last executing test programs: 2.518242499s ago: executing program 0 (id=721): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 2.434454149s ago: executing program 1 (id=723): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x10, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000009c0)={{r0}, &(0x7f0000000940), &(0x7f0000000980)}, 0x20) r2 = socket$inet6(0xa, 0x3, 0x2f) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000001c0)={{{@in, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x50}, {0x3}, {}, 0x0, 0x3, 0x1}, {{@in6=@loopback, 0x0, 0x6c}, 0x0, @in6=@local}}, 0xe8) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) unshare(0x2040400) r3 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) unshare(0x2000400) fsmount(r3, 0x0, 0x0) 2.419397319s ago: executing program 1 (id=724): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f00000001c0), 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000280), 0x9) r2 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000c40), 0x12) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000200)=0x1, 0x12) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_procs(r5, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f0000000080), 0x12) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0xff}, 0x101f31, 0xffffffff, 0x2, 0x5, 0x0, 0x6e, 0xfffb, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_pidfd_open(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900000001"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0x14, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRESHEX=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x18) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$cgroup_freezer_state(r4, &(0x7f0000000500)='THAWED\x00', 0x7) ioctl$sock_bt_hci(r9, 0x800448d3, 0x0) bind$bt_hci(r9, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_PROBE_CLIENT(r7, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) 2.091414898s ago: executing program 4 (id=725): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file2\x00', 0x200000, &(0x7f00000000c0)={[{@dioread_lock}, {@noblock_validity}, {@lazytime}, {@noblock_validity}]}, 0xfc, 0x564, &(0x7f00000008c0)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @perf_config_ext={0x8, 0x81}, 0x140, 0x1, 0x43, 0x5, 0x0, 0x8, 0x5d, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000000714010000000000000000000800", @ANYRES32=r1], 0x30}}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2008002, &(0x7f0000000080), 0x1, 0x549, &(0x7f0000001800)="$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") lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0xee01, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000800008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='memory.events\x00', 0x275a, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, 0x0, 0x28) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff010000850000000e000000850000005000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r3 = mq_open(&(0x7f0000001040)='!\x7f\x00\xca\x00\x00\x00\f\x00\x00\x01E!T\xeeux\x00\xbf@\xf4\x1c\xbce\xca\x97\xd5pkv\x88L\x05$\xef\xfeI\xdaW1\xfcg\xa1\xdb$,0y$\xcd{zl.\xae\x805\xa8\xd6\x85\x15\xd2\x0e~\xcc\x90\x97\xeah\v\x1a9X\a\xca{\x11#\x95e{U\xe5-\xabRw\xcafy\xe6\aNhX4Ll[\x14\x15\xb2\x1a\xf2\x8fD\x1e\xf2\x11\x9ft\xf17\xaa\x8eJ\x96\xde\t\xc3\x99\xa2\x94\xb9\x1fx\x9b\xa6<\xe0v$\xcd\xc5\xed\xd6\xae\x0f\x95/\x0f\xaa\x80\xbdH\x11\xbcaCn\x16\x8a7\xe4\xdd\xb4\"\a\x88\x1d^w\'\xfbr\xc8T\xcfr\xb2\x90\x89\xdfBZ\x88\xea1\xb8\xee\xd2\x99\x19\xbaw\xd4\fr]\x0e\xb6\xe1o\xab\x9eS\x03\xb8\x05\xa3\xd2\xeb$\nK}99\x1a\x91\xed\x168g^\xefJ[\x8dp\x8eP\xae\a\x95}c\x02\x9bTl\x9be\x01\xe5\x06\xfdx\xd8\xde\xe3\xb5T\\_\x95\x8d\xf4\x143\xde,\x85\x84<\f\xe1\x19\xd6eX\x8eH$\xbb\x04\xa5}y\xe6\xc5\xfeY\xc59\xef\x9e^?\\\x17\x17W\x12\xe6w\x7f\x88qA\xb1L\xc0\xb43\x18\a\xf6\xcf\x06D\xc5\xbd\x02\xad\x93\x8c/\xdf\xc6\xd2kH\xea\xe33c\xe9\xccJ\x1f\x9dJ\x93.|\xa8z\xb2\xc0\xb4\x0e\xe3\x008\x1c\xf0h\x9b,:\xbf<\xee\x00'/494, 0x40, 0x1c4, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xa8}) mq_timedreceive(r3, &(0x7f0000000180)=""/196, 0xc4, 0x800000000000, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket(0x10, 0x3, 0x6) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000180)={r4, 0xffffffffffffffff}, 0x4) getpeername$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000003c0)=0x14) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000640)=@bpf_tracing={0x1a, 0x13, &(0x7f0000000300)=ANY=[@ANYBLOB="85200000040000001852000008000000000000000000000085100000fbffffffb7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70500000800800085000000a50000008500000033000002540bfcfffcff"], &(0x7f00000001c0)='syzkaller\x00', 0x400, 0xe3, &(0x7f00000004c0)=""/227, 0x41000, 0x11, '\x00', r7, 0x17, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000400)={0x4, 0x4, 0x4c, 0x8}, 0x10, 0xb221, 0xffffffffffffffff, 0x5, 0x0, &(0x7f00000005c0)=[{0x5, 0x5, 0x4, 0xb}, {0x0, 0x1, 0x1, 0x5}, {0x0, 0x3, 0x8, 0x7}, {0x2, 0x5, 0xd, 0x5}, {0x2, 0x1, 0x10, 0x7}], 0x10, 0x4, @void, @value}, 0x94) socket(0x10, 0x3, 0x0) socket$unix(0x1, 0x2, 0x0) 2.089014938s ago: executing program 0 (id=735): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000800)={&(0x7f00000007c0)='f2fs_direct_IO_enter\x00', r2, 0x0, 0x2}, 0x18) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000033c0)=@deltaction={0x148, 0x31, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@TCA_ACT_TAB={0x24, 0x1, [{0xc, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0x14, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}]}, @TCA_ACT_TAB={0x54, 0x1, [{0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0x10, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0x10, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7a}}]}, @TCA_ACT_TAB={0x34, 0x1, [{0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x10000}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}]}, @TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}, @TCA_ACT_TAB={0x5c, 0x1, [{0xc, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0x14, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0x10, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0x10, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}]}, @TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}]}, 0x148}}, 0x20000000) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002380)=ANY=[@ANYBLOB="1800b8000f14010027bd7000fbdbdf250800030001000000bf088f99a4ea77df4f5dfe6d03a00ff12e6c9960d5dc1600f25cfd088e6bb7bd9419ff0fec2d79c6197bd5dbbb19cc523adf0b8e27a7d862a4b76cb62d942da8209e88c3cf409c6f9d72d055b5199c740bf5d808635603fbe46c3b025cab0f75381428972eca06d4b309fa55ae35ee16bd"], 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0x1004) r4 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x0) r5 = gettid() lsetxattr$system_posix_acl(0x0, &(0x7f0000000540)='system.posix_acl_access\x00', 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0xfff) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) read(r4, 0x0, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r6, 0x1, 0xb, &(0x7f00000000c0)=0x1, 0x4) sendto$inet(r6, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000020000000000000000018190000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8fe00000000bfa200000000000007020000f8ffffffb703000008000000b70400008f2000008500000024"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x31, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000001e00)='memory.swap.high\x00', 0x2, 0x0) r8 = fcntl$getown(r4, 0x9) statx(0xffffffffffffff9c, &(0x7f0000001e80)='./file0\x00', 0x100, 0x200, &(0x7f0000001ec0)) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000002140)=[{{&(0x7f00000003c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f00000002c0)=[{&(0x7f0000000580)="97406660fcd5b5a82febf136fd99702a6555e450e451816db9c4cb6e57c1c81713265a04c4978456ce8a97358ae4ecc2c81731f43fc18c0e2374edc1bae06a3364d623b0cf2e4e2a0f48d3f717698c9f84b4a60b390941748a8728aaa1a080c73c7aaa9864e00cafb2b8d099bc5375b5785618580e0a594d2241d22d488f12c4adfe6f25ed0b9804e1c002dddfd34da41f8415f028db4013e3d6b640a0c1e6cf6063", 0xa2}, {&(0x7f0000000640)="cc10b40c0577f53661fbf4cf9168112455eb2549b9d5644eee2258f2999d9742343140195fae0e106f2437a46e382d7e7a17e0c85704fc08e8f21231672600b769a291de3a5b73d17f5c673a20b588921073439b826847accfe5754fe19c22d50929ac68d337acd6bf97002c854adec001a32275a666cc51e8a95df9598284a4d09e941760e0ab9490b85024ac8000224d76f5e02e77", 0x96}, {&(0x7f0000000700)="2ffd9e69ac8cab7df9928bcfa4c641917367817d0631153688b225a85d13dda06b911c3a0e88f6faeb1e2a8aa1fcd3cdb04226431ed3305a58d07972f516e4bbf2afaa4c5a0711d0d074b443d117cca9d944974fa55a2fcf0ff446b5346af389fd6eecb47603ec45c40e9b84cada268001168bbb0eb0eb5cf5578997e6bbcd89f41863a7f3638834e6a6e4d86d41bab06209c8c841e5d9858566793703164025ecc855b0439ffe64183247981dad2b6f84e13b97cc6966dce2afb05ae0112a", 0xbf}], 0x3, &(0x7f0000002200)=ANY=[@ANYBLOB="ff00000000000000010000000100000051044bdb137b33b97a213f46adb86117949ab4175de04472e061c21da6ca189403ae27cd0d8f9041d6ac845e", @ANYRES32=r0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="0000000038000000000000000100000001000000", @ANYRES32=r2, @ANYRES32=r4, @ANYRES32=r2, @ANYRES32=r3, @ANYRES32, @ANYRES32=r3, @ANYRES32=r3, @ANYRES32, @ANYRES32=r1, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32, @ANYRES32, @ANYBLOB="00000000100000000000000001000000010000001c000000000000000100000002000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000034000000000000000100000001000000", @ANYRES32, @ANYRES32=r6, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r6, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x130, 0x50800}}, {{&(0x7f0000000900)=@file={0x1, './file0/file0\x00'}, 0x6e, &(0x7f0000000b00)=[{&(0x7f0000000980)="07c21e33453436ef098ae4b661287a3e50703b14b33841d8e9cba515ab769f22b620744012ccb83b27cdf64a0857bbb394b4a8bfda6653827086255b4a02b661646c54bff8c724f0c31d08c4e6bcb3df92b5651bdcd309fd4cfb159b07d6cfc8466ec95ae262c318590f400a66d4b39c89a884282e6f611add2c0553ad03660ebaf76171c73e7e4bc21e55c70463cf91f7a3d1", 0x93}, {&(0x7f0000000a40)="e3986f304f501fd4d18a844cf28691633233025834d44bdf7e4e43336549d41b4cc01ab080036c64d47aa7cfb8f3d84291cc8f144e0ab4ced7f7b3b24aaec0df8d19f3f638aa50fdd1a7610609912ec7e3a8b7d111d875f4ad9cdead05bf5e975bec69ae30d20c8cfb305a4ffdb50ed1", 0x70}, {&(0x7f0000000480)="061c6c7606b9521a1ef4c06d9e994bc3885638cef2c12ba59ac4c6e2cc", 0x1d}, {0x0}, {&(0x7f0000000ac0)="205e87ffa77fe3fc4504cf097d59c82fc11f7cec93507c4a7426835eb6d94787b09fcd81c3135cbb64020a54700b", 0x2e}], 0x5, 0x0, 0x0, 0x4001}}, {{&(0x7f0000000b80)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001dc0)=[{&(0x7f0000000c00)="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", 0x1000}, {&(0x7f0000001c00)="759e978fe3220d4758623585244df75cfe5cb5b9c0704c9052d428ce6455a2d910dcd85730aa8f50ae09249433c29f9c44d8ecb80855b63f4ef0d76c1acefe581acfdeda9478cf6afb739edc512347276d2278209c7d9bc5f0a57c847e76edcdcc842581721f838a9831dfa2b6e9d73a98b610273c438c99399114", 0x7b}, {&(0x7f0000001c80)="fa1e8247cd5880fb129033328ba9b2193cac72093870b0700458acdd35f3dfb8cc9b82bb8bf50a770d950aa386dc21e90c160bb220b029ed3bb2672a34e4b02b67de33296d470c9b58df9eebf180e250afdad8d9353c629d685b3ea8c62b8691d46ba3e393c9eefcaf5eae298d382ff662f1bf2b945ffb7051786dbe15ba92daee808376accb15985670e32e605d9e0a8b8236bcfd6ff644ba596674af266aa8f79aedf1e3940feb48b26d924d6c893024b888c597ff1f17c5f25d761a51ca21782c2023b38a1c4f1d3569de10c3f0462641083f631d82f7e0eb9155784f1c3358fe355ba96904a342997191a23662503ce1f4302fe5", 0xf6}, {&(0x7f0000001d80)="92cbf1fd34f1249b86a64f962ad6bca86567cfc98208db8dc046be1ba976af3229f58846ec958b967b0d5a", 0x2b}], 0x4, &(0x7f0000001fc0)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r5, @ANYRES32, @ANYRES32, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32=r4, @ANYRES32=r2, @ANYRES32, @ANYRES32=r3, @ANYRES32=r0, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="2c000000000000000104000001000000", @ANYRES32, @ANYRES32=r6, @ANYRES32, @ANYRES32, @ANYRES32=r0, @ANYRES32, @ANYRES32, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32=r7, @ANYRES32=r6, @ANYRES32, @ANYRES32=r2, @ANYRES32=r1, @ANYRES32, @ANYRES32, @ANYRES32=r1, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r8, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32=r2, @ANYRES32=r1, @ANYRES32=r6, @ANYRES32, @ANYRES32=r3, @ANYRES32=r0, @ANYBLOB="100000000000000001000000010000001c00000000000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x168, 0x804}}], 0x3, 0x2000801) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) chmod(&(0x7f00000001c0)='./file0\x00', 0x100) 2.038721017s ago: executing program 2 (id=726): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kmem_cache_free\x00', r1}, 0x18) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x403}}]}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f00000012c0)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e24}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r3 = fcntl$dupfd(r2, 0x0, r2) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) sendmsg$IPVS_CMD_GET_CONFIG(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[], 0x14}}, 0x0) sendmsg$inet6(r2, &(0x7f0000001500)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000300)="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", 0xfb}, {&(0x7f0000000400)="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", 0x2d6}], 0x2}, 0x40001080) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000100)=@ccm_128={{0x303}, "27c6ffe2057b6525", "e1315727ee1c2c5d189aa83c29a48200", "9c24c403", "1f7400000000000e"}, 0x28) sendto$rxrpc(r3, &(0x7f0000000700)="537908eefaec032040b7fd8caa1c0213117cfae69b16ef64a6424013b095617eb0fc084427f3b8d6b9fd2d328ae83997540a08af2eea71b5b153edede8d16ad9735fdc576f3a7c16e1da5b2f1996e0470fb9d9e3cc9c2922ef10f0a527167698cd6ce76a7616f136d0e44288cf3585dfecba1848fcfe53f41beed8dd75c7970d94dbcb7435250b369ec957bf44d8559a0c928390fe663488e748500e6f7db95a38e22fd09f70029ae4d83e2583a75b2b3deab1f8aef74a0e271e9e816970c0", 0xbf, 0x0, &(0x7f0000000040)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e20, @remote}}, 0x24) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r3) 1.761894286s ago: executing program 4 (id=728): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000027b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) setsockopt$netlink_NETLINK_CAP_ACK(r1, 0x10e, 0xa, &(0x7f0000000300)=0x101, 0x4) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x14, r2, 0x1}, 0x14}}, 0x0) socket(0x2a, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800"/15, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000072000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sys_enter\x00', r3}, 0x10) r4 = memfd_create(&(0x7f0000000080)=',\xea\x00', 0x4) ftruncate(r4, 0x7000000) 1.712674726s ago: executing program 4 (id=729): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000027b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) setsockopt$netlink_NETLINK_CAP_ACK(r1, 0x10e, 0xa, &(0x7f0000000300)=0x101, 0x4) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x14, r2, 0x1}, 0x14}}, 0x0) socket(0x2a, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000072000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000200000000000000001809"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sys_enter\x00'}, 0x10) unlink(&(0x7f0000000180)='./file0/../file0\x00') 1.690316546s ago: executing program 4 (id=730): syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 1.622797176s ago: executing program 4 (id=731): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000a9000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = socket$inet6(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000181100"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000208500000004"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000001240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x20000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r5}, 0x10) sendto$inet6(r4, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000003a80), 0x0, 0x2c000011) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'bridge_slave_0\x00', 0x0}) r7 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000040)={0x7fffffff}, 0x10) sendmsg$kcm(r7, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="2e0000004a008102e00f80ecdb4cb9020a", 0x11}, {&(0x7f0000000000)="0c74c75350f4a5ffe15c61a3b432d3c79423484160c31a1863473bbce6", 0x1d}], 0x2, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104000000000000000000000010", @ANYRES32=r6, @ANYBLOB="000000000000000008000300", @ANYRES32=r3], 0x28}, 0x1, 0x8}, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d0000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x10, 0x4, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x4, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mm_page_alloc\x00', r8}, 0x18) r9 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r9, &(0x7f0000000000), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) sendmsg$can_bcm(r9, &(0x7f00000005c0)={&(0x7f0000000180)={0x1d, r10}, 0x10, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="0100"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="0000000005000000fa010000c6"], 0x48}, 0x2}, 0x20000080) bind(r0, &(0x7f0000000200)=@nl=@proc={0x10, 0x0, 0x25dfdbfe, 0x2}, 0x80) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b13000000657665000010000280050003000700000004000600"], 0x40}}, 0x0) unshare(0x66000080) 1.583628226s ago: executing program 3 (id=736): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = gettid() timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x400a03, 0x0) openat$selinux_load(0xffffffffffffff9c, 0x0, 0x2, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x57, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x9}, 0x1204c, 0x6, 0x7, 0x0, 0xe0ed, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xfff8000000000000, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x9, 0x4}, 0x280, 0xfffffffffffffffc, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) r2 = syz_open_dev$usbfs(&(0x7f0000000340), 0x206, 0x8401) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400"], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) ioctl$USBDEVFS_ALLOW_SUSPEND(r2, 0x5522) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r3, &(0x7f0000002000)=[{{&(0x7f0000000140)={0xa, 0x4e23, 0x9, @dev={0xfe, 0x80, '\x00', 0x10}, 0x5}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000340)="f2", 0x1}], 0x1}}], 0x1, 0x0) shutdown(r3, 0x1) getsockopt$bt_hci(r3, 0x84, 0x85, &(0x7f0000002380)=""/4107, &(0x7f00000000c0)=0x1012) unshare(0x22000600) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') fstat(r4, &(0x7f00000005c0)) ioctl$USBDEVFS_BULK(r2, 0x5523, 0x0) unshare(0x2040400) r5 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x101a00, 0x0) ioctl$TCSBRKP(r5, 0x5425, 0xa) 1.532078276s ago: executing program 1 (id=737): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file2\x00', 0x200000, &(0x7f00000000c0)={[{@dioread_lock}, {@noblock_validity}, {@lazytime}, {@noblock_validity}]}, 0xfc, 0x564, &(0x7f00000008c0)="$eJzs3c9rHFUcAPDvbJI2/aFJoRT1IIEerNRumsQfFTzUo2ixoPe6JNNQsumW7KY0sWB7sBcvUgQRC6J37x6L/4B/RUELRUrQg5eV2cym22Y32aSbJu1+PjDJezOzee+7M9+XNzu7bAB9ayz7UYh4NSK+TSJGWrYNRr5xbHW/lYfXp7MliXr9s7+TSPJ1zf2T/PehvPJKRPz+dcTJwvp2q0vLc6VyOV3I6+O1+Svj1aXlU5fmS7PpbHp5cmrqzDtTk++/927PYn3z/L8/fHr3ozPfHF/5/tf7R24ncTYO59ta43gKN1orYzGWPydDcfaJHSd60Nhekux2B9iWgTzPhyIbA0ZiIM/6tuojz7JrwA77KktroE8l8h/6VHMe0Ly279F18HPjwYerF0Dr4x9cfW0khhvXRgdXkseujLLr3dEetJ+18dtfd25nS/TudQiATd24GRGnBwfXj39JPv5t3+ku9nmyDeMfPDt3s/nPW+3mP4W1+U+0mf8capO727F5/hfu96CZjrL53wdt579rN61GB/LaS40531By8VI5zca2lyPiRAztz+ob3M/5orByr95pY+v8L1uy9ptzwbwf9wf3P/6YmVKt9FRBt3hwM+K1tvPfZO34J22Of/Z8nO+yjWPpndc7bds8/p1V/znijbbH/9EdrWTj+5PjjfNhvHlWrPfPrWN/dGp/t+PPjv/BjeMfTVrv11a33sZPw/+lnbZt9/zfl3zeKO/L110r1WoLExH7kk/Wr5989Nhmvbl/Fv+J4xuPf+3O/wNZYncZ/62jt1p3Hd5a/Dsri39mS8d/64V7H3/5Y6f2uzv+bzdKJ/I13Yx/3XbwaZ47AAAAAAAA2GsKEXE4kkJxrVwoFIur7+84GgcL5Uq1dvJiZfHyTDQ+KzsaQ4Xmne6RlvdDTOTvh23WJ5+oT0XEkYj4buBAo16crpRndjt4AAAAAAAAAAAAAAAAAAAA2CMORQy3+/x/5s+B3e4dsOM2+Mpv4AXXOf/zLb34pidgT/L/H/qX/If+Jf+hf8l/6F/yH/qX/If+Jf+hf20l/385t4MdAQAAAAAAAAAAAAAAAAAAAAAAAAAAgBfD+XPnsqW+8vD6dFafubq0OFe5emomrc4V5xeni9OVhSvF2UpltpwWpyvzm/29cqVyZWIyFq+N19Jqbby6tHxhvrJ4uXbh0nxpNr2QDj2TqAAAAAAAAAAAAAAAAAAAAOD5Ul1aniuVy+mCgsK2CoN7oxsKPS7s9sgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAI/8HwAA///F1Dry") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @perf_config_ext={0x8, 0x81}, 0x140, 0x1, 0x43, 0x5, 0x0, 0x8, 0x5d, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000000714010000000000000000000800", @ANYRES32=r1], 0x30}}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2008002, &(0x7f0000000080), 0x1, 0x549, &(0x7f0000001800)="$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") lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0xee01, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000800008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='memory.events\x00', 0x275a, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, 0x0, 0x28) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = mq_open(&(0x7f0000001040)='!