last executing test programs: 2.56237135s ago: executing program 4 (id=8342): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000040000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000008500000006000000850000005000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$tun(0xffffffffffffff9c, 0x0, 0x1c1341, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000300)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setns(0xffffffffffffffff, 0x20000000) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) request_key(&(0x7f0000000000)='logon\x00', 0x0, 0x0, 0xfffffffffffffffa) syz_open_procfs(0x0, &(0x7f00000000c0)='attr/prev\x00') syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8002, &(0x7f0000000200)={[{@usrjquota}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0xa0f}}]}, 0x1, 0x4c4, &(0x7f0000000500)="$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") openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) syslog(0x0, &(0x7f0000000240)=""/186, 0xba) 2.427207212s ago: executing program 1 (id=8345): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000040000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000008500000006000000850000005000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$tun(0xffffffffffffff9c, 0x0, 0x1c1341, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000300)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setns(0xffffffffffffffff, 0x20000000) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) request_key(&(0x7f0000000000)='logon\x00', 0x0, 0x0, 0xfffffffffffffffa) syz_open_procfs(0x0, &(0x7f00000000c0)='attr/prev\x00') syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8002, &(0x7f0000000200)={[{@usrjquota}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0xa0f}}]}, 0x1, 0x4c4, &(0x7f0000000500)="$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") openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) syslog(0x0, &(0x7f0000000240)=""/186, 0xba) 2.274820444s ago: executing program 4 (id=8348): setsockopt(0xffffffffffffffff, 0x84, 0x81, &(0x7f0000000280)="1a000000", 0x4) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @empty}], 0x1c) r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0x200400, 0x4) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) r1 = msgget$private(0x0, 0x10c) msgsnd(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="03"], 0x0, 0xe8) msgctl$IPC_SET(r1, 0x1, 0x0) msgrcv(r1, &(0x7f00000004c0)={0x0, ""/23}, 0x1f, 0x1, 0x2000) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065fffff530000008003950323030302e75"], 0x15) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x70, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a, @void, @value}, 0x94) stat(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000300)=ANY=[], 0x15) r4 = dup(r3) write$P9_RLERRORu(r4, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) newfstatat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000380), 0x4000) write$binfmt_elf64(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) chown(&(0x7f0000000240)='./file0\x00', 0xee00, 0x0) syz_mount_image$iso9660(&(0x7f0000000180), &(0x7f0000000100)='./file0\x00', 0x14c0e, &(0x7f0000000b40)=ANY=[], 0xfd, 0x6b2, &(0x7f0000002640)="$eJzs3V1vG1kdx/Hf2E7iZFFVAapWVbc5bVkpFcW1nW2qqFzsMBknA7bHmnEgkZBWhSarqk6Btkg0NyU3PEjLG+Bub7jgRazE9b4LuAJpBXcgJDRoZjx+iB9St0m6D99P1Ho8c+ac/5zj+t+JPWcEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABkORvlcsVS3Wtu75jJnI3Ab2RP8hrZntY2p5vpws1pbc7F7UpW/EfFot5OV7/9zX6RS/Ff13UlfXZFxfihqMO3Ll28941CLtt/SsCvQrNW+PT54aP7nc7ek5com1deMzfw5ij3EoU23aYX+l7D3nSNF/pmfW2tfHurFpqaV3fD3bDtNowTuLm2H5gV56aprK+vGre06283NzfsuputvPudarm8Zr6/kA60pFLobHn1utfcTMrEm+Myd81HP04LuHbDmP2Hnb3VgXhejOvhuFDlpCOJC1VPKlQtV6uVSrVaWbuzfuduuVwYWVGOWeUejZQ49RctvmBO9w0ceA25OP//1ZLqKqqpbe3IjP1xtKFAvhoTtndl+f/d2+7Udgfzf5bl5/qbLyvJ/1fTZ1cn5f8JsRiZZIdxW6wJ62f7mUsiMnqq5zrUI91XRx3t6ckp1G1klk+llnP42ZSrpjyF8uWpITtZY7prjNa1pjWV9YG2VFMoo5o81eUq1K5CteXGr6j5eLRc2WrLVyCjFTm6KaOK1rWuVRm5KmlXvrbV1KY2ZOvfURTt62HS76v9mPLHR15ZocqEg1hQIXvd7ak65Wgn5f+fvEj37ub/Mvn/qyp9HSykD59OKwN8DkTd8/8ZLZ9NNAAAAAAA4CxYyW/freRT+XckRap5dbf8psMCAAAAAACnyFK0oCuy0m/l6x1ZnP8DAAAAAPBlYyXX2FmSlpIv9Vv9y6Ve5pcA+XMIEQAAAAAAvKbkyv+r81KUTFqxLGum838AAAAAAPAF8LuBOfYL2Ry7Ufaxfk7S8t8WrE/+uaBgzjpq7XzLOrDjLfZBt8zINwDatcvWhe5EvcnDvKTkmeNesbqtdSfB7M07+Nn+SXP9W8GxAObzgxVMCMCKW14rdJ/pI11Ld7nWnWf+wWFOyZa0laWaV3dLjl+/V5FtX8i13Z32Lx8//JUU9I5z/2Fnr/TTn3UeJLEcxauODuJKXwyFkxvfGf1YniXzLSTXXIw74kXVsiZ/32wsWUm75ez487IPcoMNTRuAfpu/0fV0zK5Hadmlw96M+5a0nEz+UCklQzZ09MGc1Y+icvzIxw3EhCiKSRQ30jI3Vm6kD1l8cT05q/jtvFQtjY7BUBTVwShO7gvrXyN9MS0KWcW4L1bjKP4SV3Qsih99ku68OlsUIyMCAG/Kfj8LJZOYj+TdLD1kb2qvlHdOzu7vD2f3Z3+M0gyVlwrdzyamtlJU/I6+YiV5aD6d0L1wecw7ern0nyiK7AtFDb6j/y9K9XLsy2W3oyiKjh/rn/v3QOqGPRLFf6MouldJMskfjmXVj+MdPp7Ybliv5uMuvP3s4OfJBPixD/c+3Htcra6uld8rl+9UNZf8V6H7kBe5BwAw4uR77CQlclNKWO/pWlrHtQf/eDddGsp4X+9+pSDT0QPdym4hsDy+1qWBryHcSs9apetL6ePSobl08d6iNFDWKiR3eLk18awuyaUD9VZ7ZbP7Dh0/A+yXXT3LIQAA4Nxdn5CHpaH8r+H8XxzK/7e0kpZYuTz2vHs4l3fPjnun9JPKVk4O/v1T7gwAAL4i3OAza6n9WysIvNYHlfX1it3eck3gOz8wgbex6Rqv2XYDZ8tubrqmFfht3/HrphVowVt0QxNut1p+0DY1PzAtP/R2kju/m+6t30O3YTfbnhO26q4dusbxm23baZsNL3RMa/t7dS/ccoNk57DlOl7Nc+y25zdN6G8HjlsyJnTdgYLehttsezUvXmyaVuA17GDX/NCvbzdcs+GGTuC12n5aYdaW16z5QSOptqRo5hsdAgDwZfT0+eGj+53O3pPjC4vxqXm65kgTyowuzI+pkDmCAAD4nOmn6xl2Kp5hQAAAAAAAAAAAAAAAAAAAAAAAYMTJl/TNuDA37mJBqbfmFxe6a/Rr9S8xHKnH0mkHNstCbta9sksiDh99OqXwYm9N1v2DZY5maVQXpVc+wL9/TXorWaN0TeH0+3BxyuCexcJ399MendxjmtBjC72xKJz+P4d44fGfJmyKoiiavvvCcB/OTzvA4YWCpCfzrzEE5/9eBOB8/T8AAP//HSY9vg==") mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x0) openat(r0, &(0x7f00000000c0)='./file0\x00', 0xc02, 0x84) 2.135476377s ago: executing program 4 (id=8351): mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065fffff530000008003950323030302e75"], 0x15) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x70, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a, @void, @value}, 0x94) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, 0x0, 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chown(&(0x7f0000000240)='./file0\x00', 0xee00, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x0) 2.077259218s ago: executing program 1 (id=8353): madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./control\x00', 0x480, &(0x7f0000000000), 0x1, 0x786, &(0x7f0000000f80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000faff0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) pwrite64(r0, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) 2.030204478s ago: executing program 3 (id=8354): r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x3, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x1, 0x0, 0x7ffc1ffb}]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{r1}, &(0x7f00000004c0), &(0x7f0000000500)='%pK \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x24, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffebc, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000080008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000400000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001180)={&(0x7f0000000300)='kfree\x00', r4, 0x0, 0x1a400000}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_NAME(0xf, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x3000003, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) r5 = io_uring_setup(0x1694, &(0x7f0000000080)={0x0, 0x1aeb, 0x1000}) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r5, 0x10, &(0x7f00000003c0)={0x2, 0x0, &(0x7f0000000380)=[{&(0x7f0000000600)=""/4096, 0x1000}], 0x0, 0x1}, 0x20) r6 = socket$rds(0x15, 0x5, 0x0) bind$rds(r6, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000080)='block_bio_remap\x00', r7}, 0x18) quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x0, 0x0) 2.016510179s ago: executing program 4 (id=8355): r0 = gettid() r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000640)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0, r1}, 0x18) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0x7, 0x9) r4 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00'}, 0x10) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9) timer_create(0x3, &(0x7f0000000340)={0x0, 0x32, 0x0, @tid=r0}, &(0x7f0000000380)) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000006c0)=@newtaction={0xf8, 0x30, 0xffff, 0xfffffffe, 0x0, {}, [{0xe4, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x5, 0x0, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x6}}}]]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x48, 0x2, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}, @m_bpf={0x2c, 0x3, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0xf8}}, 0x0) write$P9_RWRITE(r3, &(0x7f0000000040)={0xb}, 0x11000) 1.93831533s ago: executing program 3 (id=8358): r0 = socket$can_bcm(0x1d, 0x2, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) rt_sigsuspend(0x0, 0x0) io_setup(0x200b, &(0x7f0000000240)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x2008042, &(0x7f00000000c0), 0x1, 0x571, &(0x7f0000000780)="$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") setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000d00)={{}, {}, [], {0x4, 0x5}, [{0x8, 0x2}], {}, {0x20, 0x1}}, 0x2c, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r2}, 0x38) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x18, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3, 0x0, 0x2}, 0x18) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000060000000000000000008500000007000000850000000e00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400, @void, @value}, 0x94) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000012c0)={&(0x7f0000000040)='kfree\x00', r4}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]}) removexattr(0x0, 0x0) connect$can_bcm(r0, &(0x7f0000000000), 0x10) r6 = perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x310c44, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x68bf}, 0x0, 0x0, r5, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000200)=0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x40082406, &(0x7f00000001c0)='cpu|00\t&&') 1.878364111s ago: executing program 1 (id=8359): bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000500)={0xffffffffffffffff, 0x58, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000280), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e40)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYRESHEX], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x21, '\x00', r0, 0x2, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f00000007c0)='ext4\x00', &(0x7f00000006c0)='./file1\x00', 0x40, &(0x7f00000000c0)={[{@user_xattr}, {@nodioread_nolock}]}, 0x1, 0x576, &(0x7f0000000140)="$eJzs3T1sG2UfAPD/neO3X3nf9JXeVwLUoQKkIlV1kn5AYWpXRKVKHZBYIHLcqIoTV7EDTZQh3StEBwSoS9lgYAQxMCAWRlYWEDNSRSOQmg5g5K80TZzglDouud9POvuee87+P8+d/499pzs5gMw62nhII56OiItJxMi6uqFoVx5trbe6slS8v7JUTKJev/RLEklE3FtZKnbWT9rPhyJiOSKeiohv8hHH081xqwuL0xPlcmmuXR6tzVwdrS4snrgyMzFVmirNnnrp5TNnT58ZPzm+/mX36+tL+Z319caPN9+98d2rt29++tmR5eL7E0mci+F23fp+PE6tbZKPcxuWn+5HsAFKBt0AHkmuneeNVPp/jESunfXd1Ed2tWlAn9X3RdSBjErkP2RU53dA4/i3M+3m748751sHII24q+2pVTPUOjcR+5vHJgd/TR46Mmkcbx7ezYayJy1fj4ixoaHNn/+k/fl7dGOPo4H01dfnWztq8/5P18af6DL+DHfOnf5NnfFvddP49yB+bovx72KPMX5/46ePtox/PeKZrvGTtfhJl/hpRLzVY/xbr395dqu6+scRx6J7/I5k+/PDo5evlEtjrceuMb46duSV7fp/cIv4rXO2+5tfM922f5fT2l198e3nzy5vE/+F57bf/922/4GIeK/H+P+998lrW9XduZ7cbfwK2On+TyIft3uM/+K5oz/0uCoAAAAAAAAAALADafNatiQtrM2naaHQuof3f3EwLVeqteOXK/Ozk61r3g5HPu1caTXSKieN8nj7etxO+eSG8qlcO2DuQLNcKFbKkwPuOwAAAAAAAAAAAAAAAAAAADwpDm24//+3XPP+/41/Vw3sVVv/5Tew18l/yK6H8z8ZWDuA3ef7HzKrLv8hu+Q/ZJf8h+yS/5Bd8h+yS/5Ddsl/AAAAAAAAAAAAAAAAAAAAAAAAAADoi4sXLjSm+v2VpWKjPDm0MD9defvEZKk6XZiZLxaKlbmrhalKZapcKhQrM3/1fkmlcnUsZuevjdZK1dpodWHxzZnK/GznP0VL+b73CAAAAAAAAAAAAAAAAAAAAP55hptTkhYiIm3Op2mhEPHviDicRHL5Srk0FhH/iYjvc/l9jfL4oBsNAAAAAAAAAAAAAAAAAAAAe0x1YXF6olwuzWVkZmgnK0fE8uNtRuMdd/yqfHtfPSnb0EwWZgY8MAEAAAAAAAAAAAAAAAAAQAY9uOm311f80d8GAQAAAAAAAAAAAAAAAAAAQCalPycR0ZiOjTw/vLH2X8lqrvkcEe/cuvTBtYlabW68sfzu2vLah+3lJwfRfqBXnTzt5DEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwQHVhcXqiXC7N9XFm0H0EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeBR/BgAA///eANcP") prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="b40800000000000073119a00000000008510000002000000b7000000000000009500c200000000009500"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) fcntl$lock(r2, 0x7, &(0x7f0000000400)={0x1, 0x1, 0x14, 0x3}) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) futex(0x0, 0x3, 0x0, &(0x7f0000fd7ff0), 0x0, 0xfffffffd) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f0000"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r3}, &(0x7f0000000000), &(0x7f0000000040)=r4}, 0x20) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00"/20, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='sched_switch\x00', r6}, 0x10) creat(&(0x7f0000000040)='./bus\x00', 0x8) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) read$hiddev(r7, &(0x7f00000000c0)=""/4092, 0xffc) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,') setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000c80)=@raw={'raw\x00', 0x3c1, 0x3, 0x3c8, 0x2e0, 0x940c, 0x3002, 0x2e0, 0x2c0, 0x3f0, 0x3d8, 0x3d8, 0x3f0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1e8, 0x4001, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x4001, 0x1, 0x3, 'syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'virt_wifi0\x00'}}}, {{@uncond, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x1, 0xbe, {0x565159d7}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x428) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCMIWAIT(r8, 0x5453, 0x7cb7562f2d67) io_uring_register$IORING_UNREGISTER_PBUF_RING(0xffffffffffffffff, 0x17, &(0x7f0000000980)={&(0x7f0000003000)={[{&(0x7f0000000200)="6b94e90fa0bd736bad718caf185cf7b5947b", 0x12}, {&(0x7f0000001400)="62762505c3d6a70f95593e64ee26215c230d096cbd72827dcb2cf49d8d5d9ba49d175364917b87d9b8b69770c7b83efaff0d1a00df58b6304baf88ccfc57d42785113222412af3c90f71553dbdbc9d3bf8f1aef5368ed3aea753581d7f4bcc5a6cedefaf8fe267464583ad0b4ea0673acf7d9aee7ff688a00bff4645c769e65486c413e7b881822ceeacba8d27f1cf3ed3f1d7ac535485c8c919cec9", 0x9c, 0x1}, {&(0x7f0000002280)="1e5aa2c5ff93c4e3d9aaefc0babf3949b91a3c41463dba26c72958d82cde092ab3d033ca1f46a769011a1ae011dc86d9955082dcd5999016fa5b224aa2dca97792dfdac37c37492119a7f292aa6aa6b1e49d86ff46e0900a05942292c9819e02b93bafd7fe07a5f936372b6f02bce75dcab236928d88460a4371b0a74ac23fe22d6da9b7abae0407e3874b2860f35df4132a16884207f49ff6729ac440470824d748168729ffd63ab6593c2f72605d07c82af5063c6d867b5c10a0c373ae964549fdfe7693b6ba4b8d0f06cd73ba6d36596858c24a0d00"/234, 0xea, 0x3}, {&(0x7f00000005c0)="4c261aa4569f71f66bb01fc136dc2119ae15cad6d7dd097d102ab41a267cfa84625b0e361d9306214817386b2c429d0aa28cbdec120d835a8d308eb790bbfd104c08cbd4c77d28c474b45473aa00325aeaaa60895be52c8c795a3b3bea52f10c5e0ca1b995789607a6682242dd1cd2dd10a986b45a96c773d19b007c592217dd886534fa5b6f9a859de45ec4972360bc", 0x90, 0x1}, {&(0x7f0000000740)}, {&(0x7f00000011c0)="894d5b84c336dc434686881817ab0edde678c4605c0834b7adcc83439aa491b1b683fc0735e40cfbc17bd02fdaef1b90cab984a74296b53b5ca49fb3c35659d8b22ab1f6d91f356da3a4e55fd2370fc8aec3d722cfa12577e7d05261bc8ce236c03fada830f7765169774afb59600a7185d7836bae5c66f0ee8aac7fc20fa0976571d8ddc4325ae8f96a8c9b06d5af2c73f6a5e977ebe32f596a93d7bd8489df0507fdbeecc81adfdde05839891b246d2ba7f6297486654e447101fdfece90242bffc7baf93facd9426ccd05a69feda6a74d5e00354bfe2d0887bbb1fb49426cb1aa99cfb782aec607bc5b17837000ec032b69cf30", 0xf5}, {&(0x7f0000002000)="47f371f581f9f06ef656d24aed42235e8a50ac64390c286bd60eb5210db6fc0ad2752c7a162f9b7de9e8e967a15e87705b09d981bd2d1b", 0x37, 0x1}, {&(0x7f0000000900)="daffd5bd74b214feb3ae8efb3aae2733c68a8f70a3774f901c431ddaf143862903e56913441b5e789594476cc38d81b24c45693b83ab7b4d31c1cec3dff783c8f710f58bcd839256d9d9e29433478bc7d9d9c48814f01f1b84b2d4ce36a36337873e480916f3f501d35f578d6a169b28fc", 0x71, 0x1}]}, 0x8, 0x3}, 0x1) 1.582080085s ago: executing program 1 (id=8362): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f00000005c0)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0x29}}, './file0\x00'}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000060000000000000000008500000007000000850000000e00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000012c0)={&(0x7f0000000080)='scsi_dispatch_cmd_start\x00', r3}, 0x18) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x106, 0x40001, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x2, @perf_bp={&(0x7f0000000300), 0x8}, 0x1320, 0x7a, 0x3, 0x0, 0x10001, 0x1088f105, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r4 = fsopen(0x0, 0x1) fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x6, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00'}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\b\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000040)='percpu_free_percpu\x00', r6}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x1, 0x101, 0x7fff, 0xcc, 0x40, r5, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x20000004, 0x0, 0x0, @void, @value, @void, @value}, 0x50) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)=ANY=[@ANYRES32=0x0, @ANYBLOB="08098fb200001500"/20, @ANYRES32=0x0, @ANYRES32=0x0], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000001400078005001500070000000800124000000000050005000200000005000400000000000d000300686173683a6e6574"], 0x5c}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) io_uring_enter(0xffffffffffffffff, 0xa32, 0x0, 0x47, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r10, 0x0, 0xc3}, 0x18) r11 = syz_open_procfs(0x0, 0x0) pread64(r11, &(0x7f0000001240)=""/102392, 0x18ff8, 0x0) 1.562730866s ago: executing program 0 (id=8363): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x2008042, &(0x7f00000000c0), 0x1, 0x571, &(0x7f0000000780)="$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") r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x18, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0x2}, 0x18) removexattr(0x0, 0x0) 1.454561937s ago: executing program 0 (id=8365): mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065fffff530000008003950323030302e75"], 0x15) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x70, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a, @void, @value}, 0x94) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chown(&(0x7f0000000240)='./file0\x00', 0xee00, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x0) 1.384584028s ago: executing program 2 (id=8367): rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080)='./file2\x00') 1.363687239s ago: executing program 3 (id=8368): unshare(0x40040600) pipe(0x0) sched_setattr(0x0, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000850000002300000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r0}, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$inet(0x2, 0x2, 0x1) (fail_nth: 6) 1.361121869s ago: executing program 2 (id=8369): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a5000000"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = io_uring_setup(0x4d3f, &(0x7f0000000240)={0x0, 0xca6a, 0x40, 0x1, 0x6}) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_RESTRICTIONS(r1, 0xb, &(0x7f0000000480)=[@ioring_restriction_sqe_op={0x1, 0x1c}], 0x1) 1.342662129s ago: executing program 0 (id=8370): socket$can_bcm(0x1d, 0x2, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x18, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2, 0x0, 0x2}, 0x18) removexattr(0x0, 0x0) 1.27463003s ago: executing program 2 (id=8371): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9) mkdirat(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x4c000) 1.26598114s ago: executing program 2 (id=8372): bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000500)={0xffffffffffffffff, 0x58, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000280), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e40)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYRESHEX], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x21, '\x00', r0, 0x2, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f00000007c0)='ext4\x00', &(0x7f00000006c0)='./file1\x00', 0x40, &(0x7f00000000c0)={[{@user_xattr}, {@nodioread_nolock}]}, 0x1, 0x576, &(0x7f0000000140)="$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") prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="b40800000000000073119a00000000008510000002000000b7000000000000009500c200000000009500"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) fcntl$lock(r2, 0x7, &(0x7f0000000400)={0x1, 0x1, 0x14, 0x3}) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) futex(0x0, 0x3, 0x0, &(0x7f0000fd7ff0), 0x0, 0xfffffffd) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f0000"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r3}, &(0x7f0000000000), &(0x7f0000000040)=r4}, 0x20) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00"/20, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='sched_switch\x00', r6}, 0x10) creat(&(0x7f0000000040)='./bus\x00', 0x8) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) read$hiddev(r7, &(0x7f00000000c0)=""/4092, 0xffc) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,') setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000c80)=@raw={'raw\x00', 0x3c1, 0x3, 0x3c8, 0x2e0, 0x940c, 0x3002, 0x2e0, 0x2c0, 0x3f0, 0x3d8, 0x3d8, 0x3f0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1e8, 0x4001, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x4001, 0x1, 0x3, 'syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'virt_wifi0\x00'}}}, {{@uncond, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x1, 0xbe, {0x565159d7}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x428) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCMIWAIT(r8, 0x5453, 0x7cb7562f2d67) io_uring_register$IORING_UNREGISTER_PBUF_RING(0xffffffffffffffff, 0x17, &(0x7f0000000980)={&(0x7f0000003000)={[{&(0x7f0000000200)="6b94e90fa0bd736bad718caf185cf7b5947b", 0x12}, {&(0x7f0000001400)="62762505c3d6a70f95593e64ee26215c230d096cbd72827dcb2cf49d8d5d9ba49d175364917b87d9b8b69770c7b83efaff0d1a00df58b6304baf88ccfc57d42785113222412af3c90f71553dbdbc9d3bf8f1aef5368ed3aea753581d7f4bcc5a6cedefaf8fe267464583ad0b4ea0673acf7d9aee7ff688a00bff4645c769e65486c413e7b881822ceeacba8d27f1cf3ed3f1d7ac535485c8c919cec9", 0x9c, 0x1}, {&(0x7f0000002280)="1e5aa2c5ff93c4e3d9aaefc0babf3949b91a3c41463dba26c72958d82cde092ab3d033ca1f46a769011a1ae011dc86d9955082dcd5999016fa5b224aa2dca97792dfdac37c37492119a7f292aa6aa6b1e49d86ff46e0900a05942292c9819e02b93bafd7fe07a5f936372b6f02bce75dcab236928d88460a4371b0a74ac23fe22d6da9b7abae0407e3874b2860f35df4132a16884207f49ff6729ac440470824d748168729ffd63ab6593c2f72605d07c82af5063c6d867b5c10a0c373ae964549fdfe7693b6ba4b8d0f06cd73ba6d36596858c24a0d00"/234, 0xea, 0x3}, {&(0x7f00000005c0)="4c261aa4569f71f66bb01fc136dc2119ae15cad6d7dd097d102ab41a267cfa84625b0e361d9306214817386b2c429d0aa28cbdec120d835a8d308eb790bbfd104c08cbd4c77d28c474b45473aa00325aeaaa60895be52c8c795a3b3bea52f10c5e0ca1b995789607a6682242dd1cd2dd10a986b45a96c773d19b007c592217dd886534fa5b6f9a859de45ec4972360bc", 0x90, 0x1}, {&(0x7f0000000740)}, {&(0x7f00000011c0)="894d5b84c336dc434686881817ab0edde678c4605c0834b7adcc83439aa491b1b683fc0735e40cfbc17bd02fdaef1b90cab984a74296b53b5ca49fb3c35659d8b22ab1f6d91f356da3a4e55fd2370fc8aec3d722cfa12577e7d05261bc8ce236c03fada830f7765169774afb59600a7185d7836bae5c66f0ee8aac7fc20fa0976571d8ddc4325ae8f96a8c9b06d5af2c73f6a5e977ebe32f596a93d7bd8489df0507fdbeecc81adfdde05839891b246d2ba7f6297486654e447101fdfece90242bffc7baf93facd9426ccd05a69feda6a74d5e00354bfe2d0887bbb1fb49426cb1aa99cfb782aec607bc5b17837000ec032b69cf30", 0xf5}, {&(0x7f0000002000)="47f371f581f9f06ef656d24aed42235e8a50ac64390c286bd60eb5210db6fc0ad2752c7a162f9b7de9e8e967a15e87705b09d981bd2d1b", 0x37, 0x1}, {&(0x7f0000000900)="daffd5bd74b214feb3ae8efb3aae2733c68a8f70a3774f901c431ddaf143862903e56913441b5e789594476cc38d81b24c45693b83ab7b4d31c1cec3dff783c8f710f58bcd839256d9d9e29433478bc7d9d9c48814f01f1b84b2d4ce36a36337873e480916f3f501d35f578d6a169b28fc", 0x71, 0x1}]}, 0x8, 0x3}, 0x1) 988.328944ms ago: executing program 0 (id=8373): socket$can_bcm(0x1d, 0x2, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) rt_sigsuspend(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x2008042, &(0x7f00000000c0), 0x1, 0x571, &(0x7f0000000780)="$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") setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000d00)={{}, {}, [], {0x4, 0x5}, [{0x8, 0x2}], {}, {0x20, 0x1}}, 0x2c, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x18, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2, 0x0, 0x2}, 0x18) 967.318765ms ago: executing program 4 (id=8374): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff000000000200000009000100"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000006c0)='kfree\x00', r2}, 0x18) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="14000000100001000000000000ffffffec00000a5c000000180a0500000000000000000002000000300003802c00038014000100776732000000000000000000000000001400010076657468315f746f5f627269646765000900020073797a30000000000900010073797a3000000000140000001100010000000000000000000300000abbd87e8fb792c50af9a2ae05d9a669c7135d496af30b03d84d61d7833bdcc1f153d47e1df3d81d79ffdefb9cc0fb834dc50ee58ba254175d2fac19a403d522eb8bf1de4352cb23f5b8e4"], 0x84}, 0x1, 0x0, 0x0, 0x24040089}, 0x20008000) 834.377077ms ago: executing program 3 (id=8375): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x140, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f0000001040)={{0x1, 0x1, 0x1018}, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00'}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, @void, @value}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB], 0x14}}, 0x80) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r7, 0x0, 0x2}, 0x18) r8 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r8, 0xfffffffffffffffe, r8, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f00000001c0)='kfree\x00', r3, 0x0, 0x4}, 0x18) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000001000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b708691e0caa5a56ba0200000000dfff8500000086000000"], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x1d64, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) unshare(0x62040600) (fail_nth: 6) 813.396847ms ago: executing program 3 (id=8376): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x2008042, &(0x7f00000000c0), 0x1, 0x571, &(0x7f0000000780)="$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") r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x18, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0x2}, 0x18) removexattr(0x0, 0x0) 412.020734ms ago: executing program 2 (id=8377): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @broadcast}}}], 0x20}}], 0x1, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r3, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) setsockopt$inet_msfilter(r4, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a0101"], 0x57) setsockopt$inet_mreqsrc(r2, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f00000008c0)={0x1, {{0x2, 0x0, @multicast2}}}, 0x88) 386.579434ms ago: executing program 3 (id=8378): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'wlc\x00', 0x15, 0x88, 0xc000067}, 0x2c) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000170000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000feffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="900000001000010400000002fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="10000000a5804a2c600012800b000100697036746e6c"], 0x90}, 0x1, 0x0, 0x0, 0x8040}, 0x48000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000200)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b70400000000000085000000010000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2, 0x0, 0x2}, 0x18) ustat(0x3, &(0x7f0000000000)) r3 = shmget$private(0x0, 0x4000, 0x1000, &(0x7f0000ffb000/0x4000)=nil) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) shmat(r3, &(0x7f0000ffc000/0x4000)=nil, 0x5000) mlockall(0x3) shmat(r3, &(0x7f0000ffd000/0x2000)=nil, 0x5000) 324.494795ms ago: executing program 4 (id=8379): r0 = socket$can_bcm(0x1d, 0x2, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) rt_sigsuspend(0x0, 0x0) io_setup(0x200b, &(0x7f0000000240)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x2008042, &(0x7f00000000c0), 0x1, 0x571, &(0x7f0000000780)="$eJzs3c+PG1cdAPDvzP5yk7SbQA9QAQlQCCiKnXXaqOql5QJCVSVExQFxSJddZ7XEjkPsLd0lUrd/A0ggcYI/gQMSB6SeOHDjiMQBEOWAVCACJUgcBs3Yu+ts7MSNvXaz/nykybyZN+Pve/bOvOdnxy+AmXUuInYjYjEi3oyI5e7+pLvEq50lP+7undtr9+7cXksiy974Z1Lk5/ui55zcye5jliLim1+L+G7yYNzW9s711Xq9dqu7XWk3blZa2zsXNxurG7WN2o1q9crKlUsvXX6xOra6nm388oOvbr72rd/8+tPv/373yz/Mi3Wqm9dbj3HqVH1hP05uPiJeO4pgUzDXXS9OuRw8njQiPhYRnyuu/+WYK/46AYDjLMuWI1vu3QYAjru0GANL0nJEpGm3E1DujOE9GyfSerPVvnCtuXVjvTNWdjoW0mub9dqlM0t//H5x8EKSb68UeUV+sV09tH05Is5ExI+Xniq2y2vN+vp0ujwAMPNO9rb/EfGfpTQtl4c6tc+negDAE6M07QIAABOn/QeA2aP9B4DZM0T73/2wf/fIywIATIb3/wAwe7T/ADB7tP8AMFO+8frr+ZLd6/7+9fpb21vXm29dXK+1rpcbW2vlteatm+WNZnOj+M2exqMer95s3lx5IbberrRrrXaltb1ztdHcutG+Wvyu99XawkRqBQA8zJmz7/0hiYjdl58qluiZy0FbDcdbOsajgCfL3Cgn6yDAE81sXzC7hmrCi07C7468LMB09P0x71Lf5P1++iGC+J4RfKSc/+Tw4//meIbjxcg+zK7HG/9/ZezlACbvscf//zzecgCTl2XJ4Tn/F/ezAIBjaYSv8GXvjKsTAkzVoybzHsvn/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHDMnIqI70WSlou5wNP837Rcjng6Ik7HQnJts167FBHPxNmIWFjKt1emXWgAYETp35Pu/F/nl58/dTh3MfnvUrGOiB/87I2fvL3abt9ayff/a3//0t70YdWD80aYVxAAGN5fhzmoaL+r3XXPG/m7d26v7S1HWMYHfPCV/clH1+7duV0snZz5yLIsiygVfYkT/05ivntOKSKei4i5McTffTciPtGv/kkxNnK6O/Npb/zoxn56ovHT++KnRV5nnT99Hx9DWWDWvJfff149fP3NFVfWueKI/td/qbhDja64/5Ui9u59B/e/veu9VJTmcPz8mj83bIwXfvv1B3Zmy528dyOem+8XP9mPnwyI//yQ8f/0qc/86JUBednPI85H//i9sSrtxs1Ka3vn4mZjdaO2UbtRrV5ZuXLppcsvVivFGHVlb6T6Qf94+cIzg8qW1//EgPidV/7kofov7p/7hSHr/4v/vfmdzx5sLh2O/6XP93/9ny3W/Z//vE384pDxV0/8auD03Xn89QH1f9Trf2HI+O//bWd9yEMBgAlobe9cX63Xa7dGSuTvQj/8WVmWvZOX4SHH5NnDPeBed3G06vwlisTB05JEEqM/P/cn8s7YMAcvjFyd+xJ7wyXjrk6fxPx+X3G8j/zth/+1DEosjhI0HXstHicRp7uJu5MKOpXbETBBBxf9tEsCAAAAAAAAAAAAAAAMMon/wzTtOgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHB8/T8AAP//Z1e+LQ==") setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000d00)={{}, {}, [], {0x4, 0x5}, [{0x8, 0x2}], {}, {0x20, 0x1}}, 0x2c, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r2}, 0x38) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x18, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3, 0x0, 0x2}, 0x18) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000060000000000000000008500000007000000850000000e00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400, @void, @value}, 0x94) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000012c0)={&(0x7f0000000040)='kfree\x00', r4}, 0x10) rt_sigprocmask(0x2, &(0x7f00000002c0)={[0xfff]}, &(0x7f0000000300), 0x8) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]}) removexattr(0x0, 0x0) connect$can_bcm(r0, &(0x7f0000000000), 0x10) r6 = perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x310c44, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x68bf}, 0x0, 0x0, r5, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000200)=0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x40082406, &(0x7f00000001c0)='cpu|00\t&&') 314.761625ms ago: executing program 2 (id=8380): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x7, 0x9) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r3}, 0x10) 217.443267ms ago: executing program 1 (id=8381): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000040000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000008500000006000000850000005000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) openat$tun(0xffffffffffffff9c, 0x0, 0x1c1341, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000300)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setns(0xffffffffffffffff, 0x20000000) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) request_key(&(0x7f0000000000)='logon\x00', 0x0, 0x0, 0xfffffffffffffffa) syz_open_procfs(0x0, &(0x7f00000000c0)='attr/prev\x00') syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8002, &(0x7f0000000200)={[{@usrjquota}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0xa0f}}]}, 0x1, 0x4c4, &(0x7f0000000500)="$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") openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) syslog(0x0, &(0x7f0000000240)=""/186, 0xba) 155.005807ms ago: executing program 0 (id=8382): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9) mkdirat(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x4c000) 49.932249ms ago: executing program 0 (id=8383): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a5000000"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = io_uring_setup(0x4d3f, &(0x7f0000000240)={0x0, 0xca6a, 0x40, 0x1, 0x6}) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_RESTRICTIONS(r1, 0xb, &(0x7f0000000480)=[@ioring_restriction_sqe_op={0x1, 0x1c}], 0x1) 0s ago: executing program 1 (id=8384): r0 = socket(0x200000000000011, 0x2, 0x2) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000080)={0x11, 0x16, r1, 0x1, 0x20, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x103, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) mount$9p_tcp(0x0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080), 0x800000, &(0x7f0000000200)=ANY=[@ANYBLOB="7472616e733d74737024706f72543d307830307c04a7ea673030303230303030303034e2f1"]) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0xffffffd3) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000b40)={'\x00', 0x7ff, 0x5, 0xc, 0xfffffffffffffffd, 0x59c, 0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r5, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r7, {}, {}, {0xfff3}}}, 0x24}}, 0x0) kernel console output (not intermixed with test programs): not happen!! Data will be lost [ 458.410342][T12272] [ 458.412363][T26321] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 458.423909][T26315] loop4: detected capacity change from 0 to 8192 [ 458.549414][T26329] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7751'. [ 458.616184][T26325] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7747'. [ 458.633556][T26331] loop1: detected capacity change from 0 to 1024 [ 458.660260][T26325] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7747'. [ 458.670930][T26325] netlink: 104 bytes leftover after parsing attributes in process `syz.2.7747'. [ 458.716015][T26331] ext4 filesystem being mounted at /355/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 458.852790][T26345] loop2: detected capacity change from 0 to 512 [ 458.881558][T26345] ext4 filesystem being mounted at /364/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 458.904737][T26345] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #2: comm syz.2.7756: corrupted inode contents [ 458.925884][T26345] EXT4-fs error (device loop2): ext4_dirty_inode:6459: inode #2: comm syz.2.7756: mark_inode_dirty error [ 458.952454][T26345] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #2: comm syz.2.7756: corrupted inode contents [ 458.977359][T26351] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #2: comm syz.2.7756: corrupted inode contents [ 458.998517][T26351] EXT4-fs error (device loop2): ext4_dirty_inode:6459: inode #2: comm syz.2.7756: mark_inode_dirty error [ 459.014046][T26351] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #2: comm syz.2.7756: corrupted inode contents [ 459.026281][T26351] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #2: comm syz.2.7756: mark_inode_dirty error [ 459.043212][T26351] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #2: comm syz.2.7756: corrupted inode contents [ 459.045654][T26352] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7758'. [ 459.055572][T26351] EXT4-fs error (device loop2): ext4_dirty_inode:6459: inode #2: comm syz.2.7756: mark_inode_dirty error [ 459.118443][T26358] loop1: detected capacity change from 0 to 2048 [ 459.156554][T26358] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 459.172674][T26358] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 459.185004][T26358] EXT4-fs (loop1): This should not happen!! Data will be lost [ 459.185004][T26358] [ 459.194722][T26358] EXT4-fs (loop1): Total free blocks count 0 [ 459.200790][T26358] EXT4-fs (loop1): Free/Dirty block details [ 459.206852][T26358] EXT4-fs (loop1): free_blocks=4096 [ 459.212212][T26358] EXT4-fs (loop1): dirty_blocks=576 [ 459.217522][T26358] EXT4-fs (loop1): Block reservation details [ 459.223653][T26358] EXT4-fs (loop1): i_reserved_data_blocks=36 [ 459.248761][ T29] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 544 with error 28 [ 459.261442][ T29] EXT4-fs (loop1): This should not happen!! Data will be lost [ 459.261442][ T29] [ 459.294321][T26369] loop1: detected capacity change from 0 to 1024 [ 459.308239][T26369] ext4 filesystem being mounted at /360/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 459.496903][T26388] loop2: detected capacity change from 0 to 8192 [ 459.597392][T26396] program syz.2.7777 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 459.619670][T26398] loop3: detected capacity change from 0 to 2048 [ 459.660008][T26396] vhci_hcd: invalid port number 224 [ 459.665539][T26396] blktrace: Concurrent blktraces are not allowed on sg0 [ 459.725382][T26398] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 459.740182][T26398] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 459.752463][T26398] EXT4-fs (loop3): This should not happen!! Data will be lost [ 459.752463][T26398] [ 459.762276][T26398] EXT4-fs (loop3): Total free blocks count 0 [ 459.768331][T26398] EXT4-fs (loop3): Free/Dirty block details [ 459.774295][T26398] EXT4-fs (loop3): free_blocks=4096 [ 459.779644][T26398] EXT4-fs (loop3): dirty_blocks=880 [ 459.784872][T26398] EXT4-fs (loop3): Block reservation details [ 459.790923][T26398] EXT4-fs (loop3): i_reserved_data_blocks=55 [ 459.817824][T12272] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 848 with error 28 [ 459.830439][T12272] EXT4-fs (loop3): This should not happen!! Data will be lost [ 459.830439][T12272] [ 459.975810][T26411] loop3: detected capacity change from 0 to 1024 [ 459.993304][T26411] ext4 filesystem being mounted at /244/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 460.053949][T26417] validate_nla: 9 callbacks suppressed [ 460.053968][T26417] netlink: 'syz.0.7785': attribute type 4 has an invalid length. [ 460.072166][T26417] netlink: 'syz.0.7785': attribute type 4 has an invalid length. [ 460.113272][T26426] netlink: 'syz.3.7788': attribute type 15 has an invalid length. [ 460.428052][T26440] program syz.3.7793 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 460.467840][T26440] vhci_hcd: invalid port number 224 [ 460.474722][T26440] blktrace: Concurrent blktraces are not allowed on sg0 [ 460.537860][T26446] loop0: detected capacity change from 0 to 8192 [ 460.651535][T26451] loop0: detected capacity change from 0 to 2048 [ 460.662087][T26451] EXT4-fs: Ignoring removed mblk_io_submit option [ 460.749337][T26459] netlink: 'syz.3.7801': attribute type 4 has an invalid length. [ 460.758680][T26459] netlink: 'syz.3.7801': attribute type 4 has an invalid length. [ 460.784038][T26461] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7802'. [ 460.981720][T26463] loop3: detected capacity change from 0 to 8192 [ 461.144847][T26483] netlink: 72 bytes leftover after parsing attributes in process `syz.2.7813'. [ 461.179552][T26483] loop2: detected capacity change from 0 to 1024 [ 461.212738][T26483] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4113: comm syz.2.7813: Allocating blocks 385-513 which overlap fs metadata [ 461.231315][T26482] EXT4-fs (loop2): pa ffff8881050feee0: logic 16, phys. 129, len 24 [ 461.239432][T26482] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 461.387662][T26496] 9pnet_fd: Insufficient options for proto=fd [ 461.395649][T26496] loop3: detected capacity change from 0 to 164 [ 461.459807][T26498] loop2: detected capacity change from 0 to 8192 [ 461.539019][T26509] loop1: detected capacity change from 0 to 2048 [ 461.562194][T26509] autofs4:pid:26509:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(31.1), cmd(0xc018937e) [ 461.575582][T26509] autofs4:pid:26509:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc018937e) [ 461.615455][T26519] loop0: detected capacity change from 0 to 2048 [ 461.643434][T26523] loop2: detected capacity change from 0 to 1024 [ 461.643551][ T1761] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 461.664682][ T1761] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 461.677117][ T1761] EXT4-fs (loop1): This should not happen!! Data will be lost [ 461.677117][ T1761] [ 461.686866][ T1761] EXT4-fs (loop1): Total free blocks count 0 [ 461.692872][ T1761] EXT4-fs (loop1): Free/Dirty block details [ 461.693156][T26519] autofs4:pid:26519:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(31.1), cmd(0xc018937e) [ 461.698859][ T1761] EXT4-fs (loop1): free_blocks=4096 [ 461.698878][ T1761] EXT4-fs (loop1): dirty_blocks=512 [ 461.712107][T26519] autofs4:pid:26519:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc018937e) [ 461.718024][T26523] ext4 filesystem being mounted at /383/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 461.722684][ T1761] EXT4-fs (loop1): Block reservation details [ 461.750802][ T1761] EXT4-fs (loop1): i_reserved_data_blocks=32 [ 461.764438][ T167] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 480 with error 28 [ 461.777082][ T167] EXT4-fs (loop1): This should not happen!! Data will be lost [ 461.777082][ T167] [ 461.889618][T12272] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 461.908456][T12272] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 461.920789][T12272] EXT4-fs (loop0): This should not happen!! Data will be lost [ 461.920789][T12272] [ 461.930561][T12272] EXT4-fs (loop0): Total free blocks count 0 [ 461.936683][T12272] EXT4-fs (loop0): Free/Dirty block details [ 461.942605][T12272] EXT4-fs (loop0): free_blocks=4096 [ 461.947845][T12272] EXT4-fs (loop0): dirty_blocks=512 [ 461.953067][T12272] EXT4-fs (loop0): Block reservation details [ 461.959089][T12272] EXT4-fs (loop0): i_reserved_data_blocks=32 [ 461.966261][T12272] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 480 with error 28 [ 461.978894][T12272] EXT4-fs (loop0): This should not happen!! Data will be lost [ 461.978894][T12272] [ 462.130777][T26537] loop0: detected capacity change from 0 to 512 [ 462.160852][T26537] ext4 filesystem being mounted at /409/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 462.195766][T26537] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #2: comm syz.0.7834: corrupted inode contents [ 462.220479][T26541] loop2: detected capacity change from 0 to 512 [ 462.230789][T26537] EXT4-fs error (device loop0): ext4_dirty_inode:6459: inode #2: comm syz.0.7834: mark_inode_dirty error [ 462.243965][T26537] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #2: comm syz.0.7834: corrupted inode contents [ 462.261280][T26541] ext4 filesystem being mounted at /385/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 462.292049][T26544] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #2: comm syz.0.7834: corrupted inode contents [ 462.326012][T26541] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #2: comm syz.2.7835: corrupted inode contents [ 462.352662][T26541] EXT4-fs error (device loop2): ext4_dirty_inode:6459: inode #2: comm syz.2.7835: mark_inode_dirty error [ 462.376024][T26544] EXT4-fs error (device loop0): ext4_dirty_inode:6459: inode #2: comm syz.0.7834: mark_inode_dirty error [ 462.393312][T26546] loop3: detected capacity change from 0 to 8192 [ 462.400110][T26541] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #2: comm syz.2.7835: corrupted inode contents [ 462.410968][T26544] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #2: comm syz.0.7834: corrupted inode contents [ 462.429214][T26544] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #2: comm syz.0.7834: mark_inode_dirty error [ 462.443022][T26544] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #2: comm syz.0.7834: corrupted inode contents [ 462.462498][T26544] EXT4-fs error (device loop0): ext4_dirty_inode:6459: inode #2: comm syz.0.7834: mark_inode_dirty error [ 462.475938][T26547] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #2: comm syz.2.7835: corrupted inode contents [ 462.491596][T26547] EXT4-fs error (device loop2): ext4_dirty_inode:6459: inode #2: comm syz.2.7835: mark_inode_dirty error [ 462.505553][T26547] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #2: comm syz.2.7835: corrupted inode contents [ 462.520938][T26547] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #2: comm syz.2.7835: mark_inode_dirty error [ 462.532540][T26547] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #2: comm syz.2.7835: corrupted inode contents [ 462.548148][T26547] EXT4-fs error (device loop2): ext4_dirty_inode:6459: inode #2: comm syz.2.7835: mark_inode_dirty error [ 462.747855][T26568] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7842'. [ 462.770109][T26561] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7842'. [ 462.855759][T26574] loop0: detected capacity change from 0 to 512 [ 462.914557][T26574] ext4 filesystem being mounted at /412/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 462.935243][T26574] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #2: comm syz.0.7848: corrupted inode contents [ 462.956955][T26574] EXT4-fs error (device loop0): ext4_dirty_inode:6459: inode #2: comm syz.0.7848: mark_inode_dirty error [ 462.978622][T26574] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #2: comm syz.0.7848: corrupted inode contents [ 462.990243][ T30] kauditd_printk_skb: 986 callbacks suppressed [ 462.990263][ T30] audit: type=1326 audit(1749327380.232:96630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26551 comm="syz.1.7838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0ca29e929 code=0x7ffc0000 [ 463.010418][T26581] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #2: comm syz.0.7848: corrupted inode contents [ 463.026602][ T30] audit: type=1326 audit(1749327380.232:96631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26551 comm="syz.1.7838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0ca29e929 code=0x7ffc0000 [ 463.100079][ T30] audit: type=1326 audit(1749327380.342:96632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26573 comm="syz.0.7848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f815ed1e929 code=0x7ffc0000 [ 463.106202][T26581] EXT4-fs error (device loop0): ext4_dirty_inode:6459: inode #2: comm syz.0.7848: mark_inode_dirty error [ 463.123870][ T30] audit: type=1326 audit(1749327380.342:96633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26573 comm="syz.0.7848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f815ed1e929 code=0x7ffc0000 [ 463.195169][T26581] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #2: comm syz.0.7848: corrupted inode contents [ 463.202915][ T30] audit: type=1326 audit(1749327380.432:96634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26573 comm="syz.0.7848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f815ed1e929 code=0x7ffc0000 [ 463.226647][T26581] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #2: comm syz.0.7848: mark_inode_dirty error [ 463.230545][ T30] audit: type=1326 audit(1749327380.432:96635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26573 comm="syz.0.7848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f815ed1e929 code=0x7ffc0000 [ 463.265303][ T30] audit: type=1326 audit(1749327380.432:96636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26573 comm="syz.0.7848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f815ed1e929 code=0x7ffc0000 [ 463.272418][T26581] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #2: comm syz.0.7848: corrupted inode contents [ 463.288914][ T30] audit: type=1326 audit(1749327380.432:96637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26573 comm="syz.0.7848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f815ed1e929 code=0x7ffc0000 [ 463.288982][ T30] audit: type=1326 audit(1749327380.432:96638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26573 comm="syz.0.7848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f815ed1e929 code=0x7ffc0000 [ 463.345148][T26581] EXT4-fs error (device loop0): ext4_dirty_inode:6459: inode #2: comm syz.0.7848: mark_inode_dirty error [ 463.347944][ T30] audit: type=1326 audit(1749327380.432:96639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26573 comm="syz.0.7848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f815ed1e929 code=0x7ffc0000 [ 463.455243][T26591] netlink: 'syz.2.7852': attribute type 4 has an invalid length. [ 463.456879][T26589] loop1: detected capacity change from 0 to 512 [ 463.468448][T26591] netlink: 'syz.2.7852': attribute type 4 has an invalid length. [ 463.530165][T26589] ext4 filesystem being mounted at /376/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 463.565454][T26589] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #2: comm syz.1.7850: corrupted inode contents [ 463.583644][T26595] 9pnet: Could not find request transport: tsp$porT=0x00|§êg00020000004âñ [ 463.592777][T26589] EXT4-fs error (device loop1): ext4_dirty_inode:6459: inode #2: comm syz.1.7850: mark_inode_dirty error [ 463.593261][T26595] blktrace: Concurrent blktraces are not allowed on sg0 [ 463.611373][T26589] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #2: comm syz.1.7850: corrupted inode contents [ 463.623259][T26600] loop3: detected capacity change from 0 to 1024 [ 463.627259][T26602] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #2: comm syz.1.7850: corrupted inode contents [ 463.636980][T26595] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 463.641743][T26602] EXT4-fs error (device loop1): ext4_dirty_inode:6459: inode #2: comm syz.1.7850: mark_inode_dirty error [ 463.660396][T26602] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #2: comm syz.1.7850: corrupted inode contents [ 463.676953][T26600] ext4 filesystem being mounted at /267/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 463.696975][T26595] __nla_validate_parse: 1 callbacks suppressed [ 463.696994][T26595] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7853'. [ 463.724927][T26602] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #2: comm syz.1.7850: mark_inode_dirty error [ 463.746728][T26602] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #2: comm syz.1.7850: corrupted inode contents [ 463.759781][T26602] EXT4-fs error (device loop1): ext4_dirty_inode:6459: inode #2: comm syz.1.7850: mark_inode_dirty error [ 463.872372][T22052] EXT4-fs unmount: 156 callbacks suppressed [ 463.872389][T22052] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 463.910347][T26616] 9pnet_fd: Insufficient options for proto=fd [ 463.922361][T26616] loop0: detected capacity change from 0 to 164 [ 463.935983][T26614] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7860'. [ 463.949415][T26618] loop1: detected capacity change from 0 to 2048 [ 463.962388][T26620] netlink: 'syz.0.7863': attribute type 4 has an invalid length. [ 463.974796][T26620] netlink: 'syz.0.7863': attribute type 4 has an invalid length. [ 463.992948][T26618] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 464.046017][ T57] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 464.060903][ T57] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 464.073174][ T57] EXT4-fs (loop1): This should not happen!! Data will be lost [ 464.073174][ T57] [ 464.083010][ T57] EXT4-fs (loop1): Total free blocks count 0 [ 464.083046][T26629] loop3: detected capacity change from 0 to 8192 [ 464.089060][ T57] EXT4-fs (loop1): Free/Dirty block details [ 464.089077][ T57] EXT4-fs (loop1): free_blocks=4096 [ 464.089093][ T57] EXT4-fs (loop1): dirty_blocks=512 [ 464.089107][ T57] EXT4-fs (loop1): Block reservation details [ 464.089118][ T57] EXT4-fs (loop1): i_reserved_data_blocks=32 [ 464.090240][ T57] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 480 with error 28 [ 464.167853][T26633] loop3: detected capacity change from 0 to 1024 [ 464.196192][T26633] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 464.208580][T26633] ext4 filesystem being mounted at /274/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 464.241619][T26641] netlink: 'syz.0.7872': attribute type 4 has an invalid length. [ 464.250303][T22174] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 464.363002][T26658] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7878'. [ 464.757716][T26680] loop2: detected capacity change from 0 to 2048 [ 464.764452][T26674] loop3: detected capacity change from 0 to 8192 [ 464.794022][T26680] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 464.851670][T21256] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 464.893577][T26689] netlink: zone id is out of range [ 464.898847][T26689] netlink: zone id is out of range [ 464.904057][T26689] netlink: zone id is out of range [ 464.909405][T26689] netlink: zone id is out of range [ 464.914625][T26689] netlink: zone id is out of range [ 464.919836][T26689] netlink: zone id is out of range [ 464.924974][T26689] netlink: zone id is out of range [ 464.930133][T26689] netlink: zone id is out of range [ 464.935256][T26689] netlink: zone id is out of range [ 465.040119][T26694] loop3: detected capacity change from 0 to 8192 [ 465.040973][T26699] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7895'. [ 465.071834][T26703] loop1: detected capacity change from 0 to 1024 [ 465.097369][T26703] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 465.109616][T26703] ext4 filesystem being mounted at /392/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 465.152529][T22052] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 465.175245][T26710] loop2: detected capacity change from 0 to 2048 [ 465.188754][T26710] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 465.203020][T26707] 9pnet: Could not find request transport: tsp$porT=0x00|§êg00020000004âñ [ 465.216148][T26707] blktrace: Concurrent blktraces are not allowed on sg0 [ 465.255928][ T1761] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 465.270465][T26716] loop1: detected capacity change from 0 to 8192 [ 465.277780][ T1761] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 465.280756][T26719] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7898'. [ 465.290068][ T1761] EXT4-fs (loop2): This should not happen!! Data will be lost [ 465.290068][ T1761] [ 465.290090][ T1761] EXT4-fs (loop2): Total free blocks count 0 [ 465.290107][ T1761] EXT4-fs (loop2): Free/Dirty block details [ 465.320671][ T1761] EXT4-fs (loop2): free_blocks=4096 [ 465.326087][ T1761] EXT4-fs (loop2): dirty_blocks=512 [ 465.331350][ T1761] EXT4-fs (loop2): Block reservation details [ 465.337399][ T1761] EXT4-fs (loop2): i_reserved_data_blocks=32 [ 465.344607][ T1761] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 480 with error 28 [ 465.563643][T26733] loop1: detected capacity change from 0 to 8192 [ 465.670381][T26743] netlink: 72 bytes leftover after parsing attributes in process `syz.1.7911'. [ 465.703647][T26743] loop1: detected capacity change from 0 to 1024 [ 465.723170][T26745] loop2: detected capacity change from 0 to 512 [ 465.742576][T26747] loop0: detected capacity change from 0 to 1024 [ 465.753029][T26745] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 465.770824][T26745] ext4 filesystem being mounted at /402/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 465.782559][T26743] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 465.798844][T26747] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 465.813951][T26747] ext4 filesystem being mounted at /423/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 465.825536][T26745] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #2: comm syz.2.7912: corrupted inode contents [ 465.838264][T26745] EXT4-fs error (device loop2): ext4_dirty_inode:6459: inode #2: comm syz.2.7912: mark_inode_dirty error [ 465.840097][T26743] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4113: comm syz.1.7911: Allocating blocks 385-513 which overlap fs metadata [ 465.852360][T26745] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #2: comm syz.2.7912: corrupted inode contents [ 465.884958][T26742] EXT4-fs (loop1): pa ffff888106e3f5b0: logic 16, phys. 129, len 24 [ 465.893211][T26742] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 465.908534][T20845] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 465.908883][T26754] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #2: comm syz.2.7912: corrupted inode contents [ 465.930369][T26754] EXT4-fs error (device loop2): ext4_dirty_inode:6459: inode #2: comm