) r12 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_IOC_FAIL(r12, 0x4c80, 0xffffffffffffffb6) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) 1m39.247783667s ago: executing program 1 (id=151): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000080)={0x1e26, 0xa8f4, 0xffd, 0x5, 0x10, "8c9088a6201a6a1c9feae588c7dcba0de2b343", 0x8, 0x10001}) r1 = open(&(0x7f0000000040)='./file0\x00', 0x4000, 0x156) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r3}, 0x10) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2042, 0x0) ioctl$AUTOFS_IOC_FAIL(r4, 0x4c80, 0x7000000) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_MPATH(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010029bd7000fbdbdf251800000008000300", @ANYRES32=r6, @ANYBLOB="0e00990005000000770000000a000600ffffffffffff0000"], 0x34}, 0x1, 0x0, 0x0, 0x81}, 0x1) 1m39.224248137s ago: executing program 32 (id=151): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000080)={0x1e26, 0xa8f4, 0xffd, 0x5, 0x10, "8c9088a6201a6a1c9feae588c7dcba0de2b343", 0x8, 0x10001}) r1 = open(&(0x7f0000000040)='./file0\x00', 0x4000, 0x156) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r3}, 0x10) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2042, 0x0) ioctl$AUTOFS_IOC_FAIL(r4, 0x4c80, 0x7000000) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_MPATH(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010029bd7000fbdbdf251800000008000300", @ANYRES32=r6, @ANYBLOB="0e00990005000000770000000a000600ffffffffffff0000"], 0x34}, 0x1, 0x0, 0x0, 0x81}, 0x1) 2.506357394s ago: executing program 3 (id=2170): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="020000000400000008"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0xa08344, &(0x7f0000000200)={[{@nojournal_checksum}, {@nodioread_nolock}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@quota}, {@usrjquota}, {@oldalloc}, {@resuid={'resuid', 0x3d, 0xee01}}]}, 0x2, 0x44a, &(0x7f0000000880)="$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") 2.312524534s ago: executing program 4 (id=2173): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200010, &(0x7f0000000300)={[{@jqfmt_vfsold}]}, 0xfe, 0x55d, &(0x7f0000000980)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800006, 0x11, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="c50a0000000000007910480000000000610438000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 2.015202194s ago: executing program 3 (id=2175): socket$packet(0x11, 0x3, 0x300) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340), 0x240200, 0x0) r2 = dup3(r0, r1, 0x0) io_setup(0x3, &(0x7f00000003c0)=0x0) r4 = socket$kcm(0x10, 0x2, 0x0) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r5, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xec67ba842dbbc0d2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r6}, 0x10) sendmsg$kcm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) io_submit(r3, 0x2, &(0x7f0000000b80)=[&(0x7f0000000380)={0x503, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) recvmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x2000) r7 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r7, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001, 0x9}, 0x8) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000004200)={0x0, 0x0, &(0x7f00000041c0)={0x0, 0x10}}, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(0xffffffffffffffff, 0x0, 0x8, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r9}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r7, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) 1.923293683s ago: executing program 4 (id=2176): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001, 0x9}, 0x8) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) 1.817174293s ago: executing program 4 (id=2178): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001140)=""/4055, 0xfd7}, {&(0x7f0000002140)=""/4080, 0xff0}, {&(0x7f0000005680)=""/4100, 0x1004}], 0x3}, 0x0) recvmmsg(r0, &(0x7f00000067c0)=[{{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, 0x0}, 0x5}], 0x5, 0x120, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYRESHEX=r0, @ANYRES32=r0, @ANYRES64=r0, @ANYRES32=r0, @ANYRESHEX=r0], 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000006c0)='kmem_cache_free\x00', r3}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r4 = socket$nl_rdma(0x10, 0x3, 0x14) r5 = socket$xdp(0x2c, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x400000000000004) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$XDP_RX_RING(r5, 0x11b, 0x2, &(0x7f0000000040)=0x1000000, 0x4) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x67, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x2}, 0x10c288, 0x40, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)={0x18, 0x140c, 0x652f64244006f219, 0x70bd2c, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000}, 0x4040800) setregid(0xffffffffffffffff, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$TUNSETSTEERINGEBPF(r8, 0x800454e0, &(0x7f00000004c0)=r3) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r8, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="00062abd7000fcdbdf25370000000c009900060000005e0000000800a1000900000008009f0005000000050018010900000008009f00060000000800a100050000000500190109000000050019010c00000008002201d6000000"], 0x60}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10) r9 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r9, &(0x7f0000000080), 0x10) close(r9) io_uring_setup(0x30d3, &(0x7f00000000c0)) r10 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) flock(r10, 0x2) 1.509016003s ago: executing program 3 (id=2184): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000"], 0x48) mlock(&(0x7f0000ffa000/0x4000)=nil, 0x4000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mknod(&(0x7f00000003c0)='./file1\x00', 0x8000, 0xfffffff7) newfstatat(0xffffffffffffff9c, &(0x7f00000009c0)='./file1\x00', &(0x7f0000000f00)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setreuid(r1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) rt_sigprocmask(0x0, 0x0, 0x0, 0x0) r3 = gettid() gettid() tkill(r3, 0x12) tkill(r3, 0x1) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r4, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000180)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffe00}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) 1.463407863s ago: executing program 3 (id=2186): syz_mount_image$vfat(&(0x7f0000000240), &(0x7f00000000c0)='./file0\x00', 0x400, &(0x7f0000000000)=ANY=[@ANYBLOB="73686f72746e616d653d77696e6e742c757466383d302c636865636b3d7374726963742c646973636172642c405221e1cf4dfd8077fa06757466383d312c6e66732c73686f72746e616d653d77696e39352c73686f72746e616d653d6c6f77"], 0xfd, 0x2a0, &(0x7f0000000540)="$eJzs3M9rE0EUwPHXtGnTlDY5iKAgPvSil6WNf0GQFsSAUhtRD8LUbjRkTUo2RiJie/Pq31E8ehOs/0Av3ryLlyIIXnqQrnQ3a7Y12B823dh8P1B2ujMvM7s7CW8XdjbvvXlaKblWyTQkkVJJSGpVtkSykpDQUHub8MujErUqVyd+fL5w5/6Dm/lCYXZedS6/cC2nqlMXPzx/+fbSx8bE3XdT78dkI/tw83vuy8bZjXOb2wvhp9caanSxVmuYRcfWpbJbsVRvO7ZxbS1XXbu+q77k1JaXW2qqS5Pp5brtumqqLa3YLW3UtFFvqXlsylW1LEsn0zJohg8dUVybnzf5ngwGcRjvtrNez5vhrpXFtZMYFAAA6C9/5v9yIvn/k7KrZVer++X/CSH/7x0//9/umjTidEju3ADkTbr9/d2N/B8AAAAAAAAAAAAAAAAAAAAAgP/BludlPM/LhNvwb0xEUiIS/h/3ONEbR7j+QzEOF8cs8uJeSsR53Sw2i8E2qM+XpCyO2DKdFPnpz4e2oDx3ozA7rb6srDsr7Xj/JcGxMD6U7R4/E8RrJH6lWUxKOtp/TjJypnt8bk98UkSaxVG5cjkSb0lGPj2Smjiy5M/rTvyrGdXrtwp7+h/32wEAAAAAcBpY+lt29/1vsJqkZWm4bMie+mBn5/mAZPZ5PqCyPiqd+BE5PxLfcQMAAAAAMEjc1ouKcRy7PsiFcTl81CCeOisVTJq/NvY8b2Wn0b93mhCRmI70m4j0wQk/7sLXZ8EFPEjjOH+VAAAAAPRCJ+mPeyQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAyugy4eFrY/ytpjke6G4zlKAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoD/8CgAA///JRBp/") r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x28}}, 0x0) 1.462363413s ago: executing program 2 (id=2187): bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRES32], 0x48) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='attr/exec\x00') shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ff8000/0x2000)=nil) shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil) unshare(0xa000000) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200010, &(0x7f0000000300)={[{@jqfmt_vfsold}]}, 0xfe, 0x55d, &(0x7f0000000980)="$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") write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800006, 0x11, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="c50a0000000000007910480000000000610438000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000180), 0xfea7) 1.292514012s ago: executing program 3 (id=2190): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000840)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000480)={'syztnl2\x00', &(0x7f0000000880)={'gretap0\x00', 0x0, 0x7, 0x700, 0x7fffffff, 0xf, {{0x41, 0x4, 0x1, 0x3, 0x104, 0x68, 0x0, 0x3, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, {[@timestamp={0x44, 0xc, 0x2e, 0x0, 0x4, [0xfffffffd, 0x1]}, @rr={0x7, 0x7, 0x87, [@dev={0xac, 0x14, 0x14, 0x3f}]}, @rr={0x7, 0x7, 0x58, [@empty]}, @timestamp_addr={0x44, 0x54, 0xf4, 0x1, 0x1, [{@rand_addr=0x64010101}, {@initdev={0xac, 0x1e, 0x1, 0x0}}, {@remote, 0x3}, {@private=0xa010101, 0xa}, {@local, 0x7d1}, {@private=0xa010102, 0x200}, {@loopback}, {@empty, 0x10000}, {@remote, 0x7e26}, {@dev={0xac, 0x14, 0x14, 0x31}, 0x2}]}, @ssrr={0x89, 0x13, 0x7f, [@remote, @loopback, @private=0xa010101, @remote]}, @generic={0x88, 0x5, "e13732"}, @lsrr={0x83, 0x1f, 0x30, [@rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x14}, @loopback, @remote, @multicast1]}, @timestamp_prespec={0x44, 0x44, 0xdf, 0x3, 0x5, [{@remote, 0x101}, {@rand_addr=0x64010102, 0x47a0}, {@dev={0xac, 0x14, 0x14, 0x29}}, {@multicast2}, {@multicast2, 0xfffffffc}, {@rand_addr=0x64010100, 0x7}, {@dev={0xac, 0x14, 0x14, 0x29}, 0x1}, {@loopback, 0xfffff47c}]}, @end, @ra={0x94, 0x4, 0x1}]}}}}}) sendmsg$ETHTOOL_MSG_WOL_GET(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000740)={&(0x7f00000009c0)=ANY=[@ANYBLOB="d40001003c04b948c85a89596444f4f5367f62647d36d5be10b0fcfcab8d997f6be644be29df2d246acdbec037f112214671e23d26f2121f89810f0328e08b23cb5f3e9037b25012f42622a8e31e001696089642b79173c26eb5e894a54b0d3efb7d597b8ae142afb14ffc6eea1ca60e6574da4193a843338f4f1ccb5d4bf9894e515194c9607cb2f52c4622f6877d7a901b1b102b12fb41522834dab1e57de2b632bd3eee8c2ba02ebfcd0c96acc4c0c822250b5d913b71a0adf75f38539f44c30b78e238e786879599bbc6875d870a76224eeb997243626c292b7b00"/231, @ANYRES16=0x0, @ANYBLOB="02002cbd7000fddbdf25090000001400018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="5400018014000200776c616e300000000000000000000000140002007465616d30000000000000000000", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="080003000200000008000100", @ANYRES32=0x0, @ANYBLOB="5800018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r0, @ANYBLOB="1400020069703665727370616e3000000000000014000200726f736530000000000000000000000008000300000000001400020064756d6d793000"/68], 0xd4}, 0x1, 0x0, 0x0, 0x40}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) renameat2(0xffffffffffffffff, &(0x7f0000000800)='./file0\x00', 0xffffffffffffffff, 0x0, 0x7) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b000000000000000000000000000400000000", @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70200001400f400b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x2d) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40000c0) ioctl$sock_bt_hci(0xffffffffffffffff, 0x800448d2, 0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r7, 0x560a, &(0x7f0000000040)={0x0, 0x0, 0x12, 0x2, 0x83, 0x7}) r8 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r8, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x0, 0x3}, 0x10) setsockopt$TIPC_GROUP_LEAVE(r8, 0x10f, 0x88) 1.159384323s ago: executing program 0 (id=2192): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r4}, 0x10) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000080000000000000000000181100", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c0000001000030427bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="a5fdad8800000000140012800b00010062617461647600000400028008000a00", @ANYRESHEX], 0x3c}}, 0x0) 1.140089442s ago: executing program 4 (id=2193): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000001280)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) bpf$MAP_CREATE(0x0, 0x0, 0x50) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x48) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) sendfile(r1, r0, 0x0, 0x7ffff000) setfsgid(0xee00) 1.138594432s ago: executing program 2 (id=2194): socket$packet(0x11, 0x3, 0x300) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340), 0x240200, 0x0) dup3(r0, r1, 0x0) io_setup(0x3, &(0x7f00000003c0)) socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket$inet6(0xa, 0x80002, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000004200)={0x0, 0x0, &(0x7f00000041c0)={0x0, 0x10}}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) 977.885772ms ago: executing program 0 (id=2195): socket$packet(0x11, 0x3, 0x300) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340), 0x240200, 0x0) r2 = dup3(r0, r1, 0x0) io_setup(0x3, &(0x7f00000003c0)=0x0) r4 = socket$kcm(0x10, 0x2, 0x0) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r5, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xec67ba842dbbc0d2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r6}, 0x10) sendmsg$kcm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) io_submit(r3, 0x2, &(0x7f0000000b80)=[&(0x7f0000000380)={0x503, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) recvmmsg(0xffffffffffffffff, &(0x7f000000cec0)=[{{0x0, 0x0, &(0x7f0000003e00)=[{&(0x7f0000004200)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) r7 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r7, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001, 0x9}, 0x8) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000004200)={0x0, 0x0, &(0x7f00000041c0)={0x0, 0x10}}, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(0xffffffffffffffff, 0x0, 0x8, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r9}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r7, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) 640.402872ms ago: executing program 5 (id=2198): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = dup(r2) fsetxattr$security_selinux(r3, &(0x7f0000000000), &(0x7f0000000040)='system_u:object_r:mouse_device_t:s0\x00', 0x1001, 0x0) 640.143212ms ago: executing program 5 (id=2199): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001, 0x9}, 0x8) sendmsg$key(0xffffffffffffffff, &(0x7f0000004200)={0x0, 0x0, 0x0}, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) 619.601421ms ago: executing program 5 (id=2200): syz_mount_image$vfat(&(0x7f0000000240), &(0x7f00000000c0)='./file0\x00', 0x400, &(0x7f0000000000)=ANY=[@ANYBLOB="73686f72746e616d653d77696e6e742c757466383d302c636865636b3d7374726963742c646973636172642c405221e1cf4dfd8077fa06757466383d312c6e66732c73686f72746e616d653d77696e39352c73686f72746e616d653d6c6f77"], 0xfd, 0x2a0, &(0x7f0000000540)="$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") r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x28}}, 0x0) 586.624782ms ago: executing program 2 (id=2201): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000002540), 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001100)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYRES32=r2, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r3, 0x0, 0x81}, 0x18) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000540), 0xfffffdd8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='kfree\x00', r1}, 0x18) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000002840), 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='kfree\x00', r6}, 0x18) close_range(r0, r4, 0x0) 561.616491ms ago: executing program 5 (id=2202): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c0000001000030427bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="a5fdad8800000000140012800b00010062617461647600000400028008000a00", @ANYRESHEX], 0x3c}}, 0x0) 499.933691ms ago: executing program 2 (id=2203): perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x3d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x62000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x1016c7, 0x40000008, 0x1000, 0x6, 0x3, 0x0, 0x4}, 0x0, 0xf3ffffffffffffff, 0xffffffffffffffff, 0x8) r0 = io_uring_setup(0x2cb4, &(0x7f00000002c0)={0x0, 0x656, 0x40, 0x1, 0x328}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x564a0000) io_uring_register$IORING_REGISTER_RESTRICTIONS(r0, 0xb, &(0x7f0000000400)=[@ioring_restriction_register_op={0x0, 0x10}], 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 436.799061ms ago: executing program 2 (id=2204): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001140)=""/4055, 0xfd7}, {&(0x7f0000002140)=""/4080, 0xff0}, {&(0x7f0000005680)=""/4100, 0x1004}], 0x3}, 0x0) recvmmsg(r0, &(0x7f00000067c0)=[{{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, 0x0}, 0x5}], 0x5, 0x120, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYRESHEX=r0, @ANYRES32=r0, @ANYRES64=r0, @ANYRES32=r0, @ANYRESHEX=r0], 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000006c0)='kmem_cache_free\x00', r3}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r4 = socket$nl_rdma(0x10, 0x3, 0x14) r5 = socket$xdp(0x2c, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x400000000000004) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$XDP_RX_RING(r5, 0x11b, 0x2, &(0x7f0000000040)=0x1000000, 0x4) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x67, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x2}, 0x10c288, 0x40, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)={0x18, 0x140c, 0x652f64244006f219, 0x70bd2c, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000}, 0x4040800) setregid(0xffffffffffffffff, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$TUNSETSTEERINGEBPF(r8, 0x800454e0, &(0x7f00000004c0)=r3) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r8, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="00062abd7000fcdbdf25370000000c009900060000005e0000000800a1000900000008009f0005000000050018010900000008009f00060000000800a100050000000500190109000000050019010c00000008002201d6000000"], 0x60}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10) r9 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r9, &(0x7f0000000080), 0x10) close(r9) io_uring_setup(0x30d3, &(0x7f00000000c0)) r10 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) flock(r10, 