last executing test programs: 2.362416668s ago: executing program 2 (id=713): bind$tipc(0xffffffffffffffff, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x0, 0xfffffffd}}, 0x10) r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) bind$tipc(0xffffffffffffffff, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) bind$tipc(r0, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'syz_tun\x00'}) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000400)=[{0x0}], 0x1) syz_clone3(&(0x7f0000000000)={0x285002400, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x46) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x1e, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{}, &(0x7f00000008c0), &(0x7f0000000880)=r2}, 0x20) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f80)=ANY=[@ANYBLOB="140000001000010000000000000000020000000a3c000000120a010100000000000000000200000009000200e30000000000000008000440000000000900010073797a3000000000080003"], 0x64}, 0x1, 0x0, 0x0, 0x800}, 0x0) 2.359004118s ago: executing program 4 (id=714): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000100000000000000000850000007d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kmem_cache_free\x00', r0}, 0x10) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$qrtrtun(r1, &(0x7f0000000280)='\x00N35', 0x4) fallocate(0xffffffffffffffff, 0x1, 0x4000, 0x401000) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)=[0x1], 0x0, 0x0, 0x1}}, 0x40) 2.208300484s ago: executing program 2 (id=717): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000a00)={[{@init_itable_val}, {@resuid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6e}}, {@user_xattr}, {@bh}, {@journal_ioprio}]}, 0x2, 0x44a, &(0x7f0000000c40)="$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") r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x82, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20000000, 0xffffffffffffffff}, 0x0, 0x3, 0x0, 0x2, 0xfff, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000380)=@sack_info={0x0, 0xa8000000, 0x4}, &(0x7f00000003c0)=0xc) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000013000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) r4 = open(&(0x7f0000000000)='./bus\x00', 0x1050c1, 0x170) stat(0x0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000003, 0x50032, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000a40)={[{@nolazytime}, {@lazytime}, {@journal_path={'journal_path', 0x3d, './bus'}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}, {@dax_never}, {@nodiscard}], [{@obj_user={'obj_user', 0x3d, 'nodiscard'}}, {@fsuuid={'fsuuid', 0x3d, {[0x31, 0x32, 0x34, 0x33, 0x32, 0x66, 0x37, 0x62], 0x2d, [0x66, 0x30, 0x65, 0x1], 0x2d, [0x65, 0x33, 0x38, 0x65], 0x2d, [0x33, 0x34, 0x35, 0x35], 0x2d, [0x61, 0x38, 0x64, 0x63, 0x66, 0x64, 0x35, 0x36]}}}, {@fowner_eq}, {@func={'func', 0x3d, 'FILE_MMAP'}}, {@fowner_eq={'fowner', 0x3d, r5}}]}, 0x0, 0x479, &(0x7f0000001300)="$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") socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x4031, r7, 0x180000000) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08d1ca4eb6b8b4889cdd4e786eb807e04eb88b935d785f3d3201c58033"], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x18) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000400), r4) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0180000000000000000001000000000000000b00000000030014"], 0x28}}, 0x40000) 2.192645275s ago: executing program 3 (id=718): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000a00)={[{@init_itable_val}, {@resuid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6e}}, {@user_xattr}, {@bh}, {@journal_ioprio}]}, 0x2, 0x44a, &(0x7f0000000c40)="$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") r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x82, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20000000, 0xffffffffffffffff}, 0x0, 0x3, 0x0, 0x2, 0xfff, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000380)=@sack_info={0x0, 0xa8000000, 0x4}, &(0x7f00000003c0)=0xc) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000013000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) r4 = open(&(0x7f0000000000)='./bus\x00', 0x1050c1, 0x170) stat(0x0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000003, 0x50032, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000a40)={[{@nolazytime}, {@lazytime}, {@journal_path={'journal_path', 0x3d, './bus'}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}, {@dax_never}, {@nodiscard}], [{@obj_user={'obj_user', 0x3d, 'nodiscard'}}, {@fsuuid={'fsuuid', 0x3d, {[0x31, 0x32, 0x34, 0x33, 0x32, 0x66, 0x37, 0x62], 0x2d, [0x66, 0x30, 0x65, 0x1], 0x2d, [0x65, 0x33, 0x38, 0x65], 0x2d, [0x33, 0x34, 0x35, 0x35], 0x2d, [0x61, 0x38, 0x64, 0x63, 0x66, 0x64, 0x35, 0x36]}}}, {@fowner_eq}, {@func={'func', 0x3d, 'FILE_MMAP'}}, {@fowner_eq={'fowner', 0x3d, r5}}]}, 0x0, 0x479, &(0x7f0000001300)="$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") syz_clone(0x26801000, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x4031, r7, 0x180000000) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08d1ca4eb6b8b4889cdd4e786eb807e04eb88b935d785f3d3201c58033"], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x18) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000400), r4) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0180000000000000000001000000000000000b00000000030014"], 0x28}}, 0x40000) 2.188223575s ago: executing program 4 (id=719): arch_prctl$ARCH_GET_MAX_TAG_BITS(0x4003, &(0x7f0000000000)) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000e9000000000000000000"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r3}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_async', 0x42, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f00000004c0)=@nat={'nat\x00', 0x670, 0x5, 0x458, 0xb, 0x0, 0xfeffffff, 0xf0, 0x218, 0x3c0, 0x3c0, 0xffffffff, 0x3c0, 0x3c0, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_bond\x00', 'veth1_to_team\x00', {}, {}, 0x6}, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x2, 0x4}}, @common=@inet=@socket2={{0x28}}]}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0xf0, 0x128, 0x0, {}, [@common=@set={{0x40}}, @common=@set={{0x40}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @broadcast, @remote, @icmp_id}}}}, {{@ip={@loopback, @rand_addr, 0x0, 0x0, 'lo\x00', 'ip6tnl0\x00'}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@ttl={{0x28}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id}}}}, {{@ip={@remote, @broadcast, 0x0, 0x0, 'pim6reg0\x00', 'wlan0\x00'}, 0x0, 0x90, 0xd8, 0x0, {}, [@common=@socket0={{0x20}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv6=@private2, @ipv4=@dev}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4b8) 2.000301194s ago: executing program 0 (id=722): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xfffffeffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x55, 0x1, 0x0, 0x0, 0x0, 0xfffe, 0x10000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_config_ext={0x6, 0xaea}, 0x89df98cc3c8d1657, 0x1, 0xfffffbff, 0x4, 0x1, 0x80000004, 0x5, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffdfffffffffffff, 0xffffffffffffffff, 0x9) mkdir(&(0x7f0000000100)='./bus\x00', 0x262) 1.85116284s ago: executing program 2 (id=723): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2b, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000020000000900010073797a300000000048000000030a01010000000000000000020000000900010073797a30000000000900030073797a3200000000080007006e617400140004800800014000000000080002"], 0xa4}}, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) r5 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r5, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r4, {0x2, 0x0, @loopback}, 0x4}}, 0x2e) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000005c0)=ANY=[@ANYBLOB="140100002900010000000000fcdbdf2503"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) 1.665343628s ago: executing program 0 (id=724): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001680)={{r2}, &(0x7f0000001600), &(0x7f0000001640)='%+9llu \x00'}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, &(0x7f0000000080), &(0x7f0000001540)=""/155}, 0x20) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001300), &(0x7f00000016c0), 0x400, r2}, 0x38) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r0}, &(0x7f00000002c0), &(0x7f0000000300)=r1}, 0x20) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x245ce000) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) set_mempolicy_home_node(&(0x7f0000417000/0x2000)=nil, 0x2000, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000180)=ANY=[@ANYBLOB='-c'], 0x9) pipe(&(0x7f0000000400)) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a0ef010095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000200)='kmem_cache_free\x00', r5}, 0x10) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000700)=@raw={'raw\x00', 0x3c1, 0x3, 0x3d0, 0x210, 0x940c, 0x3002, 0x210, 0x2c0, 0x300, 0x3d8, 0x3d8, 0x300, 0x3d8, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x5, 0x0}, @private2, [0xff000000, 0xff000000, 0xff000000, 0xff000000], [0xff, 0xff000000, 0xffffffff, 0xff], 'veth1_to_team\x00', 'macsec0\x00', {}, {}, 0x62, 0x61, 0x0, 0x8}, 0x0, 0x1c8, 0x210, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x1ffffc, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@unspec=@addrtype1={{0x28}, {0x2, 0x140, 0xc}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x916, {0x7c7a1f6d}}}}, {{@ipv6={@mcast1, @remote, [0xff000000, 0x0, 0xffffffff, 0xffffffff], [0xffffff00, 0x0, 0xff000000, 0xffffff00], 'syzkaller0\x00', 'pimreg0\x00', {0xff}, {0xff}, 0x33, 0x9, 0x4, 0x10}, 0x0, 0xd0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x430) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000200)={'syztnl2\x00', &(0x7f0000000380)={'syztnl0\x00', 0x0, 0x29, 0x2, 0x8, 0x9, 0x41, @local, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x40, 0x40, 0x3, 0xf}}) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000280), &(0x7f0000000440)=0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000700000000000000000000850000002300000095"], &(0x7f0000000540)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) 1.364788431s ago: executing program 3 (id=725): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, 0x0, &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000002c0)='kfree\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x200000, &(0x7f0000001240)={[{@dioread_nolock}, {@norecovery}, {@min_batch_time={'min_batch_time', 0x3d, 0x1}}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@errors_remount}, {@acl}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x343}}, {@jqfmt_vfsold}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@nombcache}], [{@fowner_eq}, {@hash}, {@permit_directio}, {@subj_type={'subj_type', 0x3d, '/)/-:$//('}}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}]}, 0xfd, 0x573, &(0x7f0000000cc0)="$eJzs3V9rW+UfAPDvSZP9636/djCGeiGDXTgZS9fWPxOEzUvR4UDvZ2izMpouo0nHWgduF+7GGxmCiAPxBXjv5fAN+CoGOhgyil6IUDnpSZe1Sf8tNbH5fOBsz5Nzkud58pzvyfOck/QEMLBOpv/kIl6OiK+SiJGWdfnIVp5c3W756e2pdEliZeXj35O4sO61kuz/4SzzUkT8/EXEmdzGcmuLS7OlSqU8n+XH6nM3xmqLS2evzZVmyjPl6xOTk+ffnJx45+23utbW1y//+e1HD98//+Wp5W9+fHzsfhIX42i2Lm1XF4q405o5Wfo7SxXi4roNx7tQWD9Jel0BdmUoi/NCpMeAkRjKoh7Y/z6PiBVgQCXiHwZUcxzQnNt3aR78n/HkvdUJ0Mb251fPjcShxtzoyHLy3Mwone+OdqH8tIyffntwP11i8/MQh7fIA+zInbsRcS6f33j8S7Lj3+6da5w83tz6Mgbt8wd66WE6/knuRGyI/9za+CfajH+G28Tubmwd/7nHXSimo3T8927b8e/aoWt0KMv9rzHmKyRXr1XK5yLi/xFxOgoH0/xm13POLz9a6bSudfyXLmn5zbFgVo/H+YPPP2e6VC+9SJtbPbkb8Urb8W+y1v9Jm/5P34/L2yzjRPnBq53Wbd3+vbXyQ8Rrbfv/2RWtZPPrk2ON/WGsuVds9Me9E790Kr/X7U/7/8jm7R9NWq/X1nZexveH/ip3Wrfb/f9A8kkjfSB77FapXp8fjziQfJgfXv/4xLPnNvPN7dP2nz7VPv432//Tyden22z/veP3Om7aD/0/vaP+33ni0Qeffdep/O31/xuN1Onske0c/7ZbwRd57wAAAAAAAKDf5CLiaCS54lo6lysWV7/fcTyO5CrVWv3M1erC9elo/FZ2NAq55pXukZbvQ4xn34dt5ifW5Scj4lhEfD10uJEvTlUr071uPAAAAAAAAAAAAAAAAAAAAPSJ4Q6//0/9OtTr2gF7rnFjg4O9rgXQC1ve8r8bd3oC+tKW8Q/sWzuPf2cGYL/w+Q+DS/zD4BL/MLi2G/+FkT2uCPCv8/kPg0v8AwAAAAAAAAAAAAAAAAAAAAAAAAAAQFddvnQpXVaWn96eSvPTNxcXZqs3z06Xa7PFuYWp4lR1/kZxplqdqZSLU9W5rV6vUq3eGJ+IhVtj9XKtPlZbXLoyV124Xr9yba40U75SLvhjwwAAAAAAAAAAAAAAAAAAALBBbXFptlSplOclOiYuRF9UYy8buGpXT8/3Syskupro8YEJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFr8EwAA//8DDjNQ") chdir(&(0x7f0000000080)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) 1.127392351s ago: executing program 1 (id=726): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00"/11], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r2 = fsopen(&(0x7f0000000000)='selinuxfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_FLAG(r2, 0x0, &(0x7f0000000040)='ro\x00', 0x0, 0x0) 1.065451424s ago: executing program 1 (id=727): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000a00)={[{@init_itable_val}, {@resuid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6e}}, {@user_xattr}, {@bh}, {@journal_ioprio}]}, 0x2, 0x44a, &(0x7f0000000c40)="$eJzs3M9rHFUcAPDvzGbbpj9MLFrtDzVaxOKPpElr7cGLoOBBQdBDPcYkLaXbRroRbCkaRepRCt7Fo+Bf4EH0IuhJ8Kp3KRTppdXTyuzONJvtbtpNN5nqfj4w2fdm3u573515u2/mZTaAoTWR/UkidkbE7xEx1squLjDRerh5/dLc39cvzSXRaLz9V9Isd+P6pbmiaPG8HUVmJCL9LIn9XeqtX7h4ZrZWWzif56eWzr4/Vb9w8YXTZ2dPLZxaODdz/PjRI9MvHZt5cd2xLbels7hu7Pto8cDe19+98ubciSvv/fxtUsTfEceATKy18elGY8DVlWtXWzoZKbEh9KXS6qZRbfb/sajEys4bi9c+LbVxwIZqNBqNPRHf99i83AD+x5IouwVAOYov+uz8t1giYtvmjUDKde2V1glQFvfNfGltGYk0L1PtOL8dpImIOLH8z1fZEhtzHQIAYJUfsvHP87eN/yIijT1t5R7I51DGI+LBiNgdEcfysdHDEc2yj0TEo33W3zlJcvv4J73a/Zlb+6ypu2z893I+t7V6/FeM/mK8kud2NeOvJidP1xYO5+/JoahuzfLTa9Tx46u/fdFrW/v4L1uy+rPHldmh9OpIR6jzs0uz9xR0m2ufROwb6RZ/cmsmIImIvRGxb511nH72mwO9tvWK/65eeADzTI2vI55p7f/l6Ii/kKw9Pzm1LWoLh6eKo+J2v/x6+a1e9d9T/AOQ7f/tXY//W/GPJ+3ztfX+67j8x+c9z2nuHH/3439L8s6qdR/OLi2dn47YkrzRanT7+pmOcjMr5bP4Dx3s3v93x8o7sT8isoP4sYh4PCKeyNv+ZEQ8FREHe4e/vNZ7cz/s//m+9v9KYkt0rumeqJz56btVlY73E3+2/482U4fyNXfz+Xc37Vrf0QwAAAD/PWlE7IwknbyVTtPJydb/8D8U29PaYn3puZOLH5ybb90jMB7VtLjSNdZ2PXQ6P60v8jMd+SP5deMvK6PN/OTcYm2+7OBhyO3o0f8zf1bKbh2w4dyvBcNL/4fhpf/D8NL/YXh16f+jZbQD2Hzdvv8/LqEdwObr6P+m/WCIOP+H4aX/w/DS/2Eo1UfjzjfJS5SdKH6M4X5pT/3CxUhLqn20649RDGuiulGvXPIHEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwID8GwAA//8I2eNe") r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x82, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20000000, 0xffffffffffffffff}, 0x0, 0x3, 0x0, 0x2, 0xfff, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000380)=@sack_info={0x0, 0xa8000000, 0x4}, &(0x7f00000003c0)=0xc) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000013000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) r4 = open(&(0x7f0000000000)='./bus\x00', 0x1050c1, 0x170) stat(0x0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000a40)={[{@nolazytime}, {@lazytime}, {@journal_path={'journal_path', 0x3d, './bus'}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}, {@dax_never}, {@nodiscard}], [{@obj_user={'obj_user', 0x3d, 'nodiscard'}}, {@fsuuid={'fsuuid', 0x3d, {[0x31, 0x32, 0x34, 0x33, 0x32, 0x66, 0x37, 0x62], 0x2d, [0x66, 0x30, 0x65, 0x1], 0x2d, [0x65, 0x33, 0x38, 0x65], 0x2d, [0x33, 0x34, 0x35, 0x35], 0x2d, [0x61, 0x38, 0x64, 0x63, 0x66, 0x64, 0x35, 0x36]}}}, {@fowner_eq}, {@func={'func', 0x3d, 'FILE_MMAP'}}, {@fowner_eq={'fowner', 0x3d, r5}}]}, 0x0, 0x479, &(0x7f0000001300)="$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") socket$inet6_tcp(0xa, 0x1, 0x0) syz_clone(0x26801000, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x4031, r7, 0x180000000) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08d1ca4eb6b8b4889cdd4e786eb807e04eb88b935d785f3d3201c58033"], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x18) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000400), r4) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0180000000000000000001000000000000000b00000000030014"], 0x28}}, 0x40000) 743.714888ms ago: executing program 0 (id=728): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, 0x0, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) bind$tipc(r0, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) bind$tipc(r1, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'syz_tun\x00'}) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000400)=[{0x0}], 0x1) syz_clone3(&(0x7f0000000000)={0x285002400, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x46) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x1e, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{}, &(0x7f00000008c0), &(0x7f0000000880)=r3}, 0x20) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f80)=ANY=[@ANYBLOB="140000001000010000000000000000020000000a3c000000120a010100000000000000000200000009000200e30000000000000008000440000000000900010073797a3000000000080003"], 0x64}, 0x1, 0x0, 0x0, 0x800}, 0x0) 635.158622ms ago: executing program 2 (id=729): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000100000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$qrtrtun(r0, &(0x7f0000000280)='\x00N35', 0x4) fallocate(0xffffffffffffffff, 0x1, 0x4000, 0x401000) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)=[0x1], 0x0, 0x0, 0x1}}, 0x40) 592.371124ms ago: executing program 0 (id=730): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f00000006c0)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0xeb0}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@nombcache}, {@noload}, {@noquota}]}, 0x3, 0x440, &(0x7f0000000280)="$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") statx(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x100, 0x56159817211d7953, &(0x7f0000000780)) 591.524534ms ago: executing program 3 (id=731): bpf$PROG_LOAD(0x5, 0x0, 0x0) wait4(0x0, 0x0, 0x40000000, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x200008, &(0x7f0000000340)={[{@grpquota}, {@nombcache}, {@init_itable_val={'init_itable', 0x3d, 0x5}}, {@oldalloc}]}, 0x1, 0x504, &(0x7f0000001000)="$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") capset(0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae000000"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdf}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r0, 0x0, 0x7}, 0x18) mkdir(&(0x7f0000000100)='./bus\x00', 0x262) 422.149161ms ago: executing program 0 (id=732): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000680)='./file0\x00', 0x0, &(0x7f0000000b80)={[{@usrquota}, {@resgid}], [{@seclabel}]}, 0x21, 