last executing test programs: 4.755643069s ago: executing program 4 (id=344): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) r1 = io_uring_setup(0x1612, &(0x7f0000000200)={0x0, 0x0, 0x800}) io_uring_register$IORING_REGISTER_BUFFERS2(r1, 0xf, &(0x7f0000001580)={0x1, 0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000040)=""/168, 0xa8}], &(0x7f0000001540)=[0x2]}, 0x20) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r1, 0x10, &(0x7f0000001b00)={0x0, 0x0, &(0x7f0000001a80)=[{0x0}], 0x0, 0x1}, 0x20) 4.670729499s ago: executing program 4 (id=346): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xbb) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000540)='inet_sock_set_state\x00', r2}, 0x18) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e22, 0x1, @local, 0x5}, 0x1c) 4.356670599s ago: executing program 3 (id=350): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x7) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0x2}, 0x18) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYRESDEC=r1], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000540)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000882b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r4}, 0x18) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) 4.322013669s ago: executing program 3 (id=352): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 3.955721259s ago: executing program 3 (id=355): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) openat$ppp(0xffffffffffffff9c, &(0x7f0000000380), 0x600803, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) getgid() bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) pipe2(&(0x7f0000000280)={0xffffffffffffffff}, 0x4000) write$ppp(r1, &(0x7f00000002c0)="9104d64373ffb132e8fc57ec73fec2", 0xf) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20007, @void, @value}, 0x94) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000001280)="$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") r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ftruncate(r3, 0x2000009) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f00000004c0)={'wg1\x00'}) pwritev2(r4, &(0x7f00000001c0)=[{&(0x7f0000000400)="ba", 0xfdef}], 0x1, 0xe7b, 0x0, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc4042, 0x1d7) sendfile(r5, r5, 0x0, 0xfffe80) 3.85986506s ago: executing program 4 (id=358): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000d40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x65, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = io_uring_setup(0x1612, &(0x7f0000000200)={0x0, 0x0, 0x800}) io_uring_register$IORING_REGISTER_BUFFERS2(r2, 0xf, &(0x7f0000001580)={0x1, 0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000040)=""/168, 0xa8}], &(0x7f0000001540)=[0x2]}, 0x20) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r2, 0x10, &(0x7f0000001b00)={0x0, 0x0, &(0x7f0000001a80)=[{0x0}], 0x0, 0x1}, 0x20) 3.756520469s ago: executing program 4 (id=361): r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000140)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@mb_optimize_scan}, {@bh}, {@dioread_nolock}]}, 0x1, 0x562, &(0x7f0000000580)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r1, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x9, &(0x7f00000002c0)={@mcast2, 0x0}, &(0x7f00000003c0)=0x14) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x107842, 0x42) sendfile(r5, r5, 0x0, 0x80000000) 3.431599929s ago: executing program 4 (id=364): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x13, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x3, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000570000009519d76615d6ca7572c8f752dee0b890d7ee455f5e4195dbe32578f280738ca284a259305ceb25f3126da0ddc770991f41994e365e87791dce03c0"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1, 0x0, 0xfffffffffffffffe}, 0x18) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x12012, r2, 0x0) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x140, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r3, 0xc018937e, &(0x7f0000001040)={{0x1, 0x1, 0x1018, 0xffffffffffffffff}, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00'}) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r5 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) readv(r5, &(0x7f0000000300)=[{&(0x7f0000000cc0)=""/161, 0xa1}], 0x1) ioctl$IMADDTIMER(r5, 0x80044940, &(0x7f0000000000)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000180)) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYRESOCT=r4, @ANYRES8=r3], 0x48) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) r7 = socket$key(0xf, 0x3, 0x2) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0207a20802"], 0x10}}, 0x0) close(r8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000b00)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000000, @void, @value}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r9}, 0x18) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x802, &(0x7f0000000200)={[{@barrier_val={'barrier', 0x3d, 0x101}}, {@bsdgroups}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5e}}, {@debug}, {@bsdgroups}, {@oldalloc}, {@nombcache}]}, 0x0, 0x448, &(0x7f0000000400)="$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") bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet_dccp(0x2, 0x6, 0x0) 3.430491219s ago: executing program 0 (id=374): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) openat$ppp(0xffffffffffffff9c, &(0x7f0000000380), 0x600803, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) getgid() bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$ppp(r1, &(0x7f00000002c0)="9104d64373ffb132e8fc57ec73fec2", 0xf) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20007, @void, @value}, 0x94) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000001280)="$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") r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ftruncate(r4, 0x2000009) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f00000004c0)={'wg1\x00', 0x0}) sendmsg$nl_route_sched_retired(r2, &(0x7f0000000680)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000600)={&(0x7f0000000500)=@deltfilter={0xd0, 0x2d, 0x4, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xb, 0xffff}, {0x6, 0xd}, {0x0, 0x9}}, [@f_rsvp={{0x9}, {0x4}}, @f_tcindex={{0xc}, {0x28, 0x2, [@TCA_TCINDEX_HASH={0x8, 0x1, 0x38b9}, @TCA_TCINDEX_HASH={0x8, 0x1, 0x9a2f}, @TCA_TCINDEX_FALL_THROUGH={0x8}, @TCA_TCINDEX_POLICE={0xc, 0x6, [@TCA_POLICE_AVRATE={0x8, 0x4, 0xfffffffc}]}]}}, @f_rsvp={{0x9}, {0x2c, 0x2, [@TCA_RSVP_POLICE={0x20, 0x5, [@TCA_POLICE_RATE64={0xc, 0x8, 0x4ec00000000}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xfffffffb}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x8}]}, @TCA_RSVP_DST={0x8, 0x2, @multicast1}]}}, @f_tcindex={{0xc}, {0x24, 0x2, [@TCA_TCINDEX_HASH={0x8, 0x1, 0xec58}, @TCA_TCINDEX_MASK={0x6, 0x2, 0x1}, @TCA_TCINDEX_SHIFT={0x8, 0x3, 0x5}, @TCA_TCINDEX_CLASSID={0x8, 0x5, {0xa, 0x5}}]}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x4}, 0x2) pwritev2(r5, &(0x7f00000001c0)=[{&(0x7f0000000400)="ba", 0xfdef}], 0x1, 0xe7b, 0x0, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc4042, 0x1d7) sendfile(r7, r7, 0x0, 0xfffe80) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x37, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6, @void, @value}, 0xa0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) getresuid(0x0, &(0x7f00000000c0), &(0x7f0000000100)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r8, 0x0, 0x2}, 0x18) fchmodat(r10, &(0x7f0000000240)='./file0\x00', 0xfffffed3) 2.972983449s ago: executing program 3 (id=365): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 2.96568917s ago: executing program 1 (id=366): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000045000000020000000010"], 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000001000)={0x0, r0}, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000008500000023000000850000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000c80)='kfree\x00', r4}, 0x18) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a320000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a31000000004c000000050a01020000000000000000010020000c00024000000000000000010900010073797a3100000000200004801400030076657468315f6d6163767461700000000800014000000005"], 0xe8}, 0x1, 0x0, 0x0, 0x40040000}, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000002c0)=0x1) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x2) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000001040)={0x11, 0xc, &(0x7f0000001100)=ANY=[@ANYBLOB="186feb058545ed5ef7e19d7d161be57a13ec686b9064ff3f44af700000000000e19c77c4e972d762987f02d4622c23000000000000c4b844cb635d40a400f84389a950aa9cce3d149d5c007f4b1e9e89466d2ca550aacae3ebdf6e28127afb384fb5f85d32ff7d87833698f1db139c8ea9322d156a6e7d6fde95d101e6040dc1fb635406daada1dbf6f7425743b504b4d79d4870dfd52c5098f706f7d065bd158908ccddc603f9149d450b85478e615a8f0507c7acb0f915cbc541db0f46630bc34774857261dc3e10c9da7cc8a673c050782516bff6fb557340dc1733714fe02aee2b66d5ae77af5a148dc772eab16cc2ef255497f1582818be12fbd590cfa9546bd54fd156b0c9e7040a080cc4ba6ab2e9ec9eb2cfd7033e64412df68839bc33663f5770982bd5ea323521372a66e80368fbcfddb4e986238c14b07929e911500b9540cdc24d0315416c3808", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) eventfd2(0x9f, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r8, 