0x2) 435.935111ms ago: executing program 0 (id=2205): socket$packet(0x11, 0x3, 0x300) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340), 0x240200, 0x0) dup3(r0, r1, 0x0) io_setup(0x3, &(0x7f00000003c0)) socket$kcm(0x10, 0x2, 0x0) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r2, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xec67ba842dbbc0d2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r3}, 0x10) r4 = socket$inet6(0xa, 0x80002, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000004200)={0x0, 0x0, &(0x7f00000041c0)={0x0, 0x10}}, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) 365.808011ms ago: executing program 3 (id=2206): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000800)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x5}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x3}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x6c}, 0x1, 0x0, 0x0, 0x40800}, 0x48040) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="1900000004000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/15, @ANYRES32=0x0, @ANYRES32], 0x50) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) dup(r1) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={0x0, r2}, 0x18) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'ip6tnl0\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="020000000404000008010000010000008000fd0ad93ed1be3b15b2bf5e6751934888ae7947231e988e6bf3614a7c537e08590017202b6bae8219bbabae63697f2904f0b13f8294e96a7258971368f776496b6c6a86cc81ac86d913d6bf3ce08c8a969dfab1e3563677", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=r3, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x4, 0x0, 0x0, 0x7ffc9ffb}]}) r4 = syz_open_dev$tty1(0xc, 0x4, 0x3) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r5}, 0x38) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r6}, 0x10) r7 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r7, 0x0, 0x60) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r8, 0x0, 0x9135}, 0x18) ioctl$KDSKBENT(r4, 0x4b47, &(0x7f0000000400)={0x0, 0x7f, 0xf00}) r9 = mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) mq_timedsend(r9, 0x0, 0x0, 0x0, 0x0) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r10, 0xc004743e, &(0x7f0000000000)=0x6) ioctl$PPPIOCSPASS(r10, 0x40107447, &(0x7f0000000140)={0x0, 0x0}) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)) r11 = socket$inet6(0xa, 0x40000080806, 0x0) connect$inet6(r11, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c) 358.226641ms ago: executing program 5 (id=2207): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000480)='mm_page_free\x00'}, 0x18) syz_read_part_table(0x5be, &(0x7f00000005c0)="$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") 301.730301ms ago: executing program 0 (id=2208): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200010, &(0x7f0000000300)={[{@jqfmt_vfsold}]}, 0xfe, 0x55d, &(0x7f0000000980)="$eJzs3d9rW1UcAPDvTX/sp66DMdQHKezByVy6tv6Y4MN8FB0O9H2G9q6Mpsto0rHWgduDe9mLDEHEgfgH+O7j8B/wrxjoYMgo+uBL5aY3XbYmbZZlSzSfD9ztnPuj55yce07OyUm4AQytyeyfQsSrEfFNEnGo6dho5AcnN89bf3htLtuS2Nj47M8kknxf4/wk//9AHnklIn79OuJEYXu61dW1xVK5nC7n8ana0uWp6urayYtLpYV0Ib00Mzt7+p3Zmfffe7dnZX3z3N/ff3r3o9O3jq1/9/P9w7eTOBMH82PN5XgG15sjkzGZvyZjceaJE6d7kNggSfqdAboykrfzscj6gEMxkrd64P/vq4jYAIZUov3DkGqMAxpz+x7Ng/8zHny4OQHaXv7Rzc9GYm99brR/PXlsZpTNdyd6kH6Wxi9/3LmdbdG7zyEAdnX9RkScGh3d3v8lef/XvVMdnPNkGvo/eHHuZuOft1qNfwpb459oMf450KLtdmP39l+43+KypFefUmfjvw9ajn+3Fq0mRvLYS/Ux31hy4WI5zfq2lyPieIztyeI7reecXr+30e5Y8/gv27L0G2PBPB/3R/c8fs18qVZ6ljI3e3Aj4rWW499kq/6TFvWfvR7nOkzjaHrn9XbHdi//87XxU8QbLev/0YpWsvP65FT9fphq3BXb/XXz6G/t0u93+bP6379z+SeS5vXa6tOn8ePef9J2x7q9/8eTz+vh8Xzf1VKttjwdMZ58sn3/zKNrG/HG+Vn5jx/buf9rdf/vi4gvOiz/zSM32546CPU//1T1//SBex9/+UO79Dur/7froeP5nk76v04z+CyvHQAAAAAAAAyaQkQcjKRQ3AoXCsXi5vc7jsT+QrlSrZ24UFm5NB/138pOxFihsdJ9qOn7ENP592Eb8Zkn4rMRcTgivh3ZV48X5yrl+X4XHgAAAAAAAAAAAAAAAAAAAAbEgTa//8/8PtLykvEXm0PgufLIbxheu7b/XjzpCRhI3v9heHXV/vf1Ph/Ai+f9H4bUWL8zAPST938YXto/DC/tH4aX9g8AAAAAAAAAAAAAAAAAAAAAAAAAAAA9de7s2WzbWH94bS6Lz19ZXVmsXDk5n1YXi0src8W5yvLl4kKlslBOi3OVpd3+XrlSuTw9EytXp2pptTZVXV07v1RZuVQ7f3GptJCeTz1tCAAAAAAAAAAAAAAAAAAAALarrq4tlsrldFlAoKvA6GBkQ6ApcKsHrbvPHRMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANPk3AAD//0unNek=") r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800006, 0x11, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="c50a0000000000007910480000000000610438000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 183.464431ms ago: executing program 4 (id=2209): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00'}, 0x10) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0xa08344, &(0x7f0000000200)={[{@nojournal_checksum}, {@nodioread_nolock}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@quota}, {@usrjquota}, {@oldalloc}, {@resuid={'resuid', 0x3d, 0xee01}}]}, 0x2, 0x44a, &(0x7f0000000880)="$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") 172.390851ms ago: executing program 0 (id=2210): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000003200)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffed7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r3}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r4, &(0x7f0000000180), 0x40010) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10) r6 = socket$rxrpc(0x21, 0x2, 0xa) sendmsg$inet(r6, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c00}, 0x0) bind$rxrpc(r6, &(0x7f0000000080)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e23, 0x6, @loopback, 0x100}}, 0x24) unshare(0x60600) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="780100003c000701fcffffff00000003047c000004003680600101"], 0x178}, 0x1, 0x0, 0x0, 0x4c040}, 0xc000) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socketpair(0x18, 0x0, 0x2, &(0x7f0000000000)) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r8}, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r9, 0x8933, &(0x7f0000000000)={'wg1\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r9, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={&(0x7f0000000340)={0x38, r10, 0x1, 0x8008000, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}, @ETHTOOL_A_FEATURES_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}]}, 0x38}}, 0x0) 105.986971ms ago: executing program 5 (id=2211): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000002540), 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ff"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001100)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r3, 0x0, 0x81}, 0x18) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000540), 0xfffffdd8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='kfree\x00', r1}, 0x18) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000002840), 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='kfree\x00', r6}, 0x18) close_range(r0, r4, 0x0) 42.83589ms ago: executing program 4 (id=2212): r0 = socket$inet6(0xa, 0x3, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000fb"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) timer_create(0x3, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f00000001c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000380)=0x7, 0x4) sendto$inet6(r0, 0x0, 0xfffffffffffffd2f, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, 0x1c) recvfrom$inet6(r0, 0x0, 0x0, 0x2042, 0x0, 0x0) 12.360861ms ago: executing program 0 (id=2213): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x18) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r1}, &(0x7f0000000380), &(0x7f00000003c0)}, 0x20) 0s ago: executing program 2 (id=2214): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000001280)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000440)={[{@usrquota}, {@noquota}, {@resuid}]}, 0x1, 0x4c4, &(0x7f0000000a40)="$eJzs3ctrW1caAPBPku3YjmfymGFIMjAJZCDzIJYfDLFnZjOrmVkEhgl000Lq2oqbWraMJaexCdRpd1l0UVpaKF1037+gm2bVUChdt/vSRUlpUxfaQkHlXkmJrViuKI7V+P5+cJNzH9J3jsV3OPfoXt0AMutM8k8uYiQiPoqII43V7Qecafy3ee/GbLLkol6/9GUuPS5Zbx3aet3hiNiIiMGI+P+/I57JPRy3ura+MFMul1aa68Xa4nKxurZ+/urizHxpvrQ0PnVhenpqbHJies/aeuvl525dfPe/A+98+9LdO6+8/15SrZHmvq3t2EuNpvfHsS3b+iLin48iWA8Umu0Z6nVF+FmSz+83EXE2zf8jUUg/TSAL6vV6/Yf6oU67N+rAgZVPx8C5/GhENMr5/OhoYwz/2xjOlyvV2l+vVFaX5hpj5aPRn79ytVwaa54rHI3+XLI+npYfrE+0rU9GpGPgVwtD6frobKU8t79dHdDmcFv+f1No5D+QEU75IbvkP2SX/Ifskv+QXfIfskv+Q3bJf8gu+Q/ZJf8hu+Q/ZJf8h0z638WLyVJv3f8+d21tdaFy7fxcqbowurg6OzpbWVkena9U5tN7dhZ/6v3Klcry+N9i9XqxVqrWitW19cuLldWl2uX0vv7Lpf59aRXQjWOnb3+Si4iNvw+lS2KguU+uwsFWr+ei1/cgA71R6HUHBPSMqT/ILuf4QPtP9LaPCwY7vXD5wXwh8HjJ97oCQM+cO+n7P8gq8/+QXeb/IbuM8YEdHtG3zW7z/8Djyfw/ZNtOz//61ZZnd41FxK8j4uNC/6HWs76AgyD/ea45/j935I8j7XsHct+lXxEMRMTzb156/fpMrbYynmz/6v722hvN7RNbXtjxhAHolVaetvIYAMiuzXs3ZlvLfsb94l+NixAejt/XnJscTL+jHN7MbbtWIbdH1y5s3IyIEzvFzzWfd944kRneLDyI90Ij/vFmPXKNt0jr25c+N/0Rx2/GPLkl/h+2xD+1B38XyILbSf8ztlP+5dOcjvv5t73/Gdmjayc693/5+/1foUP/d7rLGM++9eJnHePfjDi1Y/xWvME0Vnv8pG7nuox/96knftdpX/3txvvsFL8lKRVri8vF6tr6+fR35OZLS+NTF6anp8YmJ6aL6Rx1sTVT/bB/nPjwzm7tH+4Qf7f2J9v+3GX7v//9B0+e2SX+n87u/Pkf3yX+UET8pcv4X098+nSnfUn8uQ7tz+8SP9k22WX86mv/OdTloQDAPqiurS/M9EVpJS2UywoKCvtbuPnLqEZbodc9E/CoVdeSU/Mk6XtdEwAAAAAAAAAAAKBb+3E5ca/bCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwEPwYAAD//yvJ1G8=") bpf$MAP_CREATE(0x0, 0x0, 0x50) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) sendfile(r1, r0, 0x0, 0x7ffff000) setfsgid(0xee00) kernel console output (not intermixed with test programs): irectory bread(block 73) failed [ 99.691380][ T7623] loop5: detected capacity change from 0 to 8192 [ 99.704121][ T7618] syz.0.1389: attempt to access beyond end of device [ 99.704121][ T7618] loop0: rw=524288, sector=1736, nr_sectors = 32 limit=256 [ 99.741069][ T7618] syz.0.1389: attempt to access beyond end of device [ 99.741069][ T7618] loop0: rw=0, sector=1736, nr_sectors = 8 limit=256 [ 99.756297][ T7627] netlink: 'syz.2.1388': attribute type 29 has an invalid length. [ 99.797652][ T7632] loop4: detected capacity change from 0 to 512 [ 99.811270][ T7632] EXT4-fs: Ignoring removed nomblk_io_submit option [ 99.832688][ T7632] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 99.859174][ T7632] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 99.862770][ T7637] loop5: detected capacity change from 0 to 128 [ 99.878231][ T7632] EXT4-fs (loop4): 1 truncate cleaned up [ 99.908388][ T7632] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.933073][ T7637] vfat: Unknown parameter '@R!áÏMý€wúutf8' [ 99.972548][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.049316][ T7646] batadv1: entered promiscuous mode [ 100.060146][ T7646] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 100.168981][ T7649] loop0: detected capacity change from 0 to 8192 [ 100.208515][ T7651] loop3: detected capacity change from 0 to 8192 [ 100.245255][ T7656] batadv1: entered promiscuous mode [ 100.251872][ T7656] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 100.285931][ T7666] SELinux: syz.2.1403 (7666) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 100.304371][ T7660] loop0: detected capacity change from 0 to 256 [ 100.404122][ T7660] FAT-fs (loop0): Directory bread(block 64) failed [ 100.413917][ T7675] atomic_op ffff88812369a528 conn xmit_atomic 0000000000000000 [ 100.418787][ T7660] FAT-fs (loop0): Directory bread(block 65) failed [ 100.428343][ T7660] FAT-fs (loop0): Directory bread(block 66) failed [ 100.435026][ T7660] FAT-fs (loop0): Directory bread(block 67) failed [ 100.440711][ T7676] loop2: detected capacity change from 0 to 128 [ 100.448806][ T7660] FAT-fs (loop0): Directory bread(block 68) failed [ 100.471010][ T7660] FAT-fs (loop0): Directory bread(block 69) failed [ 100.483338][ T7660] FAT-fs (loop0): Directory bread(block 70) failed [ 100.492854][ T7676] vfat: Unknown parameter '@R!áÏMý€wúutf8' [ 100.515291][ T7660] FAT-fs (loop0): Directory bread(block 71) failed [ 100.537340][ T7660] FAT-fs (loop0): Directory bread(block 72) failed [ 100.548001][ T7660] FAT-fs (loop0): Directory bread(block 73) failed [ 100.578466][ T7660] syz.0.1405: attempt to access beyond end of device [ 100.578466][ T7660] loop0: rw=524288, sector=1736, nr_sectors = 32 limit=256 [ 100.590960][ T7683] loop4: detected capacity change from 0 to 8192 [ 100.592610][ T7660] syz.0.1405: attempt to access beyond end of device [ 100.592610][ T7660] loop0: rw=0, sector=1736, nr_sectors = 8 limit=256 [ 100.622929][ T7688] loop5: detected capacity change from 0 to 1024 [ 100.641945][ T7687] loop2: detected capacity change from 0 to 8192 [ 100.675588][ T7688] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 100.695118][ T7694] batadv1: entered promiscuous mode [ 100.701683][ T7694] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 100.793261][ T7698] EXT4-fs (loop5): shut down requested (0) [ 100.884071][ T50] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 100.899313][ T50] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 100.911908][ T50] EXT4-fs (loop5): This should not happen!! Data will be lost [ 100.911908][ T50] [ 100.921796][ T50] EXT4-fs (loop5): Total free blocks count 0 [ 100.927937][ T50] EXT4-fs (loop5): Free/Dirty block details [ 100.933900][ T50] EXT4-fs (loop5): free_blocks=68451041280 [ 100.939778][ T50] EXT4-fs (loop5): dirty_blocks=11104 [ 100.945191][ T50] EXT4-fs (loop5): Block reservation details [ 100.951243][ T50] EXT4-fs (loop5): i_reserved_data_blocks=694 [ 100.960457][ T7712] SELinux: syz.2.1419 (7712) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 101.020601][ T7688] sg_write: data in/out 209152/1 bytes for SCSI command 0xf2-- guessing data in; [ 101.020601][ T7688] program syz.5.1414 not setting count and/or reply_len properly [ 101.059935][ T7714] batadv1: entered promiscuous mode [ 101.066050][ T7714] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 101.156380][ T7724] loop2: detected capacity change from 0 to 128 [ 101.168932][ T7724] vfat: Unknown parameter '@R!áÏMý€wúutf8' [ 101.283618][ T7726] loop2: detected capacity change from 0 to 8192 [ 101.299123][ T7729] macvtap0: entered promiscuous mode [ 101.307132][ T7729] macvtap0: left promiscuous mode [ 101.427367][ T7733] batadv1: entered promiscuous mode [ 101.474207][ T7733] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 101.515852][ T7738] SELinux: syz.2.1433 (7738) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 101.527826][ T7745] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 101.574473][ T7749] loop5: detected capacity change from 0 to 256 [ 101.589885][ T7749] FAT-fs (loop5): Directory bread(block 64) failed [ 101.596442][ T7749] FAT-fs (loop5): Directory bread(block 65) failed [ 101.603341][ T7749] FAT-fs (loop5): Directory bread(block 66) failed [ 101.610158][ T7749] FAT-fs (loop5): Directory bread(block 67) failed [ 101.617303][ T7749] FAT-fs (loop5): Directory bread(block 68) failed [ 101.624159][ T7749] FAT-fs (loop5): Directory bread(block 69) failed [ 101.635925][ T7749] FAT-fs (loop5): Directory bread(block 70) failed [ 101.648200][ T7749] FAT-fs (loop5): Directory bread(block 71) failed [ 101.656595][ T7749] FAT-fs (loop5): Directory bread(block 72) failed [ 101.663426][ T7749] FAT-fs (loop5): Directory bread(block 73) failed [ 101.710628][ T7749] syz.5.1436: attempt to access beyond end of device [ 101.710628][ T7749] loop5: rw=524288, sector=1736, nr_sectors = 32 limit=256 [ 101.727465][ T7749] syz.5.1436: attempt to access beyond end of device [ 101.727465][ T7749] loop5: rw=0, sector=1736, nr_sectors = 8 limit=256 [ 101.746405][ T7758] loop0: detected capacity change from 0 to 8192 [ 101.890093][ T7760] loop2: detected capacity change from 0 to 8192 [ 101.938095][ T7786] loop0: detected capacity change from 0 to 128 [ 101.944925][ T7786] vfat: Unknown parameter '@R!áÏMý€wúutf8' [ 101.956257][ T7784] loop3: detected capacity change from 0 to 2048 [ 102.011887][ T7784] GPT:first_usable_lbas don't match. [ 102.017261][ T7784] GPT:34 != 290 [ 102.017274][ T7784] GPT: Use GNU Parted to correct GPT errors. [ 102.017356][ T7784] loop3: p1 p2 p3 [ 102.078180][ T3001] GPT:first_usable_lbas don't match. [ 102.083602][ T3001] GPT:34 != 290 [ 102.087139][ T3001] GPT: Use GNU Parted to correct GPT errors. [ 102.093342][ T3001] loop3: p1 p2 p3 [ 102.102070][ T7803] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 102.153082][ T3288] udevd[3288]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 102.194647][ T3904] udevd[3904]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 102.197025][ T3288] udevd[3288]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 102.235265][ T3288] udevd[3288]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 102.259869][ T3290] udevd[3290]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 102.279097][ T3920] udevd[3920]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 102.329432][ T7829] loop4: detected capacity change from 0 to 128 [ 102.341287][ T7829] vfat: Unknown parameter '@R!