0x4bd, &(0x7f00000006c0)="$eJzs3c9vVFsdAPDvvf1JKbQoCzUqiCgawkw7QENY4UZjCImRuHIBtR2apjOdpjNFWlmU/8FEElf6J7gwcWHCyr073bnBhQkq0Udf8hbzcu9MS1+Zgb7QN0M6n09ycu+5p8z3nLm55wxf6JwABtb5iNiOiNGIuB8RU+3rSbvErVbJfu7Vy8cLOy8fLyTRbN79T5K3Z9di35/JnGy/5nhE/PRHEb9I3oxb39xama9UyuvterFRXSvWN7euLFfnl8pL5dVSaW52bubG1eulIxvrueofXvxw+fbP/vynbzz/6/b3f5V1a7Ldtn8cR6k19JG9OJnhiLj9RQTrg6H2eEYPXO9wy/kApRHxpYi4kD//UzGU300A4DhrNqeiObW/DgAcd2meA0vSQjsXMBlpWii0cnhnYyKt1OqNyw9qG6uLrVzZdIykD5Yr5Zl2rnA6RpKsPpufv66XDtSvRsSZiPj12Im8XlioVRb7+cEHAAbYyQPr///HWus/AHDMjfe7AwBAz1n/AWDwWP8BYPBY/wFg8Fj/AWDwWP8BYPBY/wFgoPzkzp2sNHfa33+9+HBzY6X28Mpiub5SqG4sFBZq62uFpVptKf/Onuq7Xq9Sq63NXouNR8VGud4o1je37lVrG6uNe/n3et8rj/RkVADA25w59+zvSURs3zyRl9i3l4O1Go63tN8dAPpmqN8dAPrGbl8wuPwdH3jXfq1d/4vQ06PvC9Abl74q/w+DSv4fBpf8Pwwu+X8YXM1mYs9/ABgwcvyAf/8HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAz28yL0laaO8FPhlpWihEnIqI6RhJHixXyjMRcToi/jY2MpbVZ/vdaQDgPaX/SuKj9jaAFycPto4mH4/lx4j45W/v/ubRfKOxPptd/+/e9cbT9vVSzzsPABzC7jq9u47vevXy8cJu6WV/XvygtbloFnenXVotwzGcH8cj+3Ay8b+kXW9JImLoCOJvP4mIr3Qaf5LnRqbbO58ejJ/FPtXT+Oln4qd5W+uYvRdfPoK+wKB5ls0/tzo9f2mcz4+dn//xfIZ6f7vz384b81+6N/8NdZn/zh82xrW//Hi0W9uTiK8Nd4qf7MVPusS/eMj4//j6Ny90a2v+LuJSdI6/P1axUV0r1je3rixX55fKS+XVUmludm7mxtXrpWKeoy7uZqrf9O+bl093i5+Nf6JL/PzO35nsOv7vHHL8v//k/s+/9Zb43/t25/t/Nj92fv+zNfG7h4w/P/HHrtt3Z/EXu4z/Xff/8iHjP//n1uIhfxQA6IH65tbKfKVSXnfiZO9k95Peh9Kf7ifNqVZPP5T+HJ+Tfs5KQC+8fuj73RMAAAAAAAAAAAAAAKCbXvw6Ub/HCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwPH1aQAAAP//sHnUnw==") r1 = socket$unix(0x1, 0x5, 0x0) bind$unix(r1, &(0x7f0000000180)=@file={0x1, './file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000180)='kfree\x00', r2, 0x0, 0x2}, 0x18) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000080)=0x401802, 0x4) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x4008084) 420.207942ms ago: executing program 2 (id=733): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0xff, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1100, 0x0, 0xfffffffc, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f0000000000)=r0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x3}, 0x94) mkdirat(0xffffffffffffff9c, 0x0, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r2}, 0x10) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000040), 0x200080, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) 397.627243ms ago: executing program 1 (id=734): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xfffffeffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x55, 0x1, 0x0, 0x0, 0x0, 0xfffe, 0x10000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_config_ext={0x6, 0xaea}, 0x89df98cc3c8d1657, 0x1, 0xfffffbff, 0x4, 0x1, 0x80000004, 0x5, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffdfffffffffffff, 0xffffffffffffffff, 0x9) mkdir(&(0x7f0000000100)='./bus\x00', 0x262) 319.412296ms ago: executing program 3 (id=735): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xb, 0x0, &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x11c0, 0x0) 318.364646ms ago: executing program 4 (id=736): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x2004000, &(0x7f0000000040)={[{@nogrpid}, {@min_batch_time={'min_batch_time', 0x3d, 0x1}}, {@usrjquota}]}, 0xfe, 0x563, &(0x7f00000007c0)="$eJzs3c9rHFUcAPDvbHbbpK02BSnoQQI9WKndtIk/KnioR9FiQe91SaahZNMt2U1pYsH2oBcvUgQRC+If4N1j8R/wryhooUgJevASmWQ22Ta7m1/bZHU/H5j2vZnZefPmzXv5vp1dNoCBNZb9U4h4OSK+SSKOt2wrRr5xbG2/5Se3p7IliZWVT/5MIsnXNfdP8v+PNjPFiF+/jDhT2FxufXFptlKtpvN5frwxd2O8vrh09tpcZSadSa9PTE5eeGty4t133u5ZXV+//Pf3Hz/44MLXp5a/+/nRiXtJXIxj+bbWeuzBndbMWIzl16QUF5/Z8XwPCusnyUGfALsylPfzUmRjwPEYyns98P/3RUSsAANpJBL9HwZUMw5ozu035sHDBxiV7J/H769NgDbXv7j23kgMr86NjiwnT82MsvnuaA/Kz8r45Y/797Ilevc+BMCW7tyNiHPF4ubxL8nHv907t419ni3D+Af750EW/7zRLv4prMc/0Sb+Odqm7+7G1v2/8KgHxXSUxX/vtY1/1x9ajQ7luRciRkajlFy9Vk2zse3FiDgdpcNZvtvznAvLD1c6bWuN/7IlK78ZC+bn8ah4+OnXTFcalb3UudXjuxGvtI1/k/X2T9q0f3Y9Lm+zjJPp/Vc7bdu6/s/Xyk8Rr7Vt/40nWkn355Pjq/fDePOu2Oyvr07+1qn8g65/1v5Hutd/NGl9XlvfeRk/Dv+Tdtq22/v/UPLpavpQvu5WpdGYPx9xKPlo8/qJjdc28839s/qfPtV9/Gt3/49ExGfbrH+3mXQ/tP/0jtp/54mHH37+Q6fy8/qXomv7v7maOp2v2c74t90T3Mu1AwAAAAAAgH5TiIhjkRTK6+lCoVxe+3zHS3GkUK3VG2eu1hauT8fqd2VHo1RoPuk+vpZPmp9/GG3JTzyTn4yIExHx7dDIar48VatOH3TlAQAAAAAAAAAAAAAAAAAAoE8c7fD9/8zvQwd9dsBz5ye/YXBt2f978UtPQF/a7d//+R6fB7D/xP8wuPR/GFz6Pwwu/R8Gl/4Pg0v/h8Gl/wMAAAAAAAAAAAAAAAAAAAAAAAAAAEBPXb50KVtWlp/cnsry0zcXF2ZrN89Op/XZ8tzCVHmqNn+jPFOrzVTT8lRtbqvjVWu1G+cnYuHWeCOtN8bri0tX5moL1xtXrs1VZtIraWlfagUAAAAAAAAAAAAAAAAAAAD/LfXFpdlKtZrOS/RzYvg5HfnO3o9T7IfrI7HjRBLd9znokQkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANvwbAAD//+f9MzI=") r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) fcntl$dupfd(r1, 0x0, r1) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r2, 0x0, 0xfffffffffffffffe}, 0x18) syz_io_uring_setup(0x4b5, &(0x7f0000010400)={0x0, 0x86e1, 0x1, 0x8, 0xa0}, &(0x7f0000010080), &(0x7f0000000000)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x10000) 293.302507ms ago: executing program 2 (id=737): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0ff5b14104fe62cc60e413905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289d01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf2364149215108333719acd97cfa107d40224edc5465a93df8513a32ec450bebc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe511195418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4929330142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da8c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000dd11e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15f2a169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f000010000000000000905ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400bee3dfc8fb24f67c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341b74abaa7c95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb232bbdb9dc33cbd7643866fde41f94290c2a5ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595270fb4021428ce970275d13b78100788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f76dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d2e959efc71f665c4d75cf2458e3322c9062ece84c99a061997a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb5aac518a75f9e7d7101d5e186c489b3a06fb99f0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d164118e4cbe02400000000ff0700000000cc9d8046c216c1f895778cb25122a2a998de44aeadea2a40da8daccf080842a4867217373934bbd42dcb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcd62981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba495aea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b60000000000001700d6d5210d7560eb92d6a97a27602b81f76386f1535b1fad6ec9a31137abf9a404abde7750898b1bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294059323e7a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd704e4214de5946932d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854356cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505466ac96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a428f1da1fc8df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1785eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba891cea599b079b4b4ba686fcdf240430a537a395dc73bda367bf12cb7d81691a5fe8c47be2f5656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed1254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b70ebc660309e1e245b0fd78f9743af932cd6db49a47613808bad959719c0000000000378a921c7f7f6933c2e24c7e800003c9e8095e02985f28de0bbc76d58dd92606b1ef6486c85fa3e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6968d12418a4d2a0d086d8438d415d713aceb"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r1}, &(0x7f0000000040), &(0x7f0000000280)='%pS \x00'}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01032757c38d085641a7260000000c000180080001"], 0x20}, 0x1, 0x0, 0x0, 0x20040845}, 0x48d4) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) fcntl$dupfd(r5, 0x0, 0xffffffffffffffff) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000080000", @ANYRES32=r7, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) tkill(0x0, 0x7) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000940)=@newtaction={0x8c, 0x30, 0x1, 0x1000, 0x25dfdbfc, {}, [{0x78, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4, 0x20}, {0x4}, {0xc}, {0xc}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x8c}}, 0x0) ioctl$TIOCMIWAIT(r6, 0x545c, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x6}, 0x1c) 252.416199ms ago: executing program 1 (id=738): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2b, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000020000000900010073797a300000000048000000030a01010000000000000000020000000900010073797a30000000000900030073797a3200000000080007006e617400140004800800014000000000080002"], 0xa4}}, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x0, @loopback}, 0x4}}, 0x2e) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 247.124039ms ago: executing program 4 (id=739): r0 = socket$inet6(0xa, 0x2, 0x8001) fstat(r0, &(0x7f0000000000)) getsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r1 = socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPOEIOCDFWD(r1, 0xb101, 0x0) r2 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000140)=@generic={&(0x7f0000000100)='./file0\x00', 0x0, 0x28}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r2, 0x0, 0x50, 0xdc, &(0x7f0000000180)="467759d3f1d6fe858443c3cd069e8776f18f131bf74b826f1c9f43cfb4b3005fa7ebd0820ff83a4fdcfeda9a705bdf1af9223aaa4b055edb7f0bcd549d888f5ff41b7309ef783f1c5c3aabb8ac28c8d5", &(0x7f0000000200)=""/220, 0x100, 0x0, 0x1c, 0x51, &(0x7f0000000300)="e42c8eb2cfd150b9c0461207e6062f097404312e7e813e328c74e366", &(0x7f0000000340)="1440d664c67c24b98c79741391770ce90da9d85c74383395743147b1ea066c817c98dde8d356c7fa68fc3811ede5afc61daf383fd47e3168a8e08e8dd8b7210f9d20ec1f8882ae2fd5613f2d79298309ce", 0x4, 0x0, 0x1}, 0x50) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000000440)={0x0, 0xfffffffffffffffc, 0x2, 0x1}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000840)={0x2, 0x7, {0x100000001, @struct={0x5, 0x2}, 0x0, 0x3, 0x52, 0xcec, 0x5, 0x4, 0x467, @usage=0x5, 0x1, 0x1, [0x4b601040, 0x9, 0xffffffffffff7b14, 0x0, 0x3, 0x8]}, {0x6, @struct={0x7fff, 0x1}, 0x0, 0xffffffffffffffff, 0x0, 0x200, 0x6a6190ae, 0x4, 0x93, @usage=0x4, 0xe3a, 0x3, [0x5, 0x8001, 0x5, 0xb2b3, 0x5529d1ae, 0x5]}, {0x2, @struct={0x800, 0x2}, 0x0, 0x6, 0x6, 0x9b80, 0xf, 0x7f, 0x34, @usage=0x5, 0x9, 0x3, [0x2, 0x3, 0x4, 0x3, 0xfff, 0x930f]}, {0x1, 0x81, 0xf9}}) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000000c40)={0x5, 0x0, {0x7ff, @struct={0x4, 0x2}, 0x0, 0x8000, 0x0, 0x6, 0x100000001, 0x8, 0x54, @struct={0x7ff, 0x3}, 0xff, 0x238e, [0x6, 0x1ff, 0xffffffffffffffc0, 0x1, 0x46f1]}, {0x10, @usage=0x20000, 0x0, 0x7, 0x2f6ed796, 0x1, 0x631b, 0xff, 0x2, @usage=0xffffffffffffffff, 0xfff, 0x800, [0x800, 0x4, 0x6, 0x2, 0x1515, 0x7fff]}, {0x186, @usage=0x10000, 0x0, 0xab0, 0x1d8, 0x5, 0x1, 0x8843, 0x401, @usage, 0xb8, 0xab, [0x200, 0x7, 0x0, 0x3, 0xb, 0x2]}, {0x9, 0xfffffffffffffff7, 0xa2f}}) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000001040)={0x0, 0x2, {0x80000001, @usage=0x5d1, r3, 0x3, 0x1000, 0x8, 0x3c, 0x7fff, 0x4ce, @struct={0x9, 0xffffffff}, 0x7, 0x6, [0x7, 0x6, 0x2, 0x4, 0x200, 0x1]}, {0x9, @struct={0x5, 0x2}, r4, 0x200, 0xf, 0x7, 0x396e, 0x1, 0x35, @struct={0x796f, 0x3ff}, 0x0, 0xa8f, [0x0, 0x7, 0x80000001, 0x5, 0x40, 0x2]}, {0x1000, @struct={0x9, 0x4}, r5, 0x2, 0x2, 0xfff, 0xfffffffffffffffb, 0x8, 0x0, @struct={0x2, 0x9}, 0xd4, 0x2, [0x2, 0x3, 0x2, 0x4c, 0x7, 0x5]}, {0x2, 0xa4d, 0x101}}) r6 = inotify_init() fremovexattr(r6, &(0x7f0000001480)=@random={'user.', '\x00'}) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000014c0)={0x1b, 0x0, 0x0, 0x6, 0x0, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x50) r8 = syz_open_procfs(0x0, &(0x7f0000001540)='mountstats\x00') ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000001880)={'syztnl2\x00', &(0x7f0000001800)={'syztnl1\x00', 0x0, 0x2f, 0x1d, 0x5, 0x9, 0x10, @private1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x10, 0x700, 0x0, 0x9}}) r10 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000018c0)=0xffffffffffffffff, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001a00)={{0x1, 0xffffffffffffffff}, &(0x7f0000001980), &(0x7f00000019c0)=r2}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001ac0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000001a40), &(0x7f0000001a80)='%ps \x00'}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001b80)={0x11, 0x23, &(0x7f0000001580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [@call={0x85, 0x0, 0x0, 0xad}, @initr0={0x18, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x9}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @alu={0x4, 0x0, 0x4, 0x0, 0x3, 0xfffffffffffffffc, 0xe}, @ldst={0x1, 0x1, 0x0, 0x8, 0xb, 0x1, 0xc}, @jmp={0x5, 0x0, 0x4, 0x9, 0x5, 0xfffffffffffffff8, 0x10}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r8}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000016c0)='GPL\x00', 0x6, 0xe4, &(0x7f0000001700)=""/228, 0x40f00, 0x41, '\x00', r9, 0x0, r10, 0x8, &(0x7f0000001900)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001940)={0x0, 0x1, 0x4, 0x5}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000001b00)=[r11, r12], &(0x7f0000001b40)=[{0x4, 0x3, 0xc, 0x8}, {0x2, 0x5, 0x2, 0xa}, {0x3, 0x1, 0xb, 0x1}, {0x4, 0x4, 0x2, 0x6}], 0x10, 0xe}, 0x94) openat$sndseq(0xffffffffffffff9c, &(0x7f0000001c40), 0x480000) r13 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001c80)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_SETTIMEOUT(r0, 0x80049367, &(0x7f0000001cc0)=0x7) timer_create(0x0, &(0x7f0000001ec0)={0x0, 0xc, 0x2, @thr={&(0x7f0000001d00)="5ecb517e6ed31ee54ef98b28250e6d66ed5bb47f4ba53de75ad939c712d2763924dcb57a31576110fb759445c534225de04685d07196f566b295204a0d4ab6988933654c8c99531f6f91bacc5f10dce798dad91f306038aea53c6253731d33e959f21d62ddbfe04c3bdef6f423615fb774928e9f111ceb60539136251f83b6ea02ea3d1f196ce8fda9782b24e8a1aff3882fb18017d29ea9ad91fb803a05659eb823a12ed9e710e3e7cbb08cd3b039f29816c9c2430fe67e6d4d8aa00227c1dee65a3c145cf0b3b9fe3e2c7782359dd4451a05c3bf1e470b73de84", &(0x7f0000001e00)="426baa86edfec2201d68db6a6da3793589b8825801bced308f7b516adcdffd0d4db5eb88e77f4f2e7752b9950c6101cc7ff4cd108d7b42e1ea79175d47a74fa17d5ae8c6df3de11e0bf77195dbf86d6e981430552e2d9e903c39f4f30cb02dbfb58cb5a4b15691857a10ffd4898cde9d805d6c8b265c4472181e62be5e1f7cec9a7ddc7a5c0882080b289d73abd4027958596920e6d37644bae514ad79ac04db345c291153d65ef5f237cc51beef46cdde25e39c9557d7bd"}}, &(0x7f0000001f00)=0x0) timer_settime(r14, 0x0, &(0x7f0000001f40)={{0x0, 0x3938700}, {0x0, 0x3938700}}, &(0x7f0000001f80)) ioctl$SG_GET_LOW_DMA(r8, 0x227a, &(0x7f0000001fc0)) prctl$PR_SET_UNALIGN(0x6, 0x3) ioctl$PPPIOCGFLAGS(r13, 0x8004745a, &(0x7f0000002000)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002080)={&(0x7f0000002040)='netfs_read\x00', r1, 0x0, 0x7}, 0x18) 166.863213ms ago: executing program 3 (id=740): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, 0x0, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) bind$tipc(r0, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) bind$tipc(r1, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'syz_tun\x00'}) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000400)=[{0x0}], 0x1) syz_clone3(&(0x7f0000000000)={0x285002400, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x46) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x1e, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{}, &(0x7f00000008c0), &(0x7f0000000880)=r3}, 0x20) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f80)=ANY=[@ANYBLOB="140000001000010000000000000000020000000a3c000000120a010100000000000000000200000009000200e30000000000000008000440000000000900010073797a3000000000080003"], 0x64}, 0x1, 0x0, 0x0, 0x800}, 0x0) 157.988093ms ago: executing program 1 (id=741): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000a00)={[{@init_itable_val}, {@resuid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6e}}, {@user_xattr}, {@bh}, {@journal_ioprio}]}, 0x2, 0x44a, &(0x7f0000000c40)="$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") bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) open(&(0x7f0000000000)='./bus\x00', 0x1050c1, 0x170) 147.286014ms ago: executing program 3 (id=742): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x545, &(0x7f0000001300)="$eJzs3c9vHFcdAPDvrL2Okzi1CxygUktFi5IKshvXtLU4lCIhOFVClHsw9saysvZG9rqNrQo2fwESQoDECS5ckPgDkFAkLhwRUiQ4g1QEQpCCBIfSQbM7G5v1rL0xa2+8/nykybw3v77f5/iNZ3aeZgM4t56PiDci4sM0TV+KiNl8eSmfotWZsu3ef/jucjYlkaZv/S2JJF+WbZamado95uV8t+mI+NpXIr6Z7As4nc93dm8v1eu1zbxaba7fqW7t7F5fW19ara3WNhYW5l9dfG3xlcUbQ2nnlYh4/Ut/+v53fvrl13/52Xf+ePMv176VpTWTr++24xgmD1vZaXr5wnTPDpvHDPYkytpT/iCvXBxsn3snmRAAAH1l1/gfiYhPRcRLMRsTh1/OAgAAAGdQ+oWZ+CDpPL8rMNVnOQAAAHCGlNpjYJNSJR8LMBOlUqXSGcP7sbhUqje2mp+51djeWOmMlZ2LcunWWr12Ix8rPBflJKvPt8t79Zd76gsR8XREfG/2YrteWW7UV0b94QcAAACcE5d77v//Odu5/z9ccjrJAQAAAMMzN+oEAAAAgBPn/h8AAADGWnnUCQAAAAAn7qtvvplNaff7r1fe3tm+3Xj7+kpt63ZlfXu5stzYvFNZbTRW2+/sWz/qePVG487nYmP7brVZ22pWr+zs3lxvbG80b67F9Kk0CAAAADjg6U/e/30SEa3PX2xPmalRJwWcislHpe47PQt6/x+e6szfO6WkgFMxMcA2710oXu46Ac62yd4Fffo6MH6M/weO+kaPvoN3ftOZlYacDwAAMHxXP1H8/P/o6/mWS34443RiOL96nv+ns6NKBDh17ef/gw7kcbEAY6U80AhAYJz9v8//j5amj5UQAAAwdDPtKSlV8o/3ZqJUqlQirrS/FrCc3Fqr125ExFMR8bvZ8oWsPt/eMznyngEAAAAAAAAAAAAAAAAAAAAAAAAA6EjTJFIAAABgrEWU/pz8qvMu/6uzL870fj4wlfy7/ZXAUxHxzo/e+sHdpWZzcz5b/vdHy5s/zJe/PIpPMAAAAIBe3fv09vxfo84GAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgHHz/sN3l7vTAJtfHFbcv34xIuaK4k/GdHs+HeWIuPSPJCb37ZdExMQQ4rfuRcTHi+InWVqPQhbFH8YPoXUvaaVthfFjLv8pFMW/PIT4cJ7dz84/bxT1/1I8354X97/JiP+pH1f/8188Ov9N9On/VwaM8cyDn1f7xr8X8cxk8fmvGz/pE/+FgaKX4xtf393ttzb9ccTV7t+f9hlvf4S9UrW5fqe6tbN7fW19abW2WttYWJh/dfG1xVcWb1RvrdVr+b+FMb777C8+PKz9lwr//iV5Nv3b/2LB8SYK8v/Pg7sPP9qttA7Gv/ZCQfxf/yTf4mD8Uh7n03k5W3+1W251yvs997PfPndY+1f22l9+nP//a/0O2utAR3l2sF8dAOBEbO3s3l6q12ubY1vI7tKfgDSOU5iKJyKN8S18Oys8GNYB0zRNsz5VsOp+RAxynCSG3NJScT57hb5ngFGfmQAAgGHbu+gfdSYAAAAAAAAAAAAAAAAAAABwfp3GW9Z6Y+69AjkZxiu0AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACG4r8BAAD//7gG3Ac=") r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000ec0)={&(0x7f0000000bc0)='kfree\x00', r1, 0x0, 0xfffffffffffffff4}, 0x18) pipe(&(0x7f0000005880)) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x511a01, 0x80) 62.090647ms ago: executing program 4 (id=743): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000100000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$qrtrtun(r0, &(0x7f0000000280)='\x00N35', 0x4) fallocate(0xffffffffffffffff, 0x1, 0x4000, 0x401000) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)=[0x1], 0x0, 0x0, 0x1}}, 0x40) 37.456999ms ago: executing program 4 (id=744): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r1}, &(0x7f0000000040), &(0x7f0000000280)='%pS \x00'}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01032757c38d085641a7260000000c000180080001"], 0x20}, 0x1, 0x0, 0x0, 0x20040845}, 0x48d4) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) fcntl$dupfd(r5, 0x0, 0xffffffffffffffff) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000080000", @ANYRES32=r7, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) tkill(0x0, 0x7) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000940)=@newtaction={0x8c, 0x30, 0x1, 0x1000, 0x25dfdbfc, {}, [{0x78, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4, 0x20}, {0x4}, {0xc}, {0xc}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x8c}}, 0x0) ioctl$TIOCMIWAIT(r6, 0x545c, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x6}, 0x1c) 16.986659ms ago: executing program 1 (id=745): bpf$PROG_LOAD(0x5, 0x0, 0x0) wait4(0x0, 0x0, 0x40000000, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x200008, &(0x7f0000000340)={[{@grpquota}, {@nombcache}, {@init_itable_val={'init_itable', 0x3d, 0x5}}, {@oldalloc}]}, 0x1, 