syz.2.7912: mark_inode_dirty error [ 465.950725][T26754] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #2: comm syz.2.7912: corrupted inode contents [ 465.973762][T26754] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #2: comm syz.2.7912: mark_inode_dirty error [ 465.986370][T26754] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #2: comm syz.2.7912: corrupted inode contents [ 465.998732][T26754] EXT4-fs error (device loop2): ext4_dirty_inode:6459: inode #2: comm syz.2.7912: mark_inode_dirty error [ 466.002674][T22052] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 466.034136][T26762] validate_nla: 1 callbacks suppressed [ 466.034152][T26762] netlink: 'syz.0.7919': attribute type 4 has an invalid length. [ 466.040224][T26761] loop4: detected capacity change from 0 to 512 [ 466.054870][T26762] netlink: 'syz.0.7919': attribute type 4 has an invalid length. [ 466.112192][T26770] program syz.0.7920 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 466.117065][T21256] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 466.157468][T26770] vhci_hcd: invalid port number 224 [ 466.163190][T26770] blktrace: Concurrent blktraces are not allowed on sg0 [ 466.201067][T26761] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 466.286552][T26761] ext4 filesystem being mounted at /372/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 466.348877][T26761] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #2: comm syz.4.7918: corrupted inode contents [ 466.366648][T26761] EXT4-fs error (device loop4): ext4_dirty_inode:6459: inode #2: comm syz.4.7918: mark_inode_dirty error [ 466.408562][T26761] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #2: comm syz.4.7918: corrupted inode contents [ 466.462462][T26780] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #2: comm syz.4.7918: corrupted inode contents [ 466.516825][T26780] EXT4-fs error (device loop4): ext4_dirty_inode:6459: inode #2: comm syz.4.7918: mark_inode_dirty error [ 466.557323][T26780] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #2: comm syz.4.7918: corrupted inode contents [ 466.584919][T26780] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #2: comm syz.4.7918: mark_inode_dirty error [ 466.610303][T26780] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #2: comm syz.4.7918: corrupted inode contents [ 466.656319][T26780] EXT4-fs error (device loop4): ext4_dirty_inode:6459: inode #2: comm syz.4.7918: mark_inode_dirty error [ 466.811839][T21423] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 466.842968][T26797] loop3: detected capacity change from 0 to 512 [ 466.871021][T26797] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 466.883248][T26801] netlink: 'syz.2.7932': attribute type 4 has an invalid length. [ 466.893562][T26801] netlink: 'syz.2.7932': attribute type 4 has an invalid length. [ 466.895897][T26797] EXT4-fs error (device loop3): ext4_orphan_get:1419: comm syz.3.7930: bad orphan inode 11 [ 466.924027][T26797] ext4_test_bit(bit=10, block=4) = 1 [ 466.929421][T26797] is_bad_inode(inode)=0 [ 466.933685][T26797] NEXT_ORPHAN(inode)=2080374784 [ 466.938590][T26797] max_ino=32 [ 466.941802][T26797] i_nlink=0 [ 466.968873][T26797] EXT4-fs (loop3): 1 truncate cleaned up [ 466.975044][T26797] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 467.004521][T22174] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 467.343390][T26818] loop3: detected capacity change from 0 to 512 [ 467.360710][T26818] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 467.375143][T26818] ext4 filesystem being mounted at /287/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 467.392350][T26818] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #2: comm syz.3.7939: corrupted inode contents [ 467.405356][T26818] EXT4-fs error (device loop3): ext4_dirty_inode:6459: inode #2: comm syz.3.7939: mark_inode_dirty error [ 467.421221][T26818] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #2: comm syz.3.7939: corrupted inode contents [ 467.435393][T26818] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #2: comm syz.3.7939: corrupted inode contents [ 467.451102][T26818] EXT4-fs error (device loop3): ext4_dirty_inode:6459: inode #2: comm syz.3.7939: mark_inode_dirty error [ 467.463378][T26818] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #2: comm syz.3.7939: corrupted inode contents [ 467.479787][T26818] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #2: comm syz.3.7939: mark_inode_dirty error [ 467.492467][T26818] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #2: comm syz.3.7939: corrupted inode contents [ 467.508946][T26818] EXT4-fs error (device loop3): ext4_dirty_inode:6459: inode #2: comm syz.3.7939: mark_inode_dirty error [ 467.623198][T26833] loop2: detected capacity change from 0 to 1024 [ 467.631722][T22174] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 467.647409][T26833] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 467.663803][T26833] ext4 filesystem being mounted at /411/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 467.714888][T21256] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 467.760294][T26843] loop2: detected capacity change from 0 to 512 [ 467.769773][T26839] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7946'. [ 467.779794][T26843] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 467.782180][T26845] loop3: detected capacity change from 0 to 512 [ 467.796094][T26843] EXT4-fs error (device loop2): ext4_orphan_get:1419: comm syz.2.7947: bad orphan inode 11 [ 467.810961][T26845] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 467.820446][T26843] ext4_test_bit(bit=10, block=4) = 1 [ 467.825865][T26843] is_bad_inode(inode)=0 [ 467.830117][T26843] NEXT_ORPHAN(inode)=2080374784 [ 467.835024][T26843] max_ino=32 [ 467.838314][T26843] i_nlink=0 [ 467.839729][T26845] EXT4-fs error (device loop3): ext4_orphan_get:1419: comm syz.3.7948: bad orphan inode 11 [ 467.871427][T26845] ext4_test_bit(bit=10, block=4) = 1 [ 467.876875][T26845] is_bad_inode(inode)=0 [ 467.881050][T26845] NEXT_ORPHAN(inode)=2080374784 [ 467.885986][T26845] max_ino=32 [ 467.889337][T26845] i_nlink=0 [ 467.895973][T26845] EXT4-fs (loop3): 1 truncate cleaned up [ 467.902337][T26845] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 467.917767][T26843] EXT4-fs (loop2): 1 truncate cleaned up [ 467.924261][T26843] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 467.940366][T26851] loop1: detected capacity change from 0 to 2048 [ 467.963223][T21256] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 467.976592][T26853] program syz.0.7952 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 468.011174][T26851] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 468.024520][T26853] vhci_hcd: invalid port number 224 [ 468.030860][T22174] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 468.045698][T26853] blktrace: Concurrent blktraces are not allowed on sg0 [ 468.132462][T26859] loop3: detected capacity change from 0 to 2048 [ 468.144854][T22052] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 468.179510][T26859] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 468.194092][ T30] kauditd_printk_skb: 1336 callbacks suppressed [ 468.194110][ T30] audit: type=1326 audit(1749327385.432:97976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26849 comm="syz.4.7950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d896ee929 code=0x7ffc0000 [ 468.224227][ T30] audit: type=1326 audit(1749327385.432:97977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26849 comm="syz.4.7950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d896ee929 code=0x7ffc0000 [ 468.358171][ T30] audit: type=1326 audit(1749327385.502:97978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26864 comm="syz.1.7954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0ca29e929 code=0x7ffc0000 [ 468.382061][ T30] audit: type=1326 audit(1749327385.502:97979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26864 comm="syz.1.7954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0ca29e929 code=0x7ffc0000 [ 468.405771][ T30] audit: type=1326 audit(1749327385.502:97980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26864 comm="syz.1.7954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd0ca29e929 code=0x7ffc0000 [ 468.429623][ T30] audit: type=1326 audit(1749327385.512:97981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26864 comm="syz.1.7954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0ca29e929 code=0x7ffc0000 [ 468.453402][ T30] audit: type=1326 audit(1749327385.512:97982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26864 comm="syz.1.7954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd0ca29e929 code=0x7ffc0000 [ 468.477307][ T30] audit: type=1326 audit(1749327385.512:97983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26864 comm="syz.1.7954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0ca29e929 code=0x7ffc0000 [ 468.501037][ T30] audit: type=1326 audit(1749327385.512:97984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26864 comm="syz.1.7954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd0ca29e929 code=0x7ffc0000 [ 468.524673][ T30] audit: type=1326 audit(1749327385.512:97985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26864 comm="syz.1.7954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0ca29e929 code=0x7ffc0000 [ 468.556256][T26859] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 468.574957][T26859] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 468.587330][T26859] EXT4-fs (loop3): This should not happen!! Data will be lost [ 468.587330][T26859] [ 468.593460][T26875] loop4: detected capacity change from 0 to 1024 [ 468.597030][T26859] EXT4-fs (loop3): Total free blocks count 0 [ 468.609548][T26859] EXT4-fs (loop3): Free/Dirty block details [ 468.615446][T26859] EXT4-fs (loop3): free_blocks=4096 [ 468.620687][T26859] EXT4-fs (loop3): dirty_blocks=512 [ 468.620994][T26875] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 468.625891][T26859] EXT4-fs (loop3): Block reservation details [ 468.625907][T26859] EXT4-fs (loop3): i_reserved_data_blocks=32 [ 468.642947][T26875] ext4 filesystem being mounted at /377/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 468.693262][T21423] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 468.703573][ T167] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 480 with error 28 [ 468.731278][T26879] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7960'. [ 468.771864][T26883] loop3: detected capacity change from 0 to 2048 [ 468.783787][T26886] net_ratelimit: 1418 callbacks suppressed [ 468.783830][T26886] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 468.802137][T26883] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 468.897846][T12272] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 468.937125][T12272] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 468.949514][T12272] EXT4-fs (loop3): This should not happen!! Data will be lost [ 468.949514][T12272] [ 468.959421][T12272] EXT4-fs (loop3): Total free blocks count 0 [ 468.965422][T12272] EXT4-fs (loop3): Free/Dirty block details [ 468.971466][T12272] EXT4-fs (loop3): free_blocks=4096 [ 468.976741][T12272] EXT4-fs (loop3): dirty_blocks=512 [ 468.982030][T12272] EXT4-fs (loop3): Block reservation details [ 468.988077][T12272] EXT4-fs (loop3): i_reserved_data_blocks=32 [ 468.995093][T12272] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 480 with error 28 [ 469.015366][T26893] loop0: detected capacity change from 0 to 8192 [ 469.079686][T26895] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7967'. [ 469.190528][T26906] program syz.2.7970 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 469.235003][T26903] loop0: detected capacity change from 0 to 8192 [ 469.257246][T26906] vhci_hcd: invalid port number 224 [ 469.273770][T26906] blktrace: Concurrent blktraces are not allowed on sg0 [ 469.304591][T26908] loop1: detected capacity change from 0 to 1024 [ 469.371102][T26908] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 469.424942][T26908] ext4 filesystem being mounted at /407/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 469.526534][T26919] loop0: detected capacity change from 0 to 2048 [ 469.542647][T26919] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 469.586138][T26924] loop4: detected capacity change from 0 to 164 [ 469.595809][T22052] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 469.622374][T20845] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 469.697818][T26926] 9pnet_fd: Insufficient options for proto=fd [ 469.725045][T26926] loop0: detected capacity change from 0 to 164 [ 469.742136][T26932] loop4: detected capacity change from 0 to 164 [ 469.846012][T26945] loop0: detected capacity change from 0 to 1024 [ 469.870763][T26949] netlink: 72 bytes leftover after parsing attributes in process `syz.4.7983'. [ 469.885720][T26949] loop4: detected capacity change from 0 to 1024 [ 469.893934][T26945] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 469.911152][T26949] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 469.923399][T26945] ext4 filesystem being mounted at /445/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 469.971362][T20845] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 469.999923][T21423] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 470.013991][T26953] program syz.0.7988 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 470.047156][T26953] vhci_hcd: invalid port number 224 [ 470.052838][T26953] blktrace: Concurrent blktraces are not allowed on sg0 [ 470.054825][T26955] loop4: detected capacity change from 0 to 2048 [ 470.094101][T26955] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 470.146657][ T29] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 470.177237][ T29] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 470.189550][ T29] EXT4-fs (loop4): This should not happen!! Data will be lost [ 470.189550][ T29] [ 470.199249][ T29] EXT4-fs (loop4): Total free blocks count 0 [ 470.205293][ T29] EXT4-fs (loop4): Free/Dirty block details [ 470.211265][ T29] EXT4-fs (loop4): free_blocks=4096 [ 470.216518][ T29] EXT4-fs (loop4): dirty_blocks=512 [ 470.221772][ T29] EXT4-fs (loop4): Block reservation details [ 470.227792][ T29] EXT4-fs (loop4): i_reserved_data_blocks=32 [ 470.249850][ T29] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 480 with error 28 [ 470.312985][T26968] netlink: zone id is out of range [ 470.318268][T26968] netlink: zone id is out of range [ 470.323475][T26968] netlink: zone id is out of range [ 470.328702][T26968] netlink: zone id is out of range [ 470.333869][T26968] netlink: zone id is out of range [ 470.339029][T26968] netlink: zone id is out of range [ 470.344160][T26968] netlink: zone id is out of range [ 470.349329][T26968] netlink: zone id is out of range [ 470.354454][T26968] netlink: zone id is out of range [ 470.395393][T26972] 9pnet_fd: Insufficient options for proto=fd [ 470.403308][T26972] loop4: detected capacity change from 0 to 164 [ 470.424412][T26963] loop3: detected capacity change from 0 to 8192 [ 470.530662][T26976] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7997'. [ 470.549021][T26976] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7997'. [ 470.551281][T26982] netlink: 72 bytes leftover after parsing attributes in process `syz.0.7999'. [ 470.559340][T26976] netlink: 104 bytes leftover after parsing attributes in process `syz.3.7997'. [ 470.586131][T26984] loop1: detected capacity change from 0 to 164 [ 470.613363][T26986] loop4: detected capacity change from 0 to 512 [ 470.637566][T26982] loop0: detected capacity change from 0 to 1024 [ 470.673240][T26986] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 470.701824][T26993] loop1: detected capacity change from 0 to 164 [ 470.709769][T26986] ext4 filesystem being mounted at /389/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 470.724881][T26982] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 470.738267][T26986] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #2: comm syz.4.8001: corrupted inode contents [ 470.750542][T26986] EXT4-fs error (device loop4): ext4_dirty_inode:6459: inode #2: comm syz.4.8001: mark_inode_dirty error [ 470.762473][T26986] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #2: comm syz.4.8001: corrupted inode contents [ 470.781658][T26996] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #2: comm syz.4.8001: corrupted inode contents [ 470.794112][T26996] EXT4-fs error (device loop4): ext4_dirty_inode:6459: inode #2: comm syz.4.8001: mark_inode_dirty error [ 470.820536][T26998] program syz.2.8005 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 470.822646][T26996] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #2: comm syz.4.8001: corrupted inode contents [ 470.838930][T27000] loop3: detected capacity change from 0 to 164 [ 470.849089][T20845] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 470.859479][T26996] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #2: comm syz.4.8001: mark_inode_dirty error [ 470.875068][T26996] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #2: comm syz.4.8001: corrupted inode contents [ 470.890646][T26996] EXT4-fs error (device loop4): ext4_dirty_inode:6459: inode #2: comm syz.4.8001: mark_inode_dirty error [ 470.902760][T26998] vhci_hcd: invalid port number 224 [ 470.908820][T26998] blktrace: Concurrent blktraces are not allowed on sg0 [ 470.922464][T27004] loop0: detected capacity change from 0 to 512 [ 470.972047][T27004] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 470.986282][T27004] ext4 filesystem being mounted at /449/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 471.001764][T27004] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #2: comm syz.0.8007: corrupted inode contents [ 471.020409][T27010] loop1: detected capacity change from 0 to 1024 [ 471.043978][T27004] EXT4-fs error (device loop0): ext4_dirty_inode:6459: inode #2: comm syz.0.8007: mark_inode_dirty error [ 471.067874][T21423] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 471.083156][T27004] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #2: comm syz.0.8007: corrupted inode contents [ 471.100660][T27010] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 471.115009][T27010] ext4 filesystem being mounted at /413/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 471.130695][T27015] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #2: comm syz.0.8007: corrupted inode contents [ 471.143186][T27015] EXT4-fs error (device loop0): ext4_dirty_inode:6459: inode #2: comm syz.0.8007: mark_inode_dirty error [ 471.183572][T22052] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 471.193295][T27015] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #2: comm syz.0.8007: corrupted inode contents [ 471.203135][T27022] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8011'. [ 