áÏMý€wúutf8' [ 102.461395][ T7831] loop3: detected capacity change from 0 to 8192 [ 102.566575][ T7835] loop4: detected capacity change from 0 to 2048 [ 102.753509][ T7835] GPT:first_usable_lbas don't match. [ 102.758924][ T7835] GPT:34 != 290 [ 102.762445][ T7835] GPT: Use GNU Parted to correct GPT errors. [ 102.768625][ T7835] loop4: p1 p2 p3 [ 102.789006][ T7849] loop3: detected capacity change from 0 to 1024 [ 102.892441][ T7849] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.232421][ T3001] GPT:first_usable_lbas don't match. [ 103.237842][ T3001] GPT:34 != 290 [ 103.241443][ T3001] GPT: Use GNU Parted to correct GPT errors. [ 103.247506][ T3001] loop4: p1 p2 p3 [ 103.278272][ T7859] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 103.325615][ T7849] EXT4-fs (loop3): shut down requested (0) [ 103.345576][ T7862] atomic_op ffff88812369b128 conn xmit_atomic 0000000000000000 [ 103.352941][ T50] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 103.353878][ T7862] validate_nla: 11 callbacks suppressed [ 103.353893][ T7862] netlink: 'syz.0.1475': attribute type 1 has an invalid length. [ 103.384465][ T3920] udevd[3920]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 103.387643][ T3288] udevd[3288]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 103.397492][ T50] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 103.405785][ T3904] udevd[3904]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 103.416490][ T50] EXT4-fs (loop3): This should not happen!! Data will be lost [ 103.416490][ T50] [ 103.436064][ T50] EXT4-fs (loop3): Total free blocks count 0 [ 103.442169][ T50] EXT4-fs (loop3): Free/Dirty block details [ 103.448206][ T50] EXT4-fs (loop3): free_blocks=68451041280 [ 103.454143][ T50] EXT4-fs (loop3): dirty_blocks=16384 [ 103.459571][ T50] EXT4-fs (loop3): Block reservation details [ 103.465595][ T50] EXT4-fs (loop3): i_reserved_data_blocks=1024 [ 103.474695][ T7862] macvtap0: entered promiscuous mode [ 103.481827][ T7862] macvtap0: left promiscuous mode [ 103.484723][ T7860] loop2: detected capacity change from 0 to 8192 [ 103.495701][ T7865] netlink: 'syz.4.1476': attribute type 1 has an invalid length. [ 103.579894][ T7849] sg_write: data in/out 209152/1 bytes for SCSI command 0xf2-- guessing data in; [ 103.579894][ T7849] program syz.3.1471 not setting count and/or reply_len properly [ 103.585998][ T7870] loop0: detected capacity change from 0 to 128 [ 103.604139][ T29] kauditd_printk_skb: 354 callbacks suppressed [ 103.604153][ T29] audit: type=1326 audit(1737409709.245:5803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7857 comm="syz.2.1473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1526ee5d29 code=0x7ffc0000 [ 103.655554][ T29] audit: type=1326 audit(1737409709.275:5804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7857 comm="syz.2.1473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1526ee5d29 code=0x7ffc0000 [ 103.679174][ T29] audit: type=1326 audit(1737409709.275:5805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7857 comm="syz.2.1473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1526ee5d29 code=0x7ffc0000 [ 103.702844][ T29] audit: type=1326 audit(1737409709.275:5806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7857 comm="syz.2.1473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1526ee5d29 code=0x7ffc0000 [ 103.707905][ T7870] vfat: Unknown parameter '@R!áÏMý€wúutf8' [ 103.726894][ T29] audit: type=1326 audit(1737409709.275:5807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7857 comm="syz.2.1473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1526ee5d29 code=0x7ffc0000 [ 103.757349][ T29] audit: type=1326 audit(1737409709.275:5808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7857 comm="syz.2.1473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=40 compat=0 ip=0x7f1526ee5d29 code=0x7ffc0000 [ 103.872796][ T29] audit: type=1326 audit(1737409709.515:5809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7885 comm="syz.0.1482" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd61d8b5d29 code=0x0 [ 103.928837][ T7890] loop0: detected capacity change from 0 to 1024 [ 103.941430][ T7890] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.994626][ T29] audit: type=1326 audit(1737409709.625:5810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7888 comm="syz.4.1484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae40a85d29 code=0x7ffc0000 [ 104.018143][ T29] audit: type=1326 audit(1737409709.625:5811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7888 comm="syz.4.1484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fae40a85d29 code=0x7ffc0000 [ 104.041692][ T29] audit: type=1326 audit(1737409709.625:5812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7888 comm="syz.4.1484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae40a85d29 code=0x7ffc0000 [ 104.065997][ T7894] EXT4-fs (loop0): shut down requested (0) [ 104.301012][ T7901] batadv1: entered promiscuous mode [ 104.305808][ T7890] sg_write: data in/out 209152/1 bytes for SCSI command 0xf2-- guessing data in; [ 104.305808][ T7890] program syz.0.1482 not setting count and/or reply_len properly [ 104.307462][ T7901] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 104.337221][ T135] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 104.383978][ T135] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 104.396654][ T135] EXT4-fs (loop0): This should not happen!! Data will be lost [ 104.396654][ T135] [ 104.406386][ T135] EXT4-fs (loop0): Total free blocks count 0 [ 104.412491][ T135] EXT4-fs (loop0): Free/Dirty block details [ 104.418394][ T135] EXT4-fs (loop0): free_blocks=68451041280 [ 104.424263][ T135] EXT4-fs (loop0): dirty_blocks=16384 [ 104.429752][ T135] EXT4-fs (loop0): Block reservation details [ 104.435775][ T135] EXT4-fs (loop0): i_reserved_data_blocks=1024 [ 104.671336][ T7904] loop5: detected capacity change from 0 to 512 [ 104.735793][ T7904] EXT4-fs: Ignoring removed nomblk_io_submit option [ 104.802401][ T7904] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2 [ 104.818283][ T7904] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -2 [ 104.826976][ T7904] EXT4-fs (loop5): 1 truncate cleaned up [ 104.833662][ T7904] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.881827][ T7909] atomic_op ffff88812369a528 conn xmit_atomic 0000000000000000 [ 104.890009][ T7909] netlink: 'syz.4.1489': attribute type 1 has an invalid length. [ 104.898481][ T3886] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.910619][ T7911] netlink: 'syz.2.1490': attribute type 1 has an invalid length. [ 104.937956][ T7909] macvtap0: entered promiscuous mode [ 104.956078][ T7909] macvtap0: left promiscuous mode [ 104.997582][ T7919] batadv1: entered promiscuous mode [ 105.004986][ T7919] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 105.099617][ T7927] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 105.130292][ T7934] netlink: 'syz.3.1499': attribute type 29 has an invalid length. [ 105.148020][ T7934] netlink: 'syz.3.1499': attribute type 10 has an invalid length. [ 105.160901][ T7935] loop0: detected capacity change from 0 to 1024 [ 105.177074][ T7934] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 105.191307][ T7935] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.223126][ T7937] loop4: detected capacity change from 0 to 8192 [ 105.230987][ T7934] batadv0: entered promiscuous mode [ 105.360641][ T7944] EXT4-fs (loop0): shut down requested (0) [ 105.401922][ T7946] netlink: 'syz.2.1502': attribute type 1 has an invalid length. [ 105.462363][ T50] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 105.481088][ T50] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 105.493585][ T50] EXT4-fs (loop0): This should not happen!! Data will be lost [ 105.493585][ T50] [ 105.503266][ T50] EXT4-fs (loop0): Total free blocks count 0 [ 105.509383][ T50] EXT4-fs (loop0): Free/Dirty block details [ 105.515294][ T50] EXT4-fs (loop0): free_blocks=68451041280 [ 105.521232][ T50] EXT4-fs (loop0): dirty_blocks=16384 [ 105.526621][ T50] EXT4-fs (loop0): Block reservation details [ 105.532665][ T50] EXT4-fs (loop0): i_reserved_data_blocks=1024 [ 105.623424][ T7956] loop3: detected capacity change from 0 to 8192 [ 105.626675][ T7935] sg_write: data in/out 209152/1 bytes for SCSI command 0xf2-- guessing data in; [ 105.626675][ T7935] program syz.0.1496 not setting count and/or reply_len properly [ 105.852743][ T7965] loop2: detected capacity change from 0 to 2048 [ 105.881809][ T7965] GPT:first_usable_lbas don't match. [ 105.887147][ T7965] GPT:34 != 290 [ 105.890808][ T7965] GPT: Use GNU Parted to correct GPT errors. [ 105.897111][ T7965] loop2: p1 p2 p3 [ 106.471028][ T7978] loop5: detected capacity change from 0 to 128 [ 106.486982][ T7980] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 106.504976][ T7978] vfat: Unknown parameter '@R!áÏMý€wúutf8' [ 106.599151][ T7982] loop4: detected capacity change from 0 to 8192 [ 106.675914][ T7991] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 106.684221][ T7991] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 106.712515][ T8000] batadv1: entered promiscuous mode [ 106.727569][ T8000] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 106.745162][ T8001] vcan0: entered allmulticast mode [ 106.753941][ T8003] batadv1: entered promiscuous mode [ 106.765769][ T8003] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 106.784409][ T7991] vcan0 (unregistering): left allmulticast mode [ 106.863193][ T8012] loop2: detected capacity change from 0 to 8192 [ 106.919550][ T8020] loop4: detected capacity change from 0 to 1024 [ 106.922942][ T8019] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 106.930264][ T8020] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.005439][ T8028] loop3: detected capacity change from 0 to 128 [ 107.016698][ T8029] EXT4-fs (loop4): shut down requested (0) [ 107.043090][ T8028] vfat: Unknown parameter '@R!áÏMý€wúutf8' [ 107.082168][ T50] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 107.112332][ T8035] loop5: detected capacity change from 0 to 256 [ 107.114911][ T50] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 107.131135][ T50] EXT4-fs (loop4): This should not happen!! Data will be lost [ 107.131135][ T50] [ 107.140935][ T50] EXT4-fs (loop4): Total free blocks count 0 [ 107.146994][ T50] EXT4-fs (loop4): Free/Dirty block details [ 107.152977][ T50] EXT4-fs (loop4): free_blocks=68451041280 [ 107.158838][ T50] EXT4-fs (loop4): dirty_blocks=7264 [ 107.164135][ T50] EXT4-fs (loop4): Block reservation details [ 107.170140][ T50] EXT4-fs (loop4): i_reserved_data_blocks=454 [ 107.170159][ T8035] FAT-fs (loop5): Directory bread(block 64) failed [ 107.192475][ T8035] FAT-fs (loop5): Directory bread(block 65) failed [ 107.200402][ T8035] FAT-fs (loop5): Directory bread(block 66) failed [ 107.207024][ T8035] FAT-fs (loop5): Directory bread(block 67) failed [ 107.227846][ T8039] loop3: detected capacity change from 0 to 8192 [ 107.237227][ T8035] FAT-fs (loop5): Directory bread(block 68) failed [ 107.249561][ T8035] FAT-fs (loop5): Directory bread(block 69) failed [ 107.256479][ T8035] FAT-fs (loop5): Directory bread(block 70) failed [ 107.267596][ T8020] sg_write: data in/out 209152/1 bytes for SCSI command 0xf2-- guessing data in; [ 107.267596][ T8020] program syz.4.1528 not setting count and/or reply_len properly [ 107.280146][ T8041] loop2: detected capacity change from 0 to 512 [ 107.290371][ T8035] FAT-fs (loop5): Directory bread(block 71) failed [ 107.307046][ T8041] EXT4-fs: Ignoring removed nomblk_io_submit option [ 107.310822][ T8035] FAT-fs (loop5): Directory bread(block 72) failed [ 107.320683][ T8035] FAT-fs (loop5): Directory bread(block 73) failed [ 107.334532][ T8041] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 107.336699][ T8035] syz.5.1533: attempt to access beyond end of device [ 107.336699][ T8035] loop5: rw=524288, sector=1736, nr_sectors = 32 limit=256 [ 107.343533][ T8041] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 107.357106][ T8035] syz.5.1533: attempt to access beyond end of device [ 107.357106][ T8035] loop5: rw=0, sector=1736, nr_sectors = 8 limit=256 [ 107.367015][ T8041] EXT4-fs (loop2): 1 truncate cleaned up [ 107.395137][ T8041] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.427377][ T8049] batadv1: entered promiscuous mode [ 107.447307][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.457479][ T8049] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 107.541842][ T8056] loop2: detected capacity change from 0 to 2048 [ 107.588531][ T8056] GPT:first_usable_lbas don't match. [ 107.594056][ T8056] GPT:34 != 290 [ 107.597609][ T8056] GPT: Use GNU Parted to correct GPT errors. [ 107.603763][ T8056] loop2: p1 p2 p3 [ 107.704482][ T3904] udevd[3904]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 107.714925][ T3510] udevd[3510]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 107.740183][ T3290] udevd[3290]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 107.760623][ T8073] loop0: detected capacity change from 0 to 256 [ 107.783181][ T8075] batadv1: entered promiscuous mode [ 107.804976][ T8073] FAT-fs (loop0): Directory bread(block 64) failed [ 107.812499][ T8075] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 107.817987][ T8071] loop2: detected capacity change from 0 to 8192 [ 107.828253][ T8073] FAT-fs (loop0): Directory bread(block 65) failed [ 107.851214][ T8073] FAT-fs (loop0): Directory bread(block 66) failed [ 107.860242][ T8073] FAT-fs (loop0): Directory bread(block 67) failed [ 107.866252][ T8077] loop3: detected capacity change from 0 to 8192 [ 107.870235][ T8073] FAT-fs (loop0): Directory bread(block 68) failed [ 107.880636][ T8079] loop4: detected capacity change from 0 to 512 [ 107.880774][ T8073] FAT-fs (loop0): Directory bread(block 69) failed [ 107.894159][ T8073] FAT-fs (loop0): Directory bread(block 70) failed [ 107.900877][ T8073] FAT-fs (loop0): Directory bread(block 71) failed [ 107.907665][ T8073] FAT-fs (loop0): Directory bread(block 72) failed [ 107.908266][ T8079] EXT4-fs: Ignoring removed nomblk_io_submit option [ 107.915138][ T8073] FAT-fs (loop0): Directory bread(block 73) failed [ 107.952977][ T8073] syz.0.1549: attempt to access beyond end of device [ 107.952977][ T8073] loop0: rw=524288, sector=1736, nr_sectors = 32 limit=256 [ 107.999781][ T8079] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 108.010857][ T8084] loop3: detected capacity change from 0 to 128 [ 108.018087][ T8073] syz.0.1549: attempt to access beyond end of device [ 108.018087][ T8073] loop0: rw=0, sector=1736, nr_sectors = 8 limit=256 [ 108.031703][ T8084] vfat: Unknown parameter '@R!áÏMý€wúutf8' [ 108.038502][ T8079] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 108.047463][ T8079] EXT4-fs (loop4): 1 truncate cleaned up [ 108.053610][ T8079] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.139093][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.162757][ T8101] loop0: detected capacity change from 0 to 1024 [ 108.183731][ T8094] loop3: detected capacity change from 0 to 2048 [ 108.203356][ T8101] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 108.226273][ T8110] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1563'. [ 108.235325][ T8110] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1563'. [ 108.248937][ T8110] loop2: detected capacity change from 0 to 512 [ 108.255672][ T8110] EXT4-fs: Ignoring removed oldalloc option [ 108.278645][ T8111] loop4: detected capacity change from 0 to 1024 [ 108.301094][ T8094] GPT:first_usable_lbas don't match. [ 108.306453][ T8094] GPT:34 != 290 [ 108.310003][ T8094] GPT: Use GNU Parted to correct GPT errors. [ 108.316268][ T8094] loop3: p1 p2 p3 [ 108.344194][ T8111] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 108.482625][ T8110] EXT4-fs error (device loop2): ext4_xattr_inode_iget:436: comm syz.2.1563: Parent and EA inode have the same ino 15 [ 108.507621][ T8101] EXT4-fs (loop0): shut down requested (0) [ 108.527582][ T57] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 108.547377][ T8116] EXT4-fs (loop4): shut down requested (0) [ 108.559858][ T8110] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2863: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 108.576947][ T57] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 108.589460][ T57] EXT4-fs (loop0): This should not happen!! Data will be lost [ 108.589460][ T57] [ 108.597720][ T8110] EXT4-fs error (device loop2): ext4_xattr_inode_iget:436: comm syz.2.1563: Parent and EA inode have the same ino 15 [ 108.599119][ T57] EXT4-fs (loop0): Total free blocks count 0 [ 108.613455][ T8110] EXT4-fs (loop2): 1 orphan inode deleted [ 108.617484][ T57] EXT4-fs (loop0): Free/Dirty block details [ 108.624738][ T8110] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.629128][ T57] EXT4-fs (loop0): free_blocks=68451041280 [ 108.629146][ T57] EXT4-fs (loop0): dirty_blocks=16384 [ 108.644111][ T8110] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.647446][ T57] EXT4-fs (loop0): Block reservation details [ 108.647461][ T57] EXT4-fs (loop0): i_reserved_data_blocks=1024 [ 108.693716][ T381] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 108.710404][ T3920] udevd[3920]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 108.746304][ T3904] udevd[3904]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 108.746808][ T3288] udevd[3288]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 108.772640][ T8118] netlink: 'syz.3.1564': attribute type 29 has an invalid length. [ 108.778858][ T381] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 108.792987][ T381] EXT4-fs (loop4): This should not happen!! Data will be lost [ 108.792987][ T381] [ 108.802728][ T381] EXT4-fs (loop4): Total free blocks count 0 [ 108.808747][ T381] EXT4-fs (loop4): Free/Dirty block details [ 108.814660][ T381] EXT4-fs (loop4): free_blocks=68451041280 [ 108.820504][ T381] EXT4-fs (loop4): dirty_blocks=16384 [ 108.825893][ T381] EXT4-fs (loop4): Block reservation details [ 108.831957][ T381] EXT4-fs (loop4): i_reserved_data_blocks=1024 [ 108.832014][ T8119] loop2: detected capacity change from 0 to 512 [ 108.896651][ T8118] netlink: 'syz.3.1564': attribute type 10 has an invalid length. [ 108.902548][ T8111] sg_write: data in/out 209152/1 bytes for SCSI command 0xf2-- guessing data in; [ 108.902548][ T8111] program syz.4.1562 not setting count and/or reply_len properly [ 108.927763][ T8118] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.932005][ T8119] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 108.944345][ T8119] EXT4-fs (loop2): 1 truncate cleaned up [ 108.947571][ T8118] netlink: 'syz.3.1564': attribute type 29 has an invalid length. [ 108.965317][ T8119] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.985851][ T8119] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.173721][ T8128] loop5: detected capacity change from 0 to 128 [ 109.190994][ T8128] vfat: Unknown parameter '@R!