0x504, &(0x7f0000001000)="$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") capset(0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae000000"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdf}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r0, 0x0, 0x7}, 0x18) mkdir(&(0x7f0000000100)='./bus\x00', 0x262) 0s ago: executing program 0 (id=746): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10) mkdir(&(0x7f0000000100)='./bus\x00', 0x262) kernel console output (not intermixed with test programs): z-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c67a7f749 code=0x7ffc0000 [ 54.054515][ T4091] ext4 filesystem being mounted at /39/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 54.067727][ T29] audit: type=1326 audit(1765171256.670:726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4095 comm="syz.4.200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f9c67a7f749 code=0x7ffc0000 [ 54.067764][ T29] audit: type=1326 audit(1765171256.670:727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4095 comm="syz.4.200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c67a7f749 code=0x7ffc0000 [ 54.124836][ T29] audit: type=1326 audit(1765171256.670:728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4095 comm="syz.4.200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9c67a7f749 code=0x7ffc0000 [ 54.148064][ T29] audit: type=1326 audit(1765171256.670:729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4095 comm="syz.4.200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c67a7f749 code=0x7ffc0000 [ 54.171536][ T29] audit: type=1326 audit(1765171256.670:730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4095 comm="syz.4.200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9c67a7df90 code=0x7ffc0000 [ 54.194805][ T29] audit: type=1326 audit(1765171256.670:731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4095 comm="syz.4.200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9c67a7df90 code=0x7ffc0000 [ 54.316906][ T4108] loop4: detected capacity change from 0 to 1024 [ 54.357475][ T4117] loop3: detected capacity change from 0 to 512 [ 54.364716][ T4117] EXT4-fs: Ignoring removed oldalloc option [ 54.394025][ T4117] ext4 filesystem being mounted at /45/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 54.413491][ T4122] loop0: detected capacity change from 0 to 512 [ 54.426165][ T4123] loop2: detected capacity change from 0 to 512 [ 54.428710][ T4117] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.204: bg 0: block 217: padding at end of block bitmap is not set [ 54.435744][ T4123] EXT4-fs: Ignoring removed oldalloc option [ 54.462517][ T4122] EXT4-fs: Ignoring removed oldalloc option [ 54.485374][ T4123] ext4 filesystem being mounted at /47/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 54.496086][ T4126] loop4: detected capacity change from 0 to 512 [ 54.511537][ T4121] netlink: 8 bytes leftover after parsing attributes in process `syz.1.206'. [ 54.515411][ T4126] EXT4-fs: Ignoring removed bh option [ 54.523030][ T4122] ext4 filesystem being mounted at /40/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 54.542563][ T4126] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 54.587989][ T4111] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.202: bg 0: block 217: padding at end of block bitmap is not set [ 54.592329][ T4113] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.205: bg 0: block 217: padding at end of block bitmap is not set [ 54.622384][ T4126] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 54.646179][ T4126] EXT4-fs (loop4): 1 truncate cleaned up [ 54.681984][ T4139] loop0: detected capacity change from 0 to 512 [ 54.704294][ T4139] ext4 filesystem being mounted at /42/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 54.718002][ T4139] EXT4-fs error (device loop0): ext4_xattr_block_get:597: inode #12: comm syz.0.211: corrupted xattr block 6: invalid header [ 54.735368][ T4139] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=12 [ 54.745612][ T4139] EXT4-fs error (device loop0): ext4_xattr_block_get:597: inode #12: comm syz.0.211: corrupted xattr block 6: invalid header [ 54.760348][ T4139] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=12 [ 54.769690][ T4139] EXT4-fs error (device loop0): ext4_xattr_block_get:597: inode #12: comm syz.0.211: corrupted xattr block 6: invalid header [ 54.794096][ T4139] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=12 [ 54.814957][ T4139] EXT4-fs error (device loop0): ext4_xattr_block_get:597: inode #12: comm syz.0.211: corrupted xattr block 6: invalid header [ 54.857114][ T4139] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=12 [ 54.866827][ T4139] EXT4-fs error (device loop0): ext4_xattr_block_get:597: inode #12: comm syz.0.211: corrupted xattr block 6: invalid header [ 54.899437][ T4139] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=12 [ 54.913529][ T4139] EXT4-fs error (device loop0): ext4_xattr_block_get:597: inode #12: comm syz.0.211: corrupted xattr block 6: invalid header [ 54.931825][ T2969] Process accounting resumed [ 54.975198][ T4158] netlink: 8 bytes leftover after parsing attributes in process `syz.1.219'. [ 54.996134][ T4156] netlink: 148 bytes leftover after parsing attributes in process `syz.4.217'. [ 55.041041][ T4163] loop1: detected capacity change from 0 to 512 [ 55.048225][ T4163] EXT4-fs: Ignoring removed oldalloc option [ 55.074140][ T4163] ext4 filesystem being mounted at /36/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 55.091035][ T4165] loop0: detected capacity change from 0 to 1024 [ 55.099023][ T4163] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.221: bg 0: block 217: padding at end of block bitmap is not set [ 55.181629][ T4147] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 55.230376][ T4179] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 55.253536][ T4179] EXT4-fs warning (device loop0): ext4_update_dynamic_rev:1137: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 55.276254][ T4176] EXT4-fs: Ignoring removed oldalloc option [ 55.288892][ T4183] netlink: 200 bytes leftover after parsing attributes in process `syz.4.225'. [ 55.298637][ T4179] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.224: bg 0: block 248: padding at end of block bitmap is not set [ 55.313611][ T4179] EXT4-fs error (device loop0): ext4_acquire_dquot:6986: comm syz.0.224: Failed to acquire dquot type 1 [ 55.325632][ T4179] EXT4-fs (loop0): 1 truncate cleaned up [ 55.373990][ T4176] ext4 filesystem being mounted at /37/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 55.392608][ T4176] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.223: bg 0: block 217: padding at end of block bitmap is not set [ 55.450346][ T863] EXT4-fs error (device loop0): ext4_release_dquot:7022: comm kworker/u8:8: Failed to release dquot type 1 [ 55.487145][ T4198] tc_dump_action: action bad kind [ 55.533227][ T4196] ext4 filesystem being mounted at /47/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 55.553934][ T4196] EXT4-fs error (device loop3): ext4_xattr_block_get:597: inode #12: comm syz.3.229: corrupted xattr block 6: invalid header [ 55.571446][ T4206] netlink: 148 bytes leftover after parsing attributes in process `syz.1.232'. [ 55.584903][ T4196] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=12 [ 55.608321][ T4196] EXT4-fs error (device loop3): ext4_xattr_block_get:597: inode #12: comm syz.3.229: corrupted xattr block 6: invalid header [ 55.635017][ T4196] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=12 [ 55.646545][ T4196] EXT4-fs error (device loop3): ext4_xattr_block_get:597: inode #12: comm syz.3.229: corrupted xattr block 6: invalid header [ 55.661027][ T4196] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=12 [ 55.670959][ T4196] EXT4-fs error (device loop3): ext4_xattr_block_get:597: inode #12: comm syz.3.229: corrupted xattr block 6: invalid header [ 55.685463][ T4196] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=12 [ 55.698263][ T4196] EXT4-fs error (device loop3): ext4_xattr_block_get:597: inode #12: comm syz.3.229: corrupted xattr block 6: invalid header [ 55.700171][ T4215] EXT4-fs: Ignoring removed oldalloc option [ 55.718067][ T4196] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=12 [ 55.731418][ T4196] EXT4-fs error (device loop3): ext4_xattr_block_get:597: inode #12: comm syz.3.229: corrupted xattr block 6: invalid header [ 55.749893][ T4215] ext4 filesystem being mounted at /47/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 55.765885][ T4215] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.234: bg 0: block 217: padding at end of block bitmap is not set [ 55.826226][ T4223] tc_dump_action: action bad kind [ 55.923243][ T4229] netlink: 8 bytes leftover after parsing attributes in process `syz.3.238'. [ 55.932194][ T4229] netlink: 8 bytes leftover after parsing attributes in process `syz.3.238'. [ 55.971015][ T4234] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 55.985448][ T4234] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1137: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 56.000348][ T4234] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.240: bg 0: block 248: padding at end of block bitmap is not set [ 56.014875][ T4234] EXT4-fs error (device loop1): ext4_acquire_dquot:6986: comm syz.1.240: Failed to acquire dquot type 1 [ 56.026771][ T4234] EXT4-fs (loop1): 1 truncate cleaned up [ 56.051673][ T31] EXT4-fs error (device loop1): ext4_release_dquot:7022: comm kworker/u8:1: Failed to release dquot type 1 [ 56.100071][ T4240] EXT4-fs: Ignoring removed oldalloc option [ 56.123916][ T4240] ext4 filesystem being mounted at /46/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 56.147466][ T4245] EXT4-fs: Ignoring removed bh option [ 56.153530][ T4245] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 56.165282][ T4245] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 56.180547][ T4245] EXT4-fs (loop4): 1 truncate cleaned up [ 56.233295][ T4245] siw: device registration error -23 [ 56.255459][ T4253] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 56.263470][ T4253] FAT-fs (loop1): Filesystem has been set read-only [ 56.276976][ T4253] bio_check_eod: 119616 callbacks suppressed [ 56.276995][ T4253] syz.1.246: attempt to access beyond end of device [ 56.276995][ T4253] loop1: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 56.302081][ T4253] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 56.310141][ T4253] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 56.319000][ T4253] syz.1.246: attempt to access beyond end of device [ 56.319000][ T4253] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 56.319277][ T4250] buffer_io_error: 119093 callbacks suppressed [ 56.319295][ T4250] Buffer I/O error on dev loop9, logical block 0, async page read [ 56.333993][ T4255] syz.1.246: attempt to access beyond end of device [ 56.333993][ T4255] loop1: rw=0, sector=2065, nr_sectors = 1 limit=128 [ 56.347053][ T4250] Buffer I/O error on dev loop9, logical block 0, async page read [ 56.360143][ T4255] Buffer I/O error on dev loop1, logical block 2065, async page read [ 56.368012][ T4250] loop9: unable to read partition table [ 56.385669][ T4250] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 56.385669][ T4250] ) failed (rc=-5) [ 56.387006][ T3306] Buffer I/O error on dev loop9, logical block 0, async page read [ 56.408567][ T4255] syz.1.246: attempt to access beyond end of device [ 56.408567][ T4255] loop1: rw=0, sector=2066, nr_sectors = 1 limit=128 [ 56.422002][ T4255] Buffer I/O error on dev loop1, logical block 2066, async page read [ 56.431508][ T4255] syz.1.246: attempt to access beyond end of device [ 56.431508][ T4255] loop1: rw=0, sector=2067, nr_sectors = 1 limit=128 [ 56.438977][ T3306] Buffer I/O error on dev loop9, logical block 0, async page read [ 56.444779][ T4255] Buffer I/O error on dev loop1, logical block 2067, async page read [ 56.475672][ T3306] Buffer I/O error on dev loop9, logical block 0, async page read [ 56.488089][ T3306] Buffer I/O error on dev loop9, logical block 0, async page read [ 56.496728][ T3306] Buffer I/O error on dev loop9, logical block 0, async page read [ 56.505317][ T4262] vlan2: entered allmulticast mode [ 56.523526][ T4255] syz.1.246: attempt to access beyond end of device [ 56.523526][ T4255] loop1: rw=0, sector=2068, nr_sectors = 1 limit=128 [ 56.537121][ T4255] syz.1.246: attempt to access beyond end of device [ 56.537121][ T4255] loop1: rw=0, sector=2069, nr_sectors = 1 limit=128 [ 56.550636][ T4255] syz.1.246: attempt to access beyond end of device [ 56.550636][ T4255] loop1: rw=0, sector=2070, nr_sectors = 1 limit=128 [ 56.564273][ T4255] syz.1.246: attempt to access beyond end of device [ 56.564273][ T4255] loop1: rw=0, sector=2071, nr_sectors = 1 limit=128 [ 56.577807][ T4255] syz.1.246: attempt to access beyond end of device [ 56.577807][ T4255] loop1: rw=0, sector=2072, nr_sectors = 1 limit=128 [ 56.597491][ T4264] EXT4-fs: Ignoring removed oldalloc option [ 56.614187][ T4264] ext4 filesystem being mounted at /51/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 56.627484][ T4264] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.248: bg 0: block 217: padding at end of block bitmap is not set [ 56.840546][ T4285] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 56.848509][ T4285] FAT-fs (loop4): Filesystem has been set read-only [ 56.865846][ T4285] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 56.874025][ T4285] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 56.925326][ T4289] random: crng reseeded on system resumption [ 56.971852][ T1040] Process accounting resumed [ 56.976660][ T4293] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 56.984676][ T4293] FAT-fs (loop2): Filesystem has been set read-only [ 57.039900][ T4293] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 57.048454][ T4293] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 57.193971][ T4303] EXT4-fs: Ignoring removed oldalloc option [ 57.200591][ T4304] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=31 sclass=netlink_route_socket pid=4304 comm=syz.1.263 [ 57.213360][ T4304] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=39 sclass=netlink_route_socket pid=4304 comm=syz.1.263 [ 57.225931][ T4304] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=55 sclass=netlink_route_socket pid=4304 comm=syz.1.263 [ 57.238423][ T4304] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=4304 comm=syz.1.263 [ 57.272830][ T4303] ext4 filesystem being mounted at /53/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 57.292178][ T4303] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.262: bg 0: block 217: padding at end of block bitmap is not set [ 57.918240][ T4329] vlan2: entered allmulticast mode [ 57.926073][ T4331] __nla_validate_parse: 5 callbacks suppressed [ 57.926159][ T4331] netlink: 4 bytes leftover after parsing attributes in process `syz.2.272'. [ 57.933589][ T3306] loop9: unable to read partition table [ 57.950247][ T4325] loop9: unable to read partition table [ 57.958148][ T4325] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 57.958148][ T4325] ) failed (rc=-5) [ 57.995291][ T4333] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 58.003739][ T4333] FAT-fs (loop2): Filesystem has been set read-only [ 58.016715][ T4333] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 58.016740][ T4333] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 58.034689][ T4337] 9p: Bad value for 'rfdno' [ 58.147298][ T4346] EXT4-fs: Ignoring removed bh option [ 58.196931][ T4346] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 58.229188][ T4346] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 58.263879][ T4346] EXT4-fs (loop1): 1 truncate cleaned up [ 58.551269][ T4348] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 58.566053][ T4348] bridge0: entered promiscuous mode [ 58.571458][ T4348] macsec1: entered promiscuous mode [ 58.589061][ T4348] bridge0: port 3(macsec1) entered blocking state [ 58.595633][ T4348] bridge0: port 3(macsec1) entered disabled state [ 58.611212][ T4348] macsec1: entered allmulticast mode [ 58.616899][ T4348] bridge0: entered allmulticast mode [ 58.632305][ T4348] macsec1: left allmulticast mode [ 58.637428][ T4348] bridge0: left allmulticast mode [ 58.655030][ T4348] bridge0: left promiscuous mode [ 58.881156][ T4394] set_capacity_and_notify: 27 callbacks suppressed [ 58.881171][ T4394] loop1: detected capacity change from 0 to 512 [ 58.897983][ T4394] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 58.917871][ T4394] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1137: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 58.933456][ T4394] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.290: bg 0: block 248: padding at end of block bitmap is not set [ 58.948729][ T4394] EXT4-fs error (device loop1): ext4_acquire_dquot:6986: comm syz.1.290: Failed to acquire dquot type 1 [ 58.963550][ T4394] EXT4-fs (loop1): 1 truncate cleaned up [ 58.969869][ T29] kauditd_printk_skb: 188 callbacks suppressed [ 58.969912][ T29] audit: type=1326 audit(1765171261.650:912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4390 comm="syz.2.289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a7946f749 code=0x7ffc0000 [ 58.973552][ T4392] loop9: detected capacity change from 0 to 7 [ 58.976356][ T29] audit: type=1326 audit(1765171261.650:913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4390 comm="syz.2.289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a7946f749 code=0x7ffc0000 [ 59.029007][ T29] audit: type=1326 audit(1765171261.660:914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4390 comm="syz.2.289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6a7946f749 code=0x7ffc0000 [ 59.052342][ T29] audit: type=1326 audit(1765171261.660:915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4390 comm="syz.2.289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a7946f749 code=0x7ffc0000 [ 59.054247][ T4399] loop4: detected capacity change from 0 to 1024 [ 59.076207][ T29] audit: type=1326 audit(1765171261.660:916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4390 comm="syz.2.289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6a7946df90 code=0x7ffc0000 [ 59.106504][ T29] audit: type=1326 audit(1765171261.660:917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4390 comm="syz.2.289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a7946f749 code=0x7ffc0000 [ 59.130223][ T29] audit: type=1326 audit(1765171261.660:918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4390 comm="syz.2.289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6a7946f749 code=0x7ffc0000 [ 59.154082][ T4392] loop9: unable to read partition table [ 59.160209][ T4392] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 59.160209][ T4392] ) failed (rc=-5) [ 59.179990][ T29] audit: type=1326 audit(1765171261.860:919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4390 