471.214259][T27015] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #2: comm syz.0.8007: mark_inode_dirty error [ 471.239136][T27015] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #2: comm syz.0.8007: corrupted inode contents [ 471.256530][T27015] EXT4-fs error (device loop0): ext4_dirty_inode:6459: inode #2: comm syz.0.8007: mark_inode_dirty error [ 471.322880][T27029] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8016'. [ 471.335623][T27024] loop1: detected capacity change from 0 to 8192 [ 471.344109][T27029] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8016'. [ 471.427845][T20845] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 471.471015][T27034] loop2: detected capacity change from 0 to 512 [ 471.515015][T27034] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 471.532443][T27045] loop3: detected capacity change from 0 to 1024 [ 471.541319][T27036] loop1: detected capacity change from 0 to 8192 [ 471.561004][T27034] ext4 filesystem being mounted at /420/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 471.574367][T27034] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #2: comm syz.2.8015: corrupted inode contents [ 471.592989][T27045] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 471.596931][T27049] loop0: detected capacity change from 0 to 164 [ 471.605246][T27034] EXT4-fs error (device loop2): ext4_dirty_inode:6459: inode #2: comm syz.2.8015: mark_inode_dirty error [ 471.623469][T27045] ext4 filesystem being mounted at /304/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 471.634585][T27034] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #2: comm syz.2.8015: corrupted inode contents [ 471.656622][T27046] loop4: detected capacity change from 0 to 8192 [ 471.687780][T22174] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 471.693185][T27052] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #2: comm syz.2.8015: corrupted inode contents [ 471.727995][T27052] EXT4-fs error (device loop2): ext4_dirty_inode:6459: inode #2: comm syz.2.8015: mark_inode_dirty error [ 471.749286][T27052] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #2: comm syz.2.8015: corrupted inode contents [ 471.807293][T27052] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #2: comm syz.2.8015: mark_inode_dirty error [ 471.830101][T27064] loop1: detected capacity change from 0 to 512 [ 471.843777][T27052] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #2: comm syz.2.8015: corrupted inode contents [ 471.846866][T27057] program syz.4.8026 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 471.863950][T27052] EXT4-fs error (device loop2): ext4_dirty_inode:6459: inode #2: comm syz.2.8015: mark_inode_dirty error [ 471.885215][T27067] loop0: detected capacity change from 0 to 1024 [ 471.893500][T27064] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 471.913407][T27067] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 471.925748][T27064] ext4 filesystem being mounted at /417/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 471.940556][T27057] vhci_hcd: invalid port number 224 [ 471.946309][T27057] blktrace: Concurrent blktraces are not allowed on sg0 [ 471.947874][T27067] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4113: comm syz.0.8030: Allocating blocks 385-513 which overlap fs metadata [ 471.980369][T27064] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #2: comm syz.1.8028: corrupted inode contents [ 472.007875][T27066] EXT4-fs (loop0): pa ffff8881050fef50: logic 16, phys. 129, len 24 [ 472.015917][T27066] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 472.038279][T21256] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 472.040890][T27064] EXT4-fs error (device loop1): ext4_dirty_inode:6459: inode #2: comm syz.1.8028: mark_inode_dirty error [ 472.072796][T27064] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #2: comm syz.1.8028: corrupted inode contents [ 472.097383][T27072] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #2: comm syz.1.8028: corrupted inode contents [ 472.113102][T27075] loop2: detected capacity change from 0 to 164 [ 472.123175][T27072] EXT4-fs error (device loop1): ext4_dirty_inode:6459: inode #2: comm syz.1.8028: mark_inode_dirty error [ 472.141940][T20845] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 472.149551][T27072] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #2: comm syz.1.8028: corrupted inode contents [ 472.216536][T27072] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #2: comm syz.1.8028: mark_inode_dirty error [ 472.239495][T27080] loop2: detected capacity change from 0 to 1024 [ 472.257662][T27072] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #2: comm syz.1.8028: corrupted inode contents [ 472.270300][T27080] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 472.296594][T27072] EXT4-fs error (device loop1): ext4_dirty_inode:6459: inode #2: comm syz.1.8028: mark_inode_dirty error [ 472.370977][T27084] loop3: detected capacity change from 0 to 1024 [ 472.390010][T21256] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 472.421888][T27084] ext4 filesystem being mounted at /307/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 472.541467][T27098] loop3: detected capacity change from 0 to 164 [ 472.563844][T27096] loop4: detected capacity change from 0 to 1024 [ 472.595371][T27100] loop2: detected capacity change from 0 to 2048 [ 472.603373][T27092] loop1: detected capacity change from 0 to 8192 [ 472.612700][T27096] ext4 filesystem being mounted at /396/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 472.739797][T27100] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 472.754398][T27108] loop3: detected capacity change from 0 to 164 [ 472.766725][T27100] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 472.779089][T27100] EXT4-fs (loop2): This should not happen!! Data will be lost [ 472.779089][T27100] [ 472.788866][T27100] EXT4-fs (loop2): Total free blocks count 0 [ 472.794913][T27100] EXT4-fs (loop2): Free/Dirty block details [ 472.800951][T27100] EXT4-fs (loop2): free_blocks=4096 [ 472.806225][T27100] EXT4-fs (loop2): dirty_blocks=1008 [ 472.811589][T27100] EXT4-fs (loop2): Block reservation details [ 472.817646][T27100] EXT4-fs (loop2): i_reserved_data_blocks=63 [ 472.842791][T27110] program syz.1.8044 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 472.860039][T12272] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 976 with error 28 [ 472.872892][T12272] EXT4-fs (loop2): This should not happen!! Data will be lost [ 472.872892][T12272] [ 472.887312][T27110] vhci_hcd: invalid port number 224 [ 472.892817][T27110] blktrace: Concurrent blktraces are not allowed on sg0 [ 472.907416][T27114] loop0: detected capacity change from 0 to 1024 [ 472.966863][T27124] loop2: detected capacity change from 0 to 1024 [ 473.010865][T27124] ext4 filesystem being mounted at /427/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 473.175036][T27130] netlink: 'syz.2.8050': attribute type 4 has an invalid length. [ 473.221411][T27130] netlink: 'syz.2.8050': attribute type 4 has an invalid length. [ 473.270913][ T30] kauditd_printk_skb: 1218 callbacks suppressed [ 473.270940][ T30] audit: type=1326 audit(1749327390.512:99204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27116 comm="syz.3.8045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d9d4be929 code=0x7ffc0000 [ 473.278400][T27136] loop1: detected capacity change from 0 to 1024 [ 473.303836][ T30] audit: type=1326 audit(1749327390.542:99205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27116 comm="syz.3.8045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d9d4be929 code=0x7ffc0000 [ 473.335688][T27134] loop0: detected capacity change from 0 to 8192 [ 473.358287][T27136] ext4 filesystem being mounted at /420/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 473.375138][ T30] audit: type=1326 audit(1749327390.612:99206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27135 comm="syz.1.8052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0ca29e929 code=0x7ffc0000 [ 473.398981][ T30] audit: type=1326 audit(1749327390.612:99207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27135 comm="syz.1.8052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd0ca29e929 code=0x7ffc0000 [ 473.422667][ T30] audit: type=1326 audit(1749327390.612:99208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27135 comm="syz.1.8052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0ca29e929 code=0x7ffc0000 [ 473.446456][ T30] audit: type=1326 audit(1749327390.612:99209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27135 comm="syz.1.8052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7fd0ca29e929 code=0x7ffc0000 [ 473.469902][ T30] audit: type=1326 audit(1749327390.612:99210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27135 comm="syz.1.8052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0ca29e929 code=0x7ffc0000 [ 473.493572][ T30] audit: type=1326 audit(1749327390.612:99211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27135 comm="syz.1.8052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7fd0ca29e929 code=0x7ffc0000 [ 473.517285][ T30] audit: type=1326 audit(1749327390.612:99212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27135 comm="syz.1.8052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0ca29e929 code=0x7ffc0000 [ 473.541135][ T30] audit: type=1326 audit(1749327390.612:99213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27135 comm="syz.1.8052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fd0ca29e929 code=0x7ffc0000 [ 473.616386][T27139] loop2: detected capacity change from 0 to 8192 [ 473.637550][T27149] loop1: detected capacity change from 0 to 164 [ 473.683143][T27151] loop0: detected capacity change from 0 to 8192 [ 473.753569][T27159] program syz.4.8062 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 473.797349][T27159] vhci_hcd: invalid port number 224 [ 473.803058][T27159] blktrace: Concurrent blktraces are not allowed on sg0 [ 473.963273][T27172] loop2: detected capacity change from 0 to 8192 [ 474.195651][T27193] loop2: detected capacity change from 0 to 512 [ 474.230556][T27193] ext4 filesystem being mounted at /434/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 474.376589][T27193] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #2: comm syz.2.8072: corrupted inode contents [ 474.432673][T27193] EXT4-fs error (device loop2): ext4_dirty_inode:6459: inode #2: comm syz.2.8072: mark_inode_dirty error [ 474.460180][T27193] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #2: comm syz.2.8072: corrupted inode contents [ 474.485709][T27201] 9pnet: Could not find request transport: tsp$porT=0x00|§êg00020000004âñ [ 474.504491][T27206] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #2: comm syz.2.8072: corrupted inode contents [ 474.536233][T27206] EXT4-fs error (device loop2): ext4_dirty_inode:6459: inode #2: comm syz.2.8072: mark_inode_dirty error [ 474.548062][T27214] __nla_validate_parse: 5 callbacks suppressed [ 474.548080][T27214] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8075'. [ 474.565339][T27206] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #2: comm syz.2.8072: corrupted inode contents [ 474.579170][T27212] netlink: 'syz.4.8076': attribute type 21 has an invalid length. [ 474.607588][T27206] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #2: comm syz.2.8072: mark_inode_dirty error [ 474.629261][T27206] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #2: comm syz.2.8072: corrupted inode contents [ 474.645676][T27218] netlink: 'syz.3.8079': attribute type 4 has an invalid length. [ 474.653942][T27206] EXT4-fs error (device loop2): ext4_dirty_inode:6459: inode #2: comm syz.2.8072: mark_inode_dirty error [ 474.674569][T27218] netlink: 'syz.3.8079': attribute type 4 has an invalid length. [ 474.716056][T27221] program syz.0.8080 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 474.756536][T27221] vhci_hcd: invalid port number 224 [ 474.762504][T27221] blktrace: Concurrent blktraces are not allowed on sg0 [ 474.764427][T27223] loop3: detected capacity change from 0 to 512 [ 474.790212][T27223] ext4 filesystem being mounted at /316/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 474.887319][T27223] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #2: comm syz.3.8081: corrupted inode contents [ 474.899830][T27223] EXT4-fs error (device loop3): ext4_dirty_inode:6459: inode #2: comm syz.3.8081: mark_inode_dirty error [ 474.917720][T27223] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #2: comm syz.3.8081: corrupted inode contents [ 474.933122][T27223] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #2: comm syz.3.8081: corrupted inode contents [ 474.945225][T27223] EXT4-fs error (device loop3): ext4_dirty_inode:6459: inode #2: comm syz.3.8081: mark_inode_dirty error [ 474.957042][T27223] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #2: comm syz.3.8081: corrupted inode contents [ 474.969501][T27223] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #2: comm syz.3.8081: mark_inode_dirty error [ 474.984228][T27223] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #2: comm syz.3.8081: corrupted inode contents [ 475.018005][T27223] EXT4-fs error (device loop3): ext4_dirty_inode:6459: inode #2: comm syz.3.8081: mark_inode_dirty error [ 475.174046][T27248] loop3: detected capacity change from 0 to 1024 [ 475.221951][T27248] ext4 filesystem being mounted at /317/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 475.314523][T27257] loop1: detected capacity change from 0 to 164 [ 475.369717][T27260] loop4: detected capacity change from 0 to 128 [ 475.525663][T27272] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(12) [ 475.532356][T27272] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 475.539828][T27272] vhci_hcd vhci_hcd.0: Device attached [ 475.550312][T27272] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(14) [ 475.556992][T27272] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 475.564636][T27272] vhci_hcd vhci_hcd.0: Device attached [ 475.564825][T27270] loop2: detected capacity change from 0 to 2048 [ 475.574662][T27272] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 475.585319][T27272] FAULT_INJECTION: forcing a failure. [ 475.585319][T27272] name failslab, interval 1, probability 0, space 0, times 0 [ 475.598069][T27272] CPU: 0 UID: 0 PID: 27272 Comm: syz.4.8101 Not tainted 6.15.0-syzkaller-13659-g5b032cac6225 #0 PREEMPT(voluntary) [ 475.598104][T27272] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 475.598119][T27272] Call Trace: [ 475.598129][T27272] [ 475.598136][T27272] __dump_stack+0x1d/0x30 [ 475.598190][T27272] dump_stack_lvl+0xe8/0x140 [ 475.598214][T27272] dump_stack+0x15/0x1b [ 475.598234][T27272] should_fail_ex+0x265/0x280 [ 475.598260][T27272] should_failslab+0x8c/0xb0 [ 475.598290][T27272] kmem_cache_alloc_lru_noprof+0x55/0x310 [ 475.598431][T27272] ? sock_alloc_inode+0x34/0xa0 [ 475.598467][T27272] ? __pfx_sock_alloc_inode+0x10/0x10 [ 475.598502][T27272] sock_alloc_inode+0x34/0xa0 [ 475.598541][T27272] alloc_inode+0x3d/0x170 [ 475.598586][T27272] __sock_create+0x122/0x5b0 [ 475.598631][T27272] __sys_socketpair+0x170/0x430 [ 475.598669][T27272] ? ksys_write+0x192/0x1a0 [ 475.598697][T27272] __x64_sys_socketpair+0x52/0x60 [ 475.598736][T27272] x64_sys_call+0x23f2/0x2fb0 [ 475.598831][T27272] do_syscall_64+0xd2/0x200 [ 475.598857][T27272] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 475.598883][T27272] ? clear_bhb_loop+0x40/0x90 [ 475.598906][T27272] ? clear_bhb_loop+0x40/0x90 [ 475.598940][T27272] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 475.599028][T27272] RIP: 0033:0x7f1d896f087a [ 475.599043][T27272] Code: 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 49 89 ca b8 35 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 475.599065][T27272] RSP: 002b:00007f1d87d56f78 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 475.599083][T27272] RAX: ffffffffffffffda RBX: 00007f1d89915f00 RCX: 00007f1d896f087a [ 475.599099][T27272] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000001 [ 475.599114][T27272] RBP: 00007f1d87d57090 R08: 0000000000000000 R09: 0000000000000000 [ 475.599130][T27272] R10: 00007f1d87d56f98 R11: 0000000000000246 R12: 0000000000000004 [ 475.599190][T27272] R13: 0000000000000000 R14: 00007f1d89915fa0 R15: 00007ffcd259ae18 [ 475.599213][T27272] [ 475.599233][T27272] net_ratelimit: 1417 callbacks suppressed [ 475.599246][T27272] socket: no more sockets [ 475.669298][T27280] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(22) [ 475.817236][T27280] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 475.825118][T27280] vhci_hcd vhci_hcd.0: Device attached [ 475.831979][T23366] vhci_hcd: vhci_device speed not set [ 475.857379][T27272] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 475.873211][T27270] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 475.891127][T27281] vhci_hcd: connection closed [ 475.891564][T27275] vhci_hcd: connection closed [ 475.892306][ T29] vhci_hcd: stop threads [ 475.896489][T27270] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 475.900987][ T29] vhci_hcd: release socket [ 475.905206][T27270] EXT4-fs (loop2): This should not happen!! Data will be lost [ 475.905206][T27270] [ 475.917451][ T29] vhci_hcd: disconnect device [ 475.921824][T27270] EXT4-fs (loop2): Total free blocks count 0 [ 475.921842][T27270] EXT4-fs (loop2): Free/Dirty block details [ 475.931585][T27273] vhci_hcd: connection closed [ 475.936210][T27270] EXT4-fs (loop2): free_blocks=4096 [ 475.936230][T27270] EXT4-fs (loop2): dirty_blocks=512 [ 475.936245][T27270] EXT4-fs (loop2): Block reservation details [ 475.936256][T27270] EXT4-fs (loop2): i_reserved_data_blocks=32 [ 475.936331][T23366] usb 9-1: new full-speed USB device number 3 using vhci_hcd [ 475.947721][T27285] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8102'. [ 475.992129][T27274] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 475.995743][ T29] vhci_hcd: stop threads [ 476.002488][ T29] vhci_hcd: release socket [ 476.007010][ T29] vhci_hcd: disconnect device [ 476.016092][ T29] vhci_hcd: stop threads [ 476.020539][ T29] vhci_hcd: release socket [ 476.025116][ T29] vhci_hcd: disconnect device [ 476.031634][ T167] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 480 with error 28 [ 476.044200][ T167] EXT4-fs (loop2): This should not happen!! Data will be lost [ 476.044200][ T167] [ 476.073815][T27290] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(12) [ 476.080467][T27290] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 476.088032][T27290] vhci_hcd vhci_hcd.0: Device attached [ 476.110458][T27290] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(14) [ 476.117190][T27290] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 476.124732][T27290] vhci_hcd vhci_hcd.0: Device attached [ 476.132378][T27290] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 