0x0, 0x15897fa0}, 0x18) r9 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r9, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r9, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x0, 0x3}, 0x10) r10 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r10, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x4}, 0x10) sendmsg$tipc(r10, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x4048091) r11 = dup3(r9, r10, 0x80000) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r11, 0x0, 0x0) setsockopt$TIPC_GROUP_LEAVE(r11, 0x10f, 0x88) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x8, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.78374649s ago: executing program 3 (id=367): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f0000000640)={[{@jqfmt_vfsv1}, {@resgid}, {@barrier_val}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@orlov}, {@orlov}]}, 0xfc, 0x575, &(0x7f0000001180)="$eJzs3V1rHFUYAOB3NpukX9oUSlEvpNALK7WbJvGjgmC9FC0W9L4uyTSUbLoluylNLNhe2BtvpAgiFsQf4L2XxT/gryhooUgJeiFCZDaz6TbZzVe3bpp9Hpj2nJ2Znnn3zDs9Z2eWDaBvHc/+KES8HBHfJBGHW9YVI195fGW7pUc3JrMlieXlT/9MIslfa26f5H8fzCsvRcSvX0WcKqxvt7awOFOuVNK5vD5an706WltYPH15tjydTqdXxicmzr41Mf7uO293LdbXL/z9/Sf3Pjz79Yml735+cOROEufiUL6uNY6ncLO1crz8b14ajHNrNhzrQmO7SdLrA2BHBvI8H4zsGnA4BvKsB/a+LyNiGehTifyHPtUcBzTn9l2aBz83Hn6wMgFqxD7UGn9x5bOR2NeYGx1YSp6YGWXz3ZEutJ+18csfd+9kS2z8OcT+TeoA23LzVkScKRbXX/+T/Pq3c2caHx5vbG0b/fb/D/TSvWz880a78V9hdfwTbcY/B9vk7k5snv+FB11opqNs/Pde2/Hv6qVrZCCvvdAY8w0mly5X0jMR8WJEnIzB4ay+0f2cs0v3lzutax3/ZUvWfnMsmB/Hg+Lwk/tMlevliBh6mribHt6KeKXYLv5ktf+TNv2fvR8XttjGsfTuq53WbR7/s7X8U8Rrbfv/8R2tZOP7k6ON82G0eVas99ftY791ar/X8Wf9f2Dj+EeS1vu1te238eO+f9JO63Z6/g8lnzXKzSS4Xq7X58YihpKP178+/njfZr25fRb/yRMbX//anf/Z5OvzLcZ/++jtjps+Ef9w9KT/p7bV/9sv3P/oix86tb+1/n+zMQc/mb+SX//ay8+VrR7g07+DAAAAAAAAsHsUIuJQJIXSarlQKJVWnu84GgcKlWqtfupSdf7KVDS+KzsSg4Xmne7DLc9DjOXPwzbr42vqExFxJCK+HdjfqJe68vQCAAAAAAAAAAAAAAAAAAAA7A0HO3z/P/P7QK+PDnjmGj9sMNzrowB6YdOf/O/GLz0Bu9Km+Q/sWfIf+pf8h/4l/6F/yX/oX/If+pf8h/4l/wEAAAAAAAAAAAAAAAAAAAAAAAAAAKCrLpw/ny3LS49uTGb1qWsL8zPVa6en0tpMaXZ+sjRZnbtamq5WpytpabI6u9m/V6lWr46Nx/z10Xpaq4/WFhYvzlbnr9QvXp4tT6cX08H/JSoAAAAAAAAAAAAAAAAAAAB4vtQWFmfKlUo6p9Cx8H7sisN4lgGu2NHuxd0ShUKHwq28e7e3Vw8vSgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACwxn8BAAD//6HeL2I=") unlink(&(0x7f0000000100)='./file1\x00') 2.693499s ago: executing program 3 (id=368): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f0000000040), 0x3, 0x5eb, &(0x7f0000000c00)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4a, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1817c1, 0x0) mount(&(0x7f00000001c0), &(0x7f00000006c0)='./file0\x00', &(0x7f0000000800)='9p\x00', 0x0, &(0x7f0000000900)='trans=tcp,') prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000000c0)='sched_switch\x00', r4}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='net_prio.prioidx\x00', 0x275a, 0x0) 2.53545592s ago: executing program 1 (id=369): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xbb) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000540)='inet_sock_set_state\x00', r2}, 0x18) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e22, 0x1, @local, 0x5}, 0x1c) 2.45171797s ago: executing program 0 (id=371): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000d40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x65, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = io_uring_setup(0x1612, &(0x7f0000000200)={0x0, 0x0, 0x800}) io_uring_register$IORING_REGISTER_BUFFERS2(r2, 0xf, &(0x7f0000001580)={0x1, 0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000040)=""/168, 0xa8}], &(0x7f0000001540)=[0x2]}, 0x20) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r2, 0x10, &(0x7f0000001b00)={0x0, 0x0, &(0x7f0000001a80)=[{0x0}], 0x0, 0x1}, 0x20) 2.30272891s ago: executing program 0 (id=372): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xb, &(0x7f00000006c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x47, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) openat$ppp(0xffffffffffffff9c, &(0x7f0000000380), 0x600803, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) getgid() bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$ppp(r1, &(0x7f00000002c0)="9104d64373ffb132e8fc57ec73fec2", 0xf) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20007, @void, @value}, 