comm="syz.2.289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a7946f749 code=0x7ffc0000 [ 59.203489][ T29] audit: type=1326 audit(1765171261.860:920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4390 comm="syz.2.289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a7946f749 code=0x7ffc0000 [ 59.248700][ T863] Quota error (device loop1): do_check_range: Getting block 0 out of range 1-5 [ 59.257909][ T863] EXT4-fs error (device loop1): ext4_release_dquot:7022: comm kworker/u8:8: Failed to release dquot type 1 [ 59.301158][ T4404] loop0: detected capacity change from 0 to 512 [ 59.316985][ T4404] ext4 filesystem being mounted at /60/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 59.334194][ T4411] netlink: 148 bytes leftover after parsing attributes in process `syz.2.294'. [ 59.352662][ T4412] loop1: detected capacity change from 0 to 512 [ 59.363815][ T4404] EXT4-fs error (device loop0): ext4_xattr_block_get:597: inode #12: comm syz.0.292: corrupted xattr block 6: invalid header [ 59.394055][ T4412] ext4 filesystem being mounted at /57/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 59.405169][ T4404] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=12 [ 59.406401][ T4412] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #12: comm syz.1.295: corrupted xattr block 6: invalid header [ 59.417500][ T4414] netlink: 4 bytes leftover after parsing attributes in process `syz.4.296'. [ 59.428091][ T4412] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=12 [ 59.448601][ T4412] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #12: comm syz.1.295: corrupted xattr block 6: invalid header [ 59.453397][ T4404] EXT4-fs error (device loop0): ext4_xattr_block_get:597: inode #12: comm syz.0.292: corrupted xattr block 6: invalid header [ 59.462658][ T4412] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=12 [ 59.476704][ T4420] netlink: 'syz.1.295': attribute type 10 has an invalid length. [ 59.486061][ T4412] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #12: comm syz.1.295: corrupted xattr block 6: invalid header [ 59.506829][ T4412] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=12 [ 59.515962][ T4412] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #12: comm syz.1.295: corrupted xattr block 6: invalid header [ 59.531842][ T4404] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=12 [ 59.536017][ T4422] netlink: 'syz.1.295': attribute type 10 has an invalid length. [ 59.542383][ T4421] netlink: 'syz.0.292': attribute type 10 has an invalid length. [ 59.557447][ T4404] EXT4-fs error (device loop0): ext4_xattr_block_get:597: inode #12: comm syz.0.292: corrupted xattr block 6: invalid header [ 59.565340][ T4414] team0 (unregistering): Port device team_slave_0 removed [ 59.578305][ T4404] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=12 [ 59.588574][ T4404] EXT4-fs error (device loop0): ext4_xattr_block_get:597: inode #12: comm syz.0.292: corrupted xattr block 6: invalid header [ 59.594413][ T4414] team0 (unregistering): Port device team_slave_1 removed [ 59.604820][ T4412] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=12 [ 59.618783][ T4424] netlink: 'syz.0.292': attribute type 10 has an invalid length. [ 59.634503][ T4412] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #12: comm syz.1.295: corrupted xattr block 6: invalid header [ 59.648130][ T4404] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=12 [ 59.658883][ T4412] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=12 [ 59.669168][ T4404] EXT4-fs error (device loop0): ext4_xattr_block_get:597: inode #12: comm syz.0.292: corrupted xattr block 6: invalid header [ 59.693973][ T4412] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #12: comm syz.1.295: corrupted xattr block 6: invalid header [ 59.703067][ T4420] bond0: (slave dummy0): Releasing backup interface [ 59.721361][ T4426] loop2: detected capacity change from 0 to 1024 [ 59.728629][ T4404] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=12 [ 59.739932][ T4404] EXT4-fs error (device loop0): ext4_xattr_block_get:597: inode #12: comm syz.0.292: corrupted xattr block 6: invalid header [ 59.796517][ T4420] team0: Port device dummy0 added [ 59.806923][ T4434] loop4: detected capacity change from 0 to 128 [ 59.814282][ T4428] netlink: 4 bytes leftover after parsing attributes in process `syz.3.299'. [ 59.831900][ T4434] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 59.839919][ T4434] FAT-fs (loop4): Filesystem has been set read-only [ 59.848179][ T4421] bond0: (slave dummy0): Releasing backup interface [ 59.851009][ T4434] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 59.863062][ T4434] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 59.881933][ T4422] team0: Port device dummy0 removed [ 59.913220][ T4422] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 59.925233][ T4424] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 60.067053][ T4441] loop3: detected capacity change from 0 to 512 [ 60.115918][ T4447] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 60.182150][ T4448] xt_TCPMSS: Only works on TCP SYN packets [ 60.226333][ T4441] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 60.277788][ T4449] loop0: detected capacity change from 0 to 512 [ 60.354477][ T4441] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1137: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 60.375297][ T4449] EXT4-fs: Ignoring removed oldalloc option [ 60.402250][ T4451] loop1: detected capacity change from 0 to 1024 [ 60.435899][ T4449] ext4 filesystem being mounted at /61/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 60.501709][ T4441] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.304: bg 0: block 248: padding at end of block bitmap is not set [ 60.603521][ T4445] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.303: bg 0: block 217: padding at end of block bitmap is not set [ 60.636978][ T4441] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.304: Failed to acquire dquot type 1 [ 60.687769][ T4441] EXT4-fs (loop3): 1 truncate cleaned up [ 60.864047][ T4461] ext4 filesystem being mounted at /58/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 60.880385][ T4461] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #12: comm syz.4.310: corrupted xattr block 6: invalid header [ 60.894247][ T4461] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=12 [ 60.905235][ T4461] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #12: comm syz.4.310: corrupted xattr block 6: invalid header [ 60.918925][ T4461] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=12 [ 60.928195][ T4461] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #12: comm syz.4.310: corrupted xattr block 6: invalid header [ 60.944932][ T4461] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=12 [ 60.954793][ T4461] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #12: comm syz.4.310: corrupted xattr block 6: invalid header [ 60.968732][ T4461] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=12 [ 60.978104][ T4461] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #12: comm syz.4.310: corrupted xattr block 6: invalid header [ 60.992316][ T4461] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=12 [ 61.002457][ T4461] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #12: comm syz.4.310: corrupted xattr block 6: invalid header [ 61.081027][ T61] EXT4-fs error (device loop3): ext4_release_dquot:7022: comm kworker/u8:5: Failed to release dquot type 1 [ 61.248788][ T4478] 9p: Bad value for 'rfdno' [ 61.253834][ T4479] EXT4-fs: Ignoring removed oldalloc option [ 61.340848][ T4479] ext4 filesystem being mounted at /60/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 61.357546][ T4479] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.306: bg 0: block 217: padding at end of block bitmap is not set [ 61.502606][ T4485] random: crng reseeded on system resumption [ 61.653119][ T4487] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 61.666449][ T4487] bridge0: entered promiscuous mode [ 61.671832][ T4487] macsec1: entered promiscuous mode [ 61.678774][ T4487] bridge0: port 3(macsec1) entered blocking state [ 61.685320][ T4487] bridge0: port 3(macsec1) entered disabled state [ 61.692028][ T4487] macsec1: entered allmulticast mode [ 61.697340][ T4487] bridge0: entered allmulticast mode [ 61.703677][ T4487] macsec1: left allmulticast mode [ 61.708848][ T4487] bridge0: left allmulticast mode [ 61.715184][ T4487] bridge0: left promiscuous mode [ 61.913660][ T4493] random: crng reseeded on system resumption [ 61.935484][ T4498] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 61.944248][ T4498] FAT-fs (loop3): Filesystem has been set read-only [ 61.951792][ T4498] bio_check_eod: 177622 callbacks suppressed [ 61.951806][ T4498] syz.3.319: attempt to access beyond end of device [ 61.951806][ T4498] loop3: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 61.983322][ T4500] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 61.993052][ T4498] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 62.000913][ T4498] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 62.010127][ T4505] syz.3.319: attempt to access beyond end of device [ 62.010127][ T4505] loop3: rw=0, sector=2065, nr_sectors = 1 limit=128 [ 62.023520][ T4505] buffer_io_error: 176733 callbacks suppressed [ 62.023564][ T4505] Buffer I/O error on dev loop3, logical block 2065, async page read [ 62.040431][ T4505] syz.3.319: attempt to access beyond end of device [ 62.040431][ T4505] loop3: rw=0, sector=2066, nr_sectors = 1 limit=128 [ 62.054403][ T4505] Buffer I/O error on dev loop3, logical block 2066, async page read [ 62.054746][ T4508] EXT4-fs: Ignoring removed bh option [ 62.069952][ T4505] syz.3.319: attempt to access beyond end of device [ 62.069952][ T4505] loop3: rw=0, sector=2067, nr_sectors = 1 limit=128 [ 62.084050][ T4505] Buffer I/O error on dev loop3, logical block 2067, async page read [ 62.092725][ T4505] syz.3.319: attempt to access beyond end of device [ 62.092725][ T4505] loop3: rw=0, sector=2068, nr_sectors = 1 limit=128 [ 62.093167][ T4500] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1137: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 62.106042][ T4505] Buffer I/O error on dev loop3, logical block 2068, async page read [ 62.127006][ T4500] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.320: bg 0: block 248: padding at end of block bitmap is not set [ 62.128860][ T4508] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 62.156620][ T4500] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz.2.320: Failed to acquire dquot type 1 [ 62.168362][ T4505] syz.3.319: attempt to access beyond end of device [ 62.168362][ T4505] loop3: rw=0, sector=2069, nr_sectors = 1 limit=128 [ 62.172783][ T4500] EXT4-fs (loop2): 1 truncate cleaned up [ 62.181600][ T4505] Buffer I/O error on dev loop3, logical block 2069, async page read [ 62.192924][ T4508] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 62.196011][ T4505] syz.3.319: attempt to access beyond end of device [ 62.196011][ T4505] loop3: rw=0, sector=2070, nr_sectors = 1 limit=128 [ 62.213450][ T4508] EXT4-fs (loop0): 1 truncate cleaned up [ 62.223427][ T4505] Buffer I/O error on dev loop3, logical block 2070, async page read [ 62.254477][ T4505] syz.3.319: attempt to access beyond end of device [ 62.254477][ T4505] loop3: rw=0, sector=2071, nr_sectors = 1 limit=128 [ 62.265964][ T4508] lo speed is unknown, defaulting to 1000 [ 62.267859][ T4505] Buffer I/O error on dev loop3, logical block 2071, async page read [ 62.268084][ T1754] EXT4-fs error (device loop2): ext4_release_dquot:7022: comm kworker/u8:10: Failed to release dquot type 1 [ 62.273723][ T4508] lo speed is unknown, defaulting to 1000 [ 62.303619][ T4508] lo speed is unknown, defaulting to 1000 [ 62.313497][ T4518] 9p: Bad value for 'rfdno' [ 62.319127][ T4508] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 62.327328][ T4505] syz.3.319: attempt to access beyond end of device [ 62.327328][ T4505] loop3: rw=0, sector=2072, nr_sectors = 1 limit=128 [ 62.340536][ T4505] Buffer I/O error on dev loop3, logical block 2072, async page read [ 62.350486][ T4508] lo speed is unknown, defaulting to 1000 [ 62.350759][ T4498] syz.3.319: attempt to access beyond end of device [ 62.350759][ T4498] loop3: rw=0, sector=2065, nr_sectors = 1 limit=128 [ 62.365522][ T4508] lo speed is unknown, defaulting to 1000 [ 62.369575][ T4498] Buffer I/O error on dev loop3, logical block 2065, async page read [ 62.384357][ T4508] lo speed is unknown, defaulting to 1000 [ 62.385970][ T4498] Buffer I/O error on dev loop3, logical block 2066, async page read [ 62.390855][ T4508] lo speed is unknown, defaulting to 1000 [ 62.424829][ T4508] lo speed is unknown, defaulting to 1000 [ 62.457739][ T4521] random: crng reseeded on system resumption [ 62.527665][ T4525] EXT4-fs: Ignoring removed oldalloc option [ 62.576679][ T4525] ext4 filesystem being mounted at /66/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 62.586711][ T4528] loop9: unable to read partition table [ 62.592782][ T4528] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 62.592782][ T4528] ) failed (rc=-5) [ 62.716515][ T4536] ext4 filesystem being mounted at /67/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 62.752996][ T4536] EXT4-fs error (device loop0): ext4_xattr_block_get:597: inode #12: comm syz.0.331: corrupted xattr block 6: invalid header [ 62.766581][ T4536] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=12 [ 62.775975][ T4536] EXT4-fs error (device loop0): ext4_xattr_block_get:597: inode #12: comm syz.0.331: corrupted xattr block 6: invalid header [ 62.789515][ T4536] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=12 [ 62.799346][ T4536] EXT4-fs error (device loop0): ext4_xattr_block_get:597: inode #12: comm syz.0.331: corrupted xattr block 6: invalid header [ 62.829162][ T4536] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=12 [ 62.838437][ T4536] EXT4-fs error (device loop0): ext4_xattr_block_get:597: inode #12: comm syz.0.331: corrupted xattr block 6: invalid header [ 62.852220][ T4536] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=12 [ 62.861231][ T4536] EXT4-fs error (device loop0): ext4_xattr_block_get:597: inode #12: comm syz.0.331: corrupted xattr block 6: invalid header [ 62.874983][ T4536] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=12 [ 62.893353][ T4536] EXT4-fs error (device loop0): ext4_xattr_block_get:597: inode #12: comm syz.0.331: corrupted xattr block 6: invalid header [ 62.945004][ T4551] 9p: Bad value for 'rfdno' [ 62.950077][ T4536] netlink: 'syz.0.331': attribute type 10 has an invalid length. [ 62.973330][ T4536] bond0: (slave dummy0): Releasing backup interface [ 63.002152][ T4536] netlink: 'syz.0.331': attribute type 10 has an invalid length. [ 63.015062][ T4547] loop9: unable to read partition table [ 63.026220][ T4536] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 63.029230][ T4547] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 63.029230][ T4547] ) failed (rc=-5) [ 63.149585][ T4562] ext4 filesystem being mounted at /68/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 63.164947][ T4566] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 63.172984][ T4566] FAT-fs (loop2): Filesystem has been set read-only [ 63.180936][ T4566] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 63.188951][ T4566] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 63.239904][ T4562] EXT4-fs error (device loop0): ext4_xattr_block_get:597: inode #12: comm syz.0.339: corrupted xattr block 6: invalid header [ 63.280009][ T4562] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=12 [ 63.283896][ T4578] 9p: Bad value for 'rfdno' [ 63.289101][ T4562] EXT4-fs error (device loop0): ext4_xattr_block_get:597: inode #12: comm syz.0.339: corrupted xattr block 6: invalid header [ 63.307357][ T4562] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=12 [ 63.308065][ T4580] netlink: 'syz.0.339': attribute type 10 has an invalid length. [ 63.358147][ T4562] EXT4-fs error (device loop0): ext4_xattr_block_get:597: inode #12: comm syz.0.339: corrupted xattr block 6: invalid header [ 63.409277][ T4562] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=12 [ 63.409338][ T4587] netlink: 'syz.0.339': attribute type 10 has an invalid length. [ 63.426975][ T4580] bond0: (slave dummy0): Releasing backup interface [ 63.436984][ T4587] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 63.446549][ T4562] EXT4-fs error (device loop0): ext4_xattr_block_get:597: inode #12: comm syz.0.339: corrupted xattr block 6: invalid header [ 63.460164][ T4562] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=12 [ 63.495991][ T4562] EXT4-fs error (device loop0): ext4_xattr_block_get:597: inode #12: comm syz.0.339: corrupted xattr block 6: invalid header [ 63.510061][ T4589] loop9: unable to read partition table [ 63.521329][ T4589] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 63.521329][ T4589] ) failed (rc=-5) [ 63.535020][ T4562] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=12 [ 63.545269][ T4562] EXT4-fs error (device loop0): ext4_xattr_block_get:597: inode #12: comm syz.0.339: corrupted xattr block 6: invalid header [ 63.644452][ T4593] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 63.675331][ T4593] EXT4-fs (loop0): 1 truncate cleaned up [ 63.741052][ T4603] EXT4-fs: Ignoring removed bh option [ 63.761461][ T4603] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 63.783898][ T4603] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 63.799527][ T4584] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 63.833803][ T4603] EXT4-fs (loop4): 1 truncate cleaned up [ 63.848598][ T4584] bridge0: entered promiscuous mode [ 63.854210][ T4584] macsec1: entered promiscuous mode [ 63.867213][ T4584] bridge0: port 3(macsec1) entered blocking state [ 63.873904][ T4584] bridge0: port 3(macsec1) entered disabled state [ 63.889881][ T4609] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 63.913159][ T4584] macsec1: entered allmulticast mode [ 63.918651][ T4584] bridge0: entered allmulticast mode [ 63.933228][ T4609] EXT4-fs (loop0): 1 truncate cleaned up [ 63.950785][ T4584] macsec1: left allmulticast mode [ 63.952605][ T4603] siw: device registration error -23 [ 63.955951][ T4584] bridge0: left allmulticast mode [ 63.970938][ T4584] bridge0: left promiscuous mode [ 64.049415][ T4619] 9p: Bad value for 'rfdno' [ 64.086178][ T29] kauditd_printk_skb: 231 callbacks suppressed [ 64.086196][ T29] audit: type=1326 audit(1765171266.770:1146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4622 comm="syz.4.360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c67a7f749 code=0x7ffc0000 [ 64.121256][ T4623] set_capacity_and_notify: 21 callbacks suppressed [ 64.121286][ T4623] loop4: detected capacity change from 0 to 512 [ 64.134550][ T4626] netlink: 28 bytes leftover after parsing attributes in process `syz.2.364'. [ 64.143762][ T4621] loop3: detected capacity change from 0 to 1024 [ 64.151445][ T29] audit: type=1326 