áÏMý€wúutf8' [ 109.250631][ T8132] netlink: 'syz.3.1570': attribute type 1 has an invalid length. [ 109.264206][ T8137] loop5: detected capacity change from 0 to 512 [ 109.270942][ T8137] EXT4-fs: Ignoring removed nomblk_io_submit option [ 109.298792][ T8137] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2 [ 109.302970][ T8135] netlink: 'syz.0.1566': attribute type 29 has an invalid length. [ 109.321757][ T8135] netlink: 'syz.0.1566': attribute type 10 has an invalid length. [ 109.328789][ T29] kauditd_printk_skb: 430 callbacks suppressed [ 109.328808][ T29] audit: type=1326 audit(1737409714.945:6243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8139 comm="syz.2.1572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1526ee5d29 code=0x7ffc0000 [ 109.330080][ T8137] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -2 [ 109.335934][ T29] audit: type=1326 audit(1737409714.945:6244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8139 comm="syz.2.1572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7f1526ee5d29 code=0x7ffc0000 [ 109.377636][ T8137] EXT4-fs (loop5): 1 truncate cleaned up [ 109.390835][ T29] audit: type=1326 audit(1737409714.945:6245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8139 comm="syz.2.1572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1526ee5d29 code=0x7ffc0000 [ 109.424831][ T8135] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.427550][ T8148] loop4: detected capacity change from 0 to 256 [ 109.433258][ T8137] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.451942][ T8135] batadv0: entered promiscuous mode [ 109.465350][ T8144] netlink: 'syz.0.1566': attribute type 29 has an invalid length. [ 109.487338][ T8148] FAT-fs (loop4): Directory bread(block 64) failed [ 109.513998][ T8157] loop2: detected capacity change from 0 to 512 [ 109.516864][ T8148] FAT-fs (loop4): Directory bread(block 65) failed [ 109.520801][ T8157] EXT4-fs: Ignoring removed nomblk_io_submit option [ 109.535495][ T8157] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 109.544198][ T8157] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 109.552464][ T8148] FAT-fs (loop4): Directory bread(block 66) failed [ 109.558376][ T8157] EXT4-fs (loop2): 1 truncate cleaned up [ 109.559153][ T8148] FAT-fs (loop4): Directory bread(block 67) failed [ 109.571388][ T8148] FAT-fs (loop4): Directory bread(block 68) failed [ 109.577696][ T3886] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.577925][ T8148] FAT-fs (loop4): Directory bread(block 69) failed [ 109.593610][ T8148] FAT-fs (loop4): Directory bread(block 70) failed [ 109.600381][ T8148] FAT-fs (loop4): Directory bread(block 71) failed [ 109.601103][ T8157] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.607170][ T8148] FAT-fs (loop4): Directory bread(block 72) failed [ 109.626645][ T8148] FAT-fs (loop4): Directory bread(block 73) failed [ 109.649360][ T8148] syz.4.1567: attempt to access beyond end of device [ 109.649360][ T8148] loop4: rw=524288, sector=1736, nr_sectors = 32 limit=256 [ 109.672369][ T8148] syz.4.1567: attempt to access beyond end of device [ 109.672369][ T8148] loop4: rw=0, sector=1736, nr_sectors = 8 limit=256 [ 109.696760][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.711256][ T29] audit: type=1326 audit(1737409715.335:6246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8143 comm="syz.4.1567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae40a85d29 code=0x7ffc0000 [ 109.734838][ T29] audit: type=1326 audit(1737409715.335:6247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8143 comm="syz.4.1567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae40a85d29 code=0x7ffc0000 [ 109.758477][ T29] audit: type=1326 audit(1737409715.335:6248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8143 comm="syz.4.1567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fae40a85d29 code=0x7ffc0000 [ 109.782059][ T29] audit: type=1326 audit(1737409715.335:6249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8143 comm="syz.4.1567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae40a85d29 code=0x7ffc0000 [ 109.783429][ T8166] loop5: detected capacity change from 0 to 2048 [ 109.805642][ T29] audit: type=1326 audit(1737409715.335:6250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8143 comm="syz.4.1567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae40a85d29 code=0x7ffc0000 [ 109.805678][ T29] audit: type=1326 audit(1737409715.335:6251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8143 comm="syz.4.1567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fae40a85d29 code=0x7ffc0000 [ 109.859289][ T29] audit: type=1326 audit(1737409715.335:6252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8143 comm="syz.4.1567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae40a85d29 code=0x7ffc0000 [ 109.912967][ T8166] GPT:first_usable_lbas don't match. [ 109.918314][ T8166] GPT:34 != 290 [ 109.921343][ T8174] macvtap0: entered promiscuous mode [ 109.921809][ T8166] GPT: Use GNU Parted to correct GPT errors. [ 109.927868][ T8174] macvtap0: left promiscuous mode [ 109.933208][ T8166] loop5: p1 p2 p3 [ 109.951000][ T8176] netlink: 'syz.3.1582': attribute type 29 has an invalid length. [ 109.968392][ T8176] netlink: 'syz.3.1582': attribute type 10 has an invalid length. [ 109.981925][ T8176] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 110.007592][ T8176] netlink: 'syz.3.1582': attribute type 29 has an invalid length. [ 110.074280][ T8188] loop2: detected capacity change from 0 to 512 [ 110.093528][ T8188] EXT4-fs: Ignoring removed nomblk_io_submit option [ 110.111931][ T8188] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 110.118196][ T8191] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 110.120275][ T8188] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 110.136252][ T8191] batadv0: entered promiscuous mode [ 110.142994][ T8188] EXT4-fs (loop2): 1 truncate cleaned up [ 110.149298][ T8188] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.174226][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.187660][ T8194] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 110.199689][ T8194] batadv0: entered promiscuous mode [ 110.302149][ T8205] loop0: detected capacity change from 0 to 8192 [ 110.346765][ T8207] loop3: detected capacity change from 0 to 8192 [ 110.366558][ T8213] batadv1: entered promiscuous mode [ 110.372826][ T8213] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 110.427602][ T8217] loop3: detected capacity change from 0 to 1024 [ 110.441719][ T8217] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 110.502925][ T8217] syz.3.1598 (8217) used greatest stack depth: 9056 bytes left [ 110.574294][ T8221] loop5: detected capacity change from 0 to 8192 [ 110.586176][ T8227] batadv1: entered promiscuous mode [ 110.592385][ T8227] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 110.605832][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.630613][ T8230] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 110.704091][ T8240] loop4: detected capacity change from 0 to 512 [ 110.725709][ T8240] EXT4-fs: Ignoring removed oldalloc option [ 110.771038][ T8242] loop3: detected capacity change from 0 to 8192 [ 110.815659][ T8240] EXT4-fs error (device loop4): ext4_xattr_inode_iget:436: comm syz.4.1606: Parent and EA inode have the same ino 15 [ 110.860535][ T8240] EXT4-fs error (device loop4): ext4_xattr_inode_iget:436: comm syz.4.1606: Parent and EA inode have the same ino 15 [ 110.899054][ T8240] EXT4-fs (loop4): 1 orphan inode deleted [ 110.905195][ T8240] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.928041][ T8240] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.948059][ T8245] loop2: detected capacity change from 0 to 8192 [ 111.041236][ T8259] loop3: detected capacity change from 0 to 2048 [ 111.080478][ T8259] GPT:first_usable_lbas don't match. [ 111.085848][ T8259] GPT:34 != 290 [ 111.089486][ T8259] GPT: Use GNU Parted to correct GPT errors. [ 111.095765][ T8259] loop3: p1 p2 p3 [ 111.101146][ T8267] loop0: detected capacity change from 0 to 512 [ 111.121908][ T8267] EXT4-fs: Ignoring removed oldalloc option [ 111.132098][ T8267] EXT4-fs error (device loop0): ext4_xattr_inode_iget:436: comm syz.0.1615: Parent and EA inode have the same ino 15 [ 111.151058][ T8267] EXT4-fs error (device loop0): ext4_xattr_inode_iget:436: comm syz.0.1615: Parent and EA inode have the same ino 15 [ 111.196485][ T8267] EXT4-fs (loop0): 1 orphan inode deleted [ 111.225378][ T8267] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.241851][ T8267] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.458451][ T8295] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 111.466787][ T8295] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 111.526720][ T8288] loop0: detected capacity change from 0 to 8192 [ 111.559035][ T8299] loop3: detected capacity change from 0 to 256 [ 111.593918][ T8297] loop5: detected capacity change from 0 to 8192 [ 111.632313][ T8299] FAT-fs (loop3): Directory bread(block 64) failed [ 111.651215][ T8299] FAT-fs (loop3): Directory bread(block 65) failed [ 111.659612][ T8299] FAT-fs (loop3): Directory bread(block 66) failed [ 111.678371][ T8299] FAT-fs (loop3): Directory bread(block 67) failed [ 111.697085][ T8299] FAT-fs (loop3): Directory bread(block 68) failed [ 111.716961][ T8299] FAT-fs (loop3): Directory bread(block 69) failed [ 111.743921][ T8305] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 111.754560][ T8299] FAT-fs (loop3): Directory bread(block 70) failed [ 111.764931][ T8299] FAT-fs (loop3): Directory bread(block 71) failed [ 111.787837][ T8299] FAT-fs (loop3): Directory bread(block 72) failed [ 111.795178][ T8299] FAT-fs (loop3): Directory bread(block 73) failed [ 111.851499][ T8299] syz.3.1625: attempt to access beyond end of device [ 111.851499][ T8299] loop3: rw=524288, sector=1736, nr_sectors = 32 limit=256 [ 111.866499][ T8299] syz.3.1625: attempt to access beyond end of device [ 111.866499][ T8299] loop3: rw=0, sector=1736, nr_sectors = 8 limit=256 [ 111.889299][ T8319] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 111.978923][ T8332] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 111.987507][ T8332] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 112.014271][ T8334] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 112.106647][ T8338] loop2: detected capacity change from 0 to 8192 [ 112.238144][ T8354] loop4: detected capacity change from 0 to 512 [ 112.245444][ T8354] EXT4-fs: Ignoring removed nomblk_io_submit option [ 112.274407][ T8354] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 112.286502][ T8354] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 112.319758][ T8362] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 112.327834][ T8354] EXT4-fs (loop4): 1 truncate cleaned up [ 112.335419][ T8354] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.373324][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.441559][ T8355] loop3: detected capacity change from 0 to 2048 [ 112.475159][ T8368] netdevsim netdevsim5: loading /lib/firmware/. failed with error -22 [ 112.484155][ T8368] netdevsim netdevsim5: Direct firmware load for . failed with error -22 [ 112.495096][ T8368] vcan0: entered allmulticast mode [ 112.502314][ T8355] GPT:first_usable_lbas don't match. [ 112.507748][ T8355] GPT:34 != 290 [ 112.511277][ T8355] GPT: Use GNU Parted to correct GPT errors. [ 112.517418][ T8355] loop3: p1 p2 p3 [ 112.598563][ T8374] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 112.618584][ T8376] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 112.754784][ T8387] batadv1: entered promiscuous mode [ 112.761626][ T8387] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 112.833021][ T8389] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 112.903909][ T8396] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 113.063503][ T8412] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 113.076434][ T8410] SELinux: syz.3.1666 (8410) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 113.176629][ T8421] batadv1: entered promiscuous mode [ 113.182869][ T8421] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 113.182815][ T8419] loop2: detected capacity change from 0 to 8192 [ 113.353008][ T8440] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 113.418946][ T8449] SELinux: syz.0.1682 (8449) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 113.481535][ T8455] loop4: detected capacity change from 0 to 8192 [ 113.526834][ T8459] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 113.542000][ T8457] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 113.550320][ T8457] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 113.567739][ T8457] vcan0: entered allmulticast mode [ 113.682220][ T8478] loop4: detected capacity change from 0 to 512 [ 113.682971][ T8479] loop2: detected capacity change from 0 to 256 [ 113.697201][ T8481] loop5: detected capacity change from 0 to 1024 [ 113.697240][ T8478] EXT4-fs: Ignoring removed oldalloc option [ 113.735913][ T8478] EXT4-fs error (device loop4): ext4_xattr_inode_iget:436: comm syz.4.1692: Parent and EA inode have the same ino 15 [ 113.749061][ T8479] FAT-fs (loop2): Directory bread(block 64) failed [ 113.755771][ T8479] FAT-fs (loop2): Directory bread(block 65) failed [ 113.763432][ T8479] FAT-fs (loop2): Directory bread(block 66) failed [ 113.765389][ T8478] EXT4-fs error (device loop4): ext4_xattr_inode_iget:436: comm syz.4.1692: Parent and EA inode have the same ino 15 [ 113.770200][ T8479] FAT-fs (loop2): Directory bread(block 67) failed [ 113.789132][ T8479] FAT-fs (loop2): Directory bread(block 68) failed [ 113.790025][ T8481] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 113.796409][ T8478] EXT4-fs (loop4): 1 orphan inode deleted [ 113.810483][ T8479] FAT-fs (loop2): Directory bread(block 69) failed [ 113.835966][ T8478] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.849096][ T8479] FAT-fs (loop2): Directory bread(block 70) failed [ 113.855708][ T8479] FAT-fs (loop2): Directory bread(block 71) failed [ 113.864764][ T8478] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.875153][ T8479] FAT-fs (loop2): Directory bread(block 72) failed [ 113.906484][ T8479] FAT-fs (loop2): Directory bread(block 73) failed [ 113.949185][ T8494] EXT4-fs (loop5): shut down requested (0) [ 113.977274][ T8498] loop0: detected capacity change from 0 to 1024 [ 113.987556][ T8479] syz.2.1694: attempt to access beyond end of device [ 113.987556][ T8479] loop2: rw=524288, sector=1736, nr_sectors = 32 limit=256 [ 114.018277][ T8479] syz.2.1694: attempt to access beyond end of device [ 114.018277][ T8479] loop2: rw=0, sector=1736, nr_sectors = 8 limit=256 [ 114.042749][ T8498] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 114.074115][ T8496] loop3: detected capacity change from 0 to 8192 [ 114.123730][ T135] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 114.138827][ T135] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 114.151366][ T135] EXT4-fs (loop5): This should not happen!! Data will be lost [ 114.151366][ T135] [ 114.161082][ T135] EXT4-fs (loop5): Total free blocks count 0 [ 114.163482][ T8504] validate_nla: 55 callbacks suppressed [ 114.163499][ T8504] netlink: 'syz.4.1699': attribute type 29 has an invalid length. [ 114.167119][ T135] EXT4-fs (loop5): Free/Dirty block details [ 114.174404][ T8481] sg_write: data in/out 209152/1 bytes for SCSI command 0xf2-- guessing data in; [ 114.174404][ T8481] program syz.5.1688 not setting count and/or reply_len properly [ 114.180498][ T135] EXT4-fs (loop5): free_blocks=68451041280 [ 114.180517][ T135] EXT4-fs (loop5): dirty_blocks=16384 [ 114.180530][ T135] EXT4-fs (loop5): Block reservation details [ 114.180543][ T135] EXT4-fs (loop5): i_reserved_data_blocks=1024 [ 114.210186][ T8504] netlink: 'syz.4.1699': attribute type 29 has an invalid length. [ 114.244451][ T8504] netlink: 'syz.4.1699': attribute type 29 has an invalid length. [ 114.262187][ T8504] netlink: 'syz.4.1699': attribute type 29 has an invalid length. [ 114.271332][ T8504] netlink: 'syz.4.1699': attribute type 29 has an invalid length. [ 114.281499][ T8506] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 114.289738][ T8506] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 114.300057][ T8506] vcan0: entered allmulticast mode [ 114.302105][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.337044][ T8510] netlink: 'syz.0.1702': attribute type 29 has an invalid length. [ 114.346357][ T8504] netlink: 'syz.4.1699': attribute type 29 has an invalid length. [ 114.364351][ T8504] netlink: 'syz.4.1699': attribute type 29 has an invalid length. [ 114.381350][ T29] kauditd_printk_skb: 735 callbacks suppressed [ 114.381368][ T29] audit: type=1326 audit(1737409720.025:6988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8502 comm="syz.4.1699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae40a85d29 code=0x7ffc0000 [ 114.415593][ T8510] netlink: 'syz.0.1702': attribute type 10 has an invalid length. [ 114.430966][ T8510] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 114.440898][ T29] audit: type=1326 audit(1737409720.025:6989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8502 comm="syz.4.1699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae40a85d29 code=0x7ffc0000 [ 114.464523][ T29] audit: type=1326 audit(1737409720.025:6990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8502 comm="syz.4.1699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fae40a85d29 code=0x7ffc0000 [ 114.487942][ T29] audit: type=1326 audit(1737409720.025:6991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8502 comm="syz.4.1699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae40a85d29 code=0x7ffc0000 [ 114.511386][ T29] audit: type=1326 audit(1737409720.025:6992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8502 comm="syz.4.1699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fae40a85d29 code=0x7ffc0000 [ 114.535106][ T29] audit: type=1326 audit(1737409720.025:6993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8502 comm="syz.4.1699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae40a85d29 code=0x7ffc0000 [ 114.558628][ T29] audit: type=1326 audit(1737409720.025:6994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8502 comm="syz.4.1699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fae40a85d29 code=0x7ffc0000 [ 114.582000][ T29] audit: type=1326 audit(1737409720.025:6995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8502 comm="syz.4.1699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae40a85d29 code=0x7ffc0000 [ 114.582078][ T29] audit: type=1326 audit(1737409720.025:6996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8502 comm="syz.4.1699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fae40a85d29 code=0x7ffc0000 [ 114.582176][ T29] audit: type=1326 audit(1737409720.025:6997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8502 comm="syz.4.1699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae40a85d29 code=0x7ffc0000 [ 114.617523][ T8522] netlink: 'syz.0.1702': attribute type 29 has an invalid length. [ 114.665054][ T8521] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 114.803619][ T8533] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 114.813947][ T8535] loop5: detected capacity change from 0 to 128 [ 114.827692][ T8535] vfat: Unknown parameter '@R!