476.142654][T27298] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=27298 comm=syz.0.8107 [ 476.142801][T27290] vhci_hcd vhci_hcd.0: pdev(2) rhport(3) sockfd(18) [ 476.161706][T27290] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 476.169318][T27290] vhci_hcd vhci_hcd.0: Device attached [ 476.186368][T27290] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(21) [ 476.193112][T27290] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 476.201051][T27290] vhci_hcd vhci_hcd.0: Device attached [ 476.211605][T27290] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 476.251509][T27299] vhci_hcd: connection closed [ 476.251781][T27295] vhci_hcd: connection closed [ 476.251827][T27303] vhci_hcd: connection closed [ 476.256755][T27291] vhci_hcd: connection closed [ 476.266253][ T1761] vhci_hcd: stop threads [ 476.267169][ T3389] vhci_hcd: vhci_device speed not set [ 476.271063][ T1761] vhci_hcd: release socket [ 476.281397][T27310] loop1: detected capacity change from 0 to 512 [ 476.285190][ T1761] vhci_hcd: disconnect device [ 476.297435][T27310] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 476.301387][ T1761] vhci_hcd: stop threads [ 476.310277][ T1761] vhci_hcd: release socket [ 476.314763][ T1761] vhci_hcd: disconnect device [ 476.346552][ T3389] usb 5-1: new full-speed USB device number 2 using vhci_hcd [ 476.354693][T27310] EXT4-fs error (device loop1): ext4_orphan_get:1419: comm syz.1.8109: bad orphan inode 11 [ 476.364677][T27292] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 476.376735][T27310] ext4_test_bit(bit=10, block=4) = 1 [ 476.382101][T27310] is_bad_inode(inode)=0 [ 476.386301][T27310] NEXT_ORPHAN(inode)=2080374784 [ 476.386679][ T1761] vhci_hcd: stop threads [ 476.391268][T27310] max_ino=32 [ 476.391277][T27310] i_nlink=0 [ 476.391349][T27310] EXT4-fs (loop1): 1 truncate cleaned up [ 476.395588][ T1761] vhci_hcd: release socket [ 476.412179][ T1761] vhci_hcd: disconnect device [ 476.445721][ T1761] vhci_hcd: stop threads [ 476.450078][ T1761] vhci_hcd: release socket [ 476.454794][ T1761] vhci_hcd: disconnect device [ 476.465634][T27317] program syz.4.8113 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 476.497248][T27317] vhci_hcd: invalid port number 224 [ 476.502825][T27317] blktrace: Concurrent blktraces are not allowed on sg0 [ 476.898297][T27338] loop3: detected capacity change from 0 to 128 [ 476.954281][T27341] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8123'. [ 476.990721][T27343] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 477.000305][T27343] netlink: 12 bytes leftover after parsing attributes in process `+}[@'. [ 477.024445][T27345] loop0: detected capacity change from 0 to 1024 [ 477.039470][T27345] ext4 filesystem being mounted at /474/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 477.227205][T27356] loop0: detected capacity change from 0 to 8192 [ 477.425945][T27369] loop0: detected capacity change from 0 to 2048 [ 477.492547][T27377] loop3: detected capacity change from 0 to 1024 [ 477.501362][T27369] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 477.517241][T27369] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 477.529677][T27369] EXT4-fs (loop0): This should not happen!! Data will be lost [ 477.529677][T27369] [ 477.539406][T27369] EXT4-fs (loop0): Total free blocks count 0 [ 477.545413][T27369] EXT4-fs (loop0): Free/Dirty block details [ 477.551411][T27369] EXT4-fs (loop0): free_blocks=4096 [ 477.556751][T27369] EXT4-fs (loop0): dirty_blocks=512 [ 477.561960][T27369] EXT4-fs (loop0): Block reservation details [ 477.568008][T27369] EXT4-fs (loop0): i_reserved_data_blocks=32 [ 477.590832][ T167] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 480 with error 28 [ 477.603379][ T167] EXT4-fs (loop0): This should not happen!! Data will be lost [ 477.603379][ T167] [ 477.613664][T27377] ext4 filesystem being mounted at /326/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 477.804415][T27402] netlink: zone id is out of range [ 477.806759][T27400] loop3: detected capacity change from 0 to 512 [ 477.809655][T27402] netlink: zone id is out of range [ 477.819495][T27400] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 477.821180][T27402] netlink: zone id is out of range [ 477.834769][T27402] netlink: zone id is out of range [ 477.840025][T27402] netlink: zone id is out of range [ 477.840395][T27400] EXT4-fs error (device loop3): ext4_orphan_get:1419: comm syz.3.8145: bad orphan inode 11 [ 477.845179][T27402] netlink: zone id is out of range [ 477.845187][T27402] netlink: zone id is out of range [ 477.845196][T27402] netlink: zone id is out of range [ 477.845203][T27402] netlink: zone id is out of range [ 477.881928][T27400] ext4_test_bit(bit=10, block=4) = 1 [ 477.887362][T27400] is_bad_inode(inode)=0 [ 477.891539][T27400] NEXT_ORPHAN(inode)=2080374784 [ 477.896557][T27400] max_ino=32 [ 477.899853][T27400] i_nlink=0 [ 477.904633][T27407] loop0: detected capacity change from 0 to 512 [ 477.912751][T27407] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 477.920225][T27400] EXT4-fs (loop3): 1 truncate cleaned up [ 477.928726][T27407] EXT4-fs error (device loop0): ext4_orphan_get:1419: comm syz.0.8148: bad orphan inode 11 [ 477.951812][T27407] ext4_test_bit(bit=10, block=4) = 1 [ 477.957212][T27407] is_bad_inode(inode)=0 [ 477.961506][T27407] NEXT_ORPHAN(inode)=2080374784 [ 477.966388][T27407] max_ino=32 [ 477.969628][T27407] i_nlink=0 [ 477.972968][T27407] EXT4-fs (loop0): 1 truncate cleaned up [ 477.982678][T27412] loop4: detected capacity change from 0 to 1024 [ 478.001481][T27412] ext4 filesystem being mounted at /412/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 478.124156][T12272] tipc: Subscription rejected, illegal request [ 478.281888][ T30] kauditd_printk_skb: 1573 callbacks suppressed [ 478.281903][ T30] audit: type=1326 audit(1749327395.522:100787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27418 comm="syz.3.8154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d9d4be929 code=0x7ffc0000 [ 478.439221][T27441] netlink: 72 bytes leftover after parsing attributes in process `syz.4.8162'. [ 478.456606][ T30] audit: type=1326 audit(1749327395.552:100788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27418 comm="syz.3.8154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d9d4be929 code=0x7ffc0000 [ 478.480341][ T30] audit: type=1326 audit(1749327395.582:100789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27435 comm="syz.4.8160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d896ee929 code=0x7ffc0000 [ 478.504299][ T30] audit: type=1326 audit(1749327395.582:100790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27435 comm="syz.4.8160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d896ee929 code=0x7ffc0000 [ 478.509058][T27442] loop2: detected capacity change from 0 to 512 [ 478.528422][ T30] audit: type=1326 audit(1749327395.582:100791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27435 comm="syz.4.8160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=289 compat=0 ip=0x7f1d896ee929 code=0x7ffc0000 [ 478.558454][ T30] audit: type=1326 audit(1749327395.582:100792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27435 comm="syz.4.8160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d896ee929 code=0x7ffc0000 [ 478.582209][ T30] audit: type=1326 audit(1749327395.582:100793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27435 comm="syz.4.8160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d896ee929 code=0x7ffc0000 [ 478.582239][ T30] audit: type=1326 audit(1749327395.692:100794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27439 comm="syz.2.8159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02e183e929 code=0x7ffc0000 [ 478.582268][ T30] audit: type=1326 audit(1749327395.692:100795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27439 comm="syz.2.8159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02e183e929 code=0x7ffc0000 [ 478.631387][T27441] loop4: detected capacity change from 0 to 1024 [ 478.653355][ T30] audit: type=1326 audit(1749327395.692:100796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27439 comm="syz.2.8159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f02e183e929 code=0x7ffc0000 [ 478.739601][T27441] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4113: comm syz.4.8162: Allocating blocks 385-513 which overlap fs metadata [ 478.739872][T27442] ext4 filesystem being mounted at /447/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 478.784546][T27440] EXT4-fs (loop4): pa ffff8881050fef50: logic 16, phys. 129, len 24 [ 478.792777][T27440] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 478.863146][T27464] loop2: detected capacity change from 0 to 2048 [ 479.011713][T27459] loop3: detected capacity change from 0 to 8192 [ 479.019146][ T1761] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 479.086513][ T1761] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 479.098884][ T1761] EXT4-fs (loop2): This should not happen!! Data will be lost [ 479.098884][ T1761] [ 479.108604][ T1761] EXT4-fs (loop2): Total free blocks count 0 [ 479.114703][ T1761] EXT4-fs (loop2): Free/Dirty block details [ 479.120827][ T1761] EXT4-fs (loop2): free_blocks=4096 [ 479.126158][ T1761] EXT4-fs (loop2): dirty_blocks=512 [ 479.131473][ T1761] EXT4-fs (loop2): Block reservation details [ 479.137607][ T1761] EXT4-fs (loop2): i_reserved_data_blocks=32 [ 479.216092][ T1761] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 480 with error 28 [ 479.228682][ T1761] EXT4-fs (loop2): This should not happen!! Data will be lost [ 479.228682][ T1761] [ 479.448676][T27480] loop3: detected capacity change from 0 to 8192 [ 479.725244][T27501] netlink: 'syz.1.8185': attribute type 4 has an invalid length. [ 479.760202][T27501] netlink: 'syz.1.8185': attribute type 4 has an invalid length. [ 479.773520][T27503] netem: change failed [ 479.787201][T27503] IPv6: sit1: Disabled Multicast RS [ 479.820502][T27503] sit1: entered allmulticast mode [ 479.833221][T27508] loop4: detected capacity change from 0 to 1024 [ 479.876921][T27508] ext4 filesystem being mounted at /420/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 479.934847][T27520] loop2: detected capacity change from 0 to 2048 [ 479.985191][T27522] loop3: detected capacity change from 0 to 2048 [ 480.055942][T27527] loop4: detected capacity change from 0 to 8192 [ 480.084971][T27520] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 480.100194][T27520] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 480.112681][T27520] EXT4-fs (loop2): This should not happen!! Data will be lost [ 480.112681][T27520] [ 480.122403][T27520] EXT4-fs (loop2): Total free blocks count 0 [ 480.128442][T27520] EXT4-fs (loop2): Free/Dirty block details [ 480.134443][T27520] EXT4-fs (loop2): free_blocks=4096 [ 480.139847][T27520] EXT4-fs (loop2): dirty_blocks=512 [ 480.142977][T27522] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, [ 480.145118][T27520] EXT4-fs (loop2): Block reservation details [ 480.145135][T27520] EXT4-fs (loop2): i_reserved_data_blocks=32 [ 480.153470][T27522] block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 480.181744][T27533] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 480.197125][T27522] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 480.209495][T27522] EXT4-fs (loop3): This should not happen!! Data will be lost [ 480.209495][T27522] [ 480.219171][T27522] EXT4-fs (loop3): Total free blocks count 0 [ 480.225262][T27522] EXT4-fs (loop3): Free/Dirty block details [ 480.231214][T27522] EXT4-fs (loop3): free_blocks=4096 [ 480.236522][T27522] EXT4-fs (loop3): dirty_blocks=512 [ 480.241749][T27522] EXT4-fs (loop3): Block reservation details [ 480.247780][T27522] EXT4-fs (loop3): i_reserved_data_blocks=32 [ 480.254797][ T29] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 480 with error 28 [ 480.267355][ T29] EXT4-fs (loop2): This should not happen!! Data will be lost [ 480.267355][ T29] [ 480.300230][T27533] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 480.340530][T27533] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 480.354901][ T167] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 480 with error 28 [ 480.367443][ T167] EXT4-fs (loop3): This should not happen!! Data will be lost [ 480.367443][ T167] [ 480.414025][T27533] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 480.475462][T27533] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.487413][T27533] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.499242][T27533] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.516177][T27533] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.525197][T27548] netlink: 'syz.3.8201': attribute type 4 has an invalid length. [ 480.581000][T27554] loop2: detected capacity change from 0 to 1024 [ 480.592411][T27557] netlink: 'syz.3.8201': attribute type 4 has an invalid length. [ 480.610181][T27554] ext4 filesystem being mounted at /461/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 480.641204][T27561] loop4: detected capacity change from 0 to 128 [ 480.642827][T27563] loop0: detected capacity change from 0 to 2048 [ 480.674972][T27566] loop3: detected capacity change from 0 to 512 [ 480.716494][T27563] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 480.732490][T27566] ext4 filesystem being mounted at /341/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 480.736665][T27571] net_ratelimit: 1417 callbacks suppressed [ 480.736685][T27571] netlink: zone id is out of range [ 480.753929][T27571] netlink: zone id is out of range [ 480.759124][T27571] netlink: zone id is out of range [ 480.764331][T27571] netlink: zone id is out of range [ 480.769489][T27571] netlink: zone id is out of range [ 480.774619][T27571] netlink: zone id is out of range [ 480.779773][T27571] netlink: zone id is out of range [ 480.785164][T27571] netlink: zone id is out of range [ 480.790409][T27571] netlink: zone id is out of range [ 480.795538][T27571] netlink: zone id is out of range [ 480.801066][T27563] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 480.813302][T27563] EXT4-fs (loop0): This should not happen!! Data will be lost [ 480.813302][T27563] [ 480.823032][T27563] EXT4-fs (loop0): Total free blocks count 0 [ 480.829079][T27563] EXT4-fs (loop0): Free/Dirty block details [ 480.834997][T27563] EXT4-fs (loop0): free_blocks=4096 [ 480.840293][T27563] EXT4-fs (loop0): dirty_blocks=512 [ 480.845519][T27563] EXT4-fs (loop0): Block reservation details [ 480.851561][T27563] EXT4-fs (loop0): i_reserved_data_blocks=32 [ 480.872215][ T167] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 480 with error 28 [ 480.884756][ T167] EXT4-fs (loop0): This should not happen!! Data will be lost [ 480.884756][ T167] [ 480.966534][T23366] usb 9-1: enqueue for inactive port 0 [ 480.972186][T23366] usb 9-1: enqueue for inactive port 0 [ 480.984490][T27585] loop1: detected capacity change from 0 to 164 [ 481.007349][T27583] netem: change failed [ 481.023540][T27583] IPv6: sit1: Disabled Multicast RS [ 481.028969][T27585] rock: directory entry would overflow storage [ 481.035207][T27585] rock: sig=0x4f50, size=4, remaining=3 [ 481.039366][T27583] sit1: entered allmulticast mode [ 481.040839][T27585] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 481.059658][T23366] vhci_hcd: vhci_device speed not set [ 481.089369][T27591] netlink: 'syz.0.8220': attribute type 4 has an invalid length. [ 481.123456][T27591] netlink: 'syz.0.8220': attribute type 4 has an invalid length. [ 481.199066][T27594] loop1: detected capacity change from 0 to 8192 [ 481.248856][T27601] loop0: detected capacity change from 0 to 128 [ 481.324581][T27606] loop0: detected capacity change from 0 to 2048 [ 481.358447][ T3389] usb 5-1: enqueue for inactive port 0 [ 481.366217][ T3389] usb 5-1: enqueue for inactive port 0 [ 481.410888][T27604] loop1: detected capacity change from 0 to 8192 [ 481.431852][T27611] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 481.446463][ T3389] vhci_hcd: vhci_device speed not set [ 481.497182][T27611] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 481.509504][T27611] EXT4-fs (loop0): This should not happen!! Data will be lost [ 481.509504][T27611] [ 481.519257][T27611] EXT4-fs (loop0): Total free blocks count 0 [ 481.525347][T27611] EXT4-fs (loop0): Free/Dirty block details [ 481.531319][T27611] EXT4-fs (loop0): free_blocks=4096 [ 481.536696][T27611] EXT4-fs (loop0): dirty_blocks=512 [ 481.542289][T27611] EXT4-fs (loop0): Block reservation details [ 481.548397][T27611] EXT4-fs (loop0): i_reserved_data_blocks=32 [ 481.599844][T12272] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 480 with error 28 [ 481.612498][T12272] EXT4-fs (loop0): This should not happen!! Data will be lost [ 481.612498][T12272] [ 481.689659][T27618] FAULT_INJECTION: forcing a failure. [ 481.689659][T27618] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 481.702909][T27618] CPU: 0 UID: 0 PID: 27618 Comm: syz.0.8228 Not tainted 6.15.0-syzkaller-13659-g5b032cac6225 #0 PREEMPT(voluntary) [ 481.702980][T27618] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 481.702993][T27618] Call Trace: [ 481.702999][T27618] [ 481.703006][T27618] __dump_stack+0x1d/0x30 [ 481.703030][T27618] dump_stack_lvl+0xe8/0x140 [ 481.703135][T27618] dump_stack+0x15/0x1b [ 481.703218][T27618] should_fail_ex+0x265/0x280 [ 481.703295][T27618] should_fail+0xb/0x20 [ 481.703312][T27618] should_fail_usercopy+0x1a/0x20 [ 481.703337][T27618] _copy_from_user+0x1c/0xb0 [ 481.703447][T27618] ___sys_sendmsg+0xc1/0x1d0 [ 481.703493][T27618] __x64_sys_sendmsg+0xd4/0x160 [ 481.703525][T27618] x64_sys_call+0x2999/0x2fb0 [ 481.703547][T27618] do_syscall_64+0xd2/0x200 [ 481.703594][T27618] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 481.703701][T27618] ? clear_bhb_loop+0x40/0x90 [ 481.703722][T27618] ? clear_bhb_loop+0x40/0x90 [ 481.703745][T27618] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 481.703772][T27618] RIP: 0033:0x7f815ed1e929 [ 481.703791][T27618] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 481.703895][T27618] RSP: 002b:00007f815d387038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 481.703919][T27618] RAX: ffffffffffffffda RBX: 00007f815ef45fa0 RCX: 00007f815ed1e929 [ 481.703940][T27618] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000006 [ 481.703956][T27618] RBP: 00007f815d387090 R08: 0000000000000000 R09: 0000000000000000 [ 481.703972][T27618] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 481.704046][T27618] R13: 0000000000000000 R14: 00007f815ef45fa0 R15: 00007ffdc72e0788 [ 481.704139][T27618] [ 481.940776][T27623] program syz.4.8232 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 481.981324][T27629] loop0: detected capacity change from 0 to 512 [ 482.000655][T27629] ext4 filesystem being mounted at /508/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 