audit(1765171266.770:1147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4622 comm="syz.4.360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f9c67a7f749 code=0x7ffc0000 [ 64.175450][ T29] audit: type=1326 audit(1765171266.770:1148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4622 comm="syz.4.360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f9c67a7f783 code=0x7ffc0000 [ 64.198767][ T29] audit: type=1326 audit(1765171266.770:1149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4622 comm="syz.4.360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f9c67a7e1ff code=0x7ffc0000 [ 64.222517][ T29] audit: type=1326 audit(1765171266.770:1150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4622 comm="syz.4.360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f9c67a7f7d7 code=0x7ffc0000 [ 64.245954][ T29] audit: type=1326 audit(1765171266.770:1151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4622 comm="syz.4.360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9c67a7df90 code=0x7ffc0000 [ 64.269391][ T29] audit: type=1326 audit(1765171266.770:1152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4622 comm="syz.4.360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9c67a7f34b code=0x7ffc0000 [ 64.281808][ T4623] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 64.294980][ T29] audit: type=1326 audit(1765171266.890:1153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4622 comm="syz.4.360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f9c67a7e3aa code=0x7ffc0000 [ 64.303724][ T4628] netlink: 28 bytes leftover after parsing attributes in process `syz.2.364'. [ 64.326662][ T29] audit: type=1326 audit(1765171266.890:1154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4622 comm="syz.4.360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f9c67a7e3aa code=0x7ffc0000 [ 64.358880][ T29] audit: type=1326 audit(1765171266.960:1155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4622 comm="syz.4.360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f9c67a7de97 code=0x7ffc0000 [ 64.391504][ T4623] EXT4-fs (loop4): 1 truncate cleaned up [ 64.397848][ T4627] loop0: detected capacity change from 0 to 512 [ 64.425372][ T4627] ext4 filesystem being mounted at /73/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 64.456489][ T4627] EXT4-fs error (device loop0): ext4_xattr_block_get:597: inode #12: comm syz.0.363: corrupted xattr block 6: invalid header [ 64.471333][ T4627] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=12 [ 64.480694][ T4627] EXT4-fs error (device loop0): ext4_xattr_block_get:597: inode #12: comm syz.0.363: corrupted xattr block 6: invalid header [ 64.495743][ T4627] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=12 [ 64.505054][ T4627] EXT4-fs error (device loop0): ext4_xattr_block_get:597: inode #12: comm syz.0.363: corrupted xattr block 6: invalid header [ 64.522757][ T4627] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=12 [ 64.547041][ T4627] EXT4-fs error (device loop0): ext4_xattr_block_get:597: inode #12: comm syz.0.363: corrupted xattr block 6: invalid header [ 64.561417][ T4645] netlink: 256 bytes leftover after parsing attributes in process `syz.2.368'. [ 64.571031][ T4627] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=12 [ 64.580350][ T4627] EXT4-fs error (device loop0): ext4_xattr_block_get:597: inode #12: comm syz.0.363: corrupted xattr block 6: invalid header [ 64.599797][ T4641] netlink: 'syz.0.363': attribute type 10 has an invalid length. [ 64.613875][ T4647] loop4: detected capacity change from 0 to 1024 [ 64.630739][ T4650] loop1: detected capacity change from 0 to 128 [ 64.641438][ T4650] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 64.648470][ T4627] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=12 [ 64.649355][ T4650] FAT-fs (loop1): Filesystem has been set read-only [ 64.668373][ T4627] EXT4-fs error (device loop0): ext4_xattr_block_get:597: inode #12: comm syz.0.363: corrupted xattr block 6: invalid header [ 64.669487][ T4654] netlink: 'syz.0.363': attribute type 10 has an invalid length. [ 64.689567][ T4650] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 64.697504][ T4650] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 64.732850][ T4641] bond0: (slave dummy0): Releasing backup interface [ 64.755418][ T4654] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 64.794168][ T4657] loop4: detected capacity change from 0 to 512 [ 64.822968][ T4657] EXT4-fs: Ignoring removed bh option [ 64.837794][ T4657] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 64.857770][ T4657] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 64.872939][ T4657] EXT4-fs (loop4): 1 truncate cleaned up [ 64.941497][ T4657] siw: device registration error -23 [ 64.949861][ T4670] 9p: Bad value for 'rfdno' [ 65.008291][ T4674] netlink: 28 bytes leftover after parsing attributes in process `syz.4.376'. [ 65.027657][ T4674] netlink: 28 bytes leftover after parsing attributes in process `syz.4.376'. [ 65.045524][ T4676] loop2: detected capacity change from 0 to 1024 [ 65.073635][ T4678] loop4: detected capacity change from 0 to 512 [ 65.088242][ T4678] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 65.121341][ T4678] EXT4-fs (loop4): 1 truncate cleaned up [ 65.159587][ T4683] loop2: detected capacity change from 0 to 1024 [ 65.248707][ T4687] netlink: 4 bytes leftover after parsing attributes in process `syz.4.380'. [ 65.285590][ T4691] loop2: detected capacity change from 0 to 1024 [ 65.351854][ T4697] EXT4-fs: Ignoring removed bh option [ 65.360519][ T4697] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 65.383069][ T4697] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 65.407018][ T4697] EXT4-fs (loop4): 1 truncate cleaned up [ 65.443093][ T4702] EXT4-fs: Ignoring removed bh option [ 65.449110][ T4702] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 65.474100][ T4702] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 65.502605][ T4702] EXT4-fs (loop2): 1 truncate cleaned up [ 65.572434][ T4711] netlink: 28 bytes leftover after parsing attributes in process `syz.2.388'. [ 65.602375][ T4711] netlink: 28 bytes leftover after parsing attributes in process `syz.2.388'. [ 65.789244][ T4727] EXT4-fs: Ignoring removed oldalloc option [ 65.799707][ T4720] random: crng reseeded on system resumption [ 65.814480][ T4713] random: crng reseeded on system resumption [ 65.844742][ T4727] ext4 filesystem being mounted at /89/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 65.883342][ T4727] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.392: bg 0: block 217: padding at end of block bitmap is not set [ 65.932972][ T4710] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 65.936418][ T4710] bridge0: entered promiscuous mode [ 65.936494][ T4710] macsec1: entered promiscuous mode [ 65.937566][ T4710] bridge0: port 3(macsec1) entered blocking state [ 65.937603][ T4710] bridge0: port 3(macsec1) entered disabled state [ 65.937770][ T4710] macsec1: entered allmulticast mode [ 65.937787][ T4710] bridge0: entered allmulticast mode [ 65.938451][ T4710] macsec1: left allmulticast mode [ 65.938466][ T4710] bridge0: left allmulticast mode [ 65.944156][ T4710] bridge0: left promiscuous mode [ 65.976402][ T4738] random: crng reseeded on system resumption [ 66.085387][ T4748] netlink: 8 bytes leftover after parsing attributes in process `syz.3.400'. [ 66.094717][ T4748] netlink: 8 bytes leftover after parsing attributes in process `syz.3.400'. [ 66.138811][ T4752] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 66.195931][ T4752] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1137: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 66.196071][ T4752] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.402: bg 0: block 248: padding at end of block bitmap is not set [ 66.230074][ T4752] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.402: Failed to acquire dquot type 1 [ 66.249225][ T4752] EXT4-fs (loop3): 1 truncate cleaned up [ 66.278187][ T4756] random: crng reseeded on system resumption [ 66.336393][ T189] EXT4-fs error (device loop3): ext4_release_dquot:7022: comm kworker/u8:6: Failed to release dquot type 1 [ 66.412431][ T4774] EXT4-fs: Ignoring removed bh option [ 66.418657][ T4774] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 66.429956][ T4774] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 66.444713][ T4774] EXT4-fs (loop2): 1 truncate cleaned up [ 67.032319][ T4782] random: crng reseeded on system resumption [ 67.069726][ T4784] vlan2: entered allmulticast mode [ 67.132641][ T4494] buffer_io_error: 82691 callbacks suppressed [ 67.132681][ T4494] Buffer I/O error on dev loop9, logical block 0, async page read [ 67.147308][ T4494] Buffer I/O error on dev loop9, logical block 0, async page read [ 67.155263][ T4494] loop9: unable to read partition table [ 67.170024][ T4786] Buffer I/O error on dev loop9, logical block 0, async page read [ 67.178124][ T4786] Buffer I/O error on dev loop9, logical block 0, async page read [ 67.186108][ T4786] loop9: unable to read partition table [ 67.202742][ T4786] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 67.202742][ T4786] ) failed (rc=-5) [ 67.222555][ T4494] Buffer I/O error on dev loop9, logical block 0, async page read [ 67.230540][ T4494] Buffer I/O error on dev loop9, logical block 0, async page read [ 67.272239][ T4494] Buffer I/O error on dev loop9, logical block 0, async page read [ 67.280672][ T4494] Buffer I/O error on dev loop9, logical block 0, async page read [ 67.293241][ T4494] Buffer I/O error on dev loop9, logical block 0, async page read [ 67.455818][ T4806] ext4 filesystem being mounted at /81/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 67.474410][ T4806] EXT4-fs error (device loop0): ext4_xattr_block_get:597: inode #12: comm syz.0.422: corrupted xattr block 6: invalid header [ 67.499889][ T4812] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 67.507856][ T4812] FAT-fs (loop3): Filesystem has been set read-only [ 67.521212][ T4806] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=12 [ 67.537507][ T4814] netlink: 'syz.2.424': attribute type 32 has an invalid length. [ 67.548561][ T4812] bio_check_eod: 85333 callbacks suppressed [ 67.548585][ T4812] syz.3.423: attempt to access beyond end of device [ 67.548585][ T4812] loop3: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 67.565557][ T4806] EXT4-fs error (device loop0): ext4_xattr_block_get:597: inode #12: comm syz.0.422: corrupted xattr block 6: invalid header [ 67.573363][ T4817] netlink: 'syz.0.422': attribute type 10 has an invalid length. [ 67.583053][ T4812] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 67.592558][ T4806] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=12 [ 67.597653][ T4812] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 67.613327][ T4806] EXT4-fs error (device loop0): ext4_xattr_block_get:597: inode #12: comm syz.0.422: corrupted xattr block 6: invalid header [ 67.628088][ T4819] syz.3.423: attempt to access beyond end of device [ 67.628088][ T4819] loop3: rw=0, sector=2065, nr_sectors = 1 limit=128 [ 67.641530][ T4819] Buffer I/O error on dev loop3, logical block 2065, async page read [ 67.651711][ T4817] bond0: (slave dummy0): Releasing backup interface [ 67.659270][ T4820] netlink: 'syz.0.422': attribute type 10 has an invalid length. [ 67.660182][ T4806] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=12 [ 67.676554][ T4819] syz.3.423: attempt to access beyond end of device [ 67.676554][ T4819] loop3: rw=0, sector=2066, nr_sectors = 1 limit=128 [ 67.690585][ T4819] syz.3.423: attempt to access beyond end of device [ 67.690585][ T4819] loop3: rw=0, sector=2067, nr_sectors = 1 limit=128 [ 67.705001][ T4806] EXT4-fs error (device loop0): ext4_xattr_block_get:597: inode #12: comm syz.0.422: corrupted xattr block 6: invalid header [ 67.714940][ T4820] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 67.752935][ T4819] syz.3.423: attempt to access beyond end of device [ 67.752935][ T4819] loop3: rw=0, sector=2068, nr_sectors = 1 limit=128 [ 67.769864][ T4824] vlan2: entered allmulticast mode [ 67.775289][ T4819] syz.3.423: attempt to access beyond end of device [ 67.775289][ T4819] loop3: rw=0, sector=2069, nr_sectors = 1 limit=128 [ 67.788744][ T4806] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=12 [ 67.801678][ T4806] EXT4-fs error (device loop0): ext4_xattr_block_get:597: inode #12: comm syz.0.422: corrupted xattr block 6: invalid header [ 67.815153][ T4819] syz.3.423: attempt to access beyond end of device [ 67.815153][ T4819] loop3: rw=0, sector=2070, nr_sectors = 1 limit=128 [ 67.828473][ T4806] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=12 [ 67.837896][ T4819] syz.3.423: attempt to access beyond end of device [ 67.837896][ T4819] loop3: rw=0, sector=2071, nr_sectors = 1 limit=128 [ 67.851893][ T4806] EXT4-fs error (device loop0): ext4_xattr_block_get:597: inode #12: comm syz.0.422: corrupted xattr block 6: invalid header [ 67.865234][ T4819] syz.3.423: attempt to access beyond end of device [ 67.865234][ T4819] loop3: rw=0, sector=2072, nr_sectors = 1 limit=128 [ 67.879123][ T4819] syz.3.423: attempt to access beyond end of device [ 67.879123][ T4819] loop3: rw=0, sector=2065, nr_sectors = 1 limit=128 [ 67.961455][ T4833] EXT4-fs: Ignoring removed bh option [ 68.014164][ T4833] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 68.033065][ T4833] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 68.048324][ T4833] EXT4-fs (loop0): 1 truncate cleaned up [ 68.157460][ T4840] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 68.354752][ T4854] vlan2: entered allmulticast mode [ 68.405372][ T4856] EXT4-fs: Ignoring removed bh option [ 68.422896][ T4856] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 68.454818][ T4856] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 68.482359][ T4856] EXT4-fs (loop2): 1 truncate cleaned up [ 68.581553][ T4852] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 68.766671][ T4886] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 68.774779][ T4886] FAT-fs (loop3): Filesystem has been set read-only [ 68.791923][ T4886] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 68.800011][ T4886] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 68.874760][ T4890] random: crng reseeded on system resumption [ 68.901991][ T4895] ext4 filesystem being mounted at /87/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 69.004069][ T4905] EXT4-fs: Ignoring removed bh option [ 69.023693][ T4905] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 69.066469][ T4905] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 69.082421][ T4905] EXT4-fs (loop4): 1 truncate cleaned up [ 69.090496][ T4911] EXT4-fs mount: 202 callbacks suppressed [ 69.090515][ T4911] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.109729][ T4905] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.138676][ T4914] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.153923][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.164102][ T4905] siw: device registration error -23 [ 69.183309][ T4914] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.265786][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.386035][ T4936] set_capacity_and_notify: 28 callbacks suppressed [ 69.386057][ T4936] loop0: detected capacity change from 0 to 512 [ 69.424481][ T4939] loop4: detected capacity change from 0 to 1024 [ 69.454406][ T4939] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.493683][ T4936] EXT4-fs: Ignoring removed oldalloc option [ 69.499683][ T29] kauditd_printk_skb: 154 callbacks suppressed [ 69.499696][ T29] audit: type=1326 audit(1765171272.180:1307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4942 comm="syz.2.465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a7946f749 code=0x7ffc0000 [ 69.510289][ T4943] FAULT_INJECTION: forcing a failure. [ 69.510289][ T4943] name failslab, interval 1, probability 0, space 0, times 0 [ 69.530399][ T29] audit: type=1326 audit(1765171272.180:1308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4942 comm="syz.2.465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a7946f749 code=0x7ffc0000 [ 69.542325][ T4943] CPU: 1 UID: 0 PID: 4943 Comm: syz.2.465 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 69.542429][ T4943] Tainted: [W]=WARN [ 69.542438][ T4943] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 69.542453][ T4943] Call Trace: [ 69.542460][ T4943] [ 69.542468][ T4943] __dump_stack+0x1d/0x30 [ 69.542516][ T4943] dump_stack_lvl+0xe8/0x140 [ 69.542544][ T4943] dump_stack+0x15/0x1b [ 69.542578][ T4943] should_fail_ex+0x265/0x280 [ 69.542652][ T4943] should_failslab+0x8c/0xb0 [ 69.542680][ T4943] __kmalloc_node_track_caller_noprof+0xb9/0x5b0 [ 69.542710][ T4943] ? sidtab_sid2str_get+0xa0/0x130 [ 69.542771][ T4943] kmemdup_noprof+0x2b/0x70 [ 69.542795][ T4943] sidtab_sid2str_get+0xa0/0x130 [ 69.542833][ T4943] security_sid_to_context_core+0x1eb/0x2e0 [ 69.542911][ T4943] security_sid_to_context+0x27/0x40 [ 69.542953][ T4943] selinux_lsmprop_to_secctx+0x67/0xf0 [ 69.542998][ T4943] security_lsmprop_to_secctx+0x1a3/0x1c0 [ 69.543093][ T4943] audit_log_subj_ctx+0xa4/0x3e0 [ 69.543163][ T4943] ? skb_put+0xa9/0xf0 [ 69.543198][ T4943] audit_log_task_context+0x48/0x70 [ 69.543232][ T4943] audit_log_task+0xf4/0x250 [ 69.543405][ T4943] ? kstrtouint+0x76/0xc0 [ 69.543432][ T4943] audit_seccomp+0x61/0x100 [ 69.543477][ T4943] ? __seccomp_filter+0x832/0x1260 [ 69.543516][ T4943] __seccomp_filter+0x843/0x1260 [ 69.543612][ T4943] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 69.543654][ T4943] ? vfs_write+0x7e8/0x960 [ 69.543725][ T4943] ? __rcu_read_unlock+0x4f/0x70 [ 69.543754][ T4943] ? __fget_files+0x184/0x1c0 [ 69.543888][ T4943] __secure_computing+0x82/0x150 [ 69.544015][ T4943] syscall_trace_enter+0xcf/0x1e0 [ 69.544050][ T4943] do_syscall_64+0xb2/0x2a0 [ 69.544105][ T4943] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.544196][ T4943] RIP: 0033:0x7f6a7946f749 [ 69.544231][ T4943] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 69.544256][ T4943] RSP: 002b:00007f6a77ecf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000043 [ 69.544282][ T4943] RAX: ffffffffffffffda RBX: 00007f6a796c5fa0 RCX: 00007f6a7946f749 [ 69.544299][ T4943] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000ff1000 [ 69.544317][ T4943] RBP: 00007f6a77ecf090 R08: 0000000000000000 R09: 0000000000000000 [ 69.544333][ T4943] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 69.544385][ T4943] R13: 00007f6a796c6038 R14: 00007f6a796c5fa0 R15: 00007ffe5f761e58 [ 69.544437][ T4943] [ 69.544451][ T4943] audit: error in audit_log_subj_ctx [ 69.634353][ T4936] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.637751][ T29] audit: type=1326 audit(1765171272.180:1309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4942 comm="syz.2.465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7f6a7946f749 code=0x7ffc0000 [ 69.685868][ T4936] ext4 filesystem being mounted