0x94) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000001280)="$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") r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ftruncate(r4, 0x2000009) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f00000004c0)={'wg1\x00', 0x0}) sendmsg$nl_route_sched_retired(r2, &(0x7f0000000680)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000600)={&(0x7f0000000500)=@deltfilter={0xe8, 0x2d, 0x4, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xb, 0xffff}, {0x6, 0xd}, {0x0, 0x9}}, [@f_rsvp={{0x9}, {0x1c, 0x2, [@TCA_RSVP_POLICE={0x18, 0x5, [@TCA_POLICE_RATE64={0xc}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xd6000000}]}]}}, @f_tcindex={{0xc}, {0x28, 0x2, [@TCA_TCINDEX_HASH={0x8, 0x1, 0x38b9}, @TCA_TCINDEX_HASH={0x8, 0x1, 0x9a2f}, @TCA_TCINDEX_FALL_THROUGH={0x8}, @TCA_TCINDEX_POLICE={0xc, 0x6, [@TCA_POLICE_AVRATE={0x8, 0x4, 0xfffffffc}]}]}}, @f_rsvp={{0x9}, {0x2c, 0x2, [@TCA_RSVP_POLICE={0x20, 0x5, [@TCA_POLICE_RATE64={0xc, 0x8, 0x4ec00000000}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xfffffffb}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x8}]}, @TCA_RSVP_DST={0x8, 0x2, @multicast1}]}}, @f_tcindex={{0xc}, {0x24, 0x2, [@TCA_TCINDEX_HASH={0x8, 0x1, 0xec58}, @TCA_TCINDEX_MASK={0x6, 0x2, 0x1}, @TCA_TCINDEX_SHIFT={0x8, 0x3, 0x5}, @TCA_TCINDEX_CLASSID={0x8, 0x5, {0xa, 0x5}}]}}]}, 0xe8}, 0x1, 0x0, 0x0, 0x4}, 0x2) pwritev2(r5, &(0x7f00000001c0)=[{&(0x7f0000000400)="ba", 0xfdef}], 0x1, 0xe7b, 0x0, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc4042, 0x1d7) sendfile(r7, r7, 0x0, 0xfffe80) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x37, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6, @void, @value}, 0xa0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) getresuid(0x0, &(0x7f00000000c0), &(0x7f0000000100)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r8, 0x0, 0x2}, 0x18) fchmodat(r10, &(0x7f0000000240)='./file0\x00', 0xfffffed3) 1.73892238s ago: executing program 2 (id=376): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) readv(r0, &(0x7f0000000580)=[{&(0x7f0000000100)=""/67, 0x43}], 0x1) 1.6616986s ago: executing program 1 (id=377): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xb, &(0x7f00000006c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x47, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) getgid() bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) write$ppp(0xffffffffffffffff, &(0x7f00000002c0)="9104d64373ffb132e8fc57ec73fec2", 0xf) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20007, @void, @value}, 0x94) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000001280)="$eJzs3E+LHEUYB+B315iNG/ePGqMJiIVe9NJk9+BFL4tsQDKgJFkhEYSO26vDtDPD9LAwIkZPXv0cIojgTRBvetmL30DwthePEcSWndEko5PDSEiH5Xku80LVb6jqphuq6erD1774sLNXZXv5MBYXFmKxH5FupUixGP/4NF5+9cefnrty7fqlrVZr+3JKF7eubrySUlp9/vt3Pv7qhR+Gp9/+dvW7pThYf/fwt81fD84enDv88+oH7Sq1q9TtDVOebvR6w/xGWaTddtXJUnqrLPKqSO1uVQym2vfKXr8/Snl3d2W5PyiqKuXdUeoUozTspeFglPL383Y3ZVmWVpaD+Z24Xe18eauu64i6fjRORl3X9WOxHKfj8ViJ1ViL9Xginoyn4kw8HWfjmXg2vvnl69FRAgAAAAAAAAAAAAAAAAAAALh/5t3/f27cq+lRAwAAAAAAAAAAAAAAAAAAwPFy5dr1S1ut1vbllE5FlJ/v7+zvTH4n7Vt70Y4yirgQa/FHjHf/T0zqi2+0ti+ksfX4rLz5d/7m/s4j0/mN8ecEZuY3Jvk0nV+K5bvzm7EWZ2bnN2fmT8VLL96Vz2Itfn4velHGbhxl7+Q/2Ujp9Tdb/8qfH/cDAACA4yBLt81cv2fZvdon+TmeD0ytr4+y5080OnUiohp91MnLshgoHvriZLPD+L2u6+YPQkPFva+UpYj43/+8EBEPxwT/UzR9Z+JBuHPSmx4JAAAAAAAAAAAA83gQrxM2PUcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD+YgeOBQAAAACE+Vun0bEBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHwVAAD//+pd0x0=") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ftruncate(r2, 0x2000009) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f00000004c0)={'wg1\x00', 0x0}) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000600)={&(0x7f0000000500)=@deltfilter={0xd0, 0x2d, 0x4, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0xb, 0xffff}, {0x6, 0xd}, {0x0, 0x9}}, [@f_rsvp={{0x9}, {0x4}}, @f_tcindex={{0xc}, {0x28, 0x2, [@TCA_TCINDEX_HASH={0x8, 0x1, 0x38b9}, @TCA_TCINDEX_HASH={0x8, 0x1, 0x9a2f}, @TCA_TCINDEX_FALL_THROUGH={0x8}, @TCA_TCINDEX_POLICE={0xc, 0x6, [@TCA_POLICE_AVRATE={0x8, 0x4, 0xfffffffc}]}]}}, @f_rsvp={{0x9}, {0x2c, 0x2, [@TCA_RSVP_POLICE={0x20, 0x5, [@TCA_POLICE_RATE64={0xc, 0x8, 0x4ec00000000}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xfffffffb}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x8}]}, @TCA_RSVP_DST={0x8, 0x2, @multicast1}]}}, @f_tcindex={{0xc}, {0x24, 0x2, [@TCA_TCINDEX_HASH={0x8, 0x1, 0xec58}, @TCA_TCINDEX_MASK={0x6, 0x2, 0x1}, @TCA_TCINDEX_SHIFT={0x8, 0x3, 0x5}, @TCA_TCINDEX_CLASSID={0x8, 