\x7f\x00\xca\x00\x00\x00\f\x00\x00\x01E!T\xeeux\x00\xbf@\xf4\x1c\xbce\xca\x97\xd5pkv\x88L\x05$\xef\xfeI\xdaW1\xfcg\xa1\xdb$,0y$\xcd{zl.\xae\x805\xa8\xd6\x85\x15\xd2\x0e~\xcc\x90\x97\xeah\v\x1a9X\a\xca{\x11#\x95e{U\xe5-\xabRw\xcafy\xe6\aNhX4Ll[\x14\x15\xb2\x1a\xf2\x8fD\x1e\xf2\x11\x9ft\xf17\xaa\x8eJ\x96\xde\t\xc3\x99\xa2\x94\xb9\x1fx\x9b\xa6<\xe0v$\xcd\xc5\xed\xd6\xae\x0f\x95/\x0f\xaa\x80\xbdH\x11\xbcaCn\x16\x8a7\xe4\xdd\xb4\"\a\x88\x1d^w\'\xfbr\xc8T\xcfr\xb2\x90\x89\xdfBZ\x88\xea1\xb8\xee\xd2\x99\x19\xbaw\xd4\fr]\x0e\xb6\xe1o\xab\x9eS\x03\xb8\x05\xa3\xd2\xeb$\nK}99\x1a\x91\xed\x168g^\xefJ[\x8dp\x8eP\xae\a\x95}c\x02\x9bTl\x9be\x01\xe5\x06\xfdx\xd8\xde\xe3\xb5T\\_\x95\x8d\xf4\x143\xde,\x85\x84<\f\xe1\x19\xd6eX\x8eH$\xbb\x04\xa5}y\xe6\xc5\xfeY\xc59\xef\x9e^?\\\x17\x17W\x12\xe6w\x7f\x88qA\xb1L\xc0\xb43\x18\a\xf6\xcf\x06D\xc5\xbd\x02\xad\x93\x8c/\xdf\xc6\xd2kH\xea\xe33c\xe9\xccJ\x1f\x9dJ\x93.|\xa8z\xb2\xc0\xb4\x0e\xe3\x008\x1c\xf0h\x9b,:\xbf<\xee\x00'/494, 0x40, 0x1c4, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xa8}) mq_timedreceive(r3, &(0x7f0000000180)=""/196, 0xc4, 0x800000000000, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket(0x10, 0x3, 0x6) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000180)={r4, 0xffffffffffffffff}, 0x4) getpeername$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000003c0)=0x14) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000640)=@bpf_tracing={0x1a, 0x13, &(0x7f0000000300)=ANY=[@ANYBLOB="85200000040000001852000008000000000000000000000085100000fbffffffb7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70500000800800085000000a50000008500000033000002540bfcfffcffffff"], &(0x7f00000001c0)='syzkaller\x00', 0x400, 0xe3, &(0x7f00000004c0)=""/227, 0x41000, 0x11, '\x00', r7, 0x17, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000400)={0x4, 0x4, 0x4c, 0x8}, 0x10, 0xb221, 0xffffffffffffffff, 0x5, 0x0, &(0x7f00000005c0)=[{0x5, 0x5, 0x4, 0xb}, {0x0, 0x1, 0x1, 0x5}, {0x0, 0x3, 0x8, 0x7}, {0x2, 0x5, 0xd, 0x5}, {0x2, 0x1, 0x10, 0x7}], 0x10, 0x4, @void, @value}, 0x94) socket(0x10, 0x3, 0x0) socket$unix(0x1, 0x2, 0x0) 1.531197826s ago: executing program 4 (id=738): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0x33, 0x2, [@enum]}}, 0x0, 0x26, 0x0, 0x8, 0x0, 0x0, @void, @value}, 0x28) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00'}, 0x10) syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000000206050000000000a89b1b1f00000000"], 0x14}, 0x1, 0x7000000}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0x200000000000010f, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00'}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket(0x21, 0x2, 0x10000000000002) r3 = socket$inet(0x2, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x33, &(0x7f00000a2000)={0x1, &(0x7f0000f07000)=[{0x6, 0xf, 0x0, 0x946}]}, 0x10) 1.276675274s ago: executing program 2 (id=739): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f00000002c0)={[{@jqfmt_vfsv1}, {}, {@barrier_val}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@resuid}, {@nodelalloc}, {@acl}, {@noinit_itable}]}, 0xfc, 0x572, &(0x7f0000003780)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000002d80)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000080)=@abs={0x1, 0x30, 0x4e23}, 0x6e, 0x0}}], 0x2, 0x0) 1.238133165s ago: executing program 0 (id=740): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x10, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000009c0)={{r0}, &(0x7f0000000940), &(0x7f0000000980)}, 0x20) r2 = socket$inet6(0xa, 0x3, 0x2f) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000001c0)={{{@in, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x50}, {0x3}, {}, 0x0, 0x3, 0x1}, {{@in6=@loopback, 0x0, 0x6c}, 0x0, @in6=@local}}, 0xe8) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) unshare(0x2040400) r3 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) unshare(0x2000400) fsmount(r3, 0x0, 0x0) 1.196510874s ago: executing program 2 (id=741): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000027b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) setsockopt$netlink_NETLINK_CAP_ACK(r1, 0x10e, 0xa, &(0x7f0000000300)=0x101, 0x4) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x14, r2, 0x1}, 0x14}}, 0x0) socket(0x2a, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000072000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000200000000000000001809"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sys_enter\x00'}, 0x10) unlink(&(0x7f0000000180)='./file0/../file0\x00') 1.184667394s ago: executing program 0 (id=742): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f0000000000)='./bus\x00', 0x2086, &(0x7f0000000840)={[{@max_batch_time={'max_batch_time', 0x3d, 0x5ff}}, {@lazytime}, {@journal_path={'journal_path', 0x3d, './bus'}}, {@bsdgroups}, {@debug}, {@noload}], [{@uid_lt}, {@seclabel}, {@pcr={'pcr', 0x3d, 0x30}}, {@audit}, {@dont_appraise}, {@audit}, {@euid_eq}, {@seclabel}]}, 0x3, 0x45c, &(0x7f0000002400)="$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") 1.121160624s ago: executing program 1 (id=743): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.077813914s ago: executing program 0 (id=744): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x4) write(r2, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'ipvlan0\x00', 0x0}) sendmsg$ETHTOOL_MSG_DEBUG_SET(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000fedbdf25080000001800028014000380100001800400030008000100050000000c00018008000100", @ANYRES32=r5], 0x38}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x24008001) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) migrate_pages(r6, 0x7, &(0x7f0000000000)=0x6, &(0x7f0000000040)=0x100000001) syz_io_uring_setup(0x10f, &(0x7f00000003c0)={0x0, 0x0, 0x400, 0x0, 0x33f}, &(0x7f0000000500)=0x0, 0x0) r8 = socket$inet_smc(0x2b, 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x418, 0x0, 0x25, 0x148, 0x340, 0x60, 0x438, 0x2a8, 0x2a8, 0x438, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2a0, 0x2e8, 0x0, {0x200003ae, 0x7f00}, [@common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz0\x00'}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_bond\x00', 'veth0\x00', {0xff}}, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x9, 0x8001}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x478) syz_io_uring_submit(r7, 0x0, &(0x7f00000002c0)=@IORING_OP_SHUTDOWN={0x22, 0x2f, 0x0, r8}) rt_sigsuspend(&(0x7f0000000040)={[0x2000000]}, 0x8) 1.060732664s ago: executing program 2 (id=745): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0, 0x0, 0x1}, 0x18) r1 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000001280), 0x1, 0x0) write$selinux_validatetrans(r1, &(0x7f00000012c0)={'system_u:object_r:dbusd_etc_t:s0', 0x20, 'system_u:object_r:tmpfs_t:s0', 0x20, 0xbeee, 0x20, 'unconfined\x00'}, 0x5e) 1.017173833s ago: executing program 2 (id=746): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x4) write(r2, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'ipvlan0\x00', 0x0}) sendmsg$ETHTOOL_MSG_DEBUG_SET(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000fedbdf25080000001800028014000380100001800400030008000100050000000c00018008000100", @ANYRES32=r5], 0x38}}, 0x0) (fail_nth: 2) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x24008001) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) migrate_pages(r6, 0x7, &(0x7f0000000000)=0x6, &(0x7f0000000040)=0x100000001) syz_io_uring_setup(0x10f, &(0x7f00000003c0)={0x0, 0x0, 0x400, 0x0, 0x33f}, &(0x7f0000000500)=0x0, 0x0) r8 = socket$inet_smc(0x2b, 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x418, 0x0, 0x25, 0x148, 0x340, 0x60, 0x438, 0x2a8, 0x2a8, 0x438, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2a0, 0x2e8, 0x0, {0x200003ae, 0x7f00}, [@common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz0\x00'}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_bond\x00', 'veth0\x00', {0xff}}, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x9, 0x8001}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x478) syz_io_uring_submit(r7, 0x0, &(0x7f00000002c0)=@IORING_OP_SHUTDOWN={0x22, 0x2f, 0x0, r8}) rt_sigsuspend(&(0x7f0000000040)={[0x2000000]}, 0x8) 1.016729283s ago: executing program 1 (id=747): openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000400)=""/167, 0xa7, 0xd) preadv(0xffffffffffffffff, &(0x7f00000001c0), 0x0, 0x401, 0x3649) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r5, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) 582.420542ms ago: executing program 3 (id=748): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000001000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCINQ(r1, 0x541b, &(0x7f0000000000)) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8004, 0x0, 0x2, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000280)={'syztnl2\x00', 0x0, 0x0, 0x8, 0x39, 0x10001, 0x41, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0, 0x8000, 0x8, 0x4, 0x3}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000680)={'syztnl2\x00', &(0x7f0000000580)={'syztnl0\x00', r3, 0x29, 0x5, 0x3, 0x2, 0x0, @dev={0xfe, 0x80, '\x00', 0x1a}, @empty, 0x80, 0x7, 0xffffffff, 0x80000001}}) socket$kcm(0x29, 0x2, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x8, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f00000006c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x58, 0x58, 0x9, [@const={0xd, 0x0, 0x0, 0xa, 0x4}, @fwd={0x4}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x5, 0x5}}, @const={0x2, 0x0, 0x0, 0xa, 0x1}, @const={0xb, 0x0, 0x0, 0xa, 0x5}, @var={0x4, 0x0, 0x0, 0xe, 0x1, 0x1}]}, {0x0, [0x5f, 0x30, 0x0, 0x0, 0x2e, 0x61, 0x5f]}}, &(0x7f0000000300)=""/52, 0x79, 0x34, 0x1, 0xfff, 0x0, @void, @value}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000580)='kmem_cache_free\x00', r5}, 0x10) r6 = io_uring_setup(0xaab, &(0x7f0000000340)={0x0, 0x40000001}) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f00000012c0)='sys_enter\x00', r8}, 0x10) readahead(0xffffffffffffffff, 0x81, 0xec) socket$packet(0x11, 0x2, 0x300) close_range(r6, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb790700117df37538e486"], 0xfdef) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r9, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 505.982301ms ago: executing program 3 (id=749): setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r0}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f0000000000)='./bus\x00', 0x2086, &(0x7f0000000840)={[{@max_batch_time={'max_batch_time', 0x3d, 0x5ff}}, {@lazytime}, {@journal_path={'journal_path', 0x3d, './bus'}}, {@bsdgroups}, {@debug}, {@noload}], [{@uid_lt}, {@seclabel}, {@pcr={'pcr', 0x3d, 0x30}}, {@audit}, {@dont_appraise}, {@audit}, {@euid_eq}, {@seclabel}]}, 0x3, 0x45c, &(0x7f0000002400)="$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") 451.852942ms ago: executing program 3 (id=750): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) r4 = dup(r2) setsockopt$inet_group_source_req(r4, 0x0, 0x2b, &(0x7f00000002c0)={0xff, {{0x2, 0x4e21, @multicast1}}, {{0x2, 0x4e22, @local}}}, 0x108) setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x30, &(0x7f0000000940)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002000000e00000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000064010102000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x310) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6, 0x0, 0x2}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) getresgid(&(0x7f0000000040), &(0x7f0000000100), &(0x7f0000000200)) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r7, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000740), 0x1, r8}, 0x38) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000001240)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r9, 0x0, 0x2}, 0x18) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x70bd27, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x93}, [{}, {}, {0x0, 0x0, 0x0, 0x0, 0x7, 0x80000}, {0xe, 0x0, 0x6}, {}, {}, {0x0, 0x0, 0xfffffffc}, {}, {}, {}, {0x0, 0x10}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, {}, {0x4, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x8000000}, {0x0, 0x0, 0x1}, {}, {0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0xffffffff, 0x2, 0x200, 0x3}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0x77}, {}, {}, {0x9}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {0x5, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0xffffffff, 0x0, 0x0, 0x4000004}, {0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xb84}, {0x0, 0x0, 0x0, 0x0, 0x400000}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4000000, 0x10000000}, {0x0, 0x0, 0x7f, 0x0, 0x0, 0x400000}, {0x0, 0x0, 0x200}, {}, {}, {0x0, 0x800000}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffff8767}, {}, {}, {0x0, 0x0, 0x0, 0x4}, {}, {}, {0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x68000000}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x6}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xebe}, {0x4000}, {0x0, 0xfffffffd, 0x0, 0x4}, {0xfffffffc}, {}, {}, {0xe}, {0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffe}, {0x0, 0x0, 0x3}, {}, {0x2, 0x0, 0x0, 0x0, 0x0, 0x40}, {}, {}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x292}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, {}, {0x0, 0x0, 0x0, 0x0, 0xe}, {0x0, 0x870b, 0x0, 0x0, 0x0, 0xfffffffe}, {0x10000000}, {}, {0x0, 0x0, 0x2}, {0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x80}, {}, {}, {}, {0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x0, 0x0, 0x10000}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {0x4}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x1, 0x1}, {}, {}, {}, {0x1}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x3}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) r11 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r11, 0x107, 0xf, 0x0, 0x0) read(r11, &(0x7f0000000180)=""/41, 0x29) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000dc0)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r1, {0x0, 0xfff1}, {}, {0xffe0, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x20004001}, 0x0) 352.589082ms ago: executing program 3 (id=751): socket$packet(0x11, 0x3, 0x300) socket$inet_udplite(0x2, 0x2, 0x88) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1600000000000000040000000100000000", @ANYBLOB, @ANYBLOB], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0xfe, 0x7ffc0002}]}) setregid(0xffffffffffffffff, 0x0) 339.201691ms ago: executing program 1 (id=752): syz_emit_ethernet(0x82, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa00030000000088a8000081000000"], 0x0) (fail_nth: 2) 87.75398ms ago: executing program 2 (id=753): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e0000000400000008000000"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r0}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="28010000", @ANYBLOB="0100000000000000000001000000000000000b0000000003001473797a30"], 0x28}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b80)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000004850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000900)=ANY=[@ANYRESOCT=r2, @ANYRES32, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0xf}) socketpair(0x11, 0xa, 0xfffffffd, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89a2, &(0x7f0000000080)) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000000)={[{@errors_remount}, {@bsdgroups}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5e}}, {@noauto_da_alloc}, {@commit}, {@oldalloc}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x2, 0x44a, &(0x7f0000000400)="$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") r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0xe, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r6, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000700)='sched_switch\x00', r5}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x18, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @void, @value}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000880), 0x6, r7}, 0x38) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x7, 0xd, &(0x7f0000000240)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3286c5dbf33191ae, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r8}, 0x10) r9 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r9, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6, 0x0, 0x2}, 0x1c) 80.51335ms ago: executing program 0 (id=754): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f0000000000)='./bus\x00', 0x2086, &(0x7f0000000840)={[{@max_batch_time={'max_batch_time', 0x3d, 0x5ff}}, {@lazytime}, {@journal_path={'journal_path', 0x3d, './bus'}}, {@bsdgroups}, {@debug}, {@noload}], [{@uid_lt}, {@seclabel}, {@pcr={'pcr', 0x3d, 0x30}}, {@audit}, {@dont_appraise}, {@audit}, {@euid_eq}, {@seclabel}]}, 0x3, 0x45c, &(0x7f0000002400)="$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") 0s ago: executing program 3 (id=755): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000027b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) setsockopt$netlink_NETLINK_CAP_ACK(r1, 0x10e, 0xa, &(0x7f0000000300)=0x101, 0x4) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x14, r2, 0x1}, 0x14}}, 0x0) socket(0x2a, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000072000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000200000000000000001809"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sys_enter\x00'}, 