áÏMý€wúutf8' [ 114.867922][ T8537] loop3: detected capacity change from 0 to 2048 [ 114.897973][ T8540] FAULT_INJECTION: forcing a failure. [ 114.897973][ T8540] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 114.911209][ T8540] CPU: 0 UID: 0 PID: 8540 Comm: syz.5.1712 Not tainted 6.13.0-syzkaller-00164-g100ceb4817a2 #0 [ 114.921649][ T8540] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 114.931770][ T8540] Call Trace: [ 114.935064][ T8540] [ 114.938014][ T8540] dump_stack_lvl+0xf2/0x150 [ 114.942732][ T8540] dump_stack+0x15/0x1a [ 114.946935][ T8540] should_fail_ex+0x223/0x230 [ 114.951659][ T8540] should_fail+0xb/0x10 [ 114.955857][ T8540] should_fail_usercopy+0x1a/0x20 [ 114.960917][ T8540] _copy_from_iter+0xd5/0xd00 [ 114.965647][ T8540] ? alloc_pages_mpol_noprof+0x20c/0x260 [ 114.971302][ T8540] copy_page_from_iter+0x14f/0x280 [ 114.976473][ T8540] tun_get_user+0x68b/0x25c0 [ 114.981128][ T8540] ? _parse_integer+0x27/0x30 [ 114.985961][ T8540] ? ref_tracker_alloc+0x1f5/0x2f0 [ 114.991102][ T8540] tun_chr_write_iter+0x188/0x240 [ 114.996146][ T8540] vfs_write+0x77f/0x920 [ 115.000401][ T8540] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 115.005980][ T8540] ksys_write+0xe8/0x1b0 [ 115.010238][ T8540] __x64_sys_write+0x42/0x50 [ 115.014844][ T8540] x64_sys_call+0x287e/0x2dc0 [ 115.019528][ T8540] do_syscall_64+0xc9/0x1c0 [ 115.024041][ T8540] ? clear_bhb_loop+0x55/0xb0 [ 115.028729][ T8540] ? clear_bhb_loop+0x55/0xb0 [ 115.033421][ T8540] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.039367][ T8540] RIP: 0033:0x7fa0390c47df [ 115.043819][ T8540] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 115.063520][ T8540] RSP: 002b:00007fa037731000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 115.071938][ T8540] RAX: ffffffffffffffda RBX: 00007fa0392b5fa0 RCX: 00007fa0390c47df [ 115.079914][ T8540] RDX: 0000000000000046 RSI: 0000000020000000 RDI: 00000000000000c8 [ 115.087973][ T8540] RBP: 00007fa037731090 R08: 0000000000000000 R09: 0000000000000000 [ 115.095944][ T8540] R10: 0000000000000046 R11: 0000000000000293 R12: 0000000000000001 [ 115.103918][ T8540] R13: 0000000000000000 R14: 00007fa0392b5fa0 R15: 00007ffc8600cca8 [ 115.111899][ T8540] [ 115.134888][ T8542] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 115.150636][ T8537] GPT:first_usable_lbas don't match. [ 115.155963][ T8537] GPT:34 != 290 [ 115.159505][ T8537] GPT: Use GNU Parted to correct GPT errors. [ 115.165671][ T8537] loop3: p1 p2 p3 [ 115.225396][ T8553] loop3: detected capacity change from 0 to 512 [ 115.232050][ T8553] EXT4-fs: Ignoring removed oldalloc option [ 115.256499][ T8553] EXT4-fs error (device loop3): ext4_xattr_inode_iget:436: comm syz.3.1717: Parent and EA inode have the same ino 15 [ 115.271350][ T8553] EXT4-fs error (device loop3): ext4_xattr_inode_iget:436: comm syz.3.1717: Parent and EA inode have the same ino 15 [ 115.284580][ T8553] EXT4-fs (loop3): 1 orphan inode deleted [ 115.296380][ T8553] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.312984][ T8553] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.360551][ T8568] loop0: detected capacity change from 0 to 512 [ 115.371093][ T8568] EXT4-fs: Ignoring removed oldalloc option [ 115.378656][ T8568] EXT4-fs error (device loop0): ext4_xattr_inode_iget:436: comm syz.0.1722: Parent and EA inode have the same ino 15 [ 115.395142][ T8568] EXT4-fs error (device loop0): ext4_xattr_inode_iget:436: comm syz.0.1722: Parent and EA inode have the same ino 15 [ 115.413144][ T8568] EXT4-fs (loop0): 1 orphan inode deleted [ 115.458049][ T8568] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.474675][ T8568] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.504041][ T8588] syz!: rxe_newlink: already configured on team_slave_0 [ 115.583698][ T8596] loop3: detected capacity change from 0 to 1024 [ 115.641022][ T8596] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 115.662748][ T8599] loop2: detected capacity change from 0 to 2048 [ 115.699839][ T8602] loop5: detected capacity change from 0 to 8192 [ 115.717555][ T8599] GPT:first_usable_lbas don't match. [ 115.722911][ T8599] GPT:34 != 290 [ 115.726389][ T8599] GPT: Use GNU Parted to correct GPT errors. [ 115.732707][ T8599] loop2: p1 p2 p3 [ 115.751834][ T8612] EXT4-fs (loop3): shut down requested (0) [ 115.851522][ T381] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 115.907091][ T3904] udevd[3904]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 115.911224][ T3288] udevd[3288]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 115.920545][ T381] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 115.937214][ T3920] udevd[3920]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 115.939209][ T381] EXT4-fs (loop3): This should not happen!! Data will be lost [ 115.939209][ T381] [ 115.958653][ T381] EXT4-fs (loop3): Total free blocks count 0 [ 115.964705][ T381] EXT4-fs (loop3): Free/Dirty block details [ 115.970654][ T381] EXT4-fs (loop3): free_blocks=68451041280 [ 115.976623][ T381] EXT4-fs (loop3): dirty_blocks=10816 [ 115.982094][ T381] EXT4-fs (loop3): Block reservation details [ 115.988093][ T381] EXT4-fs (loop3): i_reserved_data_blocks=676 [ 116.105055][ T8641] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 116.196127][ T8647] loop2: detected capacity change from 0 to 1024 [ 116.210448][ T8647] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 116.276358][ T8654] EXT4-fs (loop2): shut down requested (0) [ 116.365096][ T50] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 116.419204][ T50] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 116.431862][ T50] EXT4-fs (loop2): This should not happen!! Data will be lost [ 116.431862][ T50] [ 116.443519][ T50] EXT4-fs (loop2): Total free blocks count 0 [ 116.449575][ T50] EXT4-fs (loop2): Free/Dirty block details [ 116.455498][ T50] EXT4-fs (loop2): free_blocks=68451041280 [ 116.461558][ T50] EXT4-fs (loop2): dirty_blocks=8592 [ 116.467030][ T50] EXT4-fs (loop2): Block reservation details [ 116.473116][ T50] EXT4-fs (loop2): i_reserved_data_blocks=537 [ 116.482332][ T8658] macvtap0: entered promiscuous mode [ 116.488199][ T8658] macvtap0: left promiscuous mode [ 116.520106][ T8647] sg_write: data in/out 209152/1 bytes for SCSI command 0xf2-- guessing data in; [ 116.520106][ T8647] program syz.2.1752 not setting count and/or reply_len properly [ 116.546900][ T8646] loop5: detected capacity change from 0 to 128 [ 116.566227][ T8646] vfat: Unknown parameter 'ÿÿÿÿÿÿÿÿ0x0000000000000000184467440737095516150xffffffffffffffff' [ 116.634498][ T8664] loop3: detected capacity change from 0 to 8192 [ 117.185718][ T8701] loop5: detected capacity change from 0 to 8192 [ 117.205709][ T8704] loop4: detected capacity change from 0 to 512 [ 117.253226][ T8704] EXT4-fs: Ignoring removed oldalloc option [ 117.266520][ T8704] EXT4-fs error (device loop4): ext4_xattr_inode_iget:436: comm syz.4.1774: Parent and EA inode have the same ino 15 [ 117.290754][ T8704] EXT4-fs error (device loop4): ext4_xattr_inode_iget:436: comm syz.4.1774: Parent and EA inode have the same ino 15 [ 117.303826][ T8704] EXT4-fs (loop4): 1 orphan inode deleted [ 117.311364][ T8704] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 117.358509][ T8704] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.596836][ T8719] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 117.608497][ T8723] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 117.638462][ T8721] loop5: detected capacity change from 0 to 8192 [ 117.674316][ T8727] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 117.785679][ T8731] loop4: detected capacity change from 0 to 8192 [ 117.982289][ T8740] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 118.009010][ T8742] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 118.148142][ T8748] macvtap0: entered promiscuous mode [ 118.157740][ T8748] macvtap0: left promiscuous mode [ 118.429821][ T8760] loop0: detected capacity change from 0 to 512 [ 118.463596][ T8760] EXT4-fs: Ignoring removed oldalloc option [ 118.483457][ T8760] EXT4-fs error (device loop0): ext4_xattr_inode_iget:436: comm syz.0.1791: Parent and EA inode have the same ino 15 [ 118.513949][ T8760] EXT4-fs error (device loop0): ext4_xattr_inode_iget:436: comm syz.0.1791: Parent and EA inode have the same ino 15 [ 118.536518][ T8772] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 118.549206][ T8760] EXT4-fs (loop0): 1 orphan inode deleted [ 118.554121][ T8775] loop2: detected capacity change from 0 to 1024 [ 118.624012][ T8782] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 118.658474][ T8775] syz.2.1800 (8775) used greatest stack depth: 9048 bytes left [ 118.769311][ T8802] FAULT_INJECTION: forcing a failure. [ 118.769311][ T8802] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 118.782471][ T8802] CPU: 0 UID: 0 PID: 8802 Comm: syz.0.1807 Not tainted 6.13.0-syzkaller-00164-g100ceb4817a2 #0 [ 118.792817][ T8802] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 118.802896][ T8802] Call Trace: [ 118.806189][ T8802] [ 118.809132][ T8802] dump_stack_lvl+0xf2/0x150 [ 118.813756][ T8802] dump_stack+0x15/0x1a [ 118.816130][ T8806] loop4: detected capacity change from 0 to 2048 [ 118.818012][ T8802] should_fail_ex+0x223/0x230 [ 118.829028][ T8802] should_fail+0xb/0x10 [ 118.834050][ T8802] should_fail_usercopy+0x1a/0x20 [ 118.839110][ T8802] _copy_from_iter+0xd5/0xd00 [ 118.843893][ T8802] ? alloc_pages_mpol_noprof+0x20c/0x260 [ 118.849624][ T8802] copy_page_from_iter+0x14f/0x280 [ 118.854877][ T8802] tun_get_user+0x68b/0x25c0 [ 118.859845][ T8802] ? _parse_integer+0x27/0x30 [ 118.864581][ T8802] ? ref_tracker_alloc+0x1f5/0x2f0 [ 118.869733][ T8802] tun_chr_write_iter+0x188/0x240 [ 118.870569][ T8804] loop2: detected capacity change from 0 to 8192 [ 118.874773][ T8802] vfs_write+0x77f/0x920 [ 118.874811][ T8802] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 118.890960][ T8802] ksys_write+0xe8/0x1b0 [ 118.895236][ T8802] __x64_sys_write+0x42/0x50 [ 118.899911][ T8802] x64_sys_call+0x287e/0x2dc0 [ 118.904671][ T8802] do_syscall_64+0xc9/0x1c0 [ 118.909201][ T8802] ? clear_bhb_loop+0x55/0xb0 [ 118.913966][ T8802] ? clear_bhb_loop+0x55/0xb0 [ 118.918675][ T8802] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.924615][ T8802] RIP: 0033:0x7fd61d8b47df [ 118.929103][ T8802] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 118.948738][ T8802] RSP: 002b:00007fd61bf21000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 118.957187][ T8802] RAX: ffffffffffffffda RBX: 00007fd61daa5fa0 RCX: 00007fd61d8b47df [ 118.965345][ T8802] RDX: 000000000000002e RSI: 0000000020000540 RDI: 00000000000000c8 [ 118.973352][ T8802] RBP: 00007fd61bf21090 R08: 0000000000000000 R09: 0000000000000000 [ 118.981352][ T8802] R10: 000000000000002e R11: 0000000000000293 R12: 0000000000000001 [ 118.989379][ T8802] R13: 0000000000000000 R14: 00007fd61daa5fa0 R15: 00007ffc9bebe1b8 [ 118.997461][ T8802] [ 119.034202][ T8806] GPT:first_usable_lbas don't match. [ 119.039554][ T8806] GPT:34 != 290 [ 119.043075][ T8806] GPT: Use GNU Parted to correct GPT errors. [ 119.049172][ T8806] loop4: p1 p2 p3 [ 119.200420][ T8817] batadv1: entered promiscuous mode [ 119.206544][ T8817] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 119.370529][ T8828] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 119.378784][ T8828] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 119.386909][ T8826] loop5: detected capacity change from 0 to 8192 [ 119.387743][ T8828] vcan0: entered allmulticast mode [ 119.409097][ T8828] vcan0 (unregistering): left allmulticast mode [ 119.431688][ T29] kauditd_printk_skb: 459 callbacks suppressed [ 119.431785][ T29] audit: type=1326 audit(1737409725.075:7457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8825 comm="syz.5.1816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0390c5d29 code=0x7ffc0000 [ 119.462717][ T29] audit: type=1326 audit(1737409725.075:7458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8825 comm="syz.5.1816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa0390c5d29 code=0x7ffc0000 [ 119.486192][ T29] audit: type=1326 audit(1737409725.075:7459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8825 comm="syz.5.1816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0390c5d29 code=0x7ffc0000 [ 119.509694][ T29] audit: type=1326 audit(1737409725.075:7460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8825 comm="syz.5.1816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa0390c5d29 code=0x7ffc0000 [ 119.533217][ T29] audit: type=1326 audit(1737409725.075:7461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8825 comm="syz.5.1816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0390c5d29 code=0x7ffc0000 [ 119.556735][ T29] audit: type=1326 audit(1737409725.075:7462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8825 comm="syz.5.1816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=123 compat=0 ip=0x7fa0390c5d29 code=0x7ffc0000 [ 119.580323][ T29] audit: type=1326 audit(1737409725.075:7463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8825 comm="syz.5.1816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0390c5d29 code=0x7ffc0000 [ 119.660007][ T8833] loop3: detected capacity change from 0 to 512 [ 119.670922][ T8833] EXT4-fs: Ignoring removed oldalloc option [ 119.679568][ T8834] loop5: detected capacity change from 0 to 512 [ 119.686157][ T8834] EXT4-fs: Ignoring removed oldalloc option [ 119.686764][ T8832] loop0: detected capacity change from 0 to 2048 [ 119.693515][ T8836] loop4: detected capacity change from 0 to 128 [ 119.715594][ T8836] vfat: Unknown parameter '@R!áÏMý€wúutf8' [ 119.729002][ T8833] EXT4-fs error (device loop3): ext4_xattr_inode_iget:436: comm syz.3.1820: Parent and EA inode have the same ino 15 [ 119.745771][ T8834] EXT4-fs error (device loop5): ext4_xattr_inode_iget:436: comm syz.5.1818: Parent and EA inode have the same ino 15 [ 119.766724][ T8833] EXT4-fs error (device loop3): ext4_xattr_inode_iget:436: comm syz.3.1820: Parent and EA inode have the same ino 15 [ 119.768726][ T8840] validate_nla: 45 callbacks suppressed [ 119.768742][ T8840] netlink: 'syz.2.1822': attribute type 29 has an invalid length. [ 119.780678][ T8834] EXT4-fs error (device loop5): ext4_xattr_inode_iget:436: comm syz.5.1818: Parent and EA inode have the same ino 15 [ 119.804264][ T8833] EXT4-fs (loop3): 1 orphan inode deleted [ 119.805740][ T8834] EXT4-fs (loop5): 1 orphan inode deleted [ 119.812601][ T8832] GPT:first_usable_lbas don't match. [ 119.821656][ T8832] GPT:34 != 290 [ 119.825153][ T8832] GPT: Use GNU Parted to correct GPT errors. [ 119.831265][ T8832] loop0: p1 p2 p3 [ 119.838632][ T8840] netlink: 'syz.2.1822': attribute type 10 has an invalid length. [ 119.849001][ T8840] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 119.890910][ T3001] GPT:first_usable_lbas don't match. [ 119.896255][ T3001] GPT:34 != 290 [ 119.899833][ T3001] GPT: Use GNU Parted to correct GPT errors. [ 119.905957][ T3001] loop0: p1 p2 p3 [ 119.907729][ T8845] batadv1: entered promiscuous mode [ 119.916377][ T8845] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 119.935635][ T8840] netlink: 'syz.2.1822': attribute type 29 has an invalid length. [ 119.943900][ T8847] netlink: 'syz.5.1825': attribute type 29 has an invalid length. [ 119.966265][ T3904] udevd[3904]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 119.966292][ T3920] udevd[3920]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 119.988554][ T3288] udevd[3288]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 120.007766][ T8847] netlink: 'syz.5.1825': attribute type 10 has an invalid length. [ 120.017468][ T8847] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 120.031091][ T8847] netlink: 'syz.5.1825': attribute type 29 has an invalid length. [ 120.031594][ T3904] udevd[3904]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 120.040410][ T3920] udevd[3920]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 120.050648][ T3288] udevd[3288]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 120.094292][ T29] audit: type=1326 audit(1737409725.735:7464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8857 comm="syz.4.1829" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fae40a85d29 code=0x0 [ 120.102459][ T8860] netlink: 'syz.3.1830': attribute type 29 has an invalid length. [ 120.136442][ T8860] netlink: 'syz.3.1830': attribute type 29 has an invalid length. [ 120.146592][ T8860] netlink: 'syz.3.1830': attribute type 29 has an invalid length. [ 120.151315][ T8861] loop4: detected capacity change from 0 to 1024 [ 120.155416][ T8860] netlink: 'syz.3.1830': attribute type 29 has an invalid length. [ 120.173450][ T29] audit: type=1326 audit(1737409725.815:7465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8859 comm="syz.3.1830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ecc665d29 code=0x7ffc0000 [ 120.196902][ T29] audit: type=1326 audit(1737409725.815:7466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8859 comm="syz.3.1830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ecc665d29 code=0x7ffc0000 [ 120.356578][ T8867] EXT4-fs (loop4): shut down requested (0) [ 120.383234][ T8869] loop5: detected capacity change from 0 to 1024 [ 120.436213][ T381] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 120.476760][ T381] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 120.489292][ T381] EXT4-fs (loop4): This should not happen!! Data will be lost [ 120.489292][ T381] [ 120.499027][ T381] EXT4-fs (loop4): Total free blocks count 0 [ 120.505032][ T381] EXT4-fs (loop4): Free/Dirty block details [ 120.510984][ T381] EXT4-fs (loop4): free_blocks=68451041280 [ 120.516810][ T381] EXT4-fs (loop4): dirty_blocks=16384 [ 120.522307][ T381] EXT4-fs (loop4): Block reservation details [ 120.526653][ T8872] loop2: detected capacity change from 0 to 8192 [ 120.528358][ T381] EXT4-fs (loop4): i_reserved_data_blocks=1024 [ 120.552632][ T381] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 2048 with error 28 [ 120.599356][ T8876] loop3: detected capacity change from 0 to 128 [ 120.606073][ T8876] vfat: Unknown parameter '@R!