0x5, {0xa, 0x5}}]}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x4}, 0x2) pwritev2(r3, &(0x7f00000001c0)=[{&(0x7f0000000400)="ba", 0xfdef}], 0x1, 0xe7b, 0x0, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc4042, 0x1d7) sendfile(r5, r5, 0x0, 0xfffe80) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x37, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6, @void, @value}, 0xa0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) getresuid(0x0, &(0x7f00000000c0), &(0x7f0000000100)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6, 0x0, 0x2}, 0x18) fchmodat(r8, &(0x7f0000000240)='./file0\x00', 0xfffffed3) 1.36417938s ago: executing program 0 (id=378): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 1.21024173s ago: executing program 0 (id=379): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000200)={[{@quota}, {@oldalloc}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@block_validity}, {@jqfmt_vfsv1}]}, 0x3, 0x434, &(0x7f0000000940)="$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") r1 = creat(&(0x7f0000000340)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r2 = open(&(0x7f0000000500)='./bus\x00', 0x0, 0x42) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x13, 0x0, "ef359f41a4ae6dddfbd1ce5d29c2ee5e5c9d000ff8ee09e737ff0edf110ff4eb4b78c66ee677df701905b9aafab4ffffffff00", "cba3d625780820d1cbf7db71038259ca171ce1a311ef97e4298d1e14ef01060000e9009600fdff00000000000000000000000000000000000400", "d300e6d6ae9ef30bea2a004000"}) pwrite64(0xffffffffffffffff, &(0x7f00000003c0)='\x00', 0x1, 0x9000) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)}, 0x20) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2}, './bus\x00'}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000480)={'gretap0\x00', &(0x7f0000000600)={'gretap0\x00', 0x0, 0x40, 0x7, 0x0, 0x2, {{0x1b, 0x4, 0x2, 0x3e, 0x6c, 0x64, 0x0, 0x1, 0x4, 0x0, @broadcast, @broadcast, {[@generic={0x89, 0xe, "8c2197cf98a21baae6124f91"}, @noop, @end, @end, @ssrr={0x89, 0x7, 0xe5, [@empty]}, @end, @lsrr={0x83, 0x23, 0x56, [@remote, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @loopback, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1]}, @ra={0x94, 0x4}, @timestamp={0x44, 0x8, 0x6a, 0x0, 0xd, [0xd]}, @generic={0x82, 0x10, "212bf2f0a4bedbaf85fa98f0cf66"}]}}}}}) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000006c0)={0x0, @rand_addr, @broadcast}, &(0x7f0000000700)=0xc) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000740)={'batadv_slave_0\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x1f00, {0x0, 0x0, 0x74, r7, {0xb, 0xfff2}, {}, {0xe, 0xc}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x8881}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r4, 0x0, 0xfffffffffffffffd}, 0x18) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01080000000000000000020000000900020073797a2a0000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0x74}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000005c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d08000640ffffff00080003400000000810001180090001006c617374000000004c0000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000200003801c000080080003400000000210000280"], 0xf0}}, 0x0) 862.63069ms ago: executing program 0 (id=380): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xb, &(0x7f00000006c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x47, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) openat$ppp(0xffffffffffffff9c, &(0x7f0000000380), 0x600803, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) getgid() bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$ppp(r1, &(0x7f00000002c0)="9104d64373ffb132e8fc57ec73fec2", 0xf) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20007, @void, @value}, 0x94) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000001280)="$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") r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ftruncate(r3, 0x2000009) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f00000004c0)={'wg1\x00', 0x0}) sendmsg$nl_route_sched_retired(r2, &(0x7f0000000680)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000600)={&(0x7f0000000500)=@deltfilter={0xd0, 0x2d, 0x4, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0xb, 0xffff}, {0x6, 0xd}, {0x0, 0x9}}, [@f_rsvp={{0x9}, {0x4}}, @f_tcindex={{0xc}, {0x28, 0x2, [@TCA_TCINDEX_HASH={0x8, 0x1, 0x38b9}, @TCA_TCINDEX_HASH={0x8, 0x1, 0x9a2f}, @TCA_TCINDEX_FALL_THROUGH={0x8}, @TCA_TCINDEX_POLICE={0xc, 0x6, [@TCA_POLICE_AVRATE={0x8, 0x4, 0xfffffffc}]}]}}, @f_rsvp={{0x9}, {0x2c, 