at /90/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 69.687899][ T29] audit: type=1326 audit(1765171272.190:1310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4942 comm="syz.2.465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a7946f749 code=0x7ffc0000 [ 69.750952][ T4947] loop2: detected capacity change from 0 to 512 [ 69.768194][ T29] audit: type=1326 audit(1765171272.190:1311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4942 comm="syz.2.465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=30 compat=0 ip=0x7f6a7946f749 code=0x7ffc0000 [ 69.783419][ T4932] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.462: bg 0: block 217: padding at end of block bitmap is not set [ 69.784944][ T29] audit: type=1326 audit(1765171272.190:1312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4942 comm="syz.2.465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a7946f749 code=0x7ffc0000 [ 69.861833][ T4947] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.863085][ T29] audit: type=1326 audit(1765171272.190:1313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4942 comm="syz.2.465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6a7946df90 code=0x7ffc0000 [ 69.873644][ T4947] ext4 filesystem being mounted at /107/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 69.897290][ T29] audit: type=1326 audit(1765171272.190:1314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4942 comm="syz.2.465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f6a7946e1ff code=0x7ffc0000 [ 70.036153][ T29] audit: type=1326 audit(1765171272.190:1315): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=4942 comm="syz.2.465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=67 compat=0 ip=0x7f6a7946f749 code=0x7ffc0000 [ 70.062802][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.073019][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.078078][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.113567][ T4951] loop3: detected capacity change from 0 to 1024 [ 70.139126][ T4957] loop0: detected capacity change from 0 to 1024 [ 70.143053][ T4954] loop2: detected capacity change from 0 to 1024 [ 70.154294][ T4951] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.193850][ T4954] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.233593][ T4954] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.244611][ T4964] loop1: detected capacity change from 0 to 512 [ 70.251440][ T4964] EXT4-fs: Ignoring removed bh option [ 70.258848][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.258927][ T4957] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.284796][ T4965] loop4: detected capacity change from 0 to 512 [ 70.303651][ T4964] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 70.335408][ T4965] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 70.353762][ T4969] __nla_validate_parse: 6 callbacks suppressed [ 70.353791][ T4969] netlink: 16 bytes leftover after parsing attributes in process `syz.3.473'. [ 70.379838][ T4964] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 70.395976][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.426099][ T4965] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1137: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 70.442218][ T4964] EXT4-fs (loop1): 1 truncate cleaned up [ 70.451234][ T4965] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.472: bg 0: block 248: padding at end of block bitmap is not set [ 70.452532][ T4964] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.480645][ T4965] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.472: Failed to acquire dquot type 1 [ 70.520585][ T4965] EXT4-fs (loop4): 1 truncate cleaned up [ 70.527569][ T4965] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 70.590797][ T4988] loop0: detected capacity change from 0 to 512 [ 70.606477][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 70.616493][ T4988] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 70.617107][ T1754] EXT4-fs error (device loop4): ext4_release_dquot:7022: comm kworker/u8:10: Failed to release dquot type 1 [ 70.650547][ T4988] EXT4-fs warning (device loop0): ext4_update_dynamic_rev:1137: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 70.650710][ T4988] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.480: bg 0: block 248: padding at end of block bitmap is not set [ 70.650926][ T4988] EXT4-fs error (device loop0): ext4_acquire_dquot:6986: comm syz.0.480: Failed to acquire dquot type 1 [ 70.651436][ T4988] EXT4-fs (loop0): 1 truncate cleaned up [ 70.651965][ T4988] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 70.718947][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 70.729634][ T1754] EXT4-fs error (device loop0): ext4_release_dquot:7022: comm kworker/u8:10: Failed to release dquot type 1 [ 70.770155][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.812754][ T5004] loop0: detected capacity change from 0 to 1024 [ 70.830981][ T5004] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.897437][ T5010] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.910516][ T5000] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 70.917836][ T5004] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.926292][ T5000] bridge0: entered promiscuous mode [ 70.934343][ T5000] macsec1: entered promiscuous mode [ 70.940614][ T5000] bridge0: port 3(macsec1) entered blocking state [ 70.947218][ T5000] bridge0: port 3(macsec1) entered disabled state [ 70.956907][ T4998] loop9: unable to read partition table [ 70.968187][ T5000] macsec1: entered allmulticast mode [ 70.973575][ T5000] bridge0: entered allmulticast mode [ 70.984532][ T4998] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 70.984532][ T4998] ) failed (rc=-5) [ 71.079244][ T5000] macsec1: left allmulticast mode [ 71.084456][ T5000] bridge0: left allmulticast mode [ 71.101094][ T5000] bridge0: left promiscuous mode [ 71.153791][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.264028][ T5030] xt_TCPMSS: Only works on TCP SYN packets [ 71.287996][ T5023] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.453976][ T5023] ext4 filesystem being mounted at /95/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 71.604389][ T5034] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.660437][ T5023] netlink: 'syz.0.493': attribute type 10 has an invalid length. [ 71.682674][ T5023] bond0: (slave dummy0): Releasing backup interface [ 71.713299][ T5039] netlink: 'syz.0.493': attribute type 10 has an invalid length. [ 71.807640][ T5039] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 72.019346][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.084893][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.121139][ T5029] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 72.232217][ T5050] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 72.333193][ T5050] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1137: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 72.374440][ T5059] EXT4-fs: Ignoring removed bh option [ 72.403528][ T5050] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.502: bg 0: block 248: padding at end of block bitmap is not set [ 72.429654][ T5059] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 72.450733][ T5050] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.502: Failed to acquire dquot type 1 [ 72.470644][ T5059] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 72.516305][ T5050] EXT4-fs (loop4): 1 truncate cleaned up [ 72.536002][ T5050] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 72.551301][ T5059] EXT4-fs (loop1): 1 truncate cleaned up [ 72.571246][ T5059] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.613464][ T5066] netlink: 'syz.0.507': attribute type 10 has an invalid length. [ 72.665441][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 72.679336][ T31] EXT4-fs error (device loop4): ext4_release_dquot:7022: comm kworker/u8:1: Failed to release dquot type 1 [ 72.701685][ T5066] bond0: (slave dummy0): Releasing backup interface [ 72.741441][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.756113][ T5066] netlink: 'syz.0.507': attribute type 10 has an invalid length. [ 72.787566][ T5066] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 72.955119][ T5080] netlink: 8 bytes leftover after parsing attributes in process `syz.3.514'. [ 72.991156][ T5084] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 72.999077][ T5084] FAT-fs (loop0): Filesystem has been set read-only [ 73.036760][ T5082] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.066895][ T5084] bio_check_eod: 57211 callbacks suppressed [ 73.066918][ T5084] syz.0.516: attempt to access beyond end of device [ 73.066918][ T5084] loop0: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 73.122587][ T5084] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 73.130478][ T5084] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 73.193204][ T5088] syz.0.516: attempt to access beyond end of device [ 73.193204][ T5088] loop0: rw=0, sector=2065, nr_sectors = 1 limit=128 [ 73.206431][ T5088] buffer_io_error: 56750 callbacks suppressed [ 73.206479][ T5088] Buffer I/O error on dev loop0, logical block 2065, async page read [ 73.241626][ T5088] syz.0.516: attempt to access beyond end of device [ 73.241626][ T5088] loop0: rw=0, sector=2066, nr_sectors = 1 limit=128 [ 73.254914][ T5088] Buffer I/O error on dev loop0, logical block 2066, async page read [ 73.266273][ T5088] syz.0.516: attempt to access beyond end of device [ 73.266273][ T5088] loop0: rw=0, sector=2067, nr_sectors = 1 limit=128 [ 73.279495][ T5088] Buffer I/O error on dev loop0, logical block 2067, async page read [ 73.288305][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.321499][ T5088] syz.0.516: attempt to access beyond end of device [ 73.321499][ T5088] loop0: rw=0, sector=2068, nr_sectors = 1 limit=128 [ 73.334855][ T5088] Buffer I/O error on dev loop0, logical block 2068, async page read [ 73.342280][ T5099] EXT4-fs: Ignoring removed bh option [ 73.344763][ T5088] syz.0.516: attempt to access beyond end of device [ 73.344763][ T5088] loop0: rw=0, sector=2069, nr_sectors = 1 limit=128 [ 73.362176][ T5088] Buffer I/O error on dev loop0, logical block 2069, async page read [ 73.370729][ T5088] syz.0.516: attempt to access beyond end of device [ 73.370729][ T5088] loop0: rw=0, sector=2070, nr_sectors = 1 limit=128 [ 73.384188][ T5088] Buffer I/O error on dev loop0, logical block 2070, async page read [ 73.392482][ T5099] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 73.404140][ T5088] syz.0.516: attempt to access beyond end of device [ 73.404140][ T5088] loop0: rw=0, sector=2071, nr_sectors = 1 limit=128 [ 73.417372][ T5088] Buffer I/O error on dev loop0, logical block 2071, async page read [ 73.422995][ T5094] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.426082][ T5088] syz.0.516: attempt to access beyond end of device [ 73.426082][ T5088] loop0: rw=0, sector=2072, nr_sectors = 1 limit=128 [ 73.439140][ T5099] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1306: group 0, [ 73.451007][ T5088] Buffer I/O error on dev loop0, logical block 2072, async page read [ 73.451018][ T5099] block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 73.480630][ T5088] syz.0.516: attempt to access beyond end of device [ 73.480630][ T5088] loop0: rw=0, sector=2065, nr_sectors = 1 limit=128 [ 73.493915][ T5088] Buffer I/O error on dev loop0, logical block 2065, async page read [ 73.502303][ T5088] Buffer I/O error on dev loop0, logical block 2066, async page read [ 73.511371][ T5099] EXT4-fs (loop1): 1 truncate cleaned up [ 73.522686][ T5099] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.585628][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.633948][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.658511][ T5113] netlink: 4 bytes leftover after parsing attributes in process `syz.4.525'. [ 73.679613][ T5117] EXT4-fs: Ignoring removed bh option [ 73.731092][ T5119] EXT4-fs: Ignoring removed bh option [ 73.737731][ T5119] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 73.748684][ T5117] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 73.767044][ T5117] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 73.789221][ T5117] EXT4-fs (loop1): 1 truncate cleaned up [ 73.797664][ T5119] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 73.822874][ T5117] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.848056][ T5119] EXT4-fs (loop3): 1 truncate cleaned up [ 73.865202][ T5119] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.915746][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.950959][ T5133] EXT4-fs: Ignoring removed bh option [ 73.958356][ T5117] siw: device registration error -23 [ 73.988015][ T5132] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.005573][ T5133] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 74.022030][ T5137] netlink: 256 bytes leftover after parsing attributes in process `syz.2.532'. [ 74.043278][ T5132] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.053452][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.053768][ T5133] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 74.124415][ T5142] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.138025][ T5142] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.147373][ T5133] EXT4-fs (loop4): 1 truncate cleaned up [ 74.154253][ T5133] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.176326][ T5146] FAULT_INJECTION: forcing a failure. [ 74.176326][ T5146] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 74.189641][ T5146] CPU: 1 UID: 0 PID: 5146 Comm: syz.0.535 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 74.189746][ T5146] Tainted: [W]=WARN [ 74.189753][ T5146] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 74.189766][ T5146] Call Trace: [ 74.189776][ T5146] [ 74.189785][ T5146] __dump_stack+0x1d/0x30 [ 74.189848][ T5146] dump_stack_lvl+0xe8/0x140 [ 74.189873][ T5146] dump_stack+0x15/0x1b [ 74.189900][ T5146] should_fail_ex+0x265/0x280 [ 74.189931][ T5146] should_fail+0xb/0x20 [ 74.189954][ T5146] should_fail_usercopy+0x1a/0x20 [ 74.190006][ T5146] _copy_from_iter+0xcf/0xe70 [ 74.190046][ T5146] ? alloc_pages_mpol+0x217/0x260 [ 74.190088][ T5146] copy_page_from_iter+0x178/0x2a0 [ 74.190167][ T5146] tun_get_user+0x679/0x2670 [ 74.190258][ T5146] ? ref_tracker_alloc+0x1f2/0x2f0 [ 74.190353][ T5146] tun_chr_write_iter+0x15e/0x210 [ 74.190379][ T5146] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 74.190400][ T5146] vfs_write+0x52a/0x960 [ 74.190423][ T5146] ksys_write+0xda/0x1a0 [ 74.190443][ T5146] __x64_sys_write+0x40/0x50 [ 74.190518][ T5146] x64_sys_call+0x2847/0x3000 [ 74.190549][ T5146] do_syscall_64+0xd8/0x2a0 [ 74.190582][ T5146] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.190603][ T5146] RIP: 0033:0x7f286b41e1ff [ 74.190619][ T5146] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 74.190649][ T5146] RSP: 002b:00007f2869e87000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 74.190671][ T5146] RAX: ffffffffffffffda RBX: 00007f286b675fa0 RCX: 00007f286b41e1ff [ 74.190682][ T5146] RDX: 000000000000004e RSI: 00002000000001c0 RDI: 00000000000000c8 [ 74.190694][ T5146] RBP: 00007f2869e87090 R08: 0000000000000000 R09: 0000000000000000 [ 74.190709][ T5146] R10: 000000000000004e R11: 0000000000000293 R12: 0000000000000001 [ 74.190725][ T5146] R13: 00007f286b676038 R14: 00007f286b675fa0 R15: 00007ffe475fce68 [ 74.190749][ T5146] [ 74.200142][ T5148] vlan2: entered allmulticast mode [ 74.431885][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.468891][ T5153] set_capacity_and_notify: 15 callbacks suppressed [ 74.468910][ T5153] loop3: detected capacity change from 0 to 1024 [ 74.470340][ T5155] loop2: detected capacity change from 0 to 512 [ 74.496571][ T5155] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.510953][ T5155] ext4 filesystem being mounted at /121/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 74.519035][ T5153] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.556424][ T5155] EXT4-fs error (device loop2): ext4_xattr_block_get:597: inode #12: comm syz.2.539: corrupted xattr block 6: invalid header [ 74.569994][ T5155] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=12 [ 74.579885][ T5155] EXT4-fs error (device loop2): ext4_xattr_block_get:597: inode #12: comm syz.2.539: corrupted xattr block 6: invalid header [ 74.593568][ T5155] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=12 [ 74.602725][ T5155] EXT4-fs error (device loop2): ext4_xattr_block_get:597: inode #12: comm syz.2.539: corrupted xattr block 6: invalid header [ 74.616225][ T5155] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=12 [ 74.625577][ T5155] EXT4-fs error (device loop2): ext4_xattr_block_get:597: inode #12: comm syz.2.539: corrupted xattr block 6: invalid header [ 74.640878][ T5155] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=12 [ 74.652444][ T29] kauditd_printk_skb: 98 callbacks suppressed [ 74.652459][ T29] audit: type=1400 audit(1765171277.340:1405): avc: denied { add_name } for pid=5154 comm="syz.2.539" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 74.652444][ T5155] EXT4-fs error (device loop2): ext4_xattr_block_get:597: inode #12: comm syz.2.539: corrupted xattr block 6: invalid header [ 74.701002][ T5155] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=12 [ 74.710400][ T29] audit: type=1400 audit(1765171277.390:1406): avc: denied { create } for pid=5154 comm="syz.2.539" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=sock_file permissive=1 [ 74.711223][ T5155] EXT4-fs error (device loop2): ext4_xattr_block_get:597: inode #12: comm syz.2.539: corrupted xattr block 6: invalid header [ 74.753051][ T5166] loop1: detected capacity change from 0 to 512 [ 74.759926][ T5166] EXT4-fs: Ignoring removed oldalloc option [ 74.766769][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.788563][ T5166] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.810989][ T5166] ext4 filesystem being mounted at /95/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 74.832690][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.842800][ T29] audit: type=1326 audit(1765171277.510:1407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5170 comm="syz.3.542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51f5f8f749 code=0x7ffc0000 [ 74.866219][ T29] audit: type=1326 audit(1765171277.510:1408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5170 comm="syz.3.542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=284 compat=0 ip=0x7f51f5f8f749 code=0x7ffc0000 [ 74.889711][ T29] audit: type=1326 audit(1765171277.510:1409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5170 comm="syz.3.542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51f5f8f749 code=0x7ffc0000 [ 74.913290][ T29] audit: type=1326 audit(1765171277.520:1410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5170 comm="syz.3.542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f51f5f8df90 code=0x7ffc0000 [ 