áÏMý€wúutf8' [ 120.654519][ T8880] loop3: detected capacity change from 0 to 256 [ 120.679253][ T8880] FAT-fs (loop3): Directory bread(block 64) failed [ 120.685922][ T8880] FAT-fs (loop3): Directory bread(block 65) failed [ 120.692554][ T8880] FAT-fs (loop3): Directory bread(block 66) failed [ 120.699161][ T8880] FAT-fs (loop3): Directory bread(block 67) failed [ 120.707168][ T8880] FAT-fs (loop3): Directory bread(block 68) failed [ 120.714120][ T8880] FAT-fs (loop3): Directory bread(block 69) failed [ 120.721052][ T8880] FAT-fs (loop3): Directory bread(block 70) failed [ 120.727832][ T8880] FAT-fs (loop3): Directory bread(block 71) failed [ 120.734441][ T8880] FAT-fs (loop3): Directory bread(block 72) failed [ 120.741537][ T8880] FAT-fs (loop3): Directory bread(block 73) failed [ 120.777367][ T8883] loop5: detected capacity change from 0 to 1024 [ 120.802542][ T8880] syz.3.1834: attempt to access beyond end of device [ 120.802542][ T8880] loop3: rw=524288, sector=1736, nr_sectors = 32 limit=256 [ 120.816756][ T8880] syz.3.1834: attempt to access beyond end of device [ 120.816756][ T8880] loop3: rw=0, sector=1736, nr_sectors = 8 limit=256 [ 120.932788][ T8889] loop5: detected capacity change from 0 to 2048 [ 120.985017][ T3288] GPT:first_usable_lbas don't match. [ 120.990416][ T3288] GPT:34 != 290 [ 120.993884][ T3288] GPT: Use GNU Parted to correct GPT errors. [ 121.000116][ T3288] loop5: p1 p2 p3 [ 121.015004][ T8893] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 121.038087][ T8889] GPT:first_usable_lbas don't match. [ 121.043476][ T8889] GPT:34 != 290 [ 121.046969][ T8889] GPT: Use GNU Parted to correct GPT errors. [ 121.053191][ T8889] loop5: p1 p2 p3 [ 121.118501][ T8896] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 121.126915][ T8896] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 121.156578][ T3288] udevd[3288]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 121.157878][ T3510] udevd[3510]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 121.178122][ T3920] udevd[3920]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 121.194100][ T8896] vcan0 (unregistering): left allmulticast mode [ 121.197411][ T8900] loop5: detected capacity change from 0 to 256 [ 121.234279][ T3904] udevd[3904]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 121.245005][ T3288] udevd[3288]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 121.245736][ T3920] udevd[3920]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 121.278411][ T8900] FAT-fs (loop5): Directory bread(block 64) failed [ 121.286154][ T8900] FAT-fs (loop5): Directory bread(block 65) failed [ 121.293012][ T8900] FAT-fs (loop5): Directory bread(block 66) failed [ 121.301878][ T8900] FAT-fs (loop5): Directory bread(block 67) failed [ 121.314157][ T8902] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 121.323969][ T8900] FAT-fs (loop5): Directory bread(block 68) failed [ 121.333763][ T8900] FAT-fs (loop5): Directory bread(block 69) failed [ 121.341136][ T8900] FAT-fs (loop5): Directory bread(block 70) failed [ 121.347741][ T8900] FAT-fs (loop5): Directory bread(block 71) failed [ 121.354829][ T8900] FAT-fs (loop5): Directory bread(block 72) failed [ 121.361708][ T8900] FAT-fs (loop5): Directory bread(block 73) failed [ 121.383409][ T8900] syz.5.1842: attempt to access beyond end of device [ 121.383409][ T8900] loop5: rw=524288, sector=1736, nr_sectors = 32 limit=256 [ 121.396678][ T8909] loop2: detected capacity change from 0 to 1024 [ 121.398200][ T8907] loop0: detected capacity change from 0 to 1024 [ 121.404621][ T8900] syz.5.1842: attempt to access beyond end of device [ 121.404621][ T8900] loop5: rw=0, sector=1736, nr_sectors = 8 limit=256 [ 121.534050][ T8921] loop5: detected capacity change from 0 to 256 [ 121.557846][ T8921] FAT-fs (loop5): Directory bread(block 64) failed [ 121.574641][ T8921] FAT-fs (loop5): Directory bread(block 65) failed [ 121.588162][ T8921] FAT-fs (loop5): Directory bread(block 66) failed [ 121.596104][ T8921] FAT-fs (loop5): Directory bread(block 67) failed [ 121.603423][ T8921] FAT-fs (loop5): Directory bread(block 68) failed [ 121.621220][ T8921] FAT-fs (loop5): Directory bread(block 69) failed [ 121.631846][ T8921] FAT-fs (loop5): Directory bread(block 70) failed [ 121.638399][ T8921] FAT-fs (loop5): Directory bread(block 71) failed [ 121.642968][ T8926] vlan3: entered promiscuous mode [ 121.652336][ T8928] loop3: detected capacity change from 0 to 2048 [ 121.661751][ T8921] FAT-fs (loop5): Directory bread(block 72) failed [ 121.668319][ T8921] FAT-fs (loop5): Directory bread(block 73) failed [ 121.694005][ T8921] syz.5.1849: attempt to access beyond end of device [ 121.694005][ T8921] loop5: rw=524288, sector=1736, nr_sectors = 32 limit=256 [ 121.701327][ T8928] GPT:first_usable_lbas don't match. [ 121.708070][ T8921] syz.5.1849: attempt to access beyond end of device [ 121.708070][ T8921] loop5: rw=0, sector=1736, nr_sectors = 8 limit=256 [ 121.713095][ T8928] GPT:34 != 290 [ 121.729822][ T8928] GPT: Use GNU Parted to correct GPT errors. [ 121.735932][ T8928] loop3: p1 p2 p3 [ 121.763631][ T8936] loop5: detected capacity change from 0 to 256 [ 121.803878][ T8938] loop0: detected capacity change from 0 to 256 [ 121.814962][ T8936] FAT-fs (loop5): Directory bread(block 64) failed [ 121.837723][ T8936] FAT-fs (loop5): Directory bread(block 65) failed [ 121.850507][ T3904] udevd[3904]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 121.863143][ T8936] FAT-fs (loop5): Directory bread(block 66) failed [ 121.868440][ T8938] FAT-fs (loop0): Directory bread(block 64) failed [ 121.875194][ T8936] FAT-fs (loop5): Directory bread(block 67) failed [ 121.876264][ T8943] loop2: detected capacity change from 0 to 1024 [ 121.892949][ T8938] FAT-fs (loop0): Directory bread(block 65) failed [ 121.903648][ T8936] FAT-fs (loop5): Directory bread(block 68) failed [ 121.913462][ T8938] FAT-fs (loop0): Directory bread(block 66) failed [ 121.920651][ T8936] FAT-fs (loop5): Directory bread(block 69) failed [ 121.942392][ T8938] FAT-fs (loop0): Directory bread(block 67) failed [ 121.956651][ T8938] FAT-fs (loop0): Directory bread(block 68) failed [ 121.963325][ T8938] FAT-fs (loop0): Directory bread(block 69) failed [ 121.963795][ T8936] FAT-fs (loop5): Directory bread(block 70) failed [ 121.969990][ T8938] FAT-fs (loop0): Directory bread(block 70) failed [ 121.983122][ T8938] FAT-fs (loop0): Directory bread(block 71) failed [ 121.989955][ T8938] FAT-fs (loop0): Directory bread(block 72) failed [ 121.996631][ T8938] FAT-fs (loop0): Directory bread(block 73) failed [ 121.999879][ T8936] FAT-fs (loop5): Directory bread(block 71) failed [ 122.010503][ T8936] FAT-fs (loop5): Directory bread(block 72) failed [ 122.010535][ T8936] FAT-fs (loop5): Directory bread(block 73) failed [ 122.022803][ T8938] syz.0.1858: attempt to access beyond end of device [ 122.022803][ T8938] loop0: rw=524288, sector=1736, nr_sectors = 32 limit=256 [ 122.022843][ T8938] syz.0.1858: attempt to access beyond end of device [ 122.022843][ T8938] loop0: rw=0, sector=1736, nr_sectors = 8 limit=256 [ 122.042205][ T8936] syz.5.1856: attempt to access beyond end of device [ 122.042205][ T8936] loop5: rw=524288, sector=1736, nr_sectors = 32 limit=256 [ 122.042280][ T8936] syz.5.1856: attempt to access beyond end of device [ 122.042280][ T8936] loop5: rw=0, sector=1736, nr_sectors = 8 limit=256 [ 122.067145][ T8952] loop0: detected capacity change from 0 to 1024 [ 122.271384][ T8976] loop3: detected capacity change from 0 to 1024 [ 122.301095][ T8973] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 122.345930][ T8980] batadv1: entered promiscuous mode [ 122.353057][ T8980] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 122.369664][ T8983] EXT4-fs (loop3): shut down requested (0) [ 122.415578][ T8985] loop5: detected capacity change from 0 to 128 [ 122.425799][ T8985] vfat: Unknown parameter '@R!áÏMý€wúutf8' [ 122.474621][ T8976] sg_write: data in/out 209152/1 bytes for SCSI command 0xf2-- guessing data in; [ 122.474621][ T8976] program syz.3.1868 not setting count and/or reply_len properly [ 122.500484][ T2118] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 122.544810][ T2118] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 122.557397][ T2118] EXT4-fs (loop3): This should not happen!! Data will be lost [ 122.557397][ T2118] [ 122.559477][ T8989] loop4: detected capacity change from 0 to 8192 [ 122.567923][ T2118] EXT4-fs (loop3): Total free blocks count 0 [ 122.579434][ T2118] EXT4-fs (loop3): Free/Dirty block details [ 122.585472][ T2118] EXT4-fs (loop3): free_blocks=68451041280 [ 122.591353][ T2118] EXT4-fs (loop3): dirty_blocks=10416 [ 122.596748][ T2118] EXT4-fs (loop3): Block reservation details [ 122.602803][ T2118] EXT4-fs (loop3): i_reserved_data_blocks=651 [ 122.621356][ T9000] loop0: detected capacity change from 0 to 1024 [ 122.628542][ T8997] netdevsim netdevsim5: loading /lib/firmware/. failed with error -22 [ 122.636848][ T8997] netdevsim netdevsim5: Direct firmware load for . failed with error -22 [ 122.650161][ T9002] vcan0 (unregistering): left allmulticast mode [ 122.672490][ T2118] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 2048 with error 28 [ 122.773544][ T9005] loop4: detected capacity change from 0 to 8192 [ 122.797905][ T9012] vlan2: entered promiscuous mode [ 122.814354][ T9014] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 122.838821][ T9016] macvtap0: entered promiscuous mode [ 122.844805][ T9016] macvtap0: left promiscuous mode [ 122.916771][ T9020] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 122.932758][ T9024] loop4: detected capacity change from 0 to 128 [ 122.941274][ T9024] vfat: Unknown parameter '@R!áÏMý€wúutf8' [ 122.985849][ T9030] loop5: detected capacity change from 0 to 1024 [ 122.993808][ T9032] loop4: detected capacity change from 0 to 1024 [ 123.074229][ T9039] EXT4-fs (loop5): shut down requested (0) [ 123.140802][ T50] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 123.174408][ T50] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 123.187516][ T50] EXT4-fs (loop5): This should not happen!! Data will be lost [ 123.187516][ T50] [ 123.197401][ T50] EXT4-fs (loop5): Total free blocks count 0 [ 123.203499][ T50] EXT4-fs (loop5): Free/Dirty block details [ 123.209451][ T50] EXT4-fs (loop5): free_blocks=68451041280 [ 123.215287][ T50] EXT4-fs (loop5): dirty_blocks=7680 [ 123.220703][ T50] EXT4-fs (loop5): Block reservation details [ 123.226726][ T50] EXT4-fs (loop5): i_reserved_data_blocks=480 [ 123.246826][ T9042] loop0: detected capacity change from 0 to 8192 [ 123.288137][ T135] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 2048 with error 28 [ 123.303345][ T9051] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 123.311622][ T9051] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 123.361110][ T9030] sg_write: data in/out 209152/1 bytes for SCSI command 0xf2-- guessing data in; [ 123.361110][ T9030] program syz.5.1889 not setting count and/or reply_len properly [ 123.491713][ T9065] loop4: detected capacity change from 0 to 128 [ 123.502554][ T9065] vfat: Unknown parameter '@R!áÏMý€wúutf8' [ 124.084856][ T9076] loop2: detected capacity change from 0 to 512 [ 124.103626][ T9076] EXT4-fs: Ignoring removed oldalloc option [ 124.141867][ T9076] EXT4-fs error (device loop2): ext4_xattr_inode_iget:436: comm syz.2.1906: Parent and EA inode have the same ino 15 [ 124.156664][ T9076] EXT4-fs error (device loop2): ext4_xattr_inode_iget:436: comm syz.2.1906: Parent and EA inode have the same ino 15 [ 124.169844][ T9076] EXT4-fs (loop2): 1 orphan inode deleted [ 124.212438][ T9084] loop5: detected capacity change from 0 to 1024 [ 124.223880][ T9083] loop3: detected capacity change from 0 to 8192 [ 124.350465][ T9094] EXT4-fs (loop5): shut down requested (0) [ 124.477866][ T9101] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 124.510764][ T2013] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 124.550490][ T2013] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 124.563095][ T2013] EXT4-fs (loop5): This should not happen!! Data will be lost [ 124.563095][ T2013] [ 124.573159][ T2013] EXT4-fs (loop5): Total free blocks count 0 [ 124.579306][ T2013] EXT4-fs (loop5): Free/Dirty block details [ 124.585298][ T2013] EXT4-fs (loop5): free_blocks=68451041280 [ 124.591280][ T2013] EXT4-fs (loop5): dirty_blocks=16384 [ 124.596686][ T2013] EXT4-fs (loop5): Block reservation details [ 124.597660][ T9108] loop0: detected capacity change from 0 to 1024 [ 124.602727][ T2013] EXT4-fs (loop5): i_reserved_data_blocks=1024 [ 124.621226][ T9106] vlan3: entered promiscuous mode [ 124.682382][ T2013] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 2048 with error 28 [ 124.707240][ T29] kauditd_printk_skb: 369 callbacks suppressed [ 124.707254][ T29] audit: type=1326 audit(1737409730.345:7836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9090 comm="syz.3.1910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ecc665d29 code=0x7ffc0000 [ 124.712272][ T9117] loop4: detected capacity change from 0 to 1024 [ 124.713613][ T29] audit: type=1326 audit(1737409730.365:7837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9090 comm="syz.3.1910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ecc665d29 code=0x7ffc0000 [ 124.786850][ T9084] sg_write: data in/out 209152/1 bytes for SCSI command 0xf2-- guessing data in; [ 124.786850][ T9084] program syz.5.1905 not setting count and/or reply_len properly [ 124.824825][ T9121] validate_nla: 26 callbacks suppressed [ 124.824841][ T9121] netlink: 'syz.0.1919': attribute type 29 has an invalid length. [ 124.846623][ T9121] netlink: 'syz.0.1919': attribute type 10 has an invalid length. [ 124.869434][ T9121] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 124.892086][ T9121] netlink: 'syz.0.1919': attribute type 29 has an invalid length. [ 124.916127][ T9123] loop2: detected capacity change from 0 to 8192 [ 125.064565][ T29] audit: type=1326 audit(1737409730.675:7838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9128 comm="syz.0.1924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd61d8b5d29 code=0x7ffc0000 [ 125.088081][ T29] audit: type=1326 audit(1737409730.675:7839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9128 comm="syz.0.1924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd61d8b5d29 code=0x7ffc0000 [ 125.111654][ T29] audit: type=1326 audit(1737409730.675:7840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9128 comm="syz.0.1924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7fd61d8b5d29 code=0x7ffc0000 [ 125.135262][ T29] audit: type=1326 audit(1737409730.675:7841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9128 comm="syz.0.1924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd61d8b5d29 code=0x7ffc0000 [ 125.156663][ T9130] batadv1: entered promiscuous mode [ 125.158738][ T29] audit: type=1326 audit(1737409730.675:7842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9128 comm="syz.0.1924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd61d8b5d29 code=0x7ffc0000 [ 125.201253][ T9130] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 125.218618][ T9135] vlan2: entered promiscuous mode [ 125.229404][ T9137] batadv1: entered promiscuous mode [ 125.235581][ T9137] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 125.510814][ T9140] loop2: detected capacity change from 0 to 256 [ 125.579987][ T9146] netlink: 'syz.5.1929': attribute type 29 has an invalid length. [ 125.638643][ T9145] loop4: detected capacity change from 0 to 1024 [ 125.649646][ T9140] FAT-fs (loop2): Directory bread(block 64) failed [ 125.664965][ T9140] FAT-fs (loop2): Directory bread(block 65) failed [ 125.671881][ T9140] FAT-fs (loop2): Directory bread(block 66) failed [ 125.681743][ T9140] FAT-fs (loop2): Directory bread(block 67) failed [ 125.688597][ T9140] FAT-fs (loop2): Directory bread(block 68) failed [ 125.695721][ T9140] FAT-fs (loop2): Directory bread(block 69) failed [ 125.702672][ T9140] FAT-fs (loop2): Directory bread(block 70) failed [ 125.709378][ T9140] FAT-fs (loop2): Directory bread(block 71) failed [ 125.715938][ T9140] FAT-fs (loop2): Directory bread(block 72) failed [ 125.729154][ T9140] FAT-fs (loop2): Directory bread(block 73) failed [ 125.746595][ T9150] loop0: detected capacity change from 0 to 8192 [ 125.768550][ T29] audit: type=1326 audit(1737409731.405:7843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9139 comm="syz.2.1927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1526ee5d29 code=0x7ffc0000 [ 125.792064][ T29] audit: type=1326 audit(1737409731.405:7844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9139 comm="syz.2.1927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f1526ee5d29 code=0x7ffc0000 [ 125.815731][ T29] audit: type=1326 audit(1737409731.405:7845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9139 comm="syz.2.1927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1526ee5d29 code=0x7ffc0000 [ 125.882767][ T9154] netlink: 'syz.2.1933': attribute type 29 has an invalid length. [ 125.895838][ T9154] netlink: 'syz.2.1933': attribute type 29 has an invalid length. [ 125.905500][ T9154] netlink: 'syz.2.1933': attribute type 29 has an invalid length. [ 125.909911][ T9153] loop0: detected capacity change from 0 to 1024 [ 125.914546][ T9154] netlink: 'syz.2.1933': attribute type 29 has an invalid length. [ 125.928417][ T9154] netlink: 'syz.2.1933': attribute type 29 has an invalid length. [ 125.936999][ T9154] netlink: 'syz.2.1933': attribute type 29 has an invalid length. [ 125.976210][ T9157] batadv1: entered promiscuous mode [ 125.988795][ T9157] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 126.046299][ T9162] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 126.064248][ T9167] loop5: detected capacity change from 0 to 512 [ 126.171306][ T9171] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 126.201824][ T9169] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 126.254012][ T9167] EXT4-fs error (device loop5): ext4_ext_check_inode:524: inode #3: comm syz.5.1937: pblk 24 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 126.344112][ T9178] vlan2: entered promiscuous mode [ 126.363971][ T9167] EXT4-fs error (device loop5): ext4_quota_enable:7115: comm syz.5.1937: Bad quota inode: 3, type: 0 [ 126.376354][ T9179] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 126.434659][ T9167] EXT4-fs warning (device loop5): ext4_enable_quotas:7156: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 126.465659][ T9187] loop2: detected capacity change from 0 to 1024 [ 126.508790][ T9167] EXT4-fs (loop5): mount failed [ 126.514713][ T9183] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 126.551367][ T9185] loop0: detected capacity change from 0 to 8192 [ 126.778329][ T9207] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 126.820229][ T9213] syz!: rxe_newlink: already configured on team_slave_0 [ 126.907277][ T9221] macvtap0: entered promiscuous mode [ 126.913503][ T9221] macvtap0: left promiscuous mode [ 126.991006][ T9228] loop0: detected capacity change from 0 to 128 [ 127.001023][ T9228] vfat: Unknown parameter '@R!