0x2, [@TCA_RSVP_POLICE={0x20, 0x5, [@TCA_POLICE_RATE64={0xc, 0x8, 0x4ec00000000}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xfffffffb}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x8}]}, @TCA_RSVP_DST={0x8, 0x2, @multicast1}]}}, @f_tcindex={{0xc}, {0x24, 0x2, [@TCA_TCINDEX_HASH={0x8, 0x1, 0xec58}, @TCA_TCINDEX_MASK={0x6, 0x2, 0x1}, @TCA_TCINDEX_SHIFT={0x8, 0x3, 0x5}, @TCA_TCINDEX_CLASSID={0x8, 0x5, {0xa, 0x5}}]}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x4}, 0x2) pwritev2(r4, &(0x7f00000001c0)=[{&(0x7f0000000400)="ba", 0xfdef}], 0x1, 0xe7b, 0x0, 0x1) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc4042, 0x1d7) sendfile(r6, r6, 0x0, 0xfffe80) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) getresuid(0x0, &(0x7f00000000c0), &(0x7f0000000100)) fchmodat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0xfffffed3) 795.54203ms ago: executing program 2 (id=381): prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x7}, 0x18) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000030500"/20, @ANYRES32, @ANYBLOB="0000000000000000280012800b0001006d61637365630000180002800c0004000100000100c28000050003"], 0x48}}, 0x40000) 794.98912ms ago: executing program 2 (id=382): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x9135}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'bond0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x940}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r4}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40010}, 0x8000) 733.60463ms ago: executing program 1 (id=383): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000001280)="$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") truncate(&(0x7f0000000140)='./file2\x00', 0x5c00) execve(&(0x7f0000000000)='./file2\x00', 0x0, 0x0) 655.09441ms ago: executing program 2 (id=384): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) rt_sigsuspend(0x0, 0x0) 562.74875ms ago: executing program 2 (id=385): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) r2 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x424100, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x6, 0x13, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x7fff}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@map_idx={0x18, 0xa}, @generic={0x80, 0x6, 0xe, 0x28, 0x9}, @jmp={0x5, 0x0, 0x1, 0x2, 0x4, 0x30, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x8118, 0x31, &(0x7f0000000200)=""/49, 0x40f00, 0x41, '\x00', 0x0, 0x25, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000540)={0x2, 0xb, 0x3, 0x5}, 0x10, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580), 0x10, 0x3, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0x2}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x200000, &(0x7f0000000140), 0xf8, 0x560, &(0x7f00000008c0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) chdir(&(0x7f0000000140)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000603000/0x3000)=nil, 0x3000, 0x0, 0x4, 0x1c0000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x20000, 0x2) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x5) mknodat$null(r4, &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10, 0x103) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) clock_getres(0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) dup(0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x7, 0x0) socket(0x10, 0x803, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffffe}, 0x18) 407.50052ms ago: executing program 1 (id=386): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x17, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x10000}, 0x18) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b0000000000000000000000000020"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000700)='kfree\x00', r3, 0x0, 0x1}, 0x18) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f0000000640)={[{@jqfmt_vfsv1}, {@resgid}, {@barrier_val}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@orlov}, {@orlov}]}, 0xfc, 0x575, &(0x7f0000001180)="$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") unlink(&(0x7f0000000100)='./file1\x00') 388.08756ms ago: executing program 2 (id=387): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xbb) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000540)='inet_sock_set_state\x00', r2}, 0x18) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e22, 0x1, @local, 0x5}, 0x1c) 208.38625ms ago: executing program 1 (id=388): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) openat$ppp(0xffffffffffffff9c, &(0x7f0000000380), 