482.012088][T27623] vhci_hcd: invalid port number 224 [ 482.022067][T27629] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #2: comm syz.0.8234: corrupted inode contents [ 482.037538][T27623] blktrace: Concurrent blktraces are not allowed on sg0 [ 482.133634][T27629] EXT4-fs error (device loop0): ext4_dirty_inode:6459: inode #2: comm syz.0.8234: mark_inode_dirty error [ 482.195383][T27643] loop1: detected capacity change from 0 to 8192 [ 482.205597][T27644] loop3: detected capacity change from 0 to 512 [ 482.249618][T27646] loop2: detected capacity change from 0 to 2048 [ 482.266376][T27629] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #2: comm syz.0.8234: corrupted inode contents [ 482.283522][T27635] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #2: comm syz.0.8234: corrupted inode contents [ 482.288390][T27644] ext4 filesystem being mounted at /345/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 482.319482][T27635] EXT4-fs error (device loop0): ext4_dirty_inode:6459: inode #2: comm syz.0.8234: mark_inode_dirty error [ 482.332321][T27635] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #2: comm syz.0.8234: corrupted inode contents [ 482.345219][T27635] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #2: comm syz.0.8234: mark_inode_dirty error [ 482.360508][T27652] netlink: 72 bytes leftover after parsing attributes in process `syz.1.8240'. [ 482.360547][T27635] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #2: comm syz.0.8234: corrupted inode contents [ 482.360802][T27635] EXT4-fs error (device loop0): ext4_dirty_inode:6459: inode #2: comm syz.0.8234: mark_inode_dirty error [ 482.420102][T27652] loop1: detected capacity change from 0 to 1024 [ 482.428968][T27653] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 482.447306][T27653] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 482.459585][T27653] EXT4-fs (loop2): This should not happen!! Data will be lost [ 482.459585][T27653] [ 482.465011][T27652] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4113: comm syz.1.8240: Allocating blocks 385-513 which overlap fs metadata [ 482.469259][T27653] EXT4-fs (loop2): Total free blocks count 0 [ 482.469276][T27653] EXT4-fs (loop2): Free/Dirty block details [ 482.469288][T27653] EXT4-fs (loop2): free_blocks=4096 [ 482.469306][T27653] EXT4-fs (loop2): dirty_blocks=1008 [ 482.505641][T27653] EXT4-fs (loop2): Block reservation details [ 482.511788][T27653] EXT4-fs (loop2): i_reserved_data_blocks=63 [ 482.519716][T27651] EXT4-fs (loop1): pa ffff8881050fed90: logic 16, phys. 129, len 24 [ 482.527781][T27651] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 482.569853][ T1761] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 976 with error 28 [ 482.582429][ T1761] EXT4-fs (loop2): This should not happen!! Data will be lost [ 482.582429][ T1761] [ 482.603523][T27659] loop4: detected capacity change from 0 to 8192 [ 482.739577][T27682] loop4: detected capacity change from 0 to 1024 [ 482.771696][T27673] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8247'. [ 482.789097][T27682] ext4 filesystem being mounted at /431/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 482.804845][T27684] loop2: detected capacity change from 0 to 512 [ 482.814219][T27689] program syz.3.8252 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 482.816377][T27684] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 482.841474][T27684] EXT4-fs error (device loop2): ext4_orphan_get:1419: comm syz.2.8251: bad orphan inode 11 [ 482.848172][T27689] vhci_hcd: invalid port number 224 [ 482.871971][T27689] blktrace: Concurrent blktraces are not allowed on sg0 [ 482.883059][T27684] ext4_test_bit(bit=10, block=4) = 1 [ 482.888438][T27684] is_bad_inode(inode)=0 [ 482.892612][T27684] NEXT_ORPHAN(inode)=2080374784 [ 482.897527][T27684] max_ino=32 [ 482.900746][T27684] i_nlink=0 [ 482.904288][T27684] EXT4-fs (loop2): 1 truncate cleaned up [ 482.968691][T27692] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 482.987085][T27692] netlink: 12 bytes leftover after parsing attributes in process `+}[@'. [ 483.007261][T27697] loop2: detected capacity change from 0 to 2048 [ 483.083922][T27697] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 483.106536][T27697] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 483.118811][T27697] EXT4-fs (loop2): This should not happen!! Data will be lost [ 483.118811][T27697] [ 483.128548][T27697] EXT4-fs (loop2): Total free blocks count 0 [ 483.134588][T27697] EXT4-fs (loop2): Free/Dirty block details [ 483.140533][T27697] EXT4-fs (loop2): free_blocks=4096 [ 483.145783][T27697] EXT4-fs (loop2): dirty_blocks=512 [ 483.151069][T27697] EXT4-fs (loop2): Block reservation details [ 483.157250][T27697] EXT4-fs (loop2): i_reserved_data_blocks=32 [ 483.213030][ T167] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 480 with error 28 [ 483.225638][ T167] EXT4-fs (loop2): This should not happen!! Data will be lost [ 483.225638][ T167] [ 483.246185][T27702] loop0: detected capacity change from 0 to 512 [ 483.268890][T27702] ext4 filesystem being mounted at /511/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 483.268960][T27704] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 483.281981][T27702] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #2: comm syz.0.8257: corrupted inode contents [ 483.290535][T27704] netlink: 12 bytes leftover after parsing attributes in process `+}[@'. [ 483.308055][ T30] kauditd_printk_skb: 1015 callbacks suppressed [ 483.308071][ T30] audit: type=1326 audit(1749327400.532:101812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27703 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f02e18406f4 code=0x7ffc0000 [ 483.308113][ T30] audit: type=1326 audit(1749327400.532:101813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27703 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02e183e929 code=0x7ffc0000 [ 483.360684][ T30] audit: type=1326 audit(1749327400.532:101814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27703 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02e183e929 code=0x7ffc0000 [ 483.370678][T27702] EXT4-fs error (device loop0): ext4_dirty_inode:6459: inode #2: comm syz.0.8257: mark_inode_dirty error [ 483.383863][ T30] audit: type=1326 audit(1749327400.532:101815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27703 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=51 compat=0 ip=0x7f02e183e929 code=0x7ffc0000 [ 483.383894][ T30] audit: type=1326 audit(1749327400.532:101816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27703 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02e183e929 code=0x7ffc0000 [ 483.441419][ T30] audit: type=1326 audit(1749327400.532:101817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27703 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02e183e929 code=0x7ffc0000 [ 483.464645][ T30] audit: type=1326 audit(1749327400.532:101818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27703 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f02e183e929 code=0x7ffc0000 [ 483.489936][ T30] audit: type=1326 audit(1749327400.582:101819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27703 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02e183e929 code=0x7ffc0000 [ 483.513317][ T30] audit: type=1326 audit(1749327400.612:101820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27703 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f02e183e929 code=0x7ffc0000 [ 483.536509][ T30] audit: type=1326 audit(1749327400.612:101821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27703 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02e183e929 code=0x7ffc0000 [ 483.568751][T27702] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #2: comm syz.0.8257: corrupted inode contents [ 483.588070][T27702] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #2: comm syz.0.8257: mark_inode_dirty error [ 483.605405][T27711] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8259'. [ 483.625383][T27713] loop3: detected capacity change from 0 to 164 [ 483.735169][T27725] loop3: detected capacity change from 0 to 1024 [ 483.791571][T27725] ext4 filesystem being mounted at /351/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 483.872191][T27736] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8270'. [ 483.893258][T27732] loop4: detected capacity change from 0 to 512 [ 483.902823][T27732] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 483.926711][T27732] EXT4-fs error (device loop4): ext4_orphan_get:1419: comm syz.4.8269: bad orphan inode 11 [ 483.942309][T27736] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8270'. [ 483.942553][T27732] ext4_test_bit(bit=10, block=4) = 1 [ 483.957608][T27732] is_bad_inode(inode)=0 [ 483.961792][T27732] NEXT_ORPHAN(inode)=2080374784 [ 483.966837][T27732] max_ino=32 [ 483.970054][T27732] i_nlink=0 [ 483.973891][T27732] EXT4-fs (loop4): 1 truncate cleaned up [ 484.025444][T27739] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8272'. [ 484.060152][T27743] loop0: detected capacity change from 0 to 128 [ 484.095609][T27745] loop4: detected capacity change from 0 to 128 [ 484.122690][T27747] loop3: detected capacity change from 0 to 1024 [ 484.181058][T27747] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4113: comm syz.3.8275: Allocating blocks 385-513 which overlap fs metadata [ 484.231154][T27762] loop1: detected capacity change from 0 to 1024 [ 484.257878][T27746] EXT4-fs (loop3): pa ffff888106e3f310: logic 16, phys. 129, len 24 [ 484.265946][T27746] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 484.309289][T27762] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4113: comm syz.1.8281: Allocating blocks 385-513 which overlap fs metadata [ 484.336828][ T3494] usb usb6-port1: attempt power cycle [ 484.352775][T27768] loop4: detected capacity change from 0 to 512 [ 484.379101][T27768] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 484.404500][T27761] EXT4-fs (loop1): pa ffff888106e3f310: logic 16, phys. 129, len 24 [ 484.412752][T27761] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 484.437117][T27768] EXT4-fs error (device loop4): ext4_orphan_get:1419: comm syz.4.8283: bad orphan inode 11 [ 484.478351][T27768] ext4_test_bit(bit=10, block=4) = 1 [ 484.483695][T27768] is_bad_inode(inode)=0 [ 484.487961][T27768] NEXT_ORPHAN(inode)=2080374784 [ 484.488094][T27770] loop3: detected capacity change from 0 to 8192 [ 484.492815][T27768] max_ino=32 [ 484.492824][T27768] i_nlink=0 [ 484.498548][T27768] EXT4-fs (loop4): 1 truncate cleaned up [ 484.621833][T27781] loop3: detected capacity change from 0 to 164 [ 484.677371][T27783] loop4: detected capacity change from 0 to 164 [ 484.700666][T27779] loop1: detected capacity change from 0 to 8192 [ 484.724434][T27787] loop4: detected capacity change from 0 to 512 [ 484.779103][T27787] ext4 filesystem being mounted at /439/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 484.867776][T27796] loop0: detected capacity change from 0 to 1024 [ 484.897224][T27796] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4113: comm syz.0.8294: Allocating blocks 385-513 which overlap fs metadata [ 484.928957][T27803] netlink: 'syz.4.8295': attribute type 4 has an invalid length. [ 484.938885][T27803] netlink: 'syz.4.8295': attribute type 4 has an invalid length. [ 484.946938][T27794] loop3: detected capacity change from 0 to 8192 [ 484.974363][T27795] EXT4-fs (loop0): pa ffff888106e3f310: logic 16, phys. 129, len 24 [ 484.982456][T27795] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 485.093919][T27808] netlink: 'syz.4.8299': attribute type 4 has an invalid length. [ 485.104264][T27808] netlink: 'syz.4.8299': attribute type 4 has an invalid length. [ 485.136385][T27813] netlink: 'syz.3.8301': attribute type 4 has an invalid length. [ 485.174753][T27813] netlink: 'syz.3.8301': attribute type 4 has an invalid length. [ 485.192583][T27812] loop0: detected capacity change from 0 to 8192 [ 485.208509][T27821] loop4: detected capacity change from 0 to 512 [ 485.273601][T27821] ext4 filesystem being mounted at /444/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 485.404251][T27829] loop2: detected capacity change from 0 to 8192 [ 485.431006][T27835] loop0: detected capacity change from 0 to 2048 [ 485.491152][T27837] loop3: detected capacity change from 0 to 8192 [ 485.526898][T27839] loop4: detected capacity change from 0 to 164 [ 485.681254][T27849] loop3: detected capacity change from 0 to 512 [ 485.691724][ T57] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 485.714603][T27849] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 485.723254][ T57] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 485.735753][ T57] EXT4-fs (loop0): This should not happen!! Data will be lost [ 485.735753][ T57] [ 485.745547][ T57] EXT4-fs (loop0): Total free blocks count 0 [ 485.751602][ T57] EXT4-fs (loop0): Free/Dirty block details [ 485.755176][T27849] EXT4-fs error (device loop3): ext4_orphan_get:1419: comm syz.3.8316: bad orphan inode 11 [ 485.757634][ T57] EXT4-fs (loop0): free_blocks=4096 [ 485.757650][ T57] EXT4-fs (loop0): dirty_blocks=512 [ 485.778182][ T57] EXT4-fs (loop0): Block reservation details [ 485.784234][ T57] EXT4-fs (loop0): i_reserved_data_blocks=32 [ 485.794888][ T57] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 480 with error 28 [ 485.807455][ T57] EXT4-fs (loop0): This should not happen!! Data will be lost [ 485.807455][ T57] [ 485.839464][T27849] ext4_test_bit(bit=10, block=4) = 1 [ 485.844866][T27849] is_bad_inode(inode)=0 [ 485.849061][T27849] NEXT_ORPHAN(inode)=2080374784 [ 485.853922][T27849] max_ino=32 [ 485.857175][T27849] i_nlink=0 [ 485.910162][T27849] EXT4-fs (loop3): 1 truncate cleaned up [ 485.988197][T27858] loop2: detected capacity change from 0 to 512 [ 486.020688][T27858] ext4 filesystem being mounted at /482/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 486.078779][T27858] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #2: comm syz.2.8321: corrupted inode contents [ 486.126231][T27858] EXT4-fs error (device loop2): ext4_dirty_inode:6459: inode #2: comm syz.2.8321: mark_inode_dirty error [ 486.184410][T27858] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #2: comm syz.2.8321: corrupted inode contents [ 486.196675][ T3494] usb usb6-port1: unable to enumerate USB device [ 486.212567][T27876] loop3: detected capacity change from 0 to 2048 [ 486.219636][T27869] loop4: detected capacity change from 0 to 8192 [ 486.231394][T27873] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #2: comm syz.2.8321: corrupted inode contents [ 486.266593][T27873] EXT4-fs error (device loop2): ext4_dirty_inode:6459: inode #2: comm syz.2.8321: mark_inode_dirty error [ 486.315160][T27873] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #2: comm syz.2.8321: corrupted inode contents [ 486.335800][T27873] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #2: comm syz.2.8321: mark_inode_dirty error [ 486.357324][T27873] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #2: comm syz.2.8321: corrupted inode contents [ 486.375001][T27880] loop1: detected capacity change from 0 to 1024 [ 486.394581][T27880] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 486.412107][T27880] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 486.415194][T27873] EXT4-fs error (device loop2): ext4_dirty_inode:6459: inode #2: comm syz.2.8321: mark_inode_dirty error [ 486.423032][T27880] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 486.449014][T27880] JBD2: no valid journal superblock found [ 486.454790][T27880] EXT4-fs (loop1): Could not load journal inode [ 486.482985][T27888] 9pnet: Could not find request transport: tsp$porT=0x00|§êg00020000004âñ [ 486.524335][T27897] loop4: detected capacity change from 0 to 164 [ 486.549831][T27899] loop1: detected capacity change from 0 to 1024 [ 486.584245][T27899] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4113: comm syz.1.8334: Allocating blocks 385-513 which overlap fs metadata [ 486.599670][T27898] EXT4-fs (loop1): pa ffff888106e3f310: logic 16, phys. 129, len 24 [ 486.607838][T27898] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 486.651717][T27910] loop4: detected capacity change from 0 to 164 [ 486.677502][T27912] loop1: detected capacity change from 0 to 512 [ 486.689663][T27912] ext4 filesystem being mounted at /470/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 486.701858][T27912] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #2: comm syz.1.8339: corrupted inode contents [ 486.714036][T27912] EXT4-fs error (device loop1): ext4_dirty_inode:6459: inode #2: comm syz.1.8339: mark_inode_dirty error [ 486.728451][T27912] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #2: comm syz.1.8339: corrupted inode contents [ 486.742172][T27916] syz_tun: entered allmulticast mode [ 486.742547][T27912] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #2: comm syz.1.8339: corrupted inode contents [ 486.751770][T27915] syz_tun: left allmulticast mode [ 486.765102][T27912] EXT4-fs error (device loop1): ext4_dirty_inode:6459: inode #2: comm syz.1.8339: mark_inode_dirty error [ 486.785949][T27918] loop0: detected capacity change from 0 to 2048 [ 486.788716][T27912] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #2: comm syz.1.8339: corrupted inode contents [ 486.806814][T27912] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #2: comm syz.1.8339: mark_inode_dirty error [ 486.819773][T27912] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #2: comm syz.1.8339: corrupted inode contents [ 486.835868][T27912] EXT4-fs error (device loop1): ext4_dirty_inode:6459: inode #2: comm syz.1.8339: mark_inode_dirty error [ 486.878665][T27918] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 486.898258][T27921] loop4: detected capacity change from 0 to 512 [ 486.906480][T27918] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 486.909907][T27921] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 486.918771][T27918] EXT4-fs (loop0): This should not happen!! Data will be lost [ 486.918771][T27918] [ 486.932909][T27921] EXT4-fs error (device loop4): ext4_orphan_get:1419: comm syz.4.8342: bad orphan inode 11 [ 486.936816][T27918] EXT4-fs (loop0): Total free blocks count 0 [ 486.952953][T27918] EXT4-fs (loop0): Free/Dirty block details [ 486.958927][T27918] EXT4-fs (loop0): free_blocks=4096 [ 486.964145][T27918] EXT4-fs (loop0): dirty_blocks=512 [ 486.967929][T27921] ext4_test_bit(bit=10, block=4) = 1 [ 486.969398][T27918] EXT4-fs (loop0): Block reservation details [ 486.969410][T27918] EXT4-fs (loop0): i_reserved_data_blocks=32 [ 486.986970][T27921] is_bad_inode(inode)=0 [ 486.991139][T27921] NEXT_ORPHAN(inode)=2080374784 [ 486.996033][T27921] max_ino=32 [ 486.999309][T27921] i_nlink=0 [ 487.002533][T27921] EXT4-fs (loop4): 1 truncate cleaned up [ 487.003574][ T1761] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 480 with