0x10) unlink(&(0x7f0000000180)='./file0/../file0\x00') kernel console output (not intermixed with test programs): ode: writeback. [ 57.785725][ T4117] ext4 filesystem being mounted at /54/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 57.800204][ T4117] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.257: bg 0: block 224: padding at end of block bitmap is not set [ 57.819318][ T4117] EXT4-fs (loop2): Remounting filesystem read-only [ 57.840308][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.896849][ T4133] loop2: detected capacity change from 0 to 128 [ 57.926742][ T4133] FAT-fs (loop2): Directory bread(block 162) failed [ 57.935980][ T4133] FAT-fs (loop2): Directory bread(block 163) failed [ 57.942998][ T4133] FAT-fs (loop2): Directory bread(block 164) failed [ 57.949779][ T4133] FAT-fs (loop2): Directory bread(block 165) failed [ 57.957573][ T4133] FAT-fs (loop2): Directory bread(block 166) failed [ 57.964254][ T4133] FAT-fs (loop2): Directory bread(block 167) failed [ 57.971008][ T4133] FAT-fs (loop2): Directory bread(block 168) failed [ 57.980723][ T4133] FAT-fs (loop2): Directory bread(block 169) failed [ 57.997339][ T4133] FAT-fs (loop2): Directory bread(block 162) failed [ 58.006445][ T4133] FAT-fs (loop2): Directory bread(block 163) failed [ 58.014384][ T4133] syz.2.261: attempt to access beyond end of device [ 58.014384][ T4133] loop2: rw=3, sector=226, nr_sectors = 6 limit=128 [ 58.035769][ T4133] syz.2.261: attempt to access beyond end of device [ 58.035769][ T4133] loop2: rw=2051, sector=232, nr_sectors = 2 limit=128 [ 58.147810][ T4142] loop2: detected capacity change from 0 to 512 [ 58.171480][ T3295] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.183798][ T4145] loop3: detected capacity change from 0 to 512 [ 58.190399][ T4142] EXT4-fs: Ignoring removed oldalloc option [ 58.197018][ T4143] loop1: detected capacity change from 0 to 1024 [ 58.212236][ T4142] EXT4-fs error (device loop2): ext4_xattr_inode_iget:436: comm syz.2.269: Parent and EA inode have the same ino 15 [ 58.230345][ T4150] loop4: detected capacity change from 0 to 512 [ 58.237171][ T4150] EXT4-fs: Ignoring removed nobh option [ 58.263939][ T4142] EXT4-fs (loop2): Remounting filesystem read-only [ 58.270505][ T4142] EXT4-fs warning (device loop2): ext4_evict_inode:259: couldn't mark inode dirty (err -5) [ 58.290727][ T4143] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 58.327277][ T4142] EXT4-fs (loop2): 1 orphan inode deleted [ 58.335674][ T4150] ext4 filesystem being mounted at /46/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 58.359268][ T4142] SELinux: (dev loop2, type ext4) getxattr errno 5 [ 58.368325][ T4150] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.272: bg 0: block 224: padding at end of block bitmap is not set [ 58.391786][ T4150] EXT4-fs (loop4): Remounting filesystem read-only [ 58.471647][ T4165] loop1: detected capacity change from 0 to 2048 [ 58.557540][ T4171] loop4: detected capacity change from 0 to 1024 [ 58.582784][ T4171] netlink: 'syz.4.276': attribute type 7 has an invalid length. [ 58.687531][ T4181] loop3: detected capacity change from 0 to 128 [ 58.698071][ T4181] FAT-fs (loop3): Directory bread(block 162) failed [ 58.699612][ T4171] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 58.706653][ T4181] FAT-fs (loop3): Directory bread(block 163) failed [ 58.720493][ T4171] EXT4-fs (loop4): Delayed block allocation failed for inode 20 at logical offset 0 with max blocks 2048 with error 28 [ 58.731715][ T4181] FAT-fs (loop3): Directory bread(block 164) failed [ 58.740086][ T4171] EXT4-fs (loop4): This should not happen!! Data will be lost [ 58.740086][ T4171] [ 58.748463][ T4181] FAT-fs (loop3): Directory bread(block 165) failed [ 58.756386][ T4171] EXT4-fs (loop4): Total free blocks count 0 [ 58.763185][ T4181] FAT-fs (loop3): Directory bread(block 166) failed [ 58.768933][ T4171] EXT4-fs (loop4): Free/Dirty block details [ 58.768947][ T4171] EXT4-fs (loop4): free_blocks=68451041280 [ 58.776987][ T4181] FAT-fs (loop3): Directory bread(block 167) failed [ 58.783116][ T4171] EXT4-fs (loop4): dirty_blocks=3104 [ 58.783134][ T4171] EXT4-fs (loop4): Block reservation details [ 58.790089][ T4181] FAT-fs (loop3): Directory bread(block 168) failed [ 58.796598][ T4171] EXT4-fs (loop4): i_reserved_data_blocks=194 [ 58.828064][ T4181] FAT-fs (loop3): Directory bread(block 169) failed [ 58.839961][ T4181] FAT-fs (loop3): Directory bread(block 162) failed [ 58.847391][ T4181] FAT-fs (loop3): Directory bread(block 163) failed [ 58.854321][ T4181] syz.3.282: attempt to access beyond end of device [ 58.854321][ T4181] loop3: rw=3, sector=226, nr_sectors = 6 limit=128 [ 58.868714][ T4181] syz.3.282: attempt to access beyond end of device [ 58.868714][ T4181] loop3: rw=2051, sector=232, nr_sectors = 2 limit=128 [ 58.894145][ T28] EXT4-fs (loop4): Delayed block allocation failed for inode 20 at logical offset 0 with max blocks 4 with error 28 [ 58.907070][ T28] EXT4-fs (loop4): This should not happen!! Data will be lost [ 58.907070][ T28] [ 58.942177][ T4183] loop3: detected capacity change from 0 to 512 [ 59.029093][ T4193] loop2: detected capacity change from 0 to 512 [ 59.037409][ T4193] EXT4-fs: Ignoring removed nobh option [ 59.242112][ T4207] loop4: detected capacity change from 0 to 1024 [ 59.262605][ T4193] ext4 filesystem being mounted at /57/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 59.274964][ T4193] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.287: bg 0: block 224: padding at end of block bitmap is not set [ 59.290120][ T4193] EXT4-fs (loop2): Remounting filesystem read-only [ 59.298634][ T4204] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.310019][ T4207] netlink: 'syz.4.294': attribute type 7 has an invalid length. [ 59.357331][ T4204] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.406195][ T4204] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.421798][ T4215] loop2: detected capacity change from 0 to 128 [ 59.433054][ T4207] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 59.449385][ T4218] loop1: detected capacity change from 0 to 512 [ 59.454551][ T4215] FAT-fs (loop2): Directory bread(block 162) failed [ 59.463765][ T4207] EXT4-fs (loop4): Delayed block allocation failed for inode 20 at logical offset 0 with max blocks 2048 with error 28 [ 59.474350][ T4215] FAT-fs (loop2): Directory bread(block 163) failed [ 59.476834][ T4207] EXT4-fs (loop4): This should not happen!! Data will be lost [ 59.476834][ T4207] [ 59.483701][ T4215] FAT-fs (loop2): Directory bread(block 164) failed [ 59.493432][ T4207] EXT4-fs (loop4): Total free blocks count 0 [ 59.502039][ T4215] FAT-fs (loop2): Directory bread(block 165) failed [ 59.506311][ T4207] EXT4-fs (loop4): Free/Dirty block details [ 59.513048][ T4215] FAT-fs (loop2): Directory bread(block 166) failed [ 59.519290][ T4207] EXT4-fs (loop4): free_blocks=68451041280 [ 59.529223][ T4215] FAT-fs (loop2): Directory bread(block 167) failed [ 59.532996][ T4207] EXT4-fs (loop4): dirty_blocks=2432 [ 59.540281][ T4215] FAT-fs (loop2): Directory bread(block 168) failed [ 59.545360][ T4207] EXT4-fs (loop4): Block reservation details [ 59.545373][ T4207] EXT4-fs (loop4): i_reserved_data_blocks=152 [ 59.552218][ T4220] loop0: detected capacity change from 0 to 512 [ 59.570033][ T4215] FAT-fs (loop2): Directory bread(block 169) failed [ 59.571586][ T4204] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.585724][ T4215] FAT-fs (loop2): Directory bread(block 162) failed [ 59.592264][ T4220] EXT4-fs: Ignoring removed oldalloc option [ 59.601728][ T4215] FAT-fs (loop2): Directory bread(block 163) failed [ 59.613377][ T4220] EXT4-fs error (device loop0): ext4_xattr_inode_iget:436: comm syz.0.298: Parent and EA inode have the same ino 15 [ 59.633850][ T4204] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.645721][ T4204] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.656946][ T4204] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.668208][ T4204] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.676977][ T29] kauditd_printk_skb: 720 callbacks suppressed [ 59.676992][ T29] audit: type=1326 audit(1738465710.173:2871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4222 comm="syz.1.299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fe86dcda9 code=0x7ffc0000 [ 59.708288][ T29] audit: type=1326 audit(1738465710.173:2872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4222 comm="syz.1.299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fe86dcda9 code=0x7ffc0000 [ 59.733105][ T29] audit: type=1326 audit(1738465710.173:2873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4222 comm="syz.1.299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6fe86dcda9 code=0x7ffc0000 [ 59.734798][ T4220] EXT4-fs (loop0): Remounting filesystem read-only [ 59.756472][ T29] audit: type=1326 audit(1738465710.173:2874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4222 comm="syz.1.299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fe86dcda9 code=0x7ffc0000 [ 59.762939][ T4220] EXT4-fs warning (device loop0): ext4_evict_inode:259: couldn't mark inode dirty (err -5) [ 59.787564][ T29] audit: type=1326 audit(1738465710.173:2875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4222 comm="syz.1.299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6fe86dcda9 code=0x7ffc0000 [ 59.787600][ T29] audit: type=1326 audit(1738465710.173:2876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4222 comm="syz.1.299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fe86dcda9 code=0x7ffc0000 [ 59.847142][ T29] audit: type=1326 audit(1738465710.183:2877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4222 comm="syz.1.299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6fe86dcda9 code=0x7ffc0000 [ 59.848389][ T4220] EXT4-fs (loop0): 1 orphan inode deleted [ 59.870633][ T29] audit: type=1326 audit(1738465710.183:2878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4222 comm="syz.1.299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fe86dcda9 code=0x7ffc0000 [ 59.870662][ T29] audit: type=1326 audit(1738465710.183:2879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4222 comm="syz.1.299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6fe86dcda9 code=0x7ffc0000 [ 59.870696][ T29] audit: type=1326 audit(1738465710.183:2880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4222 comm="syz.1.299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fe86dcda9 code=0x7ffc0000 [ 59.926867][ T58] EXT4-fs (loop4): Delayed block allocation failed for inode 20 at logical offset 0 with max blocks 4 with error 28 [ 59.960706][ T58] EXT4-fs (loop4): This should not happen!! Data will be lost [ 59.960706][ T58] [ 60.005489][ T4220] SELinux: (dev loop0, type ext4) getxattr errno 5 [ 60.225701][ T4238] loop3: detected capacity change from 0 to 1024 [ 60.329791][ T4244] loop1: detected capacity change from 0 to 512 [ 60.362850][ T4245] loop2: detected capacity change from 0 to 2048 [ 60.406379][ T4244] EXT4-fs: Ignoring removed nobh option [ 60.467293][ T4244] ext4 filesystem being mounted at /52/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 60.523884][ T4251] loop0: detected capacity change from 0 to 1024 [ 60.535824][ T4244] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.306: bg 0: block 224: padding at end of block bitmap is not set [ 60.569543][ T4244] EXT4-fs (loop1): Remounting filesystem read-only [ 60.585888][ T4251] netlink: 'syz.0.309': attribute type 7 has an invalid length. [ 60.636700][ T4251] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 60.734459][ T4251] EXT4-fs (loop0): Delayed block allocation failed for inode 20 at logical offset 0 with max blocks 1372 with error 28 [ 60.747069][ T4251] EXT4-fs (loop0): This should not happen!! Data will be lost [ 60.747069][ T4251] [ 60.756768][ T4251] EXT4-fs (loop0): Total free blocks count 0 [ 60.763191][ T4251] EXT4-fs (loop0): Free/Dirty block details [ 60.769116][ T4251] EXT4-fs (loop0): free_blocks=68451041280 [ 60.775003][ T4251] EXT4-fs (loop0): dirty_blocks=1376 [ 60.780340][ T4251] EXT4-fs (loop0): Block reservation details [ 60.786377][ T4251] EXT4-fs (loop0): i_reserved_data_blocks=86 [ 60.907961][ T11] EXT4-fs (loop0): Delayed block allocation failed for inode 20 at logical offset 0 with max blocks 4 with error 28 [ 60.920332][ T11] EXT4-fs (loop0): This should not happen!! Data will be lost [ 60.920332][ T11] [ 61.240460][ T4263] loop2: detected capacity change from 0 to 1024 [ 61.334433][ T4263] netlink: 'syz.2.312': attribute type 7 has an invalid length. [ 61.469445][ T4263] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 61.504233][ T4263] EXT4-fs (loop2): Delayed block allocation failed for inode 20 at logical offset 0 with max blocks 1028 with error 28 [ 61.516996][ T4263] EXT4-fs (loop2): This should not happen!! Data will be lost [ 61.516996][ T4263] [ 61.526779][ T4263] EXT4-fs (loop2): Total free blocks count 0 [ 61.533045][ T4263] EXT4-fs (loop2): Free/Dirty block details [ 61.538984][ T4263] EXT4-fs (loop2): free_blocks=68451041280 [ 61.544829][ T4263] EXT4-fs (loop2): dirty_blocks=1040 [ 61.550202][ T4263] EXT4-fs (loop2): Block reservation details [ 61.556199][ T4263] EXT4-fs (loop2): i_reserved_data_blocks=65 [ 61.625805][ T4282] loop3: detected capacity change from 0 to 512 [ 61.648732][ T11] EXT4-fs (loop2): Delayed block allocation failed for inode 20 at logical offset 0 with max blocks 4 with error 28 [ 61.661030][ T11] EXT4-fs (loop2): This should not happen!! Data will be lost [ 61.661030][ T11] [ 61.670737][ T4282] EXT4-fs: Ignoring removed oldalloc option [ 61.697096][ T4284] loop4: detected capacity change from 0 to 512 [ 61.697135][ T4282] EXT4-fs error (device loop3): ext4_xattr_inode_iget:436: comm syz.3.319: Parent and EA inode have the same ino 15 [ 61.697318][ T4282] EXT4-fs (loop3): Remounting filesystem read-only [ 61.722922][ T4282] EXT4-fs warning (device loop3): ext4_evict_inode:259: couldn't mark inode dirty (err -5) [ 61.754581][ T4290] loop4: detected capacity change from 0 to 2048 [ 61.757971][ T4282] EXT4-fs (loop3): 1 orphan inode deleted [ 61.768748][ T4282] SELinux: (dev loop3, type ext4) getxattr errno 5 [ 61.953844][ T4306] loop2: detected capacity change from 0 to 128 [ 61.961480][ T4306] FAT-fs (loop2): Directory bread(block 162) failed [ 61.968335][ T4306] FAT-fs (loop2): Directory bread(block 163) failed [ 61.975294][ T4306] FAT-fs (loop2): Directory bread(block 164) failed [ 61.982343][ T4306] FAT-fs (loop2): Directory bread(block 165) failed [ 61.991139][ T4306] FAT-fs (loop2): Directory bread(block 166) failed [ 61.998254][ T4306] FAT-fs (loop2): Directory bread(block 167) failed [ 62.005243][ T4306] FAT-fs (loop2): Directory bread(block 168) failed [ 62.012343][ T4306] FAT-fs (loop2): Directory bread(block 169) failed [ 62.020231][ T4306] FAT-fs (loop2): Directory bread(block 162) failed [ 62.026982][ T4306] FAT-fs (loop2): Directory bread(block 163) failed [ 62.034141][ T4306] bio_check_eod: 2 callbacks suppressed [ 62.034152][ T4306] syz.2.329: attempt to access beyond end of device [ 62.034152][ T4306] loop2: rw=3, sector=226, nr_sectors = 6 limit=128 [ 62.053166][ T4306] syz.2.329: attempt to access beyond end of device [ 62.053166][ T4306] loop2: rw=2051, sector=232, nr_sectors = 2 limit=128 [ 62.163257][ T4310] loop2: detected capacity change from 0 to 1024 [ 62.193418][ T4310] netlink: 'syz.2.331': attribute type 7 has an invalid length. [ 62.247097][ T4316] loop1: detected capacity change from 0 to 512 [ 62.323348][ T4310] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 62.339153][ T4310] EXT4-fs (loop2): Delayed block allocation failed for inode 20 at logical offset 0 with max blocks 1928 with error 28 [ 62.351696][ T4310] EXT4-fs (loop2): This should not happen!! Data will be lost [ 62.351696][ T4310] [ 62.361595][ T4310] EXT4-fs (loop2): Total free blocks count 0 [ 62.367713][ T4310] EXT4-fs (loop2): Free/Dirty block details [ 62.373803][ T4310] EXT4-fs (loop2): free_blocks=68451041280 [ 62.379647][ T4310] EXT4-fs (loop2): dirty_blocks=1936 [ 62.384981][ T4310] EXT4-fs (loop2): Block reservation details [ 62.390970][ T4310] EXT4-fs (loop2): i_reserved_data_blocks=121 [ 62.642533][ T36] EXT4-fs (loop2): Delayed block allocation failed for inode 20 at logical offset 0 with max blocks 4 with error 28 [ 62.654820][ T36] EXT4-fs (loop2): This should not happen!! Data will be lost [ 62.654820][ T36] [ 63.077064][ T4335] loop4: detected capacity change from 0 to 128 [ 63.378486][ T4335] FAT-fs (loop4): Directory bread(block 162) failed [ 63.386518][ T4335] FAT-fs (loop4): Directory bread(block 163) failed [ 63.403484][ T4335] FAT-fs (loop4): Directory bread(block 164) failed [ 63.432166][ T4335] FAT-fs (loop4): Directory bread(block 165) failed [ 63.455072][ T4335] FAT-fs (loop4): Directory bread(block 166) failed [ 63.473117][ T4335] FAT-fs (loop4): Directory bread(block 167) failed [ 63.490565][ T4335] FAT-fs (loop4): Directory bread(block 168) failed [ 63.506728][ T4335] FAT-fs (loop4): Directory bread(block 169) failed [ 63.524540][ T4335] FAT-fs (loop4): Directory bread(block 162) failed [ 63.543129][ T4335] FAT-fs (loop4): Directory bread(block 163) failed [ 63.560329][ T4335] syz.4.341: attempt to access beyond end of device [ 63.560329][ T4335] loop4: rw=3, sector=226, nr_sectors = 6 limit=128 [ 63.592928][ T4335] syz.4.341: attempt to access beyond end of device [ 63.592928][ T4335] loop4: rw=2051, sector=232, nr_sectors = 2 limit=128 [ 63.666139][ T4344] netlink: 72 bytes leftover after parsing attributes in process `syz.4.344'. [ 63.752270][ T4346] loop4: detected capacity change from 0 to 1024 [ 63.780750][ T4346] netlink: 'syz.4.345': attribute type 7 has an invalid length. [ 63.885424][ T4352] loop0: detected capacity change from 0 to 1024 [ 63.893378][ T4346] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 63.917785][ T4346] EXT4-fs (loop4): Delayed block allocation failed for inode 20 at logical offset 0 with max blocks 852 with error 28 [ 63.930730][ T4346] EXT4-fs (loop4): This should not happen!! Data will be lost [ 63.930730][ T4346] [ 63.940775][ T4346] EXT4-fs (loop4): Total free blocks count 0 [ 63.946923][ T4346] EXT4-fs (loop4): Free/Dirty block details [ 63.952825][ T4346] EXT4-fs (loop4): free_blocks=68451041280 [ 63.958660][ T4346] EXT4-fs (loop4): dirty_blocks=864 [ 63.963974][ T4346] EXT4-fs (loop4): Block reservation details [ 63.970030][ T4346] EXT4-fs (loop4): i_reserved_data_blocks=54 [ 63.990484][ T4358] loop2: detected capacity change from 0 to 512 [ 63.998634][ T4358] EXT4-fs: Ignoring removed nobh option [ 64.023205][ T58] EXT4-fs (loop4): Delayed block allocation failed for inode 20 at logical offset 0 with max blocks 4 with error 28 [ 64.035947][ T58] EXT4-fs (loop4): This should not happen!! Data will be lost [ 64.035947][ T58] [ 64.055341][ T4360] loop0: detected capacity change from 0 to 2048 [ 64.063176][ T4358] ext4 filesystem being mounted at /72/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 64.084475][ T4358] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.347: bg 0: block 224: padding at end of block bitmap is not set [ 64.105576][ T4358] EXT4-fs (loop2): Remounting filesystem read-only [ 64.200540][ T4377] loop4: detected capacity change from 0 to 512 [ 64.207724][ T4376] loop2: detected capacity change from 0 to 128 [ 64.242978][ T4376] FAT-fs (loop2): Directory bread(block 162) failed [ 64.251865][ T4376] FAT-fs (loop2): Directory bread(block 163) failed [ 64.258626][ T4376] FAT-fs (loop2): Directory bread(block 164) failed [ 64.265530][ T4376] FAT-fs (loop2): Directory bread(block 165) failed [ 64.272875][ T4376] FAT-fs (loop2): Directory bread(block 166) failed [ 64.279710][ T4376] FAT-fs (loop2): Directory bread(block 167) failed [ 64.286388][ T4376] FAT-fs (loop2): Directory bread(block 168) failed [ 64.293308][ T4376] FAT-fs (loop2): Directory bread(block 169) failed [ 64.305653][ T4376] FAT-fs (loop2): Directory bread(block 162) failed [ 64.326110][ T4376] FAT-fs (loop2): Directory bread(block 163) failed [ 64.368437][ T4376] syz.2.355: attempt to access beyond end of device [ 64.368437][ T4376] loop2: rw=3, sector=226, nr_sectors = 6 limit=128 [ 64.400075][ T4376] syz.2.355: attempt to access beyond end of device [ 64.400075][ T4376] loop2: rw=2051, sector=232, nr_sectors = 2 limit=128 [ 64.407542][ T4388] loop3: detected capacity change from 0 to 1024 [ 64.420615][ T4386] loop1: detected capacity change from 0 to 1024 [ 64.502035][ T4388] netlink: 'syz.3.360': attribute type 7 has an invalid length. [ 64.699728][ T29] kauditd_printk_skb: 611 callbacks suppressed [ 64.699747][ T29] audit: type=1326 audit(1738465715.233:3488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4397 comm="syz.2.363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ee5dbcda9 code=0x7ffc0000 [ 64.761866][ T4401] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 64.906306][ T4401] EXT4-fs (loop3): Delayed block allocation failed for inode 20 at logical offset 0 with max blocks 220 with error 28 [ 64.920225][ T4401] EXT4-fs (loop3): This should not happen!! Data will be lost [ 64.920225][ T4401] [ 64.930155][ T4401] EXT4-fs (loop3): Total free blocks count 0 [ 64.936628][ T4401] EXT4-fs (loop3): Free/Dirty block details [ 64.942533][ T4401] EXT4-fs (loop3): free_blocks=68451041280 [ 64.948476][ T4401] EXT4-fs (loop3): dirty_blocks=224 [ 64.953698][ T4401] EXT4-fs (loop3): Block reservation details [ 64.960207][ T4401] EXT4-fs (loop3): i_reserved_data_blocks=14 [ 65.137789][ T29] audit: type=1326 audit(1738465715.273:3489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4397 comm="syz.2.363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ee5dbcda9 code=0x7ffc0000 [ 65.161324][ T29] audit: type=1326 audit(1738465715.273:3490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4397 comm="syz.2.363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=120 compat=0 ip=0x7f9ee5dbcda9 code=0x7ffc0000 [ 65.184894][ T29] audit: type=1326 audit(1738465715.273:3491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4397 comm="syz.2.363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ee5dbcda9 code=0x7ffc0000 [ 65.208978][ T29] audit: type=1326 audit(1738465715.273:3492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4397 comm="syz.2.363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ee5dbcda9 code=0x7ffc0000 [ 65.232998][ T29] audit: type=1326 audit(1738465715.273:3493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4397 comm="syz.2.363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9ee5dbcda9 code=0x7ffc0000 [ 65.256499][ T29] audit: type=1326 audit(1738465715.273:3494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4397 comm="syz.2.363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ee5dbcda9 code=0x7ffc0000 [ 65.280612][ T29] audit: type=1326 audit(1738465715.273:3495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4397 comm="syz.2.363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f9ee5dbcda9 code=0x7ffc0000 [ 65.304109][ T29] audit: type=1326 audit(1738465715.273:3496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4397 comm="syz.2.363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ee5dbcda9 code=0x7ffc0000 [ 65.327628][ T29] audit: type=1326 audit(1738465715.273:3497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4397 comm="syz.2.363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ee5dbcda9 code=0x7ffc0000 [ 65.447416][ T4409] loop2: detected capacity change from 0 to 512 [ 65.598178][ T398] EXT4-fs (loop3): Delayed block allocation failed for inode 20 at logical offset 0 with max blocks 4 with error 28 [ 65.611829][ T398] EXT4-fs (loop3): This should not happen!! Data will be lost [ 65.611829][ T398] [ 65.776576][ T4419] loop0: detected capacity change from 0 to 1024 [ 65.940625][ T4429] loop1: detected capacity change from 0 to 512 [ 65.948607][ T4429] EXT4-fs: Ignoring removed nobh option [ 65.978955][ T4435] loop0: detected capacity change from 0 to 512 [ 65.986843][ T4435] EXT4-fs: Ignoring removed oldalloc option [ 66.029661][ T4429] ext4 filesystem being mounted at /65/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 66.063206][ T4429] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.377: bg 0: block 224: padding at end of block bitmap is not set [ 66.081268][ T4435] EXT4-fs error (device loop0): ext4_xattr_inode_iget:436: comm syz.0.373: Parent and EA inode have the same ino 15 [ 66.107797][ T4429] EXT4-fs (loop1): Remounting filesystem read-only [ 66.120858][ T4435] EXT4-fs (loop0): Remounting filesystem read-only [ 66.127548][ T4435] EXT4-fs warning (device loop0): ext4_evict_inode:259: couldn't mark inode dirty (err -5) [ 66.145433][ T4435] EXT4-fs (loop0): 1 orphan inode deleted [ 66.151881][ T4435] SELinux: (dev loop0, type ext4) getxattr errno 5 [ 66.291635][ T4451] loop1: detected capacity change from 0 to 1024 [ 66.367353][ T4451] netlink: 'syz.1.382': attribute type 7 has an invalid length. [ 66.417059][ T4457] loop3: detected capacity change from 0 to 1024 [ 66.433676][ T4444] Set syz1 is full, maxelem 65536 reached [ 66.468356][ T4457] netlink: 'syz.3.385': attribute type 7 has an invalid length. [ 66.492108][ T4457] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 66.615988][ T4451] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 66.645742][ T4451] EXT4-fs (loop1): Delayed block allocation failed for inode 20 at logical offset 0 with max blocks 2048 with error 28 [ 66.647639][ T4465] EXT4-fs (loop3): Delayed block allocation failed for inode 20 at logical offset 0 with max blocks 2048 with error 28 [ 66.658465][ T4451] EXT4-fs (loop1): This should not happen!! Data will be lost [ 66.658465][ T4451] [ 66.671076][ T4465] EXT4-fs (loop3): This should not happen!! Data will be lost [ 66.671076][ T4465] [ 66.680713][ T4451] EXT4-fs (loop1): Total free blocks count 0 [ 66.690682][ T4465] EXT4-fs (loop3): Total free blocks count 0 [ 66.697138][ T4451] EXT4-fs (loop1): Free/Dirty block details [ 66.703368][ T4465] EXT4-fs (loop3): Free/Dirty block details [ 66.703384][ T4465] EXT4-fs (loop3): free_blocks=68451041280 [ 66.703398][ T4465] EXT4-fs (loop3): dirty_blocks=2832 [ 66.709709][ T4451] EXT4-fs (loop1): free_blocks=68451041280 [ 66.716158][ T4465] EXT4-fs (loop3): Block reservation details [ 66.716174][ T4465] EXT4-fs (loop3): i_reserved_data_blocks=177 [ 66.746020][ T4451] EXT4-fs (loop1): dirty_blocks=4512 [ 66.751309][ T4451] EXT4-fs (loop1): Block reservation details [ 66.757364][ T4451] EXT4-fs (loop1): i_reserved_data_blocks=282 [ 66.763962][ T3391] EXT4-fs (loop3): Delayed block allocation failed for inode 20 at logical offset 0 with max blocks 4 with error 28 [ 66.776691][ T3391] EXT4-fs (loop3): This should not happen!! Data will be lost [ 66.776691][ T3391] [ 66.967846][ T3391] EXT4-fs (loop1): Delayed block allocation failed for inode 20 at logical offset 0 with max blocks 4 with error 28 [ 66.971332][ T4484] loop0: detected capacity change from 0 to 512 [ 66.980591][ T3391] EXT4-fs (loop1): This should not happen!! Data will be lost [ 66.980591][ T3391] [ 67.253339][ T4491] loop2: detected capacity change from 0 to 1024 [ 67.406310][ T4491] netlink: 'syz.2.399': attribute type 7 has an invalid length. [ 67.531634][ T4491] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 67.659247][ T4500] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.785826][ T4500] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.939723][ T4500] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.981384][ T4508] vhci_hcd: default hub control req: 800c v0000 i0000 l0 [ 68.001272][ T4500] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.017384][ T4510] loop4: detected capacity change from 0 to 512 [ 68.029225][ T398] EXT4-fs (loop2): Delayed block allocation failed for inode 20 at logical offset 0 with max blocks 2048 with error 28 [ 68.043772][ T398] EXT4-fs (loop2): This should not happen!! Data will be lost [ 68.043772][ T398] [ 68.053647][ T398] EXT4-fs (loop2): Total free blocks count 0 [ 68.059773][ T398] EXT4-fs (loop2): Free/Dirty block details [ 68.065732][ T398] EXT4-fs (loop2): free_blocks=68451041280 [ 68.071725][ T398] EXT4-fs (loop2): dirty_blocks=6544 [ 68.077810][ T398] EXT4-fs (loop2): Block reservation details [ 68.083897][ T398] EXT4-fs (loop2): i_reserved_data_blocks=409 [ 68.099336][ T4510] EXT4-fs: Ignoring removed oldalloc option [ 68.136247][ T4500] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.148339][ T4500] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.160053][ T4500] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.171113][ T4500] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.259565][ T398] EXT4-fs (loop2): Delayed block allocation failed for inode 20 at logical offset 2052 with max blocks 2048 with error 28 [ 68.272487][ T398] EXT4-fs (loop2): This should not happen!! Data will be lost [ 68.272487][ T398] [ 68.285871][ T4508] program syz.1.403 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 68.448521][ T4519] loop0: detected capacity change from 0 to 512 [ 68.928598][ T4510] EXT4-fs error (device loop4): ext4_xattr_inode_iget:436: comm syz.4.404: Parent and EA inode have the same ino 15 [ 68.976695][ T4510] EXT4-fs (loop4): Remounting filesystem read-only [ 68.983489][ T4510] EXT4-fs warning (device loop4): ext4_evict_inode:259: couldn't mark inode dirty (err -5) [ 69.042298][ T4510] EXT4-fs (loop4): 1 orphan inode deleted [ 69.064232][ T4510] SELinux: (dev loop4, type ext4) getxattr errno 5 [ 69.255141][ T4542] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.309114][ T4542] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.324041][ T4549] loop4: detected capacity change from 0 to 1024 [ 69.388808][ T4542] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.408138][ T4549] netlink: 'syz.4.421': attribute type 7 has an invalid length. [ 69.436990][ T4557] loop3: detected capacity change from 0 to 128 [ 69.444697][ T4542] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.553611][ T4557] FAT-fs (loop3): Directory bread(block 162) failed [ 69.573763][ T4549] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 69.590124][ T4557] FAT-fs (loop3): Directory bread(block 163) failed [ 69.630948][ T4542] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.642652][ T4542] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.654086][ T4542] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.665118][ T4542] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.754817][ T29] kauditd_printk_skb: 406 callbacks suppressed [ 69.754832][ T29] audit: type=1326 audit(1738465720.283:3902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4566 comm="syz.2.426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ee5dbcda9 code=0x7ffc0000 [ 69.784622][ T29] audit: type=1326 audit(1738465720.283:3903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4566 comm="syz.2.426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=120 compat=0 ip=0x7f9ee5dbcda9 code=0x7ffc0000 [ 69.809880][ T29] audit: type=1326 audit(1738465720.283:3904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4566 comm="syz.2.426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ee5dbcda9 code=0x7ffc0000 [ 69.836986][ T29] audit: type=1326 audit(1738465720.283:3905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4566 comm="syz.2.426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9ee5dbcda9 code=0x7ffc0000 [ 69.860779][ T4557] FAT-fs (loop3): Directory bread(block 164) failed [ 69.890625][ T4557] FAT-fs (loop3): Directory bread(block 165) failed [ 69.950110][ T4557] FAT-fs (loop3): Directory bread(block 166) failed [ 69.972556][ T4563] loop1: detected capacity change from 0 to 512 [ 70.006306][ T4557] FAT-fs (loop3): Directory bread(block 167) failed [ 70.070693][ T4549] EXT4-fs (loop4): Delayed block allocation failed for inode 20 at logical offset 0 with max blocks 380 with error 28 [ 70.083922][ T4549] EXT4-fs (loop4): This should not happen!! Data will be lost [ 70.083922][ T4549] [ 70.094091][ T4549] EXT4-fs (loop4): Total free blocks count 0 [ 70.100317][ T4549] EXT4-fs (loop4): Free/Dirty block details [ 70.106548][ T4549] EXT4-fs (loop4): free_blocks=68451041280 [ 70.112751][ T4549] EXT4-fs (loop4): dirty_blocks=384 [ 70.118026][ T4549] EXT4-fs (loop4): Block reservation details [ 70.124026][ T4549] EXT4-fs (loop4): i_reserved_data_blocks=24 [ 70.131305][ T4557] FAT-fs (loop3): Directory bread(block 168) failed [ 70.208530][ T4574] loop2: detected capacity change from 0 to 1024 [ 70.226685][ T4557] FAT-fs (loop3): Directory bread(block 169) failed [ 70.322997][ T4557] FAT-fs (loop3): Directory bread(block 162) failed [ 70.341961][ T4557] FAT-fs (loop3): Directory bread(block 163) failed [ 70.359824][ T4557] syz.3.423: attempt to access beyond end of device [ 70.359824][ T4557] loop3: rw=3, sector=226, nr_sectors = 6 limit=128 [ 70.398742][ T4557] syz.3.423: attempt to access beyond end of device [ 70.398742][ T4557] loop3: rw=2051, sector=232, nr_sectors = 2 limit=128 [ 70.433756][ T4574] EXT4-fs mount: 50 callbacks suppressed [ 70.433779][ T4574] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.474499][ T29] audit: type=1326 audit(1738465720.403:3906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4548 comm="syz.4.421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f38adfacda9 code=0x7ffc0000 [ 70.498857][ T29] audit: type=1326 audit(1738465720.413:3907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4566 comm="syz.2.426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ee5dbcda9 code=0x7ffc0000 [ 70.522515][ T29] audit: type=1326 audit(1738465720.413:3908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4566 comm="syz.2.426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ee5dbcda9 code=0x7ffc0000 [ 70.547218][ T29] audit: type=1326 audit(1738465720.413:3909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4566 comm="syz.2.426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9ee5dbcda9 code=0x7ffc0000 [ 70.570594][ T29] audit: type=1326 audit(1738465720.413:3910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4566 comm="syz.2.426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ee5dbcda9 code=0x7ffc0000 [ 70.594039][ T29] audit: type=1326 audit(1738465720.413:3911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4566 comm="syz.2.426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ee5dbcda9 code=0x7ffc0000 [ 70.683010][ T3391] EXT4-fs (loop4): Delayed block allocation failed for inode 20 at logical offset 0 with max blocks 4 with error 28 [ 70.695922][ T3391] EXT4-fs (loop4): This should not happen!! Data will be lost [ 70.695922][ T3391] [ 70.711093][ T4574] netlink: 'syz.2.428': attribute type 7 has an invalid length. [ 70.947374][ T4592] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 70.991469][ T4592] EXT4-fs (loop2): Delayed block allocation failed for inode 20 at logical offset 0 with max blocks 300 with error 28 [ 71.004017][ T4592] EXT4-fs (loop2): This should not happen!! Data will be lost [ 71.004017][ T4592] [ 71.013891][ T4592] EXT4-fs (loop2): Total free blocks count 0 [ 71.020453][ T4592] EXT4-fs (loop2): Free/Dirty block details [ 71.026752][ T4592] EXT4-fs (loop2): free_blocks=68451041280 [ 71.033970][ T4592] EXT4-fs (loop2): dirty_blocks=304 [ 71.039881][ T4592] EXT4-fs (loop2): Block reservation details [ 71.045901][ T4592] EXT4-fs (loop2): i_reserved_data_blocks=19 [ 71.158509][ T4601] loop4: detected capacity change from 0 to 2048 [ 71.195696][ T3391] EXT4-fs (loop2): Delayed block allocation failed for inode 20 at logical offset 0 with max blocks 4 with error 28 [ 71.210071][ T4607] loop3: detected capacity change from 0 to 512 [ 71.269141][ T4610] loop2: detected capacity change from 0 to 128 [ 71.286602][ T4610] FAT-fs (loop2): Directory bread(block 162) failed [ 71.296229][ T4610] FAT-fs (loop2): Directory bread(block 163) failed [ 71.310363][ T4610] FAT-fs (loop2): Directory bread(block 164) failed [ 71.317470][ T4615] loop0: detected capacity change from 0 to 1024 [ 71.325152][ T4610] FAT-fs (loop2): Directory bread(block 165) failed [ 71.333067][ T4610] FAT-fs (loop2): Directory bread(block 166) failed [ 71.335256][ T4613] loop3: detected capacity change from 0 to 1024 [ 71.340894][ T4610] FAT-fs (loop2): Directory bread(block 167) failed [ 71.353099][ T4610] FAT-fs (loop2): Directory bread(block 168) failed [ 71.354601][ T4615] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.360181][ T4610] FAT-fs (loop2): Directory bread(block 169) failed [ 71.386249][ T4610] FAT-fs (loop2): Directory bread(block 162) failed [ 71.386407][ T4615] netlink: 'syz.0.445': attribute type 7 has an invalid length. [ 71.393324][ T4610] FAT-fs (loop2): Directory bread(block 163) failed [ 71.408064][ T4613] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.416600][ T4615] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 71.434894][ T4610] syz.2.443: attempt to access beyond end of device [ 71.434894][ T4610] loop2: rw=3, sector=226, nr_sectors = 6 limit=128 [ 71.448554][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.458103][ T4610] syz.2.443: attempt to access beyond end of device [ 71.458103][ T4610] loop2: rw=2051, sector=232, nr_sectors = 2 limit=128 [ 71.576584][ T4625] netlink: 24 bytes leftover after parsing attributes in process `syz.2.447'. [ 71.636399][ T4615] EXT4-fs (loop0): Delayed block allocation failed for inode 20 at logical offset 0 with max blocks 2048 with error 28 [ 71.649169][ T4615] EXT4-fs (loop0): This should not happen!! Data will be lost [ 71.649169][ T4615] [ 71.658848][ T4615] EXT4-fs (loop0): Total free blocks count 0 [ 71.664955][ T4615] EXT4-fs (loop0): Free/Dirty block details [ 71.670852][ T4615] EXT4-fs (loop0): free_blocks=68451041280 [ 71.676846][ T4615] EXT4-fs (loop0): dirty_blocks=4816 [ 71.682335][ T4615] EXT4-fs (loop0): Block reservation details [ 71.688703][ T4615] EXT4-fs (loop0): i_reserved_data_blocks=301 [ 73.006372][ T3322] EXT4-fs (loop0): Delayed block allocation failed for inode 20 at logical offset 0 with max blocks 4 with error 28 [ 73.339204][ T4643] loop4: detected capacity change from 0 to 1024 [ 73.888880][ T4647] loop3: detected capacity change from 0 to 1024 [ 73.900551][ T4643] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.921120][ T4647] EXT4-fs: Ignoring removed orlov option [ 73.937223][ T4647] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.957639][ T4643] netlink: 'syz.4.454': attribute type 7 has an invalid length. [ 74.082427][ T4643] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 74.134971][ T4643] EXT4-fs (loop4): Delayed block allocation failed for inode 19 at logical offset 0 with max blocks 1108 with error 28 [ 74.147587][ T4643] EXT4-fs (loop4): This should not happen!! Data will be lost [ 74.147587][ T4643] [ 74.157276][ T4643] EXT4-fs (loop4): Total free blocks count 0 [ 74.163287][ T4643] EXT4-fs (loop4): Free/Dirty block details [ 74.169191][ T4643] EXT4-fs (loop4): free_blocks=68451041280 [ 74.175075][ T4643] EXT4-fs (loop4): dirty_blocks=1120 [ 74.180447][ T4643] EXT4-fs (loop4): Block reservation details [ 74.186462][ T4643] EXT4-fs (loop4): i_reserved_data_blocks=70 [ 74.285986][ T3322] EXT4-fs (loop4): Delayed block allocation failed for inode 19 at logical offset 0 with max blocks 4 with error 28 [ 74.345858][ T4662] loop0: detected capacity change from 0 to 2048 [ 74.356940][ T4665] loop4: detected capacity change from 0 to 512 [ 74.364566][ T4665] EXT4-fs: Ignoring removed oldalloc option [ 74.388211][ T4665] EXT4-fs error (device loop4): ext4_xattr_inode_iget:436: comm syz.4.458: Parent and EA inode have the same ino 15 [ 74.403392][ T4665] EXT4-fs (loop4): Remounting filesystem read-only [ 74.410291][ T4665] EXT4-fs warning (device loop4): ext4_evict_inode:259: couldn't mark inode dirty (err -5) [ 74.488276][ T4665] EXT4-fs (loop4): 1 orphan inode deleted [ 74.541241][ T4665] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.588476][ T4665] SELinux: (dev loop4, type ext4) getxattr errno 5 [ 74.606389][ T4665] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.778001][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.829641][ T29] kauditd_printk_skb: 394 callbacks suppressed [ 74.829660][ T29] audit: type=1326 audit(1738465725.363:4306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4669 comm="syz.3.460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cd44ccda9 code=0x7ffc0000 [ 74.885102][ T29] audit: type=1326 audit(1738465725.363:4307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4669 comm="syz.3.460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=120 compat=0 ip=0x7f4cd44ccda9 code=0x7ffc0000 [ 74.908606][ T29] audit: type=1326 audit(1738465725.363:4308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4669 comm="syz.3.460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cd44ccda9 code=0x7ffc0000 [ 74.932047][ T29] audit: type=1326 audit(1738465725.363:4309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4669 comm="syz.3.460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4cd44ccda9 code=0x7ffc0000 [ 74.955352][ T29] audit: type=1326 audit(1738465725.363:4310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4669 comm="syz.3.460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cd44ccda9 code=0x7ffc0000 [ 74.978742][ T29] audit: type=1326 audit(1738465725.363:4311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4669 comm="syz.3.460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f4cd44ccda9 code=0x7ffc0000 [ 75.003012][ T29] audit: type=1326 audit(1738465725.363:4312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4669 comm="syz.3.460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cd44ccda9 code=0x7ffc0000 [ 75.027739][ T29] audit: type=1326 audit(1738465725.363:4313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4669 comm="syz.3.460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4cd44ccda9 code=0x7ffc0000 [ 75.051671][ T29] audit: type=1326 audit(1738465725.363:4314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4669 comm="syz.3.460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cd44ccda9 code=0x7ffc0000 [ 75.075053][ T29] audit: type=1326 audit(1738465725.363:4315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4669 comm="syz.3.460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4cd44ccda9 code=0x7ffc0000 [ 75.158437][ T4674] loop2: detected capacity change from 0 to 128 [ 75.200233][ T4674] FAT-fs (loop2): Directory bread(block 162) failed [ 75.214800][ T4674] FAT-fs (loop2): Directory bread(block 163) failed [ 75.221552][ T4674] FAT-fs (loop2): Directory bread(block 164) failed [ 75.253417][ T4674] FAT-fs (loop2): Directory bread(block 165) failed [ 75.266811][ T4674] FAT-fs (loop2): Directory bread(block 166) failed [ 75.273758][ T4674] FAT-fs (loop2): Directory bread(block 167) failed [ 75.282273][ T4674] FAT-fs (loop2): Directory bread(block 168) failed [ 75.289309][ T4674] FAT-fs (loop2): Directory bread(block 169) failed [ 75.416030][ T4674] FAT-fs (loop2): Directory bread(block 162) failed [ 75.422691][ T4674] FAT-fs (loop2): Directory bread(block 163) failed [ 75.435916][ T4674] syz.2.462: attempt to access beyond end of device [ 75.435916][ T4674] loop2: rw=3, sector=226, nr_sectors = 6 limit=128 [ 75.466125][ T4674] syz.2.462: attempt to access beyond end of device [ 75.466125][ T4674] loop2: rw=2051, sector=232, nr_sectors = 2 limit=128 [ 76.471865][ T4694] loop4: detected capacity change from 0 to 1024 [ 76.517386][ T4696] loop1: detected capacity change from 0 to 1024 [ 76.546968][ T4696] EXT4-fs: Ignoring removed orlov option [ 76.559467][ T4700] loop2: detected capacity change from 0 to 512 [ 76.587357][ T4694] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.603725][ T4696] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.618278][ T4700] EXT4-fs: Ignoring removed nobh option [ 76.648884][ T4694] netlink: 'syz.4.468': attribute type 7 has an invalid length. [ 76.660885][ T4700] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.723876][ T4700] ext4 filesystem being mounted at /102/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 76.819281][ T4700] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.472: bg 0: block 224: padding at end of block bitmap is not set [ 76.839846][ T4694] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 76.890106][ T4694] EXT4-fs (loop4): Delayed block allocation failed for inode 19 at logical offset 0 with max blocks 872 with error 28 [ 76.903453][ T4694] EXT4-fs (loop4): This should not happen!! Data will be lost [ 76.903453][ T4694] [ 76.914035][ T4694] EXT4-fs (loop4): Total free blocks count 0 [ 76.920450][ T4694] EXT4-fs (loop4): Free/Dirty block details [ 76.926430][ T4694] EXT4-fs (loop4): free_blocks=68451041280 [ 76.932265][ T4694] EXT4-fs (loop4): dirty_blocks=880 [ 76.937547][ T4694] EXT4-fs (loop4): Block reservation details [ 76.943630][ T4694] EXT4-fs (loop4): i_reserved_data_blocks=55 [ 76.949760][ T4700] EXT4-fs (loop2): Remounting filesystem read-only [ 76.952139][ T4719] loop0: detected capacity change from 0 to 512 [ 76.971470][ T4719] EXT4-fs: Ignoring removed oldalloc option [ 76.988603][ T4719] EXT4-fs error (device loop0): ext4_xattr_inode_iget:436: comm syz.0.477: Parent and EA inode have the same ino 15 [ 77.000002][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.015405][ T4719] EXT4-fs (loop0): Remounting filesystem read-only [ 77.016621][ T4722] loop3: detected capacity change from 0 to 128 [ 77.023321][ T4719] EXT4-fs warning (device loop0): ext4_evict_inode:259: couldn't mark inode dirty (err -5) [ 77.023399][ T4719] EXT4-fs (loop0): 1 orphan inode deleted [ 77.080844][ T28] EXT4-fs (loop4): Delayed block allocation failed for inode 19 at logical offset 0 with max blocks 4 with error 28 [ 77.095235][ T4722] FAT-fs (loop3): Directory bread(block 162) failed [ 77.102079][ T4722] FAT-fs (loop3): Directory bread(block 163) failed [ 77.109010][ T4722] FAT-fs (loop3): Directory bread(block 164) failed [ 77.116399][ T4719] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.129193][ T4722] FAT-fs (loop3): Directory bread(block 165) failed [ 77.133114][ T4719] SELinux: (dev loop0, type ext4) getxattr errno 5 [ 77.136276][ T4724] loop2: detected capacity change from 0 to 2048 [ 77.149067][ T4722] FAT-fs (loop3): Directory bread(block 166) failed [ 77.151650][ T4719] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.170386][ T4726] loop4: detected capacity change from 0 to 512 [ 77.195096][ T4722] FAT-fs (loop3): Directory bread(block 167) failed [ 77.207892][ T4722] FAT-fs (loop3): Directory bread(block 168) failed [ 77.238364][ T4722] FAT-fs (loop3): Directory bread(block 169) failed [ 77.246817][ T4722] FAT-fs (loop3): Directory bread(block 162) failed [ 77.270644][ T4722] FAT-fs (loop3): Directory bread(block 163) failed [ 77.281308][ T4722] syz.3.479: attempt to access beyond end of device [ 77.281308][ T4722] loop3: rw=3, sector=226, nr_sectors = 6 limit=128 [ 77.309775][ T4722] syz.3.479: attempt to access beyond end of device [ 77.309775][ T4722] loop3: rw=2051, sector=232, nr_sectors = 2 limit=128 [ 77.361364][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.441352][ T4737] loop1: detected capacity change from 0 to 512 [ 77.455775][ T4737] EXT4-fs: Ignoring removed nobh option [ 77.485156][ T4737] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.500051][ T4737] ext4 filesystem being mounted at /85/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 77.517754][ T4737] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.484: bg 0: block 224: padding at end of block bitmap is not set [ 77.537235][ T4737] EXT4-fs (loop1): Remounting filesystem read-only [ 77.598629][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.089466][ T4755] loop0: detected capacity change from 0 to 1024 [ 78.179009][ T4755] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.254288][ T4757] loop2: detected capacity change from 0 to 2048 [ 78.393454][ T4755] netlink: 'syz.0.490': attribute type 7 has an invalid length. [ 78.519747][ T4761] loop3: detected capacity change from 0 to 128 [ 78.643895][ T4761] FAT-fs (loop3): Directory bread(block 162) failed [ 78.665627][ T4764] loop2: detected capacity change from 0 to 1024 [ 78.684429][ T4761] FAT-fs (loop3): Directory bread(block 163) failed [ 78.696025][ T4755] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 78.714907][ T4764] EXT4-fs: Ignoring removed orlov option [ 78.727032][ T4761] FAT-fs (loop3): Directory bread(block 164) failed [ 78.750939][ T4761] FAT-fs (loop3): Directory bread(block 165) failed [ 78.758948][ T4764] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.782766][ T4761] FAT-fs (loop3): Directory bread(block 166) failed [ 78.790928][ T4755] EXT4-fs (loop0): Delayed block allocation failed for inode 19 at logical offset 0 with max blocks 784 with error 28 [ 78.803928][ T4755] EXT4-fs (loop0): This should not happen!! Data will be lost [ 78.803928][ T4755] [ 78.814673][ T4755] EXT4-fs (loop0): Total free blocks count 0 [ 78.822456][ T4755] EXT4-fs (loop0): Free/Dirty block details [ 78.829010][ T4755] EXT4-fs (loop0): free_blocks=68451041280 [ 78.835589][ T4755] EXT4-fs (loop0): dirty_blocks=800 [ 78.840807][ T4755] EXT4-fs (loop0): Block reservation details [ 78.846822][ T4755] EXT4-fs (loop0): i_reserved_data_blocks=50 [ 78.864496][ T4761] FAT-fs (loop3): Directory bread(block 167) failed [ 78.874361][ T4761] FAT-fs (loop3): Directory bread(block 168) failed [ 78.902690][ T4761] FAT-fs (loop3): Directory bread(block 169) failed [ 78.938626][ T4761] FAT-fs (loop3): Directory bread(block 162) failed [ 78.987425][ T4761] FAT-fs (loop3): Directory bread(block 163) failed [ 79.084423][ T4761] syz.3.492: attempt to access beyond end of device [ 79.084423][ T4761] loop3: rw=3, sector=226, nr_sectors = 6 limit=128 [ 79.146014][ T4761] syz.3.492: attempt to access beyond end of device [ 79.146014][ T4761] loop3: rw=2051, sector=232, nr_sectors = 2 limit=128 [ 79.244551][ T4690] EXT4-fs (loop0): Delayed block allocation failed for inode 19 at logical offset 0 with max blocks 4 with error 28 [ 79.318510][ T4769] loop3: detected capacity change from 0 to 512 [ 79.357963][ T4771] loop1: detected capacity change from 0 to 512 [ 79.376034][ T4771] EXT4-fs: Ignoring removed nobh option [ 79.443865][ T4771] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.486385][ T4771] ext4 filesystem being mounted at /89/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 79.500660][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.554537][ T4779] loop0: detected capacity change from 0 to 512 [ 79.577502][ T4771] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.496: bg 0: block 224: padding at end of block bitmap is not set [ 79.593544][ T4779] EXT4-fs: Ignoring removed oldalloc option [ 79.629551][ T4779] EXT4-fs error (device loop0): ext4_xattr_inode_iget:436: comm syz.0.499: Parent and EA inode have the same ino 15 [ 79.673419][ T4788] loop2: detected capacity change from 0 to 512 [ 79.685040][ T4779] EXT4-fs (loop0): Remounting filesystem read-only [ 79.691834][ T4779] EXT4-fs warning (device loop0): ext4_evict_inode:259: couldn't mark inode dirty (err -5) [ 79.714208][ T4771] EXT4-fs (loop1): Remounting filesystem read-only [ 79.728905][ T4779] EXT4-fs (loop0): 1 orphan inode deleted [ 79.768320][ T4779] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.788040][ T4779] SELinux: (dev loop0, type ext4) getxattr errno 5 [ 79.799905][ T4794] loop3: detected capacity change from 0 to 1024 [ 79.807269][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.820244][ T4779] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.843187][ T4794] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.937207][ T4794] netlink: 'syz.3.505': attribute type 7 has an invalid length. [ 79.967467][ T29] kauditd_printk_skb: 463 callbacks suppressed [ 79.967482][ T29] audit: type=1326 audit(1738465730.503:4773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4793 comm="syz.3.505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cd44ccda9 code=0x7ffc0000 [ 80.030996][ T29] audit: type=1326 audit(1738465730.503:4774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4793 comm="syz.3.505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cd44ccda9 code=0x7ffc0000 [ 80.054577][ T29] audit: type=1326 audit(1738465730.503:4775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4793 comm="syz.3.505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f4cd44ccda9 code=0x7ffc0000 [ 80.078412][ T29] audit: type=1326 audit(1738465730.503:4776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4793 comm="syz.3.505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f4cd44ccde3 code=0x7ffc0000 [ 80.102154][ T29] audit: type=1326 audit(1738465730.503:4777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4793 comm="syz.3.505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f4cd44cb85f code=0x7ffc0000 [ 80.125703][ T29] audit: type=1326 audit(1738465730.503:4778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4793 comm="syz.3.505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f4cd44cce37 code=0x7ffc0000 [ 80.186070][ T4806] loop2: detected capacity change from 0 to 1024 [ 80.201110][ T4801] loop4: detected capacity change from 0 to 512 [ 80.214064][ T4806] EXT4-fs: Ignoring removed orlov option [ 80.342067][ T4806] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.460657][ T4813] loop0: detected capacity change from 0 to 1024 [ 80.513612][ T4813] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.559054][ T4813] netlink: 'syz.0.510': attribute type 7 has an invalid length. [ 80.720708][ T29] audit: type=1326 audit(1738465730.713:4779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4793 comm="syz.3.505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4cd44cb710 code=0x7ffc0000 [ 80.746568][ T29] audit: type=1326 audit(1738465730.713:4780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4793 comm="syz.3.505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f4cd44cba0a code=0x7ffc0000 [ 80.769845][ T29] audit: type=1326 audit(1738465730.753:4781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4793 comm="syz.3.505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cd44ccda9 code=0x7ffc0000 [ 80.793212][ T29] audit: type=1326 audit(1738465730.753:4782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4793 comm="syz.3.505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cd44ccda9 code=0x7ffc0000 [ 80.828807][ T4813] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 80.954831][ T3391] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 81.015019][ T3391] EXT4-fs (loop3): Delayed block allocation failed for inode 20 at logical offset 0 with max blocks 556 with error 28 [ 81.028592][ T3391] EXT4-fs (loop3): This should not happen!! Data will be lost [ 81.028592][ T3391] [ 81.038814][ T3391] EXT4-fs (loop3): Total free blocks count 0 [ 81.044915][ T3391] EXT4-fs (loop3): Free/Dirty block details [ 81.050803][ T3391] EXT4-fs (loop3): free_blocks=68451041280 [ 81.056646][ T3391] EXT4-fs (loop3): dirty_blocks=560 [ 81.061859][ T3391] EXT4-fs (loop3): Block reservation details [ 81.067887][ T3391] EXT4-fs (loop3): i_reserved_data_blocks=35 [ 81.098646][ T4818] EXT4-fs (loop0): Delayed block allocation failed for inode 19 at logical offset 0 with max blocks 1176 with error 28 [ 81.111729][ T4818] EXT4-fs (loop0): This should not happen!! Data will be lost [ 81.111729][ T4818] [ 81.121734][ T4818] EXT4-fs (loop0): Total free blocks count 0 [ 81.128962][ T4818] EXT4-fs (loop0): Free/Dirty block details [ 81.134967][ T4818] EXT4-fs (loop0): free_blocks=68451041280 [ 81.140800][ T4818] EXT4-fs (loop0): dirty_blocks=1184 [ 81.146118][ T4818] EXT4-fs (loop0): Block reservation details [ 81.152119][ T4818] EXT4-fs (loop0): i_reserved_data_blocks=74 [ 81.220338][ T4826] loop4: detected capacity change from 0 to 512 [ 81.228228][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.271960][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.294532][ T4828] loop2: detected capacity change from 0 to 512 [ 81.339316][ T4830] loop4: detected capacity change from 0 to 1024 [ 81.346123][ T4828] EXT4-fs: Ignoring removed nobh option [ 81.387400][ T4828] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.411158][ T4828] ext4 filesystem being mounted at /110/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 81.435129][ T4830] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.449369][ T4830] netlink: 'syz.4.517': attribute type 7 has an invalid length. [ 81.462066][ T4830] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 81.497779][ T4828] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.516: bg 0: block 224: padding at end of block bitmap is not set [ 81.541953][ T4828] EXT4-fs (loop2): Remounting filesystem read-only [ 81.550447][ T3322] EXT4-fs (loop0): Delayed block allocation failed for inode 19 at logical offset 0 with max blocks 4 with error 28 [ 81.573731][ T4830] EXT4-fs (loop4): Delayed block allocation failed for inode 20 at logical offset 0 with max blocks 1156 with error 28 [ 81.586343][ T4830] EXT4-fs (loop4): This should not happen!! Data will be lost [ 81.586343][ T4830] [ 81.596085][ T4830] EXT4-fs (loop4): Total free blocks count 0 [ 81.602175][ T4830] EXT4-fs (loop4): Free/Dirty block details [ 81.608181][ T4830] EXT4-fs (loop4): free_blocks=68451041280 [ 81.614292][ T4830] EXT4-fs (loop4): dirty_blocks=1168 [ 81.620207][ T4830] EXT4-fs (loop4): Block