áÏMý€wúutf8' [ 127.055223][ T9230] loop5: detected capacity change from 0 to 8192 [ 127.182331][ T9240] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 127.264935][ T9247] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 127.319653][ T9248] loop2: detected capacity change from 0 to 512 [ 127.472980][ T9250] loop0: detected capacity change from 0 to 8192 [ 127.734814][ T9248] EXT4-fs error (device loop2): ext4_ext_check_inode:524: inode #3: comm syz.2.1970: pblk 24 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 127.754292][ T9258] batadv1: entered promiscuous mode [ 127.790087][ T9248] EXT4-fs error (device loop2): ext4_quota_enable:7115: comm syz.2.1970: Bad quota inode: 3, type: 0 [ 127.801841][ T9258] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 127.828974][ T9248] EXT4-fs warning (device loop2): ext4_enable_quotas:7156: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 127.915478][ T9248] EXT4-fs (loop2): mount failed [ 127.931426][ T9265] macvtap0: entered promiscuous mode [ 127.937389][ T9265] macvtap0: left promiscuous mode [ 128.075072][ T9270] loop5: detected capacity change from 0 to 256 [ 128.090771][ T9271] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 128.127006][ T9270] FAT-fs (loop5): Directory bread(block 64) failed [ 128.143957][ T9270] FAT-fs (loop5): Directory bread(block 65) failed [ 128.151737][ T9270] FAT-fs (loop5): Directory bread(block 66) failed [ 128.154999][ T9274] loop3: detected capacity change from 0 to 1024 [ 128.158393][ T9270] FAT-fs (loop5): Directory bread(block 67) failed [ 128.175799][ T9270] FAT-fs (loop5): Directory bread(block 68) failed [ 128.192568][ T9270] FAT-fs (loop5): Directory bread(block 69) failed [ 128.201640][ T9270] FAT-fs (loop5): Directory bread(block 70) failed [ 128.213687][ T9274] EXT4-fs mount: 44 callbacks suppressed [ 128.213703][ T9274] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 128.232054][ T9270] FAT-fs (loop5): Directory bread(block 71) failed [ 128.237109][ T9279] syz!: rxe_newlink: already configured on team_slave_0 [ 128.245861][ T9270] FAT-fs (loop5): Directory bread(block 72) failed [ 128.252582][ T9270] FAT-fs (loop5): Directory bread(block 73) failed [ 128.259863][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.305185][ T9270] bio_check_eod: 2 callbacks suppressed [ 128.305200][ T9270] syz.5.1977: attempt to access beyond end of device [ 128.305200][ T9270] loop5: rw=524288, sector=1736, nr_sectors = 32 limit=256 [ 128.325180][ T9270] syz.5.1977: attempt to access beyond end of device [ 128.325180][ T9270] loop5: rw=0, sector=1736, nr_sectors = 8 limit=256 [ 128.327660][ T9284] macvtap0: entered promiscuous mode [ 128.355145][ T9284] macvtap0: left promiscuous mode [ 128.436455][ T9292] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 128.457253][ T9294] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 128.492328][ T9298] macvtap0: entered promiscuous mode [ 128.498204][ T9298] macvtap0: left promiscuous mode [ 128.573468][ T9304] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 128.600473][ T9305] loop4: detected capacity change from 0 to 512 [ 128.622517][ T9305] EXT4-fs error (device loop4): ext4_ext_check_inode:524: inode #3: comm syz.4.1990: pblk 24 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 128.683681][ T9305] EXT4-fs error (device loop4): ext4_quota_enable:7115: comm syz.4.1990: Bad quota inode: 3, type: 0 [ 128.698720][ T9305] EXT4-fs warning (device loop4): ext4_enable_quotas:7156: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 128.713565][ T9305] EXT4-fs (loop4): mount failed [ 128.765714][ T9309] loop0: detected capacity change from 0 to 8192 [ 129.033805][ T9323] loop3: detected capacity change from 0 to 512 [ 129.044429][ T9323] EXT4-fs: Ignoring removed oldalloc option [ 129.058386][ T9323] EXT4-fs error (device loop3): ext4_xattr_inode_iget:436: comm syz.3.1998: Parent and EA inode have the same ino 15 [ 129.126415][ T9323] EXT4-fs error (device loop3): ext4_xattr_inode_iget:436: comm syz.3.1998: Parent and EA inode have the same ino 15 [ 129.145192][ T9323] EXT4-fs (loop3): 1 orphan inode deleted [ 129.161385][ T9323] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 129.232960][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.302348][ T9332] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 129.352558][ T9335] netdevsim netdevsim5: loading /lib/firmware/. failed with error -22 [ 129.360825][ T9335] netdevsim netdevsim5: Direct firmware load for . failed with error -22 [ 129.394236][ T9342] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 129.402506][ T9342] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 129.456428][ T9347] macvtap0: entered promiscuous mode [ 129.457792][ T9345] loop5: detected capacity change from 0 to 2048 [ 129.462838][ T9347] macvtap0: left promiscuous mode [ 129.506091][ T9345] GPT:first_usable_lbas don't match. [ 129.511529][ T9345] GPT:34 != 290 [ 129.515030][ T9345] GPT: Use GNU Parted to correct GPT errors. [ 129.521203][ T9345] loop5: p1 p2 p3 [ 129.574867][ T3904] udevd[3904]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 129.586328][ T3288] udevd[3288]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 129.593799][ T3904] udevd[3904]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 129.651670][ T9351] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 129.669307][ T9356] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 129.687930][ T9365] loop4: detected capacity change from 0 to 1024 [ 129.704800][ T9365] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 129.752139][ T9372] batadv1: entered promiscuous mode [ 129.758331][ T9372] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 129.818441][ T9376] EXT4-fs (loop4): shut down requested (0) [ 129.858081][ T9375] loop5: detected capacity change from 0 to 8192 [ 129.893570][ T29] kauditd_printk_skb: 188 callbacks suppressed [ 129.893636][ T29] audit: type=1326 audit(1737409735.535:8034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9374 comm="syz.5.2014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0390c5d29 code=0x7ffc0000 [ 129.923315][ T29] audit: type=1326 audit(1737409735.535:8035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9374 comm="syz.5.2014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0390c5d29 code=0x7ffc0000 [ 129.927239][ T9379] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 129.955091][ T9379] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 129.961576][ T29] audit: type=1326 audit(1737409735.535:8036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9374 comm="syz.5.2014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa0390c5d29 code=0x7ffc0000 [ 129.971204][ T2118] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, [ 129.987338][ T29] audit: type=1326 audit(1737409735.535:8037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9374 comm="syz.5.2014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0390c5d29 code=0x7ffc0000 [ 129.995599][ T2118] block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 129.996496][ T9365] sg_write: data in/out 209152/1 bytes for SCSI command 0xf2-- guessing data in; [ 129.996496][ T9365] program syz.4.2008 not setting count and/or reply_len properly [ 130.019058][ T29] audit: type=1326 audit(1737409735.535:8038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9374 comm="syz.5.2014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa0390c5d29 code=0x7ffc0000 [ 130.032611][ T2118] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 130.045109][ T29] audit: type=1326 audit(1737409735.535:8039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9374 comm="syz.5.2014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0390c5d29 code=0x7ffc0000 [ 130.068226][ T2118] EXT4-fs (loop4): This should not happen!! Data will be lost [ 130.068226][ T2118] [ 130.068245][ T2118] EXT4-fs (loop4): Total free blocks count 0 [ 130.068259][ T2118] EXT4-fs (loop4): Free/Dirty block details [ 130.068273][ T2118] EXT4-fs (loop4): free_blocks=68451041280 [ 130.068288][ T2118] EXT4-fs (loop4): dirty_blocks=10896 [ 130.068300][ T2118] EXT4-fs (loop4): Block reservation details [ 130.068312][ T2118] EXT4-fs (loop4): i_reserved_data_blocks=681 [ 130.149532][ T29] audit: type=1326 audit(1737409735.535:8040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9374 comm="syz.5.2014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=40 compat=0 ip=0x7fa0390c5d29 code=0x7ffc0000 [ 130.172860][ T29] audit: type=1326 audit(1737409735.535:8041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9374 comm="syz.5.2014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0390c5d29 code=0x7ffc0000 [ 130.196351][ T29] audit: type=1326 audit(1737409735.535:8042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9374 comm="syz.5.2014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=123 compat=0 ip=0x7fa0390c5d29 code=0x7ffc0000 [ 130.219767][ T29] audit: type=1326 audit(1737409735.535:8043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9374 comm="syz.5.2014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0390c5d29 code=0x7ffc0000 [ 130.245302][ T9379] vcan0 (unregistering): left allmulticast mode [ 130.361157][ T9383] loop0: detected capacity change from 0 to 8192 [ 130.395021][ T9389] validate_nla: 49 callbacks suppressed [ 130.395039][ T9389] netlink: 'syz.5.2020': attribute type 29 has an invalid length. [ 130.440651][ T9395] netlink: 'syz.5.2023': attribute type 1 has an invalid length. [ 130.499415][ T9399] netlink: 'syz.5.2024': attribute type 29 has an invalid length. [ 130.526105][ T9404] loop2: detected capacity change from 0 to 1024 [ 130.580398][ T9399] netlink: 'syz.5.2024': attribute type 10 has an invalid length. [ 130.589168][ T9404] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 130.591613][ T9399] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 130.635615][ T9411] netlink: 'syz.5.2024': attribute type 29 has an invalid length. [ 130.685704][ T9413] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 130.693999][ T9413] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 130.713256][ T9417] netlink: 'syz.4.2030': attribute type 29 has an invalid length. [ 130.735485][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.762316][ T9419] loop2: detected capacity change from 0 to 512 [ 130.769137][ T9419] EXT4-fs: Ignoring removed oldalloc option [ 130.778313][ T9419] EXT4-fs error (device loop2): ext4_xattr_inode_iget:436: comm syz.2.2031: Parent and EA inode have the same ino 15 [ 130.806749][ T9419] EXT4-fs error (device loop2): ext4_xattr_inode_iget:436: comm syz.2.2031: Parent and EA inode have the same ino 15 [ 130.822730][ T9417] netlink: 'syz.4.2030': attribute type 10 has an invalid length. [ 130.839414][ T9417] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 130.849986][ T9419] EXT4-fs (loop2): 1 orphan inode deleted [ 130.856129][ T9419] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 130.879995][ T9424] netlink: 'syz.5.2033': attribute type 29 has an invalid length. [ 130.893211][ T9417] netlink: 'syz.4.2030': attribute type 29 has an invalid length. [ 130.894335][ T9426] netlink: 'syz.3.2034': attribute type 1 has an invalid length. [ 130.903329][ T9419] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.957429][ T9431] batadv1: entered promiscuous mode [ 130.963647][ T9431] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 131.050699][ T9435] batadv1: entered promiscuous mode [ 131.057106][ T9435] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 131.128983][ T9443] vlan2: entered promiscuous mode [ 131.146106][ T9445] loop5: detected capacity change from 0 to 128 [ 131.155603][ T9445] vfat: Unknown parameter '@R!áÏMý€wúutf8' [ 131.215037][ T9452] loop5: detected capacity change from 0 to 128 [ 131.260643][ T9452] vfat: Unknown parameter '@R!áÏMý€wúutf8' [ 131.302542][ T9462] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 131.365020][ T9458] loop2: detected capacity change from 0 to 8192 [ 131.457426][ T9474] loop2: detected capacity change from 0 to 128 [ 131.471027][ T9464] loop5: detected capacity change from 0 to 8192 [ 131.477765][ T9474] vfat: Unknown parameter '@R!áÏMý€wúutf8' [ 131.616289][ T9472] loop4: detected capacity change from 0 to 8192 [ 131.639566][ T9483] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 131.664447][ T9481] loop5: detected capacity change from 0 to 2048 [ 131.702845][ T9481] GPT:first_usable_lbas don't match. [ 131.708199][ T9481] GPT:34 != 290 [ 131.711731][ T9481] GPT: Use GNU Parted to correct GPT errors. [ 131.717802][ T9481] loop5: p1 p2 p3 [ 131.844452][ T9493] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 131.887541][ T9495] loop5: detected capacity change from 0 to 8192 [ 131.899934][ T9497] batadv1: entered promiscuous mode [ 131.906411][ T9497] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 131.971830][ T9500] loop5: detected capacity change from 0 to 1024 [ 132.009215][ T9500] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 132.140555][ T3886] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.160356][ T9510] syz!: rxe_newlink: already configured on team_slave_0 [ 132.282947][ T9525] loop0: detected capacity change from 0 to 512 [ 132.292689][ T9525] EXT4-fs: Ignoring removed oldalloc option [ 132.317069][ T9525] EXT4-fs error (device loop0): ext4_xattr_inode_iget:436: comm syz.0.2073: Parent and EA inode have the same ino 15 [ 132.337862][ T9525] EXT4-fs error (device loop0): ext4_xattr_inode_iget:436: comm syz.0.2073: Parent and EA inode have the same ino 15 [ 132.375877][ T9525] EXT4-fs (loop0): 1 orphan inode deleted [ 132.387433][ T9525] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 132.395941][ T9534] loop2: detected capacity change from 0 to 1024 [ 132.416668][ T9534] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 132.447412][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.525672][ T9545] loop3: detected capacity change from 0 to 512 [ 132.535982][ T9545] EXT4-fs: Ignoring removed oldalloc option [ 132.584201][ T9545] EXT4-fs error (device loop3): ext4_xattr_inode_iget:436: comm syz.3.2081: Parent and EA inode have the same ino 15 [ 132.609286][ T9548] EXT4-fs (loop2): shut down requested (0) [ 132.651023][ T9545] EXT4-fs error (device loop3): ext4_xattr_inode_iget:436: comm syz.3.2081: Parent and EA inode have the same ino 15 [ 132.683866][ T9557] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 132.692235][ T9557] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 132.715269][ T2118] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 132.718001][ T9552] loop4: detected capacity change from 0 to 8192 [ 132.738310][ T2118] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 132.750845][ T2118] EXT4-fs (loop2): This should not happen!! Data will be lost [ 132.750845][ T2118] [ 132.760611][ T2118] EXT4-fs (loop2): Total free blocks count 0 [ 132.766614][ T2118] EXT4-fs (loop2): Free/Dirty block details [ 132.772555][ T2118] EXT4-fs (loop2): free_blocks=68451041280 [ 132.778420][ T2118] EXT4-fs (loop2): dirty_blocks=16384 [ 132.783938][ T2118] EXT4-fs (loop2): Block reservation details [ 132.788220][ T9560] batadv1: entered promiscuous mode [ 132.789948][ T2118] EXT4-fs (loop2): i_reserved_data_blocks=1024 [ 132.798603][ T9545] EXT4-fs (loop3): 1 orphan inode deleted [ 132.819948][ T9560] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 132.828483][ T9545] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 132.909105][ T9534] sg_write: data in/out 209152/1 bytes for SCSI command 0xf2-- guessing data in; [ 132.909105][ T9534] program syz.2.2075 not setting count and/or reply_len properly [ 132.947495][ T9566] vlan2: entered promiscuous mode [ 132.953836][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.056564][ T9573] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 133.347173][ T9578] loop4: detected capacity change from 0 to 2048 [ 133.453839][ T9578] GPT:first_usable_lbas don't match. [ 133.459415][ T9578] GPT:34 != 290 [ 133.463015][ T9578] GPT: Use GNU Parted to correct GPT errors. [ 133.469185][ T9578] loop4: p1 p2 p3 [ 133.483994][ T9583] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 133.544870][ T9585] loop2: detected capacity change from 0 to 128 [ 133.552689][ T9585] vfat: Unknown parameter '@R!áÏMý€wúutf8' [ 133.604157][ T9588] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 133.612423][ T9588] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 133.692905][ T9599] loop4: detected capacity change from 0 to 128 [ 133.700683][ T9599] vfat: Unknown parameter '@R!áÏMý€wúutf8' [ 133.763783][ T9603] loop4: detected capacity change from 0 to 1024 [ 133.798532][ T9603] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 133.826731][ T9611] loop0: detected capacity change from 0 to 1024 [ 133.872647][ T9613] batadv1: entered promiscuous mode [ 133.878977][ T9613] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 133.883987][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.898816][ T9611] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 133.950212][ T9622] loop2: detected capacity change from 0 to 128 [ 133.964749][ T9622] vfat: Unknown parameter '@R!áÏMý€wúutf8' [ 134.057866][ T9625] loop3: detected capacity change from 0 to 8192 [ 134.080387][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.157341][ T9638] loop5: detected capacity change from 0 to 512 [ 134.185711][ T9638] EXT4-fs: Ignoring removed oldalloc option [ 134.296651][ T9638] EXT4-fs error (device loop5): ext4_xattr_inode_iget:436: comm syz.5.2117: Parent and EA inode have the same ino 15 [ 134.372153][ T9638] EXT4-fs error (device loop5): ext4_xattr_inode_iget:436: comm syz.5.2117: Parent and EA inode have the same ino 15 [ 134.420771][ T9649] loop0: detected capacity change from 0 to 512 [ 134.458352][ T9651] syz!: rxe_newlink: already configured on team_slave_0 [ 134.495592][ T9649] EXT4-fs: Ignoring removed oldalloc option [ 134.525626][ T9638] EXT4-fs (loop5): 1 orphan inode deleted [ 134.563825][ T9649] EXT4-fs error (device loop0): ext4_xattr_inode_iget:436: comm syz.0.2119: Parent and EA inode have the same ino 15 [ 134.583735][ T9638] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.613662][ T9649] EXT4-fs error (device loop0): ext4_xattr_inode_iget:436: comm syz.0.2119: Parent and EA inode have the same ino 15 [ 134.621082][ T9658] loop2: detected capacity change from 0 to 1024 [ 134.629222][ T9660] batadv1: entered promiscuous mode [ 134.633844][ T3886] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.638004][ T9649] EXT4-fs (loop0): 1 orphan inode deleted [ 134.650137][ T9660] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 134.656829][ T9649] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.689547][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.702294][ T9658] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 134.757374][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.849575][ T9687] loop2: detected capacity change from 0 to 128 [ 134.863799][ T9687] vfat: Unknown parameter '@R!