error 28 [ 487.020749][ T1761] EXT4-fs (loop0): This should not happen!! Data will be lost [ 487.020749][ T1761] [ 487.054201][T27931] loop1: detected capacity change from 0 to 512 [ 487.062868][T27931] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 487.085649][T27931] EXT4-fs error (device loop1): ext4_orphan_get:1419: comm syz.1.8345: bad orphan inode 11 [ 487.086666][T27933] netlink: 'syz.0.8346': attribute type 10 has an invalid length. [ 487.103829][T27933] bridge0: port 3(team0) entered disabled state [ 487.110317][T27933] bridge0: port 2(bridge_slave_1) entered disabled state [ 487.117730][T27933] bridge0: port 1(bridge_slave_0) entered disabled state [ 487.125885][T27931] ext4_test_bit(bit=10, block=4) = 1 [ 487.129754][T27933] bridge0: port 3(team0) entered blocking state [ 487.131381][T27931] is_bad_inode(inode)=0 [ 487.137486][T27933] bridge0: port 3(team0) entered forwarding state [ 487.137710][T27933] bridge0: port 2(bridge_slave_1) entered blocking state [ 487.141657][T27931] NEXT_ORPHAN(inode)=2080374784 [ 487.148118][T27933] bridge0: port 2(bridge_slave_1) entered forwarding state [ 487.155136][T27931] max_ino=32 [ 487.160115][T27933] bridge0: port 1(bridge_slave_0) entered blocking state [ 487.167272][T27931] i_nlink=0 [ 487.170566][T27933] bridge0: port 1(bridge_slave_0) entered forwarding state [ 487.191128][T27933] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 487.194104][T27931] EXT4-fs (loop1): 1 truncate cleaned up [ 487.219733][T27942] loop4: detected capacity change from 0 to 164 [ 487.231904][T27941] loop2: detected capacity change from 0 to 1024 [ 487.283590][T27948] netlink: 'syz.0.8352': attribute type 4 has an invalid length. [ 487.297456][T27941] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4113: comm syz.2.8349: Allocating blocks 385-513 which overlap fs metadata [ 487.315176][T27946] loop3: detected capacity change from 0 to 8192 [ 487.318677][T27939] EXT4-fs (loop2): pa ffff888106e3f2a0: logic 16, phys. 129, len 24 [ 487.329650][T27939] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 487.344897][T27948] netlink: 'syz.0.8352': attribute type 4 has an invalid length. [ 487.405357][T27952] loop1: detected capacity change from 0 to 2048 [ 487.413911][T27958] loop0: detected capacity change from 0 to 512 [ 487.430058][T27958] ext4 filesystem being mounted at /530/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 487.464046][T27958] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #2: comm syz.0.8356: corrupted inode contents [ 487.484022][T27958] EXT4-fs error (device loop0): ext4_dirty_inode:6459: inode #2: comm syz.0.8356: mark_inode_dirty error [ 487.495893][T27958] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #2: comm syz.0.8356: corrupted inode contents [ 487.511859][T27967] loop3: detected capacity change from 0 to 512 [ 487.524279][T27968] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #2: comm syz.0.8356: corrupted inode contents [ 487.524469][ T57] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 487.540117][T27968] EXT4-fs error (device loop0): ext4_dirty_inode:6459: inode #2: comm syz.0.8356: mark_inode_dirty error [ 487.555637][ T57] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 487.563448][T27967] ext4 filesystem being mounted at /372/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 487.573840][ T57] EXT4-fs (loop1): This should not happen!! Data will be lost [ 487.573840][ T57] [ 487.589178][T27968] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #2: comm syz.0.8356: corrupted inode contents [ 487.593728][ T57] EXT4-fs (loop1): Total free blocks count 0 [ 487.611893][ T57] EXT4-fs (loop1): Free/Dirty block details [ 487.617864][ T57] EXT4-fs (loop1): free_blocks=4096 [ 487.623097][ T57] EXT4-fs (loop1): dirty_blocks=768 [ 487.628370][ T57] EXT4-fs (loop1): Block reservation details [ 487.631065][T27968] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #2: comm syz.0.8356: mark_inode_dirty error [ 487.634358][ T57] EXT4-fs (loop1): i_reserved_data_blocks=48 [ 487.652144][T27968] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #2: comm syz.0.8356: corrupted inode contents [ 487.657104][ T57] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 736 with error 28 [ 487.676518][ T57] EXT4-fs (loop1): This should not happen!! Data will be lost [ 487.676518][ T57] [ 487.684759][T27968] EXT4-fs error (device loop0): ext4_dirty_inode:6459: inode #2: comm syz.0.8356: mark_inode_dirty error [ 487.695109][T27967] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #2: comm syz.3.8358: corrupted inode contents [ 487.710128][T27967] EXT4-fs error (device loop3): ext4_dirty_inode:6459: inode #2: comm syz.3.8358: mark_inode_dirty error [ 487.738407][T27976] loop1: detected capacity change from 0 to 1024 [ 487.747056][T27967] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #2: comm syz.3.8358: corrupted inode contents [ 487.754058][T27976] ext4 filesystem being mounted at /473/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 487.761119][T27972] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #2: comm syz.3.8358: corrupted inode contents [ 487.786850][T27972] EXT4-fs error (device loop3): ext4_dirty_inode:6459: inode #2: comm syz.3.8358: mark_inode_dirty error [ 487.826578][T27972] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #2: comm syz.3.8358: corrupted inode contents [ 487.840383][T27972] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #2: comm syz.3.8358: mark_inode_dirty error [ 487.864104][T27972] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #2: comm syz.3.8358: corrupted inode contents [ 487.880361][T27972] EXT4-fs error (device loop3): ext4_dirty_inode:6459: inode #2: comm syz.3.8358: mark_inode_dirty error [ 487.882670][T27982] loop0: detected capacity change from 0 to 512 [ 487.911411][T27982] ext4 filesystem being mounted at /531/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 487.931052][T27988] __nla_validate_parse: 11 callbacks suppressed [ 487.931065][T27988] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 487.946665][T27988] netlink: 12 bytes leftover after parsing attributes in process `+}[@'. [ 487.980367][T27991] netlink: 'syz.2.8366': attribute type 4 has an invalid length. [ 488.155801][T28004] FAULT_INJECTION: forcing a failure. [ 488.155801][T28004] name failslab, interval 1, probability 0, space 0, times 0 [ 488.168604][T28004] CPU: 1 UID: 0 PID: 28004 Comm: syz.3.8368 Not tainted 6.15.0-syzkaller-13659-g5b032cac6225 #0 PREEMPT(voluntary) [ 488.168639][T28004] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 488.168653][T28004] Call Trace: [ 488.168660][T28004] [ 488.168668][T28004] __dump_stack+0x1d/0x30 [ 488.168692][T28004] dump_stack_lvl+0xe8/0x140 [ 488.168710][T28004] dump_stack+0x15/0x1b [ 488.168801][T28004] should_fail_ex+0x265/0x280 [ 488.168822][T28004] should_failslab+0x8c/0xb0 [ 488.168850][T28004] __kmalloc_node_track_caller_noprof+0xa4/0x410 [ 488.168946][T28004] ? security_netlbl_sid_to_secattr+0xab/0x140 [ 488.168985][T28004] ? should_fail_ex+0xdb/0x280 [ 488.169008][T28004] kstrdup+0x3e/0xd0 [ 488.169061][T28004] security_netlbl_sid_to_secattr+0xab/0x140 [ 488.169092][T28004] selinux_netlbl_sock_genattr+0xa8/0x260 [ 488.169115][T28004] selinux_netlbl_socket_post_create+0x68/0x100 [ 488.169209][T28004] selinux_socket_post_create+0x214/0x2a0 [ 488.169292][T28004] security_socket_post_create+0x5d/0xb0 [ 488.169348][T28004] __sock_create+0x362/0x5b0 [ 488.169380][T28004] __sys_socket+0xb0/0x180 [ 488.169412][T28004] __x64_sys_socket+0x3f/0x50 [ 488.169585][T28004] x64_sys_call+0x285a/0x2fb0 [ 488.169663][T28004] do_syscall_64+0xd2/0x200 [ 488.169684][T28004] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 488.169709][T28004] ? clear_bhb_loop+0x40/0x90 [ 488.169750][T28004] ? clear_bhb_loop+0x40/0x90 [ 488.169777][T28004] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 488.169799][T28004] RIP: 0033:0x7f6d9d4be929 [ 488.169817][T28004] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 488.169869][T28004] RSP: 002b:00007f6d9bb06038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 488.169891][T28004] RAX: ffffffffffffffda RBX: 00007f6d9d6e6080 RCX: 00007f6d9d4be929 [ 488.169905][T28004] RDX: 0000000000000001 RSI: 0000000000000002 RDI: 0000000000000002 [ 488.169919][T28004] RBP: 00007f6d9bb06090 R08: 0000000000000000 R09: 0000000000000000 [ 488.169931][T28004] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 488.169965][T28004] R13: 0000000000000000 R14: 00007f6d9d6e6080 R15: 00007ffee98a3a78 [ 488.169983][T28004] [ 488.424544][T28008] loop0: detected capacity change from 0 to 512 [ 488.438162][T28010] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8374'. [ 488.457658][T28011] loop2: detected capacity change from 0 to 1024 [ 488.458327][ T30] kauditd_printk_skb: 1232 callbacks suppressed [ 488.458346][ T30] audit: type=1326 audit(1749327405.662:103054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28007 comm="syz.0.8373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f815ed1e929 code=0x7ffc0000 [ 488.494094][ T30] audit: type=1326 audit(1749327405.662:103055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28007 comm="syz.0.8373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f815ed1e929 code=0x7ffc0000 [ 488.517417][T28014] FAULT_INJECTION: forcing a failure. [ 488.517417][T28014] name failslab, interval 1, probability 0, space 0, times 0 [ 488.517957][ T30] audit: type=1326 audit(1749327405.662:103056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28007 comm="syz.0.8373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f815ed1e929 code=0x7ffc0000 [ 488.530558][T28014] CPU: 1 UID: 0 PID: 28014 Comm: syz.3.8375 Not tainted 6.15.0-syzkaller-13659-g5b032cac6225 #0 PREEMPT(voluntary) [ 488.530608][T28014] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 488.530697][T28014] Call Trace: [ 488.530706][T28014] [ 488.530723][T28014] __dump_stack+0x1d/0x30 [ 488.530751][T28014] dump_stack_lvl+0xe8/0x140 [ 488.530777][T28014] dump_stack+0x15/0x1b [ 488.530799][T28014] should_fail_ex+0x265/0x280 [ 488.530825][T28014] should_failslab+0x8c/0xb0 [ 488.530904][T28014] kmem_cache_alloc_noprof+0x50/0x310 [ 488.530939][T28014] ? create_new_namespaces+0x3c/0x3d0 [ 488.530980][T28014] create_new_namespaces+0x3c/0x3d0 [ 488.531061][T28014] unshare_nsproxy_namespaces+0xe8/0x120 [ 488.531115][T28014] ksys_unshare+0x3d0/0x6d0 [ 488.531151][T28014] ? ksys_write+0x192/0x1a0 [ 488.531180][T28014] __x64_sys_unshare+0x1f/0x30 [ 488.531217][T28014] x64_sys_call+0x2d4b/0x2fb0 [ 488.531308][T28014] do_syscall_64+0xd2/0x200 [ 488.531354][T28014] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 488.531480][T28014] ? clear_bhb_loop+0x40/0x90 [ 488.531511][T28014] ? clear_bhb_loop+0x40/0x90 [ 488.531542][T28014] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 488.531619][T28014] RIP: 0033:0x7f6d9d4be929 [ 488.531640][T28014] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 488.531667][T28014] RSP: 002b:00007f6d9bb27038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 488.531687][T28014] RAX: ffffffffffffffda RBX: 00007f6d9d6e5fa0 RCX: 00007f6d9d4be929 [ 488.531703][T28014] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000062040600 [ 488.531731][T28014] RBP: 00007f6d9bb27090 R08: 0000000000000000 R09: 0000000000000000 [ 488.531749][T28014] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 488.531766][T28014] R13: 0000000000000000 R14: 00007f6d9d6e5fa0 R15: 00007ffee98a3a78 [ 488.531794][T28014] [ 488.538110][T28011] ext4 filesystem being mounted at /496/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 488.554155][ T30] audit: type=1326 audit(1749327405.662:103057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28007 comm="syz.0.8373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f815ed1e929 code=0x7ffc0000 [ 488.651642][T28022] loop3: detected capacity change from 0 to 512 [ 488.651971][ T30] audit: type=1326 audit(1749327405.662:103058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28007 comm="syz.0.8373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f815ed1e929 code=0x7ffc0000 [ 488.660484][T28008] ext4 filesystem being mounted at /534/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 488.662716][ T30] audit: type=1326 audit(1749327405.662:103059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28007 comm="syz.0.8373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f815ed1e929 code=0x7ffc0000 [ 488.811252][T28008] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #2: comm syz.0.8373: corrupted inode contents [ 488.813138][ T30] audit: type=1326 audit(1749327405.662:103060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28007 comm="syz.0.8373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f815ed1e929 code=0x7ffc0000 [ 488.829611][T28008] EXT4-fs error (device loop0): ext4_dirty_inode:6459: inode #2: comm syz.0.8373: mark_inode_dirty error [ 488.847093][ T30] audit: type=1326 audit(1749327405.662:103061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28007 comm="syz.0.8373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f815ed1e929 code=0x7ffc0000 [ 488.863924][T28008] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #2: comm syz.0.8373: corrupted inode contents [ 488.882503][ T30] audit: type=1326 audit(1749327405.662:103062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28007 comm="syz.0.8373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f815ed1e929 code=0x7ffc0000 [ 488.953211][ T30] audit: type=1326 audit(1749327405.662:103063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28007 comm="syz.0.8373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f815ed1e929 code=0x7ffc0000 [ 488.978653][T28022] ext4 filesystem being mounted at /375/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 488.984470][T28025] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #2: comm syz.0.8373: corrupted inode contents [ 489.061792][T27984] net_ratelimit: 2129 callbacks suppressed [ 489.061816][T27984] Set syz1 is full, maxelem 65536 reached [ 489.074190][T28025] EXT4-fs error (device loop0): ext4_dirty_inode:6459: inode #2: comm syz.0.8373: mark_inode_dirty error [ 489.088018][T28025] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #2: comm syz.0.8373: corrupted inode contents [ 489.101650][T28025] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #2: comm syz.0.8373: mark_inode_dirty error [ 489.117346][T28031] loop4: detected capacity change from 0 to 512 [ 489.125643][T28025] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #2: comm syz.0.8373: corrupted inode contents [ 489.161830][T28031] ext4 filesystem being mounted at /459/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 489.174897][T28039] loop1: detected capacity change from 0 to 512 [ 489.188379][T28025] EXT4-fs error (device loop0): ext4_dirty_inode:6459: inode #2: comm syz.0.8373: mark_inode_dirty error [ 489.189581][T28039] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 489.216963][T28031] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #2: comm syz.4.8379: corrupted inode contents [ 489.250660][T28031] EXT4-fs error (device loop4): ext4_dirty_inode:6459: inode #2: comm syz.4.8379: mark_inode_dirty error [ 489.272384][T28039] EXT4-fs error (device loop1): ext4_orphan_get:1419: comm syz.1.8381: bad orphan inode 11 [ 489.284562][T28031] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #2: comm syz.4.8379: corrupted inode contents [ 489.287823][T28039] ext4_test_bit(bit=10, block=4) = 1 [ 489.301839][T28039] is_bad_inode(inode)=0 [ 489.306073][T28039] NEXT_ORPHAN(inode)=2080374784 [ 489.310989][T28039] max_ino=32 [ 489.314203][T28039] i_nlink=0 [ 489.331817][T28042] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #2: comm syz.4.8379: corrupted inode contents [ 489.348268][T28039] EXT4-fs (loop1): 1 truncate cleaned up [ 489.355082][T28042] EXT4-fs error (device loop4): ext4_dirty_inode:6459: inode #2: comm syz.4.8379: mark_inode_dirty error [ 489.366765][T28042] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #2: comm syz.4.8379: corrupted inode contents [ 489.386527][T28042] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #2: comm syz.4.8379: mark_inode_dirty error [ 489.407602][T22052] ================================================================== [ 489.415734][T22052] BUG: KCSAN: data-race in folios_put_refs / need_mlock_drain [ 489.423237][T22052] [ 489.425590][T22052] write to 0xffff888237d26a10 of 1 bytes by task 28035 on cpu 1: [ 489.433331][T22052] folios_put_refs+0x285/0x2d0 [ 489.438122][T22052] mlock_folio_batch+0x1a5b/0x1a70 [ 489.443255][T22052] mlock_new_folio+0x1a3/0x200 [ 489.448037][T22052] folio_add_lru_vma+0x5f/0x70 [ 489.452826][T22052] handle_mm_fault+0x27e0/0x2be0 [ 489.457782][T22052] __get_user_pages+0x1036/0x1fb0 [ 489.462823][T22052] __mm_populate+0x243/0x3a0 [ 489.467431][T22052] __se_sys_mlockall+0x368/0x3d0 [ 489.472398][T22052] __x64_sys_mlockall+0x1f/0x30 [ 489.477276][T22052] x64_sys_call+0x290a/0x2fb0 [ 489.481972][T22052] do_syscall_64+0xd2/0x200 [ 489.486493][T22052] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 489.492405][T22052] [ 489.494738][T22052] read to 0xffff888237d26a10 of 1 bytes by task 22052 on cpu 0: [ 489.502378][T22052] need_mlock_drain+0x30/0x50 [ 489.507083][T22052] __lru_add_drain_all+0x220/0x3f0 [ 489.512214][T22052] lru_add_drain_all+0x10/0x20 [ 489.516990][T22052] invalidate_bdev+0x47/0x70 [ 489.521602][T22052] ext4_put_super+0x624/0x7d0 [ 489.526310][T22052] generic_shutdown_super+0xe6/0x210 [ 489.531623][T22052] kill_block_super+0x2a/0x70 [ 489.536337][T22052] ext4_kill_sb+0x42/0x80 [ 489.540682][T22052] deactivate_locked_super+0x75/0x1c0 [ 489.546078][T22052] deactivate_super+0x97/0xa0 [ 489.550792][T22052] cleanup_mnt+0x269/0x2e0 [ 489.555225][T22052] __cleanup_mnt+0x19/0x20 [ 489.559679][T22052] task_work_run+0x12e/0x1a0 [ 489.564291][T22052] exit_to_user_mode_loop+0xe4/0x100 [ 489.569597][T22052] do_syscall_64+0x1d6/0x200 [ 489.574203][T22052] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 489.580112][T22052] [ 489.582446][T22052] value changed: 0x1f -> 0x08 [ 489.587133][T22052] [ 489.589459][T22052] Reported by Kernel Concurrency Sanitizer on: [ 489.595621][T22052] CPU: 0 UID: 0 PID: 22052 Comm: syz-executor Not tainted 6.15.0-syzkaller-13659-g5b032cac6225 #0 PREEMPT(voluntary) [ 489.607967][T22052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 489.618037][T22052] ================================================================== [ 489.633552][T28042] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #2: comm syz.4.8379: corrupted inode contents [ 489.660159][T28042] EXT4-fs error (device loop4): ext4_dirty_inode:6459: inode #2: comm syz.4.8379: mark_inode_dirty error [ 489.722203][T28049] 9pnet: Could not find request transport: tsp$porT=0x00|§êg00020000004âñ [ 489.753873][T28049] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8384'.