reservation details [ 81.626445][ T4830] EXT4-fs (loop4): i_reserved_data_blocks=73 [ 81.633139][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.680418][ T4844] loop2: detected capacity change from 0 to 1024 [ 81.710760][ T4847] loop0: detected capacity change from 0 to 512 [ 81.721407][ T4844] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.780341][ T4844] netlink: 'syz.2.521': attribute type 7 has an invalid length. [ 81.801616][ T4854] loop3: detected capacity change from 0 to 1024 [ 81.839954][ T3322] EXT4-fs (loop4): Delayed block allocation failed for inode 20 at logical offset 0 with max blocks 4 with error 28 [ 81.881201][ T4854] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.912232][ T4844] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 81.927826][ T4844] EXT4-fs (loop2): Delayed block allocation failed for inode 20 at logical offset 0 with max blocks 1184 with error 28 [ 81.940368][ T4844] EXT4-fs (loop2): This should not happen!! Data will be lost [ 81.940368][ T4844] [ 81.950074][ T4844] EXT4-fs (loop2): Total free blocks count 0 [ 81.956109][ T4844] EXT4-fs (loop2): Free/Dirty block details [ 81.962186][ T4844] EXT4-fs (loop2): free_blocks=68451041280 [ 81.964297][ T4854] netlink: 'syz.3.523': attribute type 7 has an invalid length. [ 81.968020][ T4844] EXT4-fs (loop2): dirty_blocks=1184 [ 81.982925][ T4844] EXT4-fs (loop2): Block reservation details [ 81.989417][ T4844] EXT4-fs (loop2): i_reserved_data_blocks=74 [ 82.018640][ T4854] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 82.054143][ T3391] EXT4-fs (loop2): Delayed block allocation failed for inode 20 at logical offset 0 with max blocks 4 with error 28 [ 82.092571][ T4865] loop0: detected capacity change from 0 to 1024 [ 82.099940][ T4865] EXT4-fs: Ignoring removed orlov option [ 82.113830][ T4865] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.132663][ T4870] EXT4-fs (loop3): Delayed block allocation failed for inode 20 at logical offset 0 with max blocks 504 with error 28 [ 82.146368][ T4870] EXT4-fs (loop3): This should not happen!! Data will be lost [ 82.146368][ T4870] [ 82.156199][ T4870] EXT4-fs (loop3): Total free blocks count 0 [ 82.162254][ T4870] EXT4-fs (loop3): Free/Dirty block details [ 82.168184][ T4870] EXT4-fs (loop3): free_blocks=68451041280 [ 82.175386][ T4870] EXT4-fs (loop3): dirty_blocks=512 [ 82.181568][ T4870] EXT4-fs (loop3): Block reservation details [ 82.187760][ T4870] EXT4-fs (loop3): i_reserved_data_blocks=32 [ 83.816947][ T3322] EXT4-fs (loop3): Delayed block allocation failed for inode 20 at logical offset 0 with max blocks 4 with error 28 [ 84.511349][ T3294] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.742292][ T4885] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.826302][ T4885] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.832170][ T4898] loop2: detected capacity change from 0 to 1024 [ 84.859974][ T4898] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 84.880336][ T4885] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.892368][ T4898] netlink: 'syz.2.540': attribute type 7 has an invalid length. [ 84.967434][ T4885] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.991504][ T4904] loop0: detected capacity change from 0 to 512 [ 84.994213][ T4898] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, [ 84.999429][ T29] kauditd_printk_skb: 381 callbacks suppressed [ 84.999442][ T29] audit: type=1326 audit(1738465735.523:5162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4897 comm="syz.2.540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7f9ee5dbcda9 code=0x7ffc0000 [ 85.039523][ T4898] block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 85.041535][ T4904] EXT4-fs: Ignoring removed nobh option [ 85.054194][ T4898] EXT4-fs (loop2): Delayed block allocation failed for inode 20 at logical offset 0 with max blocks 2048 with error 28 [ 85.066685][ T4898] EXT4-fs (loop2): This should not happen!! Data will be lost [ 85.066685][ T4898] [ 85.077127][ T4898] EXT4-fs (loop2): Total free blocks count 0 [ 85.083257][ T4898] EXT4-fs (loop2): Free/Dirty block details [ 85.089768][ T4898] EXT4-fs (loop2): free_blocks=68451041280 [ 85.095673][ T4898] EXT4-fs (loop2): dirty_blocks=2928 [ 85.101075][ T4898] EXT4-fs (loop2): Block reservation details [ 85.107145][ T4898] EXT4-fs (loop2): i_reserved_data_blocks=183 [ 85.128295][ T4885] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.139552][ T4885] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.148080][ T29] audit: type=1326 audit(1738465735.663:5163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4897 comm="syz.2.540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ee5dbcda9 code=0x7ffc0000 [ 85.171474][ T29] audit: type=1326 audit(1738465735.663:5164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4897 comm="syz.2.540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ee5dbcda9 code=0x7ffc0000 [ 85.198378][ T4885] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.210438][ T4885] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.211186][ T4904] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.331667][ T4904] ext4 filesystem being mounted at /92/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 85.346796][ T3391] EXT4-fs (loop2): Delayed block allocation failed for inode 20 at logical offset 0 with max blocks 4 with error 28 [ 85.425485][ T4904] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.542: bg 0: block 224: padding at end of block bitmap is not set [ 85.454393][ T29] audit: type=1326 audit(1738465735.903:5165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4912 comm="syz.3.546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cd44ccda9 code=0x7ffc0000 [ 85.463807][ T4904] EXT4-fs (loop0): Remounting filesystem read-only [ 85.478976][ T29] audit: type=1326 audit(1738465735.903:5166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4912 comm="syz.3.546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=120 compat=0 ip=0x7f4cd44ccda9 code=0x7ffc0000 [ 85.510136][ T29] audit: type=1326 audit(1738465735.903:5167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4912 comm="syz.3.546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cd44ccda9 code=0x7ffc0000 [ 85.514864][ T4919] loop3: detected capacity change from 0 to 512 [ 85.535960][ T29] audit: type=1326 audit(1738465735.903:5168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4912 comm="syz.3.546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4cd44ccda9 code=0x7ffc0000 [ 85.536061][ T29] audit: type=1326 audit(1738465735.903:5169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4912 comm="syz.3.546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cd44ccda9 code=0x7ffc0000 [ 85.589470][ T29] audit: type=1326 audit(1738465735.903:5170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4912 comm="syz.3.546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f4cd44ccda9 code=0x7ffc0000 [ 85.592964][ T4919] EXT4-fs: Ignoring removed oldalloc option [ 85.614245][ T29] audit: type=1326 audit(1738465735.903:5171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4912 comm="syz.3.546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cd44ccda9 code=0x7ffc0000 [ 85.690547][ T3294] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.709632][ T4919] EXT4-fs error (device loop3): ext4_xattr_inode_iget:436: comm syz.3.548: Parent and EA inode have the same ino 15 [ 85.747418][ T4919] EXT4-fs (loop3): Remounting filesystem read-only [ 85.754009][ T4919] EXT4-fs warning (device loop3): ext4_evict_inode:259: couldn't mark inode dirty (err -5) [ 85.784857][ T4919] EXT4-fs (loop3): 1 orphan inode deleted [ 85.805389][ T4919] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 85.844916][ T4919] SELinux: (dev loop3, type ext4) getxattr errno 5 [ 85.853693][ T4935] netlink: 60 bytes leftover after parsing attributes in process `syz.0.555'. [ 85.901928][ T4919] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.948461][ T4939] loop0: detected capacity change from 0 to 2048 [ 85.973182][ T4934] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.026023][ T4934] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.086107][ T4934] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.126446][ T4934] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.191337][ T4934] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.203684][ T4934] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.215043][ T4934] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.226977][ T4934] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.431333][ T4957] loop3: detected capacity change from 0 to 512 [ 86.463265][ T4957] EXT4-fs: Ignoring removed nobh option [ 86.479410][ T4962] loop4: detected capacity change from 0 to 1024 [ 86.508359][ T4962] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 86.581361][ T4962] netlink: 'syz.4.563': attribute type 7 has an invalid length. [ 86.933965][ T4957] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.012059][ T4957] ext4 filesystem being mounted at /151/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 87.028208][ T4962] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 87.109467][ T4957] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.562: bg 0: block 224: padding at end of block bitmap is not set [ 87.206733][ T4957] EXT4-fs (loop3): Remounting filesystem read-only [ 87.282630][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.303994][ T4968] EXT4-fs (loop4): Delayed block allocation failed for inode 20 at logical offset 0 with max blocks 932 with error 28 [ 87.316501][ T4968] EXT4-fs (loop4): This should not happen!! Data will be lost [ 87.316501][ T4968] [ 87.326243][ T4968] EXT4-fs (loop4): Total free blocks count 0 [ 87.333217][ T4968] EXT4-fs (loop4): Free/Dirty block details [ 87.339450][ T4968] EXT4-fs (loop4): free_blocks=68451041280 [ 87.345295][ T4968] EXT4-fs (loop4): dirty_blocks=944 [ 87.350493][ T4968] EXT4-fs (loop4): Block reservation details [ 87.356693][ T4968] EXT4-fs (loop4): i_reserved_data_blocks=59 [ 87.539368][ T4972] loop0: detected capacity change from 0 to 2048 [ 87.696679][ T28] EXT4-fs (loop4): Delayed block allocation failed for inode 20 at logical offset 0 with max blocks 4 with error 28 [ 87.811976][ T4983] loop3: detected capacity change from 0 to 1024 [ 87.853342][ T4983] EXT4-fs: Ignoring removed orlov option [ 87.889601][ T4983] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.077510][ T4994] loop1: detected capacity change from 0 to 1024 [ 88.113150][ T4992] loop2: detected capacity change from 0 to 512 [ 88.130967][ T4994] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 88.155731][ T4992] EXT4-fs: Ignoring removed oldalloc option [ 88.179914][ T4992] EXT4-fs error (device loop2): ext4_xattr_inode_iget:436: comm syz.2.573: Parent and EA inode have the same ino 15 [ 88.195926][ T4992] EXT4-fs (loop2): Remounting filesystem read-only [ 88.202717][ T4992] EXT4-fs warning (device loop2): ext4_evict_inode:259: couldn't mark inode dirty (err -5) [ 88.213339][ T4992] EXT4-fs (loop2): 1 orphan inode deleted [ 88.213478][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.219899][ T4992] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 88.240803][ T4992] SELinux: (dev loop2, type ext4) getxattr errno 5 [ 88.248042][ T4992] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.420435][ T5012] loop0: detected capacity change from 0 to 1024 [ 88.427061][ T5014] loop1: detected capacity change from 0 to 512 [ 88.457641][ T5012] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 88.481563][ T5012] netlink: 'syz.0.580': attribute type 7 has an invalid length. [ 88.584923][ T5012] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 88.600447][ T5012] EXT4-fs (loop0): Delayed block allocation failed for inode 20 at logical offset 0 with max blocks 1248 with error 28 [ 88.612998][ T5012] EXT4-fs (loop0): This should not happen!! Data will be lost [ 88.612998][ T5012] [ 88.622787][ T5012] EXT4-fs (loop0): Total free blocks count 0 [ 88.628992][ T5012] EXT4-fs (loop0): Free/Dirty block details [ 88.635103][ T5012] EXT4-fs (loop0): free_blocks=68451041280 [ 88.640920][ T5012] EXT4-fs (loop0): dirty_blocks=1248 [ 88.646213][ T5012] EXT4-fs (loop0): Block reservation details [ 88.652204][ T5012] EXT4-fs (loop0): i_reserved_data_blocks=78 [ 88.702795][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.713798][ T4690] EXT4-fs (loop0): Delayed block allocation failed for inode 20 at logical offset 0 with max blocks 4 with error 28 [ 89.104535][ T5028] loop4: detected capacity change from 0 to 1024 [ 89.856762][ T5048] loop2: detected capacity change from 0 to 1024 [ 89.884530][ T5048] EXT4-fs: Ignoring removed orlov option [ 90.017914][ T5054] loop4: detected capacity change from 0 to 512 [ 90.105768][ T5054] ext4 filesystem being mounted at /104/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 90.141384][ T5061] loop1: detected capacity change from 0 to 512 [ 90.386631][ T5066] loop4: detected capacity change from 0 to 512 [ 90.400703][ T5066] EXT4-fs: Ignoring removed nobh option [ 90.433800][ T5066] ext4 filesystem being mounted at /105/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 90.447095][ T29] kauditd_printk_skb: 412 callbacks suppressed [ 90.447106][ T29] audit: type=1326 audit(1738465740.983:5580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5067 comm="syz.0.598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f349fcda9 code=0x7ffc0000 [ 90.484950][ T29] audit: type=1326 audit(1738465740.983:5581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5067 comm="syz.0.598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f349fcda9 code=0x7ffc0000 [ 90.508594][ T29] audit: type=1326 audit(1738465740.983:5582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5067 comm="syz.0.598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=120 compat=0 ip=0x7f8f349fcda9 code=0x7ffc0000 [ 90.532552][ T29] audit: type=1326 audit(1738465740.983:5583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5067 comm="syz.0.598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f349fcda9 code=0x7ffc0000 [ 90.556073][ T29] audit: type=1326 audit(1738465740.983:5584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5067 comm="syz.0.598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8f349fcda9 code=0x7ffc0000 [ 90.579680][ T29] audit: type=1326 audit(1738465740.983:5585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5067 comm="syz.0.598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f349fcda9 code=0x7ffc0000 [ 90.603733][ T29] audit: type=1326 audit(1738465740.983:5586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5067 comm="syz.0.598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f8f349fcda9 code=0x7ffc0000 [ 90.627439][ T29] audit: type=1326 audit(1738465740.983:5587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5067 comm="syz.0.598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f349fcda9 code=0x7ffc0000 [ 90.650904][ T29] audit: type=1326 audit(1738465740.983:5588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5067 comm="syz.0.598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8f349fcda9 code=0x7ffc0000 [ 90.674255][ T29] audit: type=1326 audit(1738465740.983:5589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5067 comm="syz.0.598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f349fcda9 code=0x7ffc0000 [ 90.954957][ T5092] loop2: detected capacity change from 0 to 512 [ 90.961737][ T5092] EXT4-fs: Ignoring removed oldalloc option [ 90.971331][ T5092] EXT4-fs error (device loop2): ext4_xattr_inode_iget:436: comm syz.2.608: Parent and EA inode have the same ino 15 [ 90.983932][ T5092] EXT4-fs (loop2): Remounting filesystem read-only [ 90.990635][ T5092] EXT4-fs warning (device loop2): ext4_evict_inode:259: couldn't mark inode dirty (err -5) [ 91.001421][ T5092] EXT4-fs (loop2): 1 orphan inode deleted [ 91.011389][ T5092] SELinux: (dev loop2, type ext4) getxattr errno 5 [ 91.182012][ T5101] loop1: detected capacity change from 0 to 512 [ 91.248558][ T5101] EXT4-fs: Ignoring removed nobh option [ 91.308371][ T5101] ext4 filesystem being mounted at /105/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 91.464590][ T5110] loop4: detected capacity change from 0 to 1024 [ 92.064242][ T5119] loop4: detected capacity change from 0 to 512 [ 92.384800][ T5127] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.426285][ T5127] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.449295][ T5133] loop4: detected capacity change from 0 to 512 [ 92.466307][ T5127] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.481625][ T5133] EXT4-fs: Ignoring removed nobh option [ 92.526446][ T5127] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.547973][ T5133] ext4 filesystem being mounted at /114/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 92.605153][ T5127] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.617842][ T5140] loop4: detected capacity change from 0 to 512 [ 92.632391][ T5127] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.644997][ T5140] ======================================================= [ 92.644997][ T5140] WARNING: The mand mount option has been deprecated and [ 92.644997][ T5140] and is ignored by this kernel. Remove the mand [ 92.644997][ T5140] option from the mount to silence this warning. [ 92.644997][ T5140] ======================================================= [ 92.702924][ T5127] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.714953][ T5127] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.784309][ T5140] ext4 filesystem being mounted at /115/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 92.799316][ T5144] loop2: detected capacity change from 0 to 1024 [ 92.922628][ T5157] loop3: detected capacity change from 0 to 512 [ 92.964853][ T5159] loop4: detected capacity change from 0 to 512 [ 93.015161][ T5159] EXT4-fs: Ignoring removed oldalloc option [ 93.043069][ T5159] EXT4-fs error (device loop4): ext4_xattr_inode_iget:436: comm syz.4.632: Parent and EA inode have the same ino 15 [ 93.082396][ T5159] EXT4-fs (loop4): Remounting filesystem read-only [ 93.089039][ T5159] EXT4-fs warning (device loop4): ext4_evict_inode:259: couldn't mark inode dirty (err -5) [ 93.099322][ T5159] EXT4-fs (loop4): 1 orphan inode deleted [ 93.105658][ T5159] SELinux: (dev loop4, type ext4) getxattr errno 5 [ 93.141547][ T5165] loop3: detected capacity change from 0 to 1024 [ 93.249504][ T5169] loop0: detected capacity change from 0 to 512 [ 93.293137][ T5165] netlink: 'syz.3.634': attribute type 7 has an invalid length. [ 93.308002][ T5169] EXT4-fs: Ignoring removed nobh option [ 93.361320][ T5169] ext4 filesystem being mounted at /108/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 93.403078][ T5165] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 93.637965][ T5181] loop1: detected capacity change from 0 to 1024 [ 93.655592][ T5165] EXT4-fs (loop3): Delayed block allocation failed for inode 20 at logical offset 0 with max blocks 708 with error 28 [ 93.668233][ T5165] EXT4-fs (loop3): This should not happen!! Data will be lost [ 93.668233][ T5165] [ 93.678160][ T5165] EXT4-fs (loop3): Total free blocks count 0 [ 93.684170][ T5165] EXT4-fs (loop3): Free/Dirty block details [ 93.690119][ T5165] EXT4-fs (loop3): free_blocks=68451041280 [ 93.696097][ T5165] EXT4-fs (loop3): dirty_blocks=720 [ 93.701836][ T5165] EXT4-fs (loop3): Block reservation details [ 93.707911][ T5165] EXT4-fs (loop3): i_reserved_data_blocks=45 [ 93.719508][ T5181] EXT4-fs: Ignoring removed orlov option [ 94.064112][ T3322] EXT4-fs (loop3): Delayed block allocation failed for inode 20 at logical offset 0 with max blocks 4 with error 28 [ 94.076411][ T3322] EXT4-fs (loop3): This should not happen!! Data will be lost [ 94.076411][ T3322] [ 94.140491][ T5192] loop0: detected capacity change from 0 to 512 [ 94.180572][ T5192] EXT4-fs: Ignoring removed oldalloc option [ 94.233965][ T5192] EXT4-fs error (device loop0): ext4_xattr_inode_iget:436: comm syz.0.638: Parent and EA inode have the same ino 15 [ 94.301429][ T5192] EXT4-fs (loop0): Remounting filesystem read-only [ 94.308113][ T5192] EXT4-fs warning (device loop0): ext4_evict_inode:259: couldn't mark inode dirty (err -5) [ 94.391582][ T5192] EXT4-fs (loop0): 1 orphan inode deleted [ 94.427684][ T5192] SELinux: (dev loop0, type ext4) getxattr errno 5 [ 94.543432][ T5205] loop2: detected capacity change from 0 to 512 [ 94.721524][ T5212] loop2: detected capacity change from 0 to 128 [ 94.738822][ T5212] FAT-fs (loop2): Directory bread(block 162) failed [ 94.754042][ T5212] FAT-fs (loop2): Directory bread(block 163) failed [ 94.764598][ T5212] FAT-fs (loop2): Directory bread(block 164) failed [ 94.782476][ T5212] FAT-fs (loop2): Directory bread(block 165) failed [ 94.789729][ T5212] FAT-fs (loop2): Directory bread(block 166) failed [ 94.815613][ T5212] FAT-fs (loop2): Directory bread(block 167) failed [ 94.837544][ T5212] FAT-fs (loop2): Directory bread(block 168) failed [ 94.876208][ T5212] FAT-fs (loop2): Directory bread(block 169) failed [ 94.890462][ T5212] FAT-fs (loop2): Directory bread(block 162) failed [ 94.900069][ T5212] FAT-fs (loop2): Directory bread(block 163) failed [ 94.907553][ T5212] syz.2.651: attempt to access beyond end of device [ 94.907553][ T5212] loop2: rw=3, sector=226, nr_sectors = 6 limit=128 [ 94.922653][ T5212] syz.2.651: attempt to access beyond end of device [ 94.922653][ T5212] loop2: rw=2051, sector=232, nr_sectors = 2 limit=128 [ 94.992475][ T5221] loop1: detected capacity change from 0 to 512 [ 95.072211][ T5229] loop0: detected capacity change from 0 to 256 [ 95.223568][ T5234] loop1: detected capacity change from 0 to 1024 [ 95.563645][ T29] kauditd_printk_skb: 205 callbacks suppressed [ 95.563659][ T29] audit: type=1326 audit(1738465746.093:5795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5240 comm="syz.3.661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cd44ccda9 code=0x7ffc0000 [ 95.787062][ T29] audit: type=1326 audit(1738465746.133:5796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5240 comm="syz.3.661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cd44ccda9 code=0x7ffc0000 [ 95.810843][ T29] audit: type=1326 audit(1738465746.133:5797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5240 comm="syz.3.661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4cd44ccda9 code=0x7ffc0000 [ 95.834816][ T29] audit: type=1326 audit(1738465746.133:5798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5240 comm="syz.3.661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cd44ccda9 code=0x7ffc0000 [ 95.858326][ T29] audit: type=1326 audit(1738465746.133:5799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5240 comm="syz.3.661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cd44ccda9 code=0x7ffc0000 [ 95.881684][ T29] audit: type=1326 audit(1738465746.133:5800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5240 comm="syz.3.661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f4cd44ccda9 code=0x7ffc0000 [ 95.905208][ T29] audit: type=1326 audit(1738465746.133:5801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5240 comm="syz.3.661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cd44ccda9 code=0x7ffc0000 [ 95.928647][ T29] audit: type=1326 audit(1738465746.133:5802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5240 comm="syz.3.661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cd44ccda9 code=0x7ffc0000 [ 95.952077][ T29] audit: type=1326 audit(1738465746.133:5803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5240 comm="syz.3.661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=194 compat=0 ip=0x7f4cd44ccda9 code=0x7ffc0000 [ 95.975715][ T29] audit: type=1326 audit(1738465746.133:5804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5240 comm="syz.3.661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cd44ccda9 code=0x7ffc0000 [ 96.053671][ T5250] loop0: detected capacity change from 0 to 1024 [ 96.162617][ T5252] loop4: detected capacity change from 0 to 512 [ 96.328863][ T5250] netlink: 'syz.0.665': attribute type 7 has an invalid length. [ 96.377027][ T5250] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 96.528550][ T5268] loop4: detected capacity change from 0 to 512 [ 96.546451][ T5265] EXT4-fs (loop0): Delayed block allocation failed for inode 20 at logical offset 0 with max blocks 1168 with error 28 [ 96.559047][ T5265] EXT4-fs (loop0): This should not happen!! Data will be lost [ 96.559047][ T5265] [ 96.568738][ T5265] EXT4-fs (loop0): Total free blocks count 0 [ 96.574840][ T5265] EXT4-fs (loop0): Free/Dirty block details [ 96.580744][ T5265] EXT4-fs (loop0): free_blocks=68451041280 [ 96.586596][ T5265] EXT4-fs (loop0): dirty_blocks=1184 [ 96.591903][ T5265] EXT4-fs (loop0): Block reservation details [ 96.597975][ T5265] EXT4-fs (loop0): i_reserved_data_blocks=74 [ 96.831131][ T5272] FAULT_INJECTION: forcing a failure. [ 96.831131][ T5272] name failslab, interval 1, probability 0, space 0, times 1 [ 96.844427][ T5272] CPU: 0 UID: 0 PID: 5272 Comm: syz.4.673 Not tainted 6.13.0-syzkaller-09998-gcabb4685d57e #0 [ 96.844485][ T5272] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 96.844502][ T5272] Call Trace: [ 96.844509][ T5272] [ 96.844518][ T5272] dump_stack_lvl+0xf2/0x150 [ 96.844548][ T5272] dump_stack+0x15/0x1a [ 96.844582][ T5272] should_fail_ex+0x24a/0x260 [ 96.844613][ T5272] should_failslab+0x8f/0xb0 [ 96.844709][ T5272] kmem_cache_alloc_noprof+0x52/0x320 [ 96.844788][ T5272] ? audit_log_start+0x34c/0x6b0 [ 96.844832][ T5272] audit_log_start+0x34c/0x6b0 [ 96.844861][ T5272] ? kmem_cache_free+0xdc/0x2d0 [ 96.844899][ T5272] audit_seccomp+0x4b/0x130 [ 96.844965][ T5272] __seccomp_filter+0x6fa/0x1180 [ 96.844987][ T5272] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 96.845013][ T5272] ? vfs_write+0x644/0x920 [ 96.845039][ T5272] __secure_computing+0x9f/0x1c0 [ 96.845062][ T5272] syscall_trace_enter+0xd1/0x1f0 [ 96.845115][ T5272] ? fpregs_assert_state_consistent+0x83/0xa0 [ 96.845150][ T5272] do_syscall_64+0xaa/0x1c0 [ 96.845175][ T5272] ? clear_bhb_loop+0x55/0xb0 [ 96.845207][ T5272] ? clear_bhb_loop+0x55/0xb0 [ 96.845233][ T5272] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.845265][ T5272] RIP: 0033:0x7f38adfab7bc [ 96.845285][ T5272] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 96.845303][ T5272] RSP: 002b:00007f38ac611030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 96.845398][ T5272] RAX: ffffffffffffffda RBX: 00007f38ae1c5fa0 RCX: 00007f38adfab7bc [ 96.845410][ T5272] RDX: 000000000000000f RSI: 00007f38ac6110a0 RDI: 0000000000000006 [ 96.845422][ T5272] RBP: 00007f38ac611090 R08: 0000000000000000 R09: 0000000000000000 [ 96.845434][ T5272] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 96.845462][ T5272] R13: 0000000000000000 R14: 00007f38ae1c5fa0 R15: 00007ffe283cd568 [ 96.845479][ T5272] [ 97.065607][ T398] EXT4-fs (loop0): Delayed block allocation failed for inode 20 at logical offset 0 with max blocks 4 with error 28 [ 97.078675][ T398] EXT4-fs (loop0): This should not happen!! Data will be lost [ 97.078675][ T398] [ 97.189780][ T5275] loop0: detected capacity change from 0 to 1024 [ 97.217914][ T5275] EXT4-fs: Ignoring removed orlov option [ 97.502463][ T5284] FAULT_INJECTION: forcing a failure. [ 97.502463][ T5284] name failslab, interval 1, probability 0, space 0, times 0 [ 97.515653][ T5284] CPU: 0 UID: 0 PID: 5284 Comm: syz.1.677 Not tainted 6.13.0-syzkaller-09998-gcabb4685d57e #0 [ 97.515681][ T5284] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 97.515732][ T5284] Call Trace: [ 97.515746][ T5284] [ 97.515755][ T5284] dump_stack_lvl+0xf2/0x150 [ 97.515786][ T5284] dump_stack+0x15/0x1a [ 97.515810][ T5284] should_fail_ex+0x24a/0x260 [ 97.515849][ T5284] should_failslab+0x8f/0xb0 [ 97.515912][ T5284] __kmalloc_noprof+0xab/0x3f0 [ 97.515947][ T5284] ? security_perf_event_alloc+0x45/0x120 [ 97.515975][ T5284] security_perf_event_alloc+0x45/0x120 [ 97.516016][ T5284] perf_event_alloc+0x10eb/0x12e0 [ 97.516101][ T5284] inherit_event+0x7e/0x780 [ 97.516133][ T5284] ? __kmalloc_cache_noprof+0x186/0x320 [ 97.516248][ T5284] inherit_task_group+0x26b/0x6a0 [ 97.516311][ T5284] perf_event_init_task+0x242/0x480 [ 97.516351][ T5284] copy_process+0xbbf/0x1fb0 [ 97.516425][ T5284] ? 0xffffffff81000000 [ 97.516444][ T5284] kernel_clone+0x167/0x5e0 [ 97.516474][ T5284] ? vfs_write+0x644/0x920 [ 97.516500][ T5284] __x64_sys_clone+0xe8/0x120 [ 97.516562][ T5284] x64_sys_call+0x2d7e/0x2dc0 [ 97.516587][ T5284] do_syscall_64+0xc9/0x1c0 [ 97.516674][ T5284] ? clear_bhb_loop+0x55/0xb0 [ 97.516701][ T5284] ? clear_bhb_loop+0x55/0xb0 [ 97.516791][ T5284] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.516899][ T5284] RIP: 0033:0x7f6fe86dcda9 [ 97.516916][ T5284] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 97.516936][ T5284] RSP: 002b:00007f6fe6d40fe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 97.517034][ T5284] RAX: ffffffffffffffda RBX: 00007f6fe88f5fa0 RCX: 00007f6fe86dcda9 [ 97.517048][ T5284] RDX: 0000000000000000 RSI: 0000000000009000 RDI: 0000000004021400 [ 97.517062][ T5284] RBP: 00007f6fe6d41090 R08: 0000000000000000 R09: 0000000000000000 [ 97.517075][ T5284] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 97.517088][ T5284] R13: 0000000000000000 R14: 00007f6fe88f5fa0 R15: 00007ffe2d625408 [ 97.517108][ T5284] [ 98.045023][ T5293] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.057211][ T5294] FAULT_INJECTION: forcing a failure. [ 98.057211][ T5294] name failslab, interval 1, probability 0, space 0, times 0 [ 98.070169][ T5294] CPU: 1 UID: 0 PID: 5294 Comm: syz.1.680 Not tainted 6.13.0-syzkaller-09998-gcabb4685d57e #0 [ 98.070235][ T5294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 98.070249][ T5294] Call Trace: [ 98.070257][ T5294] [ 98.070265][ T5294] dump_stack_lvl+0xf2/0x150 [ 98.070345][ T5294] dump_stack+0x15/0x1a [ 98.070371][ T5294] should_fail_ex+0x24a/0x260 [ 98.070411][ T5294] ? alloc_fs_context+0x44/0x4e0 [ 98.070567][ T5294] should_failslab+0x8f/0xb0 [ 98.070595][ T5294] __kmalloc_cache_noprof+0x4e/0x320 [ 98.070638][ T5294] alloc_fs_context+0x44/0x4e0 [ 98.070731][ T5294] ? strncmp+0x34/0x70 [ 98.070760][ T5294] fs_context_for_mount+0x21/0x30 [ 98.070783][ T5294] do_new_mount+0xf3/0x690 [ 98.070853][ T5294] path_mount+0x49b/0xb30 [ 98.070884][ T5294] __se_sys_mount+0x27f/0x2d0 [ 98.070911][ T5294] ? fput+0x1c4/0x200 [ 98.070950][ T5294] __x64_sys_mount+0x67/0x80 [ 98.071028][ T5294] x64_sys_call+0x2c84/0x2dc0 [ 98.071060][ T5294] do_syscall_64+0xc9/0x1c0 [ 98.071086][ T5294] ? clear_bhb_loop+0x55/0xb0 [ 98.071115][ T5294] ? clear_bhb_loop+0x55/0xb0 [ 98.071162][ T5294] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.071192][ T5294] RIP: 0033:0x7f6fe86dcda9 [ 98.071208][ T5294] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 98.071229][ T5294] RSP: 002b:00007f6fe6d41038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 98.071250][ T5294] RAX: ffffffffffffffda RBX: 00007f6fe88f5fa0 RCX: 00007f6fe86dcda9 [ 98.071263][ T5294] RDX: 0000000020000080 RSI: 0000000020000000 RDI: 0000000000000000 [ 98.071286][ T5294] RBP: 00007f6fe6d41090 R08: 0000000020000500 R09: 0000000000000000 [ 98.071299][ T5294] R10: 0000000001000000 R11: 0000000000000246 R12: 0000000000000001 [ 98.071313][ T5294] R13: 0000000000000001 R14: 00007f6fe88f5fa0 R15: 00007ffe2d625408 [ 98.071333][ T5294] [ 98.107980][ C0] hrtimer: interrupt took 30945 ns [ 98.291610][ T5296] loop1: detected capacity change from 0 to 512 [ 98.306727][ T5296] EXT4-fs error (device loop1): ext4_expand_extra_isize_ea:2813: inode #11: comm syz.1.682: corrupted xattr block 95: invalid header [ 98.335842][ T5296] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.682: bg 0: block 7: invalid block bitmap [ 98.354224][ T5296] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 98.364452][ T5293] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.374426][ T5296] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2977: inode #11: comm syz.1.682: corrupted xattr block 95: invalid header [ 98.388328][ T5296] EXT4-fs warning (device loop1): ext4_evict_inode:276: xattr delete (err -117) [ 98.405440][ T5296] EXT4-fs (loop1): 1 orphan inode deleted [ 98.416930][ T5303] loop0: detected capacity change from 0 to 1024 [ 98.451090][ T5303] netlink: 'syz.0.684': attribute type 7 has an invalid length. [ 98.465869][ T5293] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.506883][ T5293] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.599638][ T5293] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.649228][ T5293] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.653236][ T5303] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 98.689556][ T5316] FAULT_INJECTION: forcing a failure. [ 98.689556][ T5316] name failslab, interval 1, probability 0, space 0, times 0 [ 98.698607][ T5293] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.703283][ T5316] CPU: 1 UID: 0 PID: 5316 Comm: syz.1.687 Not tainted 6.13.0-syzkaller-09998-gcabb4685d57e #0 [ 98.703315][ T5316] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 98.703390][ T5316] Call Trace: [ 98.703398][ T5316] [ 98.703407][ T5316] dump_stack_lvl+0xf2/0x150 [ 98.703441][ T5316] dump_stack+0x15/0x1a [ 98.703467][ T5316] should_fail_ex+0x24a/0x260 [ 98.703508][ T5316] should_failslab+0x8f/0xb0 [ 98.703619][ T5316] kmem_cache_alloc_node_noprof+0x59/0x320 [ 98.703660][ T5316] ? __alloc_skb+0x10b/0x310 [ 98.703736][ T5316] ? __alloc_skb+0x1b5/0x310 [ 98.703814][ T5316] __alloc_skb+0x10b/0x310 [ 98.703841][ T5316] ? ip_generic_getfrag+0x138/0x1a0 [ 98.703867][ T5316] __ip_append_data+0x19f0/0x24c0 [ 98.703904][ T5316] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 98.703994][ T5316] ip_make_skb+0x13f/0x2c0 [ 98.704017][ T5316] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 98.704122][ T5316] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 98.704145][ T5316] udp_sendmsg+0x1244/0x1310 [ 98.704186][ T5316] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 98.704223][ T5316] udpv6_sendmsg+0x789/0x15b0 [ 98.704251][ T5316] ? __rcu_read_unlock+0x4e/0x70 [ 98.704326][ T5316] ? __rcu_read_unlock+0x4e/0x70 [ 98.704364][ T5316] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 98.704400][ T5316] inet6_sendmsg+0xaf/0xd0 [ 98.704545][ T5316] __sock_sendmsg+0x8b/0x180 [ 98.704569][ T5316] ____sys_sendmsg+0x312/0x410 [ 98.704636][ T5316] __sys_sendmmsg+0x227/0x4b0 [ 98.704692][ T5316] __x64_sys_sendmmsg+0x57/0x70 [ 98.704793][ T5316] x64_sys_call+0x29aa/0x2dc0 [ 98.704867][ T5316] do_syscall_64+0xc9/0x1c0 [ 98.704901][ T5316] ? clear_bhb_loop+0x55/0xb0 [ 98.704995][ T5316] ? clear_bhb_loop+0x55/0xb0 [ 98.705028][ T5316] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.705184][ T5316] RIP: 0033:0x7f6fe86dcda9 [ 98.705203][ T5316] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 98.705225][ T5316] RSP: 002b:00007f6fe6d41038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 98.705269][ T5316] RAX: ffffffffffffffda RBX: 00007f6fe88f5fa0 RCX: 00007f6fe86dcda9 [ 98.705285][ T5316] RDX: 0400000000000172 RSI: 0000000020003cc0 RDI: 0000000000000003 [ 98.705300][ T5316] RBP: 00007f6fe6d41090 R08: 0000000000000000 R09: 0000000000000000 [ 98.705314][ T5316] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 98.705328][ T5316] R13: 0000000000000000 R14: 00007f6fe88f5fa0 R15: 00007ffe2d625408 [ 98.705350][ T5316] [ 98.731375][ T5303] EXT4-fs (loop0): Delayed block allocation failed for inode 20 at logical offset 0 with max blocks 1816 with error 28 [ 98.745285][ T5293] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.747111][ T5303] EXT4-fs (loop0): This should not happen!! Data will be lost [ 98.747111][ T5303] [ 98.872843][ T5320] loop3: detected capacity change from 0 to 1024 [ 98.877575][ T5303] EXT4-fs (loop0): Total free blocks count 0 [ 98.877676][ T5303] EXT4-fs (loop0): Free/Dirty block details [ 98.877691][ T5303] EXT4-fs (loop0): free_blocks=68451041280 [ 98.877706][ T5303] EXT4-fs (loop0): dirty_blocks=1824 [ 98.877718][ T5303] EXT4-fs (loop0): Block reservation details [ 98.877730][ T5303] EXT4-fs (loop0): i_reserved_data_blocks=114 [ 99.082654][ T5320] netlink: 'syz.3.685': attribute type 7 has an invalid length. [ 99.103639][ T28] EXT4-fs (loop0): Delayed block allocation failed for inode 20 at logical offset 0 with max blocks 4 with error 28 [ 99.115910][ T28] EXT4-fs (loop0): This should not happen!! Data will be lost [ 99.115910][ T28] [ 99.203796][ T5336] loop0: detected capacity change from 0 to 1024 [ 99.215112][ T5336] EXT4-fs: Ignoring removed orlov option [ 99.281141][ T5320] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 99.296677][ T5320] EXT4-fs (loop3): Delayed block allocation failed for inode 20 at logical offset 0 with max blocks 2048 with error 28 [ 99.309264][ T5320] EXT4-fs (loop3): This should not happen!! Data will be lost [ 99.309264][ T5320] [ 99.319312][ T5320] EXT4-fs (loop3): Total free blocks count 0 [ 99.325433][ T5320] EXT4-fs (loop3): Free/Dirty block details [ 99.331796][ T5320] EXT4-fs (loop3): free_blocks=68451041280 [ 99.338049][ T5320] EXT4-fs (loop3): dirty_blocks=3072 [ 99.343361][ T5320] EXT4-fs (loop3): Block reservation details [ 99.349372][ T5320] EXT4-fs (loop3): i_reserved_data_blocks=192 [ 99.359174][ T5342] usb usb1: usbfs: interface 0 claimed by hub while 'syz.1.695' sets config #5 [ 99.443048][ T4690] EXT4-fs (loop3): Delayed block allocation failed for inode 20 at logical offset 0 with max blocks 4 with error 28 [ 99.455346][ T4690] EXT4-fs (loop3): This should not happen!! Data will be lost [ 99.455346][ T4690] [ 99.471662][ T5352] can0: slcan on ttyS3. [ 99.516012][ T5351] can0 (unregistered): slcan off ttyS3. [ 99.744365][ T5363] loop4: detected capacity change from 0 to 1024 [ 99.782969][ T5365] loop1: detected capacity change from 0 to 128 [ 99.798883][ T5363] netlink: 'syz.4.702': attribute type 7 has an invalid length. [ 99.815561][ T5365] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 99.974889][ T5365] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 100.041381][ T5361] FAULT_INJECTION: forcing a failure. [ 100.041381][ T5361] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 100.054477][ T5361] CPU: 0 UID: 0 PID: 5361 Comm: syz.1.701 Not tainted 6.13.0-syzkaller-09998-gcabb4685d57e #0 [ 100.054502][ T5361] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 100.054515][ T5361] Call