0x600803, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) getgid() bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) pipe2(&(0x7f0000000280)={0xffffffffffffffff}, 0x4000) write$ppp(r1, &(0x7f00000002c0)="9104d64373ffb132e8fc57ec73fec2", 0xf) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20007, @void, @value}, 0x94) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000001280)="$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") r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ftruncate(r3, 0x2000009) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f00000004c0)={'wg1\x00'}) pwritev2(r4, &(0x7f00000001c0)=[{&(0x7f0000000400)="ba", 0xfdef}], 0x1, 0xe7b, 0x0, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc4042, 0x1d7) sendfile(r5, r5, 0x0, 0xfffe80) 0s ago: executing program 4 (id=389): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): nce. Setting the MTU to 1560 would solve the problem. [ 30.490042][ T3298] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.509619][ T3297] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.516848][ T3297] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.523973][ T3297] bridge_slave_0: entered allmulticast mode [ 30.530443][ T3297] bridge_slave_0: entered promiscuous mode [ 30.536797][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.543856][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.569961][ T3303] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.581254][ T3298] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.588197][ T3298] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.614143][ T3298] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.634245][ T3297] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.641344][ T3297] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.648490][ T3297] bridge_slave_1: entered allmulticast mode [ 30.654935][ T3297] bridge_slave_1: entered promiscuous mode [ 30.672391][ T3308] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.682785][ T3308] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.692596][ T3300] team0: Port device team_slave_0 added [ 30.699133][ T3300] team0: Port device team_slave_1 added [ 30.711055][ T3297] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.736100][ T3300] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.743102][ T3300] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.769048][ T3300] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.781001][ T3297] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.805388][ T3300] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.812418][ T3300] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.838472][ T3300] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.859204][ T3308] team0: Port device team_slave_0 added [ 30.883968][ T3298] hsr_slave_0: entered promiscuous mode [ 30.890131][ T3298] hsr_slave_1: entered promiscuous mode [ 30.896734][ T3308] team0: Port device team_slave_1 added [ 30.909373][ T3303] hsr_slave_0: entered promiscuous mode [ 30.915539][ T3303] hsr_slave_1: entered promiscuous mode [ 30.921433][ T3303] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 30.928986][ T3303] Cannot create hsr debugfs directory [ 30.941825][ T3297] team0: Port device team_slave_0 added [ 30.957664][ T3308] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.964779][ T3308] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.990842][ T3308] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.007231][ T3297] team0: Port device team_slave_1 added [ 31.018288][ T3308] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.025284][ T3308] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.051320][ T3308] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.083205][ T3297] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.090200][ T3297] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.116143][ T3297] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.129140][ T3300] hsr_slave_0: entered promiscuous mode [ 31.135333][ T3300] hsr_slave_1: entered promiscuous mode [ 31.141170][ T3300] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 31.148729][ T3300] Cannot create hsr debugfs directory [ 31.172276][ T3297] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.179240][ T3297] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.205143][ T3297] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.244650][ T3308] hsr_slave_0: entered promiscuous mode [ 31.250718][ T3308] hsr_slave_1: entered promiscuous mode [ 31.256676][ T3308] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 