áÏMý€wúutf8' [ 134.919035][ T9691] loop4: detected capacity change from 0 to 512 [ 134.925686][ T9691] EXT4-fs: Ignoring removed oldalloc option [ 134.934045][ T9691] EXT4-fs error (device loop4): ext4_xattr_inode_iget:436: comm syz.4.2135: Parent and EA inode have the same ino 15 [ 134.948860][ T9691] EXT4-fs error (device loop4): ext4_xattr_inode_iget:436: comm syz.4.2135: Parent and EA inode have the same ino 15 [ 134.961501][ T9691] EXT4-fs (loop4): 1 orphan inode deleted [ 134.964031][ T29] kauditd_printk_skb: 511 callbacks suppressed [ 134.964046][ T29] audit: type=1326 audit(1737409740.605:8555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9695 comm="syz.5.2137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0390c5d29 code=0x7ffc0000 [ 134.967753][ T9691] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 135.018494][ T29] audit: type=1326 audit(1737409740.625:8556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9695 comm="syz.5.2137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7fa0390c5d29 code=0x7ffc0000 [ 135.042062][ T29] audit: type=1326 audit(1737409740.625:8557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9695 comm="syz.5.2137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0390c5d29 code=0x7ffc0000 [ 135.081304][ T9698] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 135.082775][ T9700] loop5: detected capacity change from 0 to 1024 [ 135.095820][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.122674][ T9700] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 135.156964][ T9708] vlan2: entered promiscuous mode [ 135.177558][ T3886] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.210161][ T9712] loop5: detected capacity change from 0 to 512 [ 135.218634][ T9712] EXT4-fs: Ignoring removed oldalloc option [ 135.227942][ T9714] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 135.236181][ T29] audit: type=1326 audit(1737409740.885:8558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9713 comm="syz.4.2144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae40a85d29 code=0x7ffc0000 [ 135.248454][ T9712] EXT4-fs error (device loop5): ext4_xattr_inode_iget:436: comm syz.5.2143: Parent and EA inode have the same ino 15 [ 135.272697][ T29] audit: type=1326 audit(1737409740.885:8559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9713 comm="syz.4.2144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae40a85d29 code=0x7ffc0000 [ 135.273916][ T9712] EXT4-fs error (device loop5): ext4_xattr_inode_iget:436: comm syz.5.2143: Parent and EA inode have the same ino 15 [ 135.296186][ T29] audit: type=1326 audit(1737409740.885:8560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9713 comm="syz.4.2144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=136 compat=0 ip=0x7fae40a85d29 code=0x7ffc0000 [ 135.331883][ T29] audit: type=1326 audit(1737409740.885:8561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9713 comm="syz.4.2144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae40a85d29 code=0x7ffc0000 [ 135.355349][ T29] audit: type=1326 audit(1737409740.885:8562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9713 comm="syz.4.2144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fae40a85d29 code=0x7ffc0000 [ 135.376760][ T9712] EXT4-fs (loop5): 1 orphan inode deleted [ 135.378808][ T29] audit: type=1326 audit(1737409740.885:8563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9713 comm="syz.4.2144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae40a85d29 code=0x7ffc0000 [ 135.378850][ T29] audit: type=1326 audit(1737409740.885:8564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9713 comm="syz.4.2144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fae40a85d29 code=0x7ffc0000 [ 135.386888][ T9712] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 135.487657][ T3886] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.503773][ T9717] batadv1: entered promiscuous mode [ 135.511078][ T9717] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 135.577854][ T9722] loop5: detected capacity change from 0 to 8192 [ 135.956133][ T9727] loop2: detected capacity change from 0 to 2048 [ 136.089599][ T9737] loop4: detected capacity change from 0 to 1024 [ 136.102586][ T9727] GPT:first_usable_lbas don't match. [ 136.107913][ T9727] GPT:34 != 290 [ 136.109885][ T9737] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 136.111416][ T9727] GPT: Use GNU Parted to correct GPT errors. [ 136.111497][ T9727] loop2: p1 p2 p3 [ 136.246184][ T3904] udevd[3904]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 136.257077][ T3288] udevd[3288]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 136.261689][ T3920] udevd[3920]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 136.285294][ T9742] loop0: detected capacity change from 0 to 1024 [ 136.300179][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.310143][ T9748] syz!: rxe_newlink: already configured on team_slave_0 [ 136.341554][ T9742] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 136.372270][ T9751] loop4: detected capacity change from 0 to 512 [ 136.388528][ T9751] EXT4-fs: Ignoring removed oldalloc option [ 136.431484][ T9755] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 136.439772][ T9755] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 136.456093][ T9751] EXT4-fs error (device loop4): ext4_xattr_inode_iget:436: comm syz.4.2157: Parent and EA inode have the same ino 15 [ 136.485975][ T9751] EXT4-fs error (device loop4): ext4_xattr_inode_iget:436: comm syz.4.2157: Parent and EA inode have the same ino 15 [ 136.492876][ T9764] validate_nla: 40 callbacks suppressed [ 136.492896][ T9764] netlink: 'syz.3.2161': attribute type 29 has an invalid length. [ 136.518934][ T9751] EXT4-fs (loop4): 1 orphan inode deleted [ 136.534861][ T9751] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 136.550582][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.606611][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.666054][ T9773] loop5: detected capacity change from 0 to 1024 [ 136.720916][ T9777] loop4: detected capacity change from 0 to 512 [ 136.732380][ T9773] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 136.743061][ T9777] EXT4-fs: Ignoring removed oldalloc option [ 136.789649][ T9777] EXT4-fs error (device loop4): ext4_xattr_inode_iget:436: comm syz.4.2165: Parent and EA inode have the same ino 15 [ 136.802855][ T9786] loop3: detected capacity change from 0 to 512 [ 136.803306][ T3886] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.809753][ T9786] EXT4-fs: Ignoring removed oldalloc option [ 136.832374][ T9777] EXT4-fs error (device loop4): ext4_xattr_inode_iget:436: comm syz.4.2165: Parent and EA inode have the same ino 15 [ 136.852261][ T9777] EXT4-fs (loop4): 1 orphan inode deleted [ 136.865308][ T9777] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 136.941227][ T9786] EXT4-fs error (device loop3): ext4_xattr_inode_iget:436: comm syz.3.2170: Parent and EA inode have the same ino 15 [ 136.985983][ T9786] EXT4-fs error (device loop3): ext4_xattr_inode_iget:436: comm syz.3.2170: Parent and EA inode have the same ino 15 [ 137.022761][ T9791] loop0: detected capacity change from 0 to 8192 [ 137.030441][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.143843][ T9786] EXT4-fs (loop3): 1 orphan inode deleted [ 137.201216][ T9786] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 137.229174][ T9797] batadv1: entered promiscuous mode [ 137.235380][ T9797] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 137.251635][ T9799] loop4: detected capacity change from 0 to 1024 [ 137.263591][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.274265][ T9799] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 137.333029][ T9803] netlink: 'syz.3.2175': attribute type 29 has an invalid length. [ 137.356425][ T9803] netlink: 'syz.3.2175': attribute type 10 has an invalid length. [ 137.364688][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.374857][ T9803] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 137.412576][ T9803] netlink: 'syz.3.2175': attribute type 29 has an invalid length. [ 137.467994][ T9810] netlink: 'syz.4.2178': attribute type 29 has an invalid length. [ 137.482412][ T9810] netlink: 'syz.4.2178': attribute type 29 has an invalid length. [ 137.491359][ T9810] netlink: 'syz.4.2178': attribute type 29 has an invalid length. [ 137.499817][ T9810] netlink: 'syz.4.2178': attribute type 29 has an invalid length. [ 137.508379][ T9810] netlink: 'syz.4.2178': attribute type 29 has an invalid length. [ 137.516948][ T9810] netlink: 'syz.4.2178': attribute type 29 has an invalid length. [ 137.583417][ T9815] loop5: detected capacity change from 0 to 2048 [ 137.632939][ T9820] loop2: detected capacity change from 0 to 512 [ 137.645818][ T9820] EXT4-fs: Ignoring removed oldalloc option [ 137.657673][ T9815] GPT:first_usable_lbas don't match. [ 137.663058][ T9815] GPT:34 != 290 [ 137.666577][ T9815] GPT: Use GNU Parted to correct GPT errors. [ 137.672757][ T9815] loop5: p1 p2 p3 [ 137.696279][ T9820] EXT4-fs error (device loop2): ext4_xattr_inode_iget:436: comm syz.2.2182: Parent and EA inode have the same ino 15 [ 137.717470][ T9820] EXT4-fs error (device loop2): ext4_xattr_inode_iget:436: comm syz.2.2182: Parent and EA inode have the same ino 15 [ 137.731991][ T3001] GPT:first_usable_lbas don't match. [ 137.737291][ T3001] GPT:34 != 290 [ 137.740779][ T3001] GPT: Use GNU Parted to correct GPT errors. [ 137.747078][ T3001] loop5: p1 p2 p3 [ 137.747387][ T9820] EXT4-fs (loop2): 1 orphan inode deleted [ 137.772340][ T9820] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 137.813645][ T3288] udevd[3288]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 137.829878][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.841315][ T9827] loop3: detected capacity change from 0 to 128 [ 137.847859][ T9827] vfat: Unknown parameter '@R!áÏMý€wúutf8' [ 137.848915][ T3904] udevd[3904]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 137.865008][ T3920] udevd[3920]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 137.907172][ T9834] batadv1: entered promiscuous mode [ 137.913634][ T9834] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 137.933807][ T3904] udevd[3904]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 137.939775][ T3288] udevd[3288]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 137.945040][ T3920] udevd[3920]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 137.958511][ T9838] loop2: detected capacity change from 0 to 1024 [ 137.991548][ T9839] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 137.999801][ T9839] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 138.068391][ T9838] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 138.138440][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.160112][ T9848] batadv1: entered promiscuous mode [ 138.170821][ T9848] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 138.192664][ T9849] loop5: detected capacity change from 0 to 8192 [ 138.439750][ T9851] loop4: detected capacity change from 0 to 8192 [ 138.498061][ T9856] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 138.667321][ T9870] loop5: detected capacity change from 0 to 128 [ 138.674952][ T9870] vfat: Unknown parameter '@R!áÏMý€wúutf8' [ 138.733766][ T9877] batadv1: entered promiscuous mode [ 138.740046][ T9877] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 138.966998][ T9887] loop5: detected capacity change from 0 to 2048 [ 139.003327][ T9890] loop0: detected capacity change from 0 to 1024 [ 139.026324][ T9887] GPT:first_usable_lbas don't match. [ 139.031707][ T9887] GPT:34 != 290 [ 139.035257][ T9887] GPT: Use GNU Parted to correct GPT errors. [ 139.041446][ T9887] loop5: p1 p2 p3 [ 139.050171][ T9890] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 139.109536][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.139270][ T9895] loop4: detected capacity change from 0 to 512 [ 139.145940][ T9895] EXT4-fs: Ignoring removed oldalloc option [ 139.156592][ T9895] EXT4-fs error (device loop4): ext4_xattr_inode_iget:436: comm syz.4.2209: Parent and EA inode have the same ino 15 [ 139.170599][ T9895] EXT4-fs error (device loop4): ext4_xattr_inode_iget:436: comm syz.4.2209: Parent and EA inode have the same ino 15 [ 139.186259][ T3510] udevd[3510]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 139.196938][ T9895] EXT4-fs (loop4): 1 orphan inode deleted [ 139.205341][ T9895] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 139.233473][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.262217][ T3298] ================================================================== [ 139.270435][ T3298] BUG: KCSAN: data-race in __find_get_block / has_bh_in_lru [ 139.277768][ T3298] [ 139.280112][ T3298] read-write to 0xffff888237d2ba28 of 8 bytes by task 3287 on cpu 1: [ 139.288285][ T3298] __find_get_block+0x434/0x8a0 [ 139.293163][ T3298] bdev_getblk+0x30/0x3b0 [ 139.297608][ T3298] __ext4_get_inode_loc+0x2f7/0x910 [ 139.302831][ T3298] ext4_reserve_inode_write+0xb0/0x200 [ 139.308303][ T3298] __ext4_mark_inode_dirty+0x8e/0x440 [ 139.313693][ T3298] ext4_dirty_inode+0x91/0xb0 [ 139.318387][ T3298] __mark_inode_dirty+0x166/0x7e0 [ 139.323417][ T3298] file_update_time+0x285/0x2b0 [ 139.328283][ T3298] ext4_page_mkwrite+0x19e/0xb70 [ 139.333229][ T3298] do_wp_page+0xca1/0x2340 [ 139.337655][ T3298] handle_mm_fault+0xc63/0x2ac0 [ 139.342511][ T3298] exc_page_fault+0x3b9/0x650 [ 139.347209][ T3298] asm_exc_page_fault+0x26/0x30 [ 139.352062][ T3298] [ 139.354382][ T3298] read to 0xffff888237d2ba28 of 8 bytes by task 3298 on cpu 0: [ 139.361920][ T3298] has_bh_in_lru+0x35/0x1f0 [ 139.366433][ T3298] smp_call_function_many_cond+0x2d5/0xc20 [ 139.372256][ T3298] on_each_cpu_cond_mask+0x3c/0x90 [ 139.377383][ T3298] invalidate_bh_lrus+0x2a/0x30 [ 139.382243][ T3298] blkdev_flush_mapping+0x9b/0x1a0 [ 139.387364][ T3298] bdev_release+0x2f9/0x420 [ 139.391884][ T3298] blkdev_release+0x15/0x20 [ 139.396494][ T3298] __fput+0x17a/0x6d0 [ 139.400490][ T3298] ____fput+0x1c/0x30 [ 139.404485][ T3298] task_work_run+0x13a/0x1a0 [ 139.409089][ T3298] syscall_exit_to_user_mode+0xa8/0x120 [ 139.414663][ T3298] do_syscall_64+0xd6/0x1c0 [ 139.419213][ T3298] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.425123][ T3298] [ 139.427444][ T3298] value changed: 0x0000000000000000 -> 0xffff8881007ab1a0 [ 139.434556][ T3298] [ 139.436913][ T3298] Reported by Kernel Concurrency Sanitizer on: [ 139.443065][ T3298] CPU: 0 UID: 0 PID: 3298 Comm: syz-executor Not tainted 6.13.0-syzkaller-00164-g100ceb4817a2 #0 [ 139.453570][ T3298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 139.463644][ T3298] ================================================================== [ 139.538534][ T9908] loop2: detected capacity change from 0 to 8192 [ 140.303740][ T9911] ================================================================== [ 140.311845][ T9911] BUG: KCSAN: data-race in __writeback_single_inode / xas_set_mark [ 140.319755][ T9911] [ 140.322073][ T9911] write to 0xffff888106665714 of 4 bytes by task 9908 on cpu 0: [ 140.329783][ T9911] xas_set_mark+0x131/0x150 [ 140.334342][ T9911] tag_pages_for_writeback+0xa5/0x2a0 [ 140.339740][ T9911] writeback_iter+0x351/0x830 [ 140.344441][ T9911] write_cache_pages+0x4b/0x100 [ 140.349322][ T9911] mpage_writepages+0x72/0xf0 [ 140.354014][ T9911] fat_writepages+0x24/0x30 [ 140.358515][ T9911] do_writepages+0x1d8/0x480 [ 140.363108][ T9911] file_write_and_wait_range+0x168/0x2f0 [ 140.368739][ T9911] __generic_file_fsync+0x46/0x140 [ 140.373851][ T9911] fat_file_fsync+0x46/0x100 [ 140.378461][ T9911] vfs_fsync_range+0x116/0x130 [ 140.383243][ T9911] generic_file_write_iter+0x185/0x1c0 [ 140.388713][ T9911] iter_file_splice_write+0x5f1/0x980 [ 140.394095][ T9911] direct_splice_actor+0x160/0x2c0 [ 140.399205][ T9911] splice_direct_to_actor+0x302/0x670 [ 140.404584][ T9911] do_splice_direct+0xd7/0x150 [ 140.409349][ T9911] do_sendfile+0x398/0x660 [ 140.413759][ T9911] __x64_sys_sendfile64+0x110/0x150 [ 140.418949][ T9911] x64_sys_call+0xfbd/0x2dc0 [ 140.423533][ T9911] do_syscall_64+0xc9/0x1c0 [ 140.428030][ T9911] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.433917][ T9911] [ 140.436239][ T9911] read to 0xffff888106665714 of 4 bytes by task 9911 on cpu 1: [ 140.443859][ T9911] __writeback_single_inode+0x210/0x850 [ 140.449406][ T9911] writeback_single_inode+0x16c/0x3f0 [ 140.454773][ T9911] sync_inode_metadata+0x5c/0x90 [ 140.459707][ T9911] __generic_file_fsync+0xed/0x140 [ 140.464820][ T9911] fat_file_fsync+0x46/0x100 [ 140.469423][ T9911] vfs_fsync_range+0x116/0x130 [ 140.474255][ T9911] generic_file_write_iter+0x185/0x1c0 [ 140.479745][ T9911] iter_file_splice_write+0x5f1/0x980 [ 140.485122][ T9911] direct_splice_actor+0x160/0x2c0 [ 140.490239][ T9911] splice_direct_to_actor+0x302/0x670 [ 140.495611][ T9911] do_splice_direct+0xd7/0x150 [ 140.500383][ T9911] do_sendfile+0x398/0x660 [ 140.504796][ T9911] __x64_sys_sendfile64+0x110/0x150 [ 140.509989][ T9911] x64_sys_call+0xfbd/0x2dc0 [ 140.514576][ T9911] do_syscall_64+0xc9/0x1c0 [ 140.519092][ T9911] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.524982][ T9911] [ 140.527294][ T9911] value changed: 0x02000021 -> 0x04000021 [ 140.533033][ T9911] [ 140.535368][ T9911] Reported by Kernel Concurrency Sanitizer on: [ 140.541513][ T9911] CPU: 1 UID: 0 PID: 9911 Comm: syz.2.2214 Not tainted 6.13.0-syzkaller-00164-g100ceb4817a2 #0 [ 140.552105][ T9911] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 140.562168][ T9911] ==================================================================