74.924483][ T5166] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.541: bg 0: block 217: padding at end of block bitmap is not set [ 74.936688][ T29] audit: type=1326 audit(1765171277.520:1411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5170 comm="syz.3.542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f51f5f8df90 code=0x7ffc0000 [ 74.974366][ T29] audit: type=1326 audit(1765171277.520:1412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5170 comm="syz.3.542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51f5f8f749 code=0x7ffc0000 [ 74.984258][ T5174] loop4: detected capacity change from 0 to 512 [ 74.997729][ T29] audit: type=1326 audit(1765171277.520:1413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5170 comm="syz.3.542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f51f5f8f749 code=0x7ffc0000 [ 75.027586][ T29] audit: type=1326 audit(1765171277.520:1414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5170 comm="syz.3.542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51f5f8f749 code=0x7ffc0000 [ 75.054544][ T5174] EXT4-fs: Ignoring removed bh option [ 75.074676][ T5177] loop2: detected capacity change from 0 to 512 [ 75.103134][ T5174] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 75.115693][ T5177] EXT4-fs: Ignoring removed bh option [ 75.125384][ T5177] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 75.126248][ T5174] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 75.152491][ T5177] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 75.184063][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.194653][ T5177] EXT4-fs (loop2): 1 truncate cleaned up [ 75.200697][ T5177] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.213187][ T5174] EXT4-fs (loop4): 1 truncate cleaned up [ 75.219719][ T5174] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.318346][ T5189] loop1: detected capacity change from 0 to 1024 [ 75.324429][ T5177] siw: device registration error -23 [ 75.370819][ T5174] siw: device registration error -23 [ 75.397184][ T5191] xt_TCPMSS: Only works on TCP SYN packets [ 75.433824][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.453574][ T5189] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.587934][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.346892][ T5198] loop4: detected capacity change from 0 to 128 [ 76.375074][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.413690][ T5198] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 76.421726][ T5198] FAT-fs (loop4): Filesystem has been set read-only [ 76.494848][ T5198] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 76.502779][ T5198] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 76.646268][ T5196] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 76.753129][ T5196] bridge0: entered promiscuous mode [ 76.758473][ T5196] macsec1: entered promiscuous mode [ 76.798220][ T5196] bridge0: port 4(macsec1) entered blocking state [ 76.804773][ T5196] bridge0: port 4(macsec1) entered disabled state [ 76.853213][ T5196] macsec1: entered allmulticast mode [ 76.858580][ T5196] bridge0: entered allmulticast mode [ 76.905652][ T5196] macsec1: left allmulticast mode [ 76.911031][ T5196] bridge0: left allmulticast mode [ 76.926566][ T5196] bridge0: left promiscuous mode [ 76.955133][ T5213] loop3: detected capacity change from 0 to 512 [ 76.964107][ T5213] EXT4-fs: Ignoring removed oldalloc option [ 76.991873][ T5213] ext4 filesystem being mounted at /105/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 77.066881][ T5220] loop3: detected capacity change from 0 to 1024 [ 77.107180][ T5222] vlan2: entered allmulticast mode [ 77.184151][ T5227] loop3: detected capacity change from 0 to 512 [ 77.209436][ T5227] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 77.259984][ T5227] EXT4-fs (loop3): 1 truncate cleaned up [ 77.335661][ T5235] vlan2: entered allmulticast mode [ 77.360695][ T5237] netlink: 4 bytes leftover after parsing attributes in process `syz.1.564'. [ 77.434233][ T5243] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 77.442168][ T5243] FAT-fs (loop4): Filesystem has been set read-only [ 77.501575][ T5243] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 77.509635][ T5243] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 77.730785][ T5242] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 77.746802][ T5242] bridge0: entered promiscuous mode [ 77.752753][ T5242] macsec1: entered promiscuous mode [ 77.759100][ T5242] bridge0: port 3(macsec1) entered blocking state [ 77.765850][ T5242] bridge0: port 3(macsec1) entered disabled state [ 77.773366][ T5242] macsec1: entered allmulticast mode [ 77.778885][ T5242] bridge0: entered allmulticast mode [ 77.786582][ T5242] macsec1: left allmulticast mode [ 77.791674][ T5242] bridge0: left allmulticast mode [ 77.799345][ T5242] bridge0: left promiscuous mode [ 77.827544][ T5268] netlink: 4 bytes leftover after parsing attributes in process `syz.1.574'. [ 77.858125][ T5272] EXT4-fs: Ignoring removed bh option [ 77.873681][ T5272] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 77.905948][ T5274] netlink: 12 bytes leftover after parsing attributes in process `syz.1.576'. [ 77.939441][ T5272] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 77.967000][ T5272] EXT4-fs (loop2): 1 truncate cleaned up [ 77.976732][ T5279] vlan2: entered allmulticast mode [ 78.039609][ T5282] EXT4-fs: Ignoring removed oldalloc option [ 78.061741][ T5283] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 78.072016][ T5243] bio_check_eod: 74108 callbacks suppressed [ 78.078102][ T5243] syz.4.565: attempt to access beyond end of device [ 78.078102][ T5243] loop4: rw=0, sector=2072, nr_sectors = 1 limit=128 [ 78.092666][ T5243] syz.4.565: attempt to access beyond end of device [ 78.092666][ T5243] loop4: rw=0, sector=2065, nr_sectors = 1 limit=128 [ 78.106350][ T5243] syz.4.565: attempt to access beyond end of device [ 78.106350][ T5243] loop4: rw=0, sector=2066, nr_sectors = 1 limit=128 [ 78.131592][ T5285] netlink: 'syz.1.582': attribute type 10 has an invalid length. [ 78.141701][ T5285] bond0: (slave dummy0): Releasing backup interface [ 78.151513][ T5282] ext4 filesystem being mounted at /109/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 78.159770][ T5285] team0: Port device dummy0 added [ 78.165241][ T5283] EXT4-fs (loop3): 1 truncate cleaned up [ 78.173836][ T5243] syz.4.565: attempt to access beyond end of device [ 78.173836][ T5243] loop4: rw=0, sector=2067, nr_sectors = 1 limit=128 [ 78.187434][ T5285] netlink: 'syz.1.582': attribute type 10 has an invalid length. [ 78.202161][ T5243] syz.4.565: attempt to access beyond end of device [ 78.202161][ T5243] loop4: rw=0, sector=2068, nr_sectors = 1 limit=128 [ 78.215451][ T5243] buffer_io_error: 72201 callbacks suppressed [ 78.215467][ T5243] Buffer I/O error on dev loop4, logical block 2068, async page read [ 78.233041][ T5285] team0: Port device dummy0 removed [ 78.235128][ T5243] syz.4.565: attempt to access beyond end of device [ 78.235128][ T5243] loop4: rw=0, sector=2069, nr_sectors = 1 limit=128 [ 78.251584][ T5243] Buffer I/O error on dev loop4, logical block 2069, async page read [ 78.257408][ T5285] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 78.321531][ T5294] netlink: 4 bytes leftover after parsing attributes in process `syz.2.584'. [ 78.338577][ T5243] syz.4.565: attempt to access beyond end of device [ 78.338577][ T5243] loop4: rw=0, sector=2070, nr_sectors = 1 limit=128 [ 78.351908][ T5243] Buffer I/O error on dev loop4, logical block 2070, async page read [ 78.363246][ T5243] syz.4.565: attempt to access beyond end of device [ 78.363246][ T5243] loop4: rw=0, sector=2071, nr_sectors = 1 limit=128 [ 78.376603][ T5243] Buffer I/O error on dev loop4, logical block 2071, async page read [ 78.384767][ T5243] syz.4.565: attempt to access beyond end of device [ 78.384767][ T5243] loop4: rw=0, sector=2072, nr_sectors = 1 limit=128 [ 78.398092][ T5243] Buffer I/O error on dev loop4, logical block 2072, async page read [ 78.406614][ T5243] syz.4.565: attempt to access beyond end of device [ 78.406614][ T5243] loop4: rw=0, sector=2065, nr_sectors = 1 limit=128 [ 78.419897][ T5243] Buffer I/O error on dev loop4, logical block 2065, async page read [ 78.428294][ T5243] Buffer I/O error on dev loop4, logical block 2066, async page read [ 78.438027][ T5243] Buffer I/O error on dev loop4, logical block 2067, async page read [ 78.446339][ T5243] Buffer I/O error on dev loop4, logical block 2068, async page read [ 78.454624][ T5243] Buffer I/O error on dev loop4, logical block 2069, async page read [ 78.471297][ T5304] netlink: 256 bytes leftover after parsing attributes in process `syz.3.587'. [ 78.610129][ T5312] netlink: 4 bytes leftover after parsing attributes in process `syz.3.590'. [ 78.729654][ T5330] random: crng reseeded on system resumption [ 78.944402][ T5336] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 79.147419][ T5345] ext4 filesystem being mounted at /141/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 79.162132][ T5345] EXT4-fs error (device loop2): ext4_xattr_block_get:597: inode #12: comm syz.2.601: corrupted xattr block 6: invalid header [ 79.179057][ T5345] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=12 [ 79.189357][ T5345] EXT4-fs error (device loop2): ext4_xattr_block_get:597: inode #12: comm syz.2.601: corrupted xattr block 6: invalid header [ 79.202943][ T5345] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=12 [ 79.212464][ T5350] netlink: 8 bytes leftover after parsing attributes in process `syz.0.602'. [ 79.212478][ T5345] EXT4-fs error (device loop2): ext4_xattr_block_get:597: inode #12: comm syz.2.601: corrupted xattr block 6: invalid header [ 79.213365][ T5345] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=12 [ 79.221434][ T5350] netlink: 8 bytes leftover after parsing attributes in process `syz.0.602'. [ 79.237735][ T5345] EXT4-fs error (device loop2): ext4_xattr_block_get:597: inode #12: comm syz.2.601: corrupted xattr block 6: invalid header [ 79.266469][ T5345] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=12 [ 79.275884][ T5345] EXT4-fs error (device loop2): ext4_xattr_block_get:597: inode #12: comm syz.2.601: corrupted xattr block 6: invalid header [ 79.289228][ T5345] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=12 [ 79.299151][ T5345] EXT4-fs error (device loop2): ext4_xattr_block_get:597: inode #12: comm syz.2.601: corrupted xattr block 6: invalid header [ 79.340384][ T5353] EXT4-fs: Ignoring removed bh option [ 79.353125][ T5353] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 79.369857][ T5353] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 79.389135][ T5353] EXT4-fs (loop2): 1 truncate cleaned up [ 79.421351][ T5353] siw: device registration error -23 [ 79.464825][ T5363] EXT4-fs: Ignoring removed bh option [ 79.470793][ T5363] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 79.484776][ T5363] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 79.500472][ T5363] EXT4-fs (loop1): 1 truncate cleaned up [ 79.576531][ T5363] siw: device registration error -23 [ 79.604904][ T5374] set_capacity_and_notify: 15 callbacks suppressed [ 79.604924][ T5374] loop3: detected capacity change from 0 to 4096 [ 79.653580][ T5377] loop1: detected capacity change from 0 to 512 [ 79.670553][ T5377] EXT4-fs: Ignoring removed bh option [ 79.694252][ T5377] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 79.720246][ T29] kauditd_printk_skb: 226 callbacks suppressed [ 79.720265][ T29] audit: type=1326 audit(1765171282.400:1641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5382 comm="syz.2.614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a7946f749 code=0x7ffc0000 [ 79.752141][ T29] audit: type=1326 audit(1765171282.400:1642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5382 comm="syz.2.614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a7946f749 code=0x7ffc0000 [ 79.759056][ T5386] loop2: detected capacity change from 0 to 512 [ 79.776585][ T29] audit: type=1326 audit(1765171282.410:1643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5382 comm="syz.2.614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f6a7946f749 code=0x7ffc0000 [ 79.776626][ T29] audit: type=1326 audit(1765171282.410:1644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5382 comm="syz.2.614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a7946f749 code=0x7ffc0000 [ 79.793256][ T5386] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 79.807496][ T29] audit: type=1326 audit(1765171282.410:1645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5382 comm="syz.2.614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f6a7946f749 code=0x7ffc0000 [ 79.865923][ T29] audit: type=1326 audit(1765171282.410:1646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5382 comm="syz.2.614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a7946f749 code=0x7ffc0000 [ 79.869140][ T5377] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1306: group 0, [ 79.889649][ T29] audit: type=1326 audit(1765171282.410:1647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5382 comm="syz.2.614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f6a7946f749 code=0x7ffc0000 [ 79.889691][ T29] audit: type=1326 audit(1765171282.410:1648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5382 comm="syz.2.614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a7946f749 code=0x7ffc0000 [ 79.909097][ T5386] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1137: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 79.921804][ T5377] block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 79.946005][ T5386] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.615: bg 0: block 248: padding at end of block bitmap is not set [ 79.969511][ T5377] EXT4-fs (loop1): 1 truncate cleaned up [ 79.989154][ T5386] Quota error (device loop2): write_blk: dquota write failed [ 79.996728][ T5386] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 80.009087][ T5386] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz.2.615: Failed to acquire dquot type 1 [ 80.041284][ T5386] EXT4-fs (loop2): 1 truncate cleaned up [ 80.050669][ T5390] loop0: detected capacity change from 0 to 1024 [ 80.094518][ T53] EXT4-fs error (device loop2): ext4_release_dquot:7022: comm kworker/u8:4: Failed to release dquot type 1 [ 80.094673][ T5395] netlink: 148 bytes leftover after parsing attributes in process `syz.1.617'. [ 80.317345][ T5411] loop2: detected capacity change from 0 to 512 [ 80.324352][ T5411] EXT4-fs: Ignoring removed bh option [ 80.330836][ T5411] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 80.408932][ T5411] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 80.432216][ T5411] EXT4-fs (loop2): 1 truncate cleaned up [ 80.469982][ T5411] siw: device registration error -23 [ 80.479453][ T5423] netlink: 8 bytes leftover after parsing attributes in process `syz.1.626'. [ 80.480327][ T5422] loop3: detected capacity change from 0 to 512 [ 80.496143][ T5422] EXT4-fs: Ignoring removed bh option [ 80.502139][ T5422] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 80.516497][ T5422] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 80.533319][ T5422] EXT4-fs (loop3): 1 truncate cleaned up [ 80.939027][ T5448] loop2: detected capacity change from 0 to 512 [ 80.946361][ T5448] EXT4-fs: Ignoring removed oldalloc option [ 80.974095][ T5448] ext4 filesystem being mounted at /152/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 80.986859][ T5448] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.637: bg 0: block 217: padding at end of block bitmap is not set [ 81.026424][ T5454] loop0: detected capacity change from 0 to 128 [ 81.039069][ T5454] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 81.047106][ T5454] FAT-fs (loop0): Filesystem has been set read-only [ 81.057555][ T5454] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 81.066621][ T5454] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 81.074958][ T5456] loop2: detected capacity change from 0 to 512 [ 81.081683][ T5456] EXT4-fs: Ignoring removed bh option [ 81.104541][ T5456] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 81.123460][ T5458] loop4: detected capacity change from 0 to 512 [ 81.135882][ T5458] EXT4-fs: Ignoring removed oldalloc option [ 81.148910][ T5456] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 81.176959][ T5456] EXT4-fs (loop2): 1 truncate cleaned up [ 81.185829][ T5458] ext4 filesystem being mounted at /128/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 81.219309][ T5456] siw: device registration error -23 [ 81.287400][ T5467] EXT4-fs: Ignoring removed bh option [ 81.311412][ T5471] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 81.322399][ T5467] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 81.340044][ T5467] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 81.344294][ T5471] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1137: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 81.374976][ T5467] EXT4-fs (loop4): 1 truncate cleaned up [ 81.380868][ T5471] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.644: bg 0: block 248: padding at end of block bitmap is not set [ 81.395942][ T5471] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz.2.644: Failed to acquire dquot type 1 [ 81.408966][ T5471] EXT4-fs (loop2): 1 truncate cleaned up [ 81.465949][ T2657] EXT4-fs error (device loop2): ext4_release_dquot:7022: comm kworker/u8:12: Failed to release dquot type 1 [ 81.597931][ T5487] EXT4-fs: Ignoring removed bh option [ 81.615871][ T5489] EXT4-fs: Ignoring removed oldalloc option [ 81.634045][ T5487] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 81.666514][ T5489] ext4 filesystem being mounted at /131/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 81.720916][ T5487] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 81.721276][ T5487] EXT4-fs (loop1): 1 truncate cleaned up [ 81.740170][ T5487] siw: device registration error -23 [ 81.744279][ T5489] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.649: bg 0: block 217: padding at end of block bitmap is not set [ 81.817421][ T5496] random: crng reseeded on system resumption [ 81.835561][ T5506] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 81.898108][ T5506] EXT4-fs (loop2): 1 truncate cleaned up [ 81.932416][ T5513] FAULT_INJECTION: forcing a failure. [ 81.932416][ T5513] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 81.945693][ T5513] CPU: 1 UID: 0 PID: 5513 Comm: syz.3.656 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 81.945789][ T5513] Tainted: [W]=WARN [ 81.945798][ T5513] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 81.945815][ T5513] Call Trace: [ 81.945825][ T5513] [ 81.945835][ T5513] __dump_stack+0x1d/0x30 [ 81.945871][ T5513] dump_stack_lvl+0xe8/0x140 [ 81.945893][ T5513] dump_stack+0x15/0x1b [ 81.945950][ T5513] should_fail_ex+0x265/0x280 [ 81.945973][ T5513] should_fail+0xb/0x20 [ 81.946013][ T5513] should_fail_usercopy+0x1a/0x20 [ 81.946037][ T5513] _copy_from_user+0x1c/0xb0 [ 81.946099][ T5513] ___sys_sendmsg+0xc1/0x1d0 [ 81.946161][ T5513] __x64_sys_sendmsg+0xd4/0x160 [ 81.946216][ T5513] x64_sys_call+0x17ba/0x3000 [ 81.946247][ T5513] do_syscall_64+0xd8/0x2a0 [ 81.946298][ T5513] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.946325][ T5513] RIP: 0033:0x7f51f5f8f749 [ 81.946344][ T5513] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 81.946368][ T5513] RSP: 002b:00007f51f49ef038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 81.946390][ T5513] RAX: ffffffffffffffda RBX: 00007f51f61e5fa0 RCX: 00007f51f5f8f749 [ 81.946403][ T5513] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000004 [ 81.946460][ T5513] RBP: 00007f51f49ef090 R08: 0000000000000000 R09: 0000000000000000 [ 81.946476][ T5513] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 81.946488][ T5513] R13: 00007f51f61e6038 R14: 00007f51f61e5fa0 R15: 00007ffe7c9b33c8 [ 81.946507][ T5513] [ 82.233570][ T5525] EXT4-fs: Ignoring removed bh option [ 82.252487][ T5525] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 82.275351][ T5531] EXT4-fs: Ignoring removed oldalloc option [ 82.291811][ T5525] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 82.306809][ T5525] EXT4-fs (loop3): 1 truncate cleaned up [ 82.313005][ T5531] ext4 filesystem being mounted at /126/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 82.326909][ T5531] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.665: bg 0: block 217: padding at end of block bitmap is not set [ 82.342885][ T5517] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 82.376234][ T5525] siw: device registration error -23 [ 82.415645][ T5540] EXT4-fs: Ignoring removed bh option [ 82.422223][ T5540] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 82.436599][ T5540] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 82.455560][ T5540] EXT4-fs (loop4): 1 truncate cleaned up [ 82.512295][ T5545] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 82.520223][ T5545] FAT-fs (loop0): Filesystem has been set read-only [ 82.534910][ T5549] EXT4-fs: Ignoring removed bh option [ 82.542850][ T5540] siw: device registration error -23 [ 82.557472][ T5545] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 82.564929][ T5549] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 82.565474][ T5545] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 82.595267][ T5550] EXT4-fs: Ignoring removed oldalloc option [ 82.628929][ T5549] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 82.649201][ T5549] EXT4-fs (loop3): 1 truncate cleaned up [ 82.658879][ T5550] ext4 filesystem being mounted at /128/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 82.745269][ T5559] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 82.785853][ T5565] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5123 sclass=netlink_route_socket pid=5565 comm=syz.4.675 [ 82.799924][ T5559] EXT4-fs (loop3): 1 truncate cleaned up [ 83.012776][ T5583] netlink: 'syz.1.681': attribute type 10 has an invalid length. [ 83.025141][ T5583] bond0: (slave dummy0): Releasing backup interface [ 83.035804][ T5583] team0: Port device dummy0 added [ 83.043755][ T5583] netlink: 'syz.1.681': attribute type 10 has an invalid length. [ 83.055025][ T5583] team0: Port device dummy0 removed [ 83.063476][ T5583] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 83.082138][ T5545] bio_check_eod: 84937 callbacks suppressed [ 83.082164][ T5545] syz.0.668: attempt to access beyond end of device [ 83.082164][ T5545] loop0: rw=0, sector=2065, nr_sectors = 1 limit=128 [ 83.108915][ T5545] syz.0.668: attempt to access beyond end of device [ 83.108915][ T5545] loop0: rw=0, sector=2066, nr_sectors = 1 limit=128 [ 83.125992][ T5585] netlink: 'syz.1.682': attribute type 10 has an invalid length. [ 83.138728][ T5545] syz.0.668: attempt to access beyond end of device [ 83.138728][ T5545] loop0: rw=0, sector=2067, nr_sectors = 1 limit=128 [ 83.152214][ T5545] syz.0.668: attempt to access beyond end of device [ 83.152214][ T5545] loop0: rw=0, sector=2068, nr_sectors = 1 limit=128 [ 83.153534][ T5585] bond0: (slave dummy0): Releasing backup interface [ 83.165589][ T5545] syz.0.668: attempt to access beyond end of device [ 83.165589][ T5545] loop0: rw=0, sector=2069, nr_sectors = 1 limit=128 [ 83.185513][ T5545] syz.0.668: attempt to access beyond end of device [ 83.185513][ T5545] loop0: rw=0, sector=2070, nr_sectors = 1 limit=128 [ 83.190544][ T5585] team0: Port device dummy0 added [ 83.198905][ T5588] netlink: 'syz.1.682': attribute type 10 has an invalid length. [ 83.202056][ T5545] syz.0.668: attempt to access beyond end of device [ 83.202056][ T5545] loop0: rw=0, sector=2071, nr_sectors = 1 limit=128 [ 83.225177][ T5545] buffer_io_error: 84065 callbacks suppressed [ 83.225194][ T5545] Buffer I/O error on dev loop0, logical block 2071, async page read [ 83.239521][ T5545] syz.0.668: attempt to access beyond end of device [ 83.239521][ T5545] loop0: rw=0, sector=2072, nr_sectors = 1 limit=128 [ 83.252714][ T5545] Buffer I/O error on dev loop0, logical block 2072, async page read [ 83.260920][ T5545] syz.0.668: attempt to access beyond end of device [ 83.260920][ T5545] loop0: rw=0, sector=2065, nr_sectors = 1 limit=128 [ 83.263758][ T5588] team0: Port device dummy0 removed [ 83.274210][ T5545] Buffer I/O error on dev loop0, logical block 2065, async page read [ 83.284112][ T5588] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 83.287651][ T5545] syz.0.668: attempt to access beyond end of device [ 83.287651][ T5545] loop0: rw=0, sector=2066, nr_sectors = 1 limit=128 [ 83.309431][ T5545] Buffer I/O error on dev loop0, logical block 2066, async page read [ 83.325451][ T5591] netlink: 'syz.2.684': attribute type 10 has an invalid length. [ 83.335828][ T5591] bond0: (slave dummy0): Releasing backup interface [ 83.342068][ T5545] Buffer I/O error on dev loop0, logical block 2067, async page read [ 83.350649][ T5545] Buffer I/O error on dev loop0, logical block 2068, async page read [ 83.360150][ T5545] Buffer I/O error on dev loop0, logical block 2069, async page read [ 83.371377][ T5591] netlink: 'syz.2.684': attribute type 10 has an invalid length. [ 83.381592][ T5591] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 83.394911][ T5545] Buffer I/O error on dev loop0, logical block 2070, async page read [ 83.403796][ T5545] Buffer I/O error on dev loop0, logical block 2071, async page read [ 83.412425][ T5545] Buffer I/O error on dev loop0, logical block 2072, async page read [ 83.493264][ T5599] random: crng reseeded on system resumption [ 83.540790][ T5601] EXT4-fs: Ignoring removed nobh option [ 83.567394][ T5601] ext4 filesystem being mounted at /162/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 83.622333][ T5595] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 83.635504][ T5595] bridge0: entered promiscuous mode [ 83.640878][ T5595] macsec1: entered promiscuous mode [ 83.647538][ T5595] bridge0: port 3(macsec1) entered blocking state [ 83.654113][ T5595] bridge0: port 3(macsec1) entered disabled state [ 83.661012][ T5595] macsec1: entered allmulticast mode [ 83.666495][ T5595] bridge0: entered allmulticast mode [ 83.703911][ T5595] macsec1: left allmulticast mode [ 83.709142][ T5595] bridge0: left allmulticast mode [ 83.722837][ T5595] bridge0: left promiscuous mode [ 84.012146][ T5622] EXT4-fs: Ignoring removed oldalloc option [ 84.067616][ T5622] ext4 filesystem being mounted at /138/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 84.720328][ T5628] set_capacity_and_notify: 21 callbacks suppressed [ 84.720345][ T5628] loop3: detected capacity change from 0 to 512 [ 84.735668][ T5628] EXT4-fs: Ignoring removed oldalloc option [ 84.764071][ T5628] ext4 filesystem being mounted at /132/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 84.804319][ T5628] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.698: bg 0: block 217: padding at end of block bitmap is not set [ 84.834815][ T5634] loop2: detected capacity change from 0 to 512 [ 84.853295][ T5634] EXT4-fs: Ignoring removed bh option [ 84.924461][ T5634] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 84.926167][ T5634] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 84.930037][ T5634] EXT4-fs (loop2): 1 truncate cleaned up [ 85.020862][ T5644] loop1: detected capacity change from 0 to 512 [ 85.021325][ T5644] EXT4-fs: Ignoring removed bh option [ 85.021571][ T5644] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 85.023087][ T5644] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 85.023333][ T5644] EXT4-fs (loop1): 1 truncate cleaned up [ 85.055014][ T5641] random: crng reseeded on system resumption [ 85.071903][ T5634] siw: device registration error -23 [ 85.120754][ T5644] siw: device registration error -23 [ 85.215066][ T5648] loop0: detected capacity change from 0 to 512 [ 85.224363][ T5648] EXT4-fs: Ignoring removed bh option [ 85.236617][ T5648] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 85.247747][ T5648] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 85.264441][ T5648] EXT4-fs (loop0): 1 truncate cleaned up [ 85.411534][ T5651] loop2: detected capacity change from 0 to 512 [ 85.418295][ T5651] EXT4-fs: Ignoring removed bh option [ 85.437510][ T5653] loop1: detected capacity change from 0 to 512 [ 85.445090][ T5651] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 85.456675][ T5651] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 85.471629][ T5651] EXT4-fs (loop2): 1 truncate cleaned up [ 85.487797][ T5653] EXT4-fs: Ignoring removed bh option [ 85.519619][ T5658] loop0: detected capacity change from 0 to 512 [ 85.535137][ T5658] EXT4-fs: Ignoring removed oldalloc option [ 85.542330][ T5653] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 85.561024][ T5653] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 85.584059][ T5658] ext4 filesystem being mounted at /123/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 85.601764][ T5653] EXT4-fs (loop1): 1 truncate cleaned up [ 85.665194][ T5667] loop3: detected capacity change from 0 to 512 [ 85.683879][ T5667] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 85.725573][ T5674] siw: device registration error -23 [ 85.734354][ T5671] __nla_validate_parse: 7 callbacks suppressed [ 85.734371][ T5671] netlink: 256 bytes leftover after parsing attributes in process `syz.2.710'. [ 85.751536][ T5667] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1137: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 85.766536][ T5667] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.709: bg 0: block 248: padding at end of block bitmap is not set [ 85.781467][ T5667] __quota_error: 47 callbacks suppressed [ 85.781483][ T5667] Quota error (device loop3): write_blk: dquota write failed [ 85.794600][ T5667] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 85.805174][ T5667] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.709: Failed to acquire dquot type 1 [ 85.845460][ T5680] loop0: detected capacity change from 0 to 512 [ 85.854565][ T5680] EXT4-fs: Ignoring removed oldalloc option [ 85.855394][ T5667] EXT4-fs (loop3): 1 truncate cleaned up [ 85.903293][ T5680] ext4 filesystem being mounted at /125/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 85.929185][ T5418] Quota error (device loop3): do_check_range: Getting block 0 out of range 1-5 [ 85.938459][ T5418] EXT4-fs error (device loop3): ext4_release_dquot:7022: comm kworker/u8:13: Failed to release dquot type 1 [ 85.981307][ T5680] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.712: bg 0: block 217: padding at end of block bitmap is not set [ 85.981583][ T5689] random: crng reseeded on system resumption [ 86.053968][ T5694] loop2: detected capacity change from 0 to 512 [ 86.062296][ T5694] EXT4-fs: Ignoring removed bh option [ 86.079271][ T5700] EXT4-fs: Ignoring removed bh option [ 86.108754][ T5694] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 86.119025][ T5700] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 86.191483][ T5694] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 86.193037][ T5700] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 86.206469][ T5694] EXT4-fs (loop2): 1 truncate cleaned up [ 86.269306][ T5694] siw: device registration error -23 [ 86.298358][ T5709] xt_TCPMSS: Only works on TCP SYN packets [ 86.404856][ T5700] EXT4-fs (loop3): 1 truncate cleaned up [ 86.560449][ T5713] siw: device registration error -23 [ 87.123337][ T29] audit: type=1326 audit(1765171289.810:1692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5717 comm="syz.1.726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d95b9f749 code=0x7ffc0000 [ 87.172950][ T29] audit: type=1326 audit(1765171289.830:1693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5717 comm="syz.1.726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f4d95b9f749 code=0x7ffc0000 [ 87.196386][ T29] audit: type=1326 audit(1765171289.830:1694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5717 comm="syz.1.726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d95b9f749 code=0x7ffc0000 [ 87.219951][ T29] audit: type=1326 audit(1765171289.830:1695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5717 comm="syz.1.726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f4d95b9f749 code=0x7ffc0000 [ 87.243615][ T29] audit: type=1326 audit(1765171289.830:1696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5717 comm="syz.1.726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d95b9f749 code=0x7ffc0000 [ 87.267161][ T29] audit: type=1326 audit(1765171289.830:1697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5717 comm="syz.1.726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f4d95b9f749 code=0x7ffc0000 [ 87.291152][ T29] audit: type=1326 audit(1765171289.830:1698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5717 comm="syz.1.726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d95b9f749 code=0x7ffc0000 [ 87.365421][ T5725] EXT4-fs: Ignoring removed bh option [ 87.380992][ T5725] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 87.442865][ T5721] netlink: 256 bytes leftover after parsing attributes in process `syz.2.723'. [ 87.492747][ T5725] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 87.534704][ T5725] EXT4-fs (loop1): 1 truncate cleaned up [ 87.653291][ T5739] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 87.690750][ T5741] EXT4-fs: Ignoring removed oldalloc option [ 87.703006][ T5725] siw: device registration error -23 [ 87.728703][ T5739] EXT4-fs (loop0): 1 truncate cleaned up [ 87.739851][ T5741] ext4 filesystem being mounted at /138/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 87.771741][ T5741] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.731: bg 0: block 217: padding at end of block bitmap is not set [ 87.920114][ T5748] ext4 filesystem being mounted at /131/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 87.986739][ T5748] EXT4-fs error (device loop0): ext4_xattr_block_get:597: inode #12: comm syz.0.732: corrupted xattr block 6: invalid header [ 87.999989][ T5748] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=12 [ 88.010546][ T5748] EXT4-fs error (device loop0): ext4_xattr_block_get:597: inode #12: comm syz.0.732: corrupted xattr block 6: invalid header [ 88.024985][ T5748] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=12 [ 88.036395][ T5748] EXT4-fs error (device loop0): ext4_xattr_block_get:597: inode #12: comm syz.0.732: corrupted xattr block 6: invalid header [ 88.051210][ T5748] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=12 [ 88.085345][ T5748] EXT4-fs error (device loop0): ext4_xattr_block_get:597: inode #12: comm syz.0.732: corrupted xattr block 6: invalid header [ 88.103915][ T5771] EXT4-fs: Ignoring removed bh option [ 88.110002][ T5771] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 88.122553][ T5748] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=12 [ 88.132837][ T5748] EXT4-fs error (device loop0): ext4_xattr_block_get:597: inode #12: comm syz.0.732: corrupted xattr block 6: invalid header [ 88.146302][ T5748] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=12 [ 88.155864][ T5771] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 88.156394][ T5748] EXT4-fs error (device loop0): ext4_xattr_block_get:597: inode #12: comm syz.0.732: corrupted xattr block 6: invalid header [ 88.195359][ T5771] EXT4-fs (loop1): 1 truncate cleaned up [ 88.209889][ T5773] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 88.243683][ T5773] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1137: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 88.261133][ T3006] ================================================================== [ 88.269279][ T3006] BUG: KCSAN: data-race in d_delete / step_into_slowpath [ 88.271940][ T5783] EXT4-fs: Ignoring removed oldalloc option [ 88.276350][ T3006] [ 88.276362][ T3006] read-write to 0xffff88810761c240 of 4 bytes by task 3306 on cpu 0: [ 88.276382][ T3006] d_delete+0x15a/0x180 [ 88.276420][ T3006] d_delete_notify+0x32/0x100 [ 88.301592][ T3006] vfs_unlink+0x32c/0x440 [ 88.305955][ T3006] do_unlinkat+0x1cd/0x4b0 [ 88.310413][ T3006] __x64_sys_unlink+0x2e/0x40 [ 88.315298][ T3006] x64_sys_call+0x2f48/0x3000 [ 88.320027][ T3006] do_syscall_64+0xd8/0x2a0 [ 88.324566][ T3006] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.330493][ T3006] [ 88.332934][ T3006] read to 0xffff88810761c240 of 4 bytes by task 3006 on cpu 1: [ 88.340499][ T3006] step_into_slowpath+0x120/0x480 [ 88.345578][ T3006] path_lookupat+0x330/0x500 [ 88.350196][ T3006] filename_lookup+0x147/0x340 [ 88.355125][ T3006] do_readlinkat+0x7d/0x320 [ 88.359662][ T3006] __x64_sys_readlink+0x47/0x60 [ 88.364569][ T3006] x64_sys_call+0x2af1/0x3000 [ 88.369280][ T3006] do_syscall_64+0xd8/0x2a0 [ 88.373816][ T3006] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.379740][ T3006] [ 88.382177][ T3006] value changed: 0x00300180 -> 0x00004080 [ 88.387903][ T3006] [ 88.390317][ T3006] Reported by Kernel Concurrency Sanitizer on: [ 88.396481][ T3006] CPU: 1 UID: 0 PID: 3006 Comm: udevd Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 88.407346][ T3006] Tainted: [W]=WARN [ 88.411159][ T3006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 88.421228][ T3006] ================================================================== [ 88.434264][ T5773] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.742: bg 0: block 248: padding at end of block bitmap is not set [ 88.452772][ T5773] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.742: Failed to acquire dquot type 1 [ 88.465537][ T5783] ext4 filesystem being mounted at /149/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 88.472527][ T5773] EXT4-fs (loop3): 1 truncate cleaned up [ 88.484331][ T5783] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.745: bg 0: block 217: padding at end of block bitmap is not set [ 88.511238][ T1750] EXT4-fs error (device loop3): ext4_release_dquot:7022: comm kworker/u8:9: Failed to release dquot type 1