Trace: [ 100.054521][ T5361] [ 100.054529][ T5361] dump_stack_lvl+0xf2/0x150 [ 100.054592][ T5361] dump_stack+0x15/0x1a [ 100.054686][ T5361] should_fail_ex+0x24a/0x260 [ 100.054719][ T5361] should_fail+0xb/0x10 [ 100.054748][ T5361] should_fail_usercopy+0x1a/0x20 [ 100.054767][ T5361] strncpy_from_user+0x25/0x210 [ 100.054794][ T5361] ? kmem_cache_alloc_noprof+0x18e/0x320 [ 100.054934][ T5361] ? getname_flags+0x81/0x3b0 [ 100.054965][ T5361] getname_flags+0xb0/0x3b0 [ 100.055032][ T5361] __x64_sys_mkdirat+0x41/0x60 [ 100.055054][ T5361] x64_sys_call+0x1b6f/0x2dc0 [ 100.055081][ T5361] do_syscall_64+0xc9/0x1c0 [ 100.055137][ T5361] ? clear_bhb_loop+0x55/0xb0 [ 100.055160][ T5361] ? clear_bhb_loop+0x55/0xb0 [ 100.055196][ T5361] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.055221][ T5361] RIP: 0033:0x7f6fe86dcda9 [ 100.055236][ T5361] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 100.055255][ T5361] RSP: 002b:00007f6fe6d41038 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 100.055274][ T5361] RAX: ffffffffffffffda RBX: 00007f6fe88f5fa0 RCX: 00007f6fe86dcda9 [ 100.055347][ T5361] RDX: 00000000000001ff RSI: 0000000020000000 RDI: ffffffffffffff9c [ 100.055360][ T5361] RBP: 00007f6fe6d41090 R08: 0000000000000000 R09: 0000000000000000 [ 100.055372][ T5361] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 100.055384][ T5361] R13: 0000000000000000 R14: 00007f6fe88f5fa0 R15: 00007ffe2d625408 [ 100.055399][ T5361] [ 100.255674][ T5370] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 100.287801][ T5370] EXT4-fs (loop4): Delayed block allocation failed for inode 20 at logical offset 0 with max blocks 2048 with error 28 [ 100.300440][ T5370] EXT4-fs (loop4): This should not happen!! Data will be lost [ 100.300440][ T5370] [ 100.310122][ T5370] EXT4-fs (loop4): Total free blocks count 0 [ 100.316178][ T5370] EXT4-fs (loop4): Free/Dirty block details [ 100.322184][ T5370] EXT4-fs (loop4): free_blocks=68451041280 [ 100.328057][ T5370] EXT4-fs (loop4): dirty_blocks=7232 [ 100.333362][ T5370] EXT4-fs (loop4): Block reservation details [ 100.339460][ T5370] EXT4-fs (loop4): i_reserved_data_blocks=452 [ 100.350789][ T5372] loop2: detected capacity change from 0 to 512 [ 100.357327][ T5372] EXT4-fs: Ignoring removed oldalloc option [ 100.403716][ T5372] EXT4-fs error (device loop2): ext4_xattr_inode_iget:436: comm syz.2.705: Parent and EA inode have the same ino 15 [ 100.430262][ T5372] EXT4-fs (loop2): Remounting filesystem read-only [ 100.436870][ T5372] EXT4-fs warning (device loop2): ext4_evict_inode:259: couldn't mark inode dirty (err -5) [ 100.466826][ T5386] FAULT_INJECTION: forcing a failure. [ 100.466826][ T5386] name failslab, interval 1, probability 0, space 0, times 0 [ 100.479685][ T5386] CPU: 1 UID: 0 PID: 5386 Comm: syz.1.709 Not tainted 6.13.0-syzkaller-09998-gcabb4685d57e #0 [ 100.479714][ T5386] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 100.479726][ T5386] Call Trace: [ 100.479732][ T5386] [ 100.479739][ T5386] dump_stack_lvl+0xf2/0x150 [ 100.479799][ T5386] dump_stack+0x15/0x1a [ 100.479825][ T5386] should_fail_ex+0x24a/0x260 [ 100.479892][ T5386] should_failslab+0x8f/0xb0 [ 100.479963][ T5386] kmem_cache_alloc_lru_noprof+0x57/0x320 [ 100.480003][ T5386] ? proc_alloc_inode+0x34/0x90 [ 100.480036][ T5386] ? __d_lookup_rcu+0x25b/0x2a0 [ 100.480059][ T5386] proc_alloc_inode+0x34/0x90 [ 100.480126][ T5386] ? __pfx_proc_alloc_inode+0x10/0x10 [ 100.480152][ T5386] alloc_inode+0x3c/0x160 [ 100.480210][ T5386] new_inode+0x1e/0x100 [ 100.480244][ T5386] proc_pid_make_inode+0x1d/0xd0 [ 100.480282][ T5386] proc_pident_instantiate+0x44/0x180 [ 100.480320][ T5386] proc_pident_lookup+0x112/0x190 [ 100.480373][ T5386] proc_tid_base_lookup+0x2b/0x40 [ 100.480402][ T5386] __lookup_slow+0x18a/0x250 [ 100.480485][ T5386] lookup_slow+0x3c/0x60 [ 100.480524][ T5386] link_path_walk+0x668/0x830 [ 100.480651][ T5386] path_openat+0x1af/0x1fc0 [ 100.480744][ T5386] ? _parse_integer_limit+0x167/0x180 [ 100.480788][ T5386] ? kstrtouint_from_user+0xb0/0xe0 [ 100.480827][ T5386] do_filp_open+0x107/0x230 [ 100.480848][ T5386] ? __pfx_kfree_link+0x10/0x10 [ 100.480883][ T5386] do_sys_openat2+0xab/0x120 [ 100.480991][ T5386] __x64_sys_openat+0xf3/0x120 [ 100.481030][ T5386] x64_sys_call+0x2b30/0x2dc0 [ 100.481056][ T5386] do_syscall_64+0xc9/0x1c0 [ 100.481084][ T5386] ? clear_bhb_loop+0x55/0xb0 [ 100.481183][ T5386] ? clear_bhb_loop+0x55/0xb0 [ 100.481215][ T5386] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.481247][ T5386] RIP: 0033:0x7f6fe86db710 [ 100.481262][ T5386] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 100.481282][ T5386] RSP: 002b:00007f6fe6d40f10 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 100.481306][ T5386] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f6fe86db710 [ 100.481318][ T5386] RDX: 0000000000000002 RSI: 00007f6fe6d40fa0 RDI: 00000000ffffff9c [ 100.481330][ T5386] RBP: 00007f6fe6d40fa0 R08: 0000000000000000 R09: 0000000000000000 [ 100.481341][ T5386] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 100.481352][ T5386] R13: 0000000000000001 R14: 00007f6fe88f5fa0 R15: 00007ffe2d625408 [ 100.481457][ T5386] [ 100.481687][ T5372] EXT4-fs (loop2): 1 orphan inode deleted [ 100.743249][ T4690] EXT4-fs (loop4): Delayed block allocation failed for inode 20 at logical offset 2052 with max blocks 2048 with error 28 [ 100.756035][ T4690] EXT4-fs (loop4): This should not happen!! Data will be lost [ 100.756035][ T4690] [ 100.769572][ T5372] EXT4-fs mount: 46 callbacks suppressed [ 100.769585][ T5372] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 100.794315][ T5372] SELinux: (dev loop2, type ext4) getxattr errno 5 [ 100.803118][ T5372] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.857611][ T29] kauditd_printk_skb: 374 callbacks suppressed [ 100.857628][ T29] audit: type=1400 audit(1738465751.393:6177): avc: denied { setopt } for pid=5392 comm="syz.1.713" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 100.860328][ T5393] loop1: detected capacity change from 0 to 512 [ 100.938361][ T5393] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.713: bg 0: block 248: padding at end of block bitmap is not set [ 100.954237][ T5393] Quota error (device loop1): write_blk: dquota write failed [ 100.961730][ T5393] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 100.993461][ T5393] EXT4-fs error (device loop1): ext4_acquire_dquot:6927: comm syz.1.713: Failed to acquire dquot type 1 [ 101.032555][ T5393] EXT4-fs (loop1): 1 truncate cleaned up [ 101.050627][ T5393] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.149577][ T5393] ext4 filesystem being mounted at /142/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 101.226731][ T29] audit: type=1400 audit(1738465751.763:6178): avc: denied { create } for pid=5399 comm="syz.2.714" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 101.246633][ T5393] syz.1.713 (5393) used greatest stack depth: 9272 bytes left [ 101.258014][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.384560][ T5414] loop2: detected capacity change from 0 to 1024 [ 101.420544][ T5414] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.464252][ T5414] netlink: 'syz.2.720': attribute type 7 has an invalid length. [ 101.482541][ T29] audit: type=1326 audit(1738465752.013:6179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5413 comm="syz.2.720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ee5dbcda9 code=0x7ffc0000 [ 101.512510][ T29] audit: type=1326 audit(1738465752.043:6180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5413 comm="syz.2.720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f9ee5dbcda9 code=0x7ffc0000 [ 101.536724][ T29] audit: type=1326 audit(1738465752.043:6181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5413 comm="syz.2.720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f9ee5dbcde3 code=0x7ffc0000 [ 101.559933][ T29] audit: type=1326 audit(1738465752.043:6182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5413 comm="syz.2.720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f9ee5dbb85f code=0x7ffc0000 [ 101.583339][ T29] audit: type=1326 audit(1738465752.043:6183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5413 comm="syz.2.720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f9ee5dbce37 code=0x7ffc0000 [ 101.607072][ T29] audit: type=1326 audit(1738465752.043:6184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5413 comm="syz.2.720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9ee5dbb710 code=0x7ffc0000 [ 101.707306][ T5414] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 101.725051][ T5414] EXT4-fs (loop2): Delayed block allocation failed for inode 20 at logical offset 0 with max blocks 2048 with error 28 [ 101.737837][ T5414] EXT4-fs (loop2): This should not happen!! Data will be lost [ 101.737837][ T5414] [ 101.747513][ T5414] EXT4-fs (loop2): Total free blocks count 0 [ 101.753496][ T5414] EXT4-fs (loop2): Free/Dirty block details [ 101.759481][ T5414] EXT4-fs (loop2): free_blocks=68451041280 [ 101.765322][ T5414] EXT4-fs (loop2): dirty_blocks=3232 [ 101.771130][ T5414] EXT4-fs (loop2): Block reservation details [ 101.777479][ T5414] EXT4-fs (loop2): i_reserved_data_blocks=202 [ 101.805052][ T5430] loop4: detected capacity change from 0 to 1024 [ 101.843259][ T4690] EXT4-fs (loop2): Delayed block allocation failed for inode 20 at logical offset 0 with max blocks 4 with error 28 [ 101.870552][ T5430] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.888768][ T5430] netlink: 'syz.4.725': attribute type 7 has an invalid length. [ 101.906588][ T5430] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 102.002232][ T5443] EXT4-fs (loop4): Delayed block allocation failed for inode 20 at logical offset 0 with max blocks 1852 with error 28 [ 102.015005][ T5443] EXT4-fs (loop4): This should not happen!! Data will be lost [ 102.015005][ T5443] [ 102.025096][ T5443] EXT4-fs (loop4): Total free blocks count 0 [ 102.031135][ T5443] EXT4-fs (loop4): Free/Dirty block details [ 102.037108][ T5443] EXT4-fs (loop4): free_blocks=68451041280 [ 102.043020][ T5443] EXT4-fs (loop4): dirty_blocks=1856 [ 102.048421][ T5443] EXT4-fs (loop4): Block reservation details [ 102.054462][ T5443] EXT4-fs (loop4): i_reserved_data_blocks=116 [ 102.119677][ T36] EXT4-fs (loop4): Delayed block allocation failed for inode 20 at logical offset 0 with max blocks 4 with error 28 [ 102.236478][ T5459] netlink: 96 bytes leftover after parsing attributes in process `syz.4.731'. [ 102.246460][ T5459] all: renamed from bridge_slave_0 (while UP) [ 102.263528][ T5459] netlink: 32 bytes leftover after parsing attributes in process `syz.4.731'. [ 102.346084][ T5469] loop1: detected capacity change from 0 to 1024 [ 102.389440][ T5469] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 102.406310][ T5469] netlink: 'syz.1.737': attribute type 7 has an invalid length. [ 102.518665][ T5469] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 102.534881][ T5469] EXT4-fs (loop1): Delayed block allocation failed for inode 20 at logical offset 0 with max blocks 1684 with error 28 [ 102.547400][ T5469] EXT4-fs (loop1): This should not happen!! Data will be lost [ 102.547400][ T5469] [ 102.557089][ T5469] EXT4-fs (loop1): Total free blocks count 0 [ 102.563074][ T5469] EXT4-fs (loop1): Free/Dirty block details [ 102.569008][ T5469] EXT4-fs (loop1): free_blocks=68451041280 [ 102.574963][ T5469] EXT4-fs (loop1): dirty_blocks=1696 [ 102.580271][ T5469] EXT4-fs (loop1): Block reservation details [ 102.586372][ T5469] EXT4-fs (loop1): i_reserved_data_blocks=106 [ 102.616833][ T5479] loop2: detected capacity change from 0 to 1024 [ 102.656643][ T5479] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 102.687055][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.749391][ T5485] loop0: detected capacity change from 0 to 512 [ 102.760915][ T4690] EXT4-fs (loop1): Delayed block allocation failed for inode 20 at logical offset 0 with max blocks 4 with error 28 [ 102.885614][ T5495] FAULT_INJECTION: forcing a failure. [ 102.885614][ T5495] name failslab, interval 1, probability 0, space 0, times 0 [ 102.898363][ T5495] CPU: 0 UID: 0 PID: 5495 Comm: syz.2.746 Not tainted 6.13.0-syzkaller-09998-gcabb4685d57e #0 [ 102.898387][ T5495] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 102.898399][ T5495] Call Trace: [ 102.898406][ T5495] [ 102.898414][ T5495] dump_stack_lvl+0xf2/0x150 [ 102.898446][ T5495] dump_stack+0x15/0x1a [ 102.898471][ T5495] should_fail_ex+0x24a/0x260 [ 102.898554][ T5495] should_failslab+0x8f/0xb0 [ 102.898582][ T5495] kmem_cache_alloc_node_noprof+0x59/0x320 [ 102.898615][ T5495] ? __alloc_skb+0x10b/0x310 [ 102.898643][ T5495] __alloc_skb+0x10b/0x310 [ 102.898686][ T5495] netlink_alloc_large_skb+0xad/0xe0 [ 102.898822][ T5495] netlink_sendmsg+0x3b4/0x6e0 [ 102.898914][ T5495] ? __pfx_netlink_sendmsg+0x10/0x10 [ 102.898950][ T5495] __sock_sendmsg+0x140/0x180 [ 102.898969][ T5495] ____sys_sendmsg+0x312/0x410 [ 102.899059][ T5495] __sys_sendmsg+0x19d/0x230 [ 102.899165][ T5495] __x64_sys_sendmsg+0x46/0x50 [ 102.899194][ T5495] x64_sys_call+0x2734/0x2dc0 [ 102.899220][ T5495] do_syscall_64+0xc9/0x1c0 [ 102.899294][ T5495] ? clear_bhb_loop+0x55/0xb0 [ 102.899323][ T5495] ? clear_bhb_loop+0x55/0xb0 [ 102.899353][ T5495] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.899383][ T5495] RIP: 0033:0x7f9ee5dbcda9 [ 102.899476][ T5495] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 102.899494][ T5495] RSP: 002b:00007f9ee4427038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 102.899512][ T5495] RAX: ffffffffffffffda RBX: 00007f9ee5fd5fa0 RCX: 00007f9ee5dbcda9 [ 102.899528][ T5495] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000007 [ 102.899541][ T5495] RBP: 00007f9ee4427090 R08: 0000000000000000 R09: 0000000000000000 [ 102.899555][ T5495] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 102.899569][ T5495] R13: 0000000000000000 R14: 00007f9ee5fd5fa0 R15: 00007ffda2e0fa98 [ 102.899591][ T5495] [ 103.158989][ T5500] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.217600][ T5500] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.285203][ T5500] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.318097][ T5500] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.389222][ T5506] loop3: detected capacity change from 0 to 512 [ 103.389299][ T5500] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.421096][ T5500] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.436480][ T5500] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.448322][ T5500] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.550971][ T5511] FAULT_INJECTION: forcing a failure. [ 103.550971][ T5511] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 103.564101][ T5511] CPU: 0 UID: 0 PID: 5511 Comm: syz.1.752 Not tainted 6.13.0-syzkaller-09998-gcabb4685d57e #0 [ 103.564122][ T5511] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 103.564134][ T5511] Call Trace: [ 103.564140][ T5511] [ 103.564146][ T5511] dump_stack_lvl+0xf2/0x150 [ 103.564171][ T5511] dump_stack+0x15/0x1a [ 103.564242][ T5511] should_fail_ex+0x24a/0x260 [ 103.564272][ T5511] should_fail+0xb/0x10 [ 103.564298][ T5511] should_fail_usercopy+0x1a/0x20 [ 103.564314][ T5511] _copy_from_iter+0xd5/0xd00 [ 103.564400][ T5511] ? alloc_pages_mpol+0x208/0x260 [ 103.564433][ T5511] copy_page_from_iter+0x14f/0x280 [ 103.564453][ T5511] tun_get_user+0x68b/0x25c0 [ 103.564518][ T5511] ? _parse_integer+0x27/0x30 [ 103.564571][ T5511] ? ref_tracker_alloc+0x1f5/0x2f0 [ 103.564630][ T5511] tun_chr_write_iter+0x188/0x240 [ 103.564660][ T5511] vfs_write+0x77b/0x920 [ 103.564679][ T5511] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 103.564716][ T5511] ksys_write+0xe8/0x1b0 [ 103.564747][ T5511] __x64_sys_write+0x42/0x50 [ 103.564766][ T5511] x64_sys_call+0x287e/0x2dc0 [ 103.564827][ T5511] do_syscall_64+0xc9/0x1c0 [ 103.564849][ T5511] ? clear_bhb_loop+0x55/0xb0 [ 103.564873][ T5511] ? clear_bhb_loop+0x55/0xb0 [ 103.564896][ T5511] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.564940][ T5511] RIP: 0033:0x7f6fe86db85f [ 103.564972][ T5511] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 103.564988][ T5511] RSP: 002b:00007f6fe6d41000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 103.565004][ T5511] RAX: ffffffffffffffda RBX: 00007f6fe88f5fa0 RCX: 00007f6fe86db85f [ 103.565015][ T5511] RDX: 0000000000000082 RSI: 0000000020000000 RDI: 00000000000000c8 [ 103.565025][ T5511] RBP: 00007f6fe6d41090 R08: 0000000000000000 R09: 0000000000000000 [ 103.565036][ T5511] R10: 0000000000000082 R11: 0000000000000293 R12: 0000000000000001 [ 103.565046][ T5511] R13: 0000000000000001 R14: 00007f6fe88f5fa0 R15: 00007ffe2d625408 [ 103.565062][ T5511] [ 103.820722][ T5516] loop0: detected capacity change from 0 to 512 [ 103.837677][ T5514] loop2: detected capacity change from 0 to 512 [ 103.844488][ T5514] EXT4-fs: Ignoring removed oldalloc option [ 103.862944][ T5514] EXT4-fs error (device loop2): ext4_xattr_inode_iget:436: comm syz.2.753: Parent and EA inode have the same ino 15 [ 103.886102][ T5514] EXT4-fs (loop2): Remounting filesystem read-only [ 103.892755][ T5514] EXT4-fs warning (device loop2): ext4_evict_inode:259: couldn't mark inode dirty (err -5) [ 103.909987][ T3466] ================================================================== [ 103.910099][ T5514] EXT4-fs (loop2): 1 orphan inode deleted [ 103.918107][ T3466] BUG: KCSAN: data-race in fill_mg_cmtime / shmem_unlink [ 103.918147][ T3466] [ 103.918153][ T3466] write to 0xffff8881042ade04 of 4 bytes by task 3286 on cpu 0: [ 103.918169][ T3466] shmem_unlink+0x13b/0x170 [ 103.918190][ T3466] shmem_rename2+0x1d4/0x2c0 [ 103.918214][ T3466] vfs_rename+0x875/0x9c0 [ 103.918241][ T3466] do_renameat2+0x6a3/0xa70 [ 103.918268][ T3466] __x64_sys_rename+0x58/0x70 [ 103.918295][ T3466] x64_sys_call+0x2b1c/0x2dc0 [ 103.924447][ T5514] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.931127][ T3466] do_syscall_64+0xc9/0x1c0 [ 103.931163][ T3466] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.931197][ T3466] [ 103.931204][ T3466] read to 0xffff8881042ade04 of 4 bytes by task 3466 on cpu 1: [ 103.933583][ T5514] SELinux: (dev loop2, type ext4) getxattr errno 5 [ 103.941147][ T3466] fill_mg_cmtime+0x58/0x280 [ 103.941179][ T3466] generic_fillattr+0x241/0x330 [ 103.941206][ T3466] shmem_getattr+0x17b/0x200 [ 104.021772][ T3466] vfs_statx_path+0x171/0x2d0 [ 104.026464][ T3466] vfs_statx+0xe1/0x170 [ 104.030657][ T3466] __se_sys_newfstatat+0xdc/0x300 [ 104.035724][ T3466] __x64_sys_newfstatat+0x55/0x70 [ 104.040761][ T3466] x64_sys_call+0x236d/0x2dc0 [ 104.045442][ T3466] do_syscall_64+0xc9/0x1c0 [ 104.049943][ T3466] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.055838][ T3466] [ 104.058159][ T3466] value changed: 0x1b4143b2 -> 0x1b435b0a [ 104.063889][ T3466] [ 104.066213][ T3466] Reported by Kernel Concurrency Sanitizer on: [ 104.072362][ T3466] CPU: 1 UID: 0 PID: 3466 Comm: udevd Not tainted 6.13.0-syzkaller-09998-gcabb4685d57e #0 [ 104.082270][ T3466] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 104.092350][ T3466] ================================================================== [ 104.145127][ T5514] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.