31.264255][ T3308] Cannot create hsr debugfs directory [ 31.324243][ T3297] hsr_slave_0: entered promiscuous mode [ 31.330390][ T3297] hsr_slave_1: entered promiscuous mode [ 31.336148][ T3297] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 31.343866][ T3297] Cannot create hsr debugfs directory [ 31.412868][ T3298] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 31.425854][ T3298] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 31.440729][ T3298] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 31.461235][ T3298] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 31.496961][ T3303] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 31.508903][ T3303] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 31.521810][ T3303] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 31.530666][ T3303] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 31.551301][ T3300] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 31.560906][ T3300] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 31.571739][ T3300] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 31.580473][ T3300] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 31.633026][ T3308] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 31.642153][ T3308] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 31.666125][ T3308] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 31.675605][ T3308] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 31.684675][ T3297] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 31.693281][ T3297] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 31.714395][ T3297] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 31.723382][ T3297] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 31.736903][ T3298] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.768129][ T3303] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.780954][ T3298] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.790823][ T1574] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.798084][ T1574] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.810522][ T3303] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.823359][ T3300] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.832372][ T2928] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.839429][ T2928] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.858392][ T84] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.865558][ T84] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.874913][ T84] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.882008][ T84] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.892670][ T3300] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.921739][ T83] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.928871][ T83] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.938806][ T83] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.945900][ T83] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.004856][ T3297] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.015291][ T3308] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.031927][ T3297] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.055085][ T3308] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.076100][ T2928] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.083284][ T2928] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.100497][ T2928] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.107652][ T2928] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.123116][ T2928] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.130292][ T2928] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.138990][ T2928] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.146064][ T2928] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.163207][ T3298] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.178209][ T3303] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.199345][ T3300] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.227493][ T3297] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 32.339050][ T3308] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.356270][ T3297] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.386452][ T3303] veth0_vlan: entered promiscuous mode [ 32.394687][ T3303] veth1_vlan: entered promiscuous mode [ 32.412199][ T3300] veth0_vlan: entered promiscuous mode [ 32.418069][ T3298] veth0_vlan: entered promiscuous mode [ 32.434010][ T3300] veth1_vlan: entered promiscuous mode [ 32.444865][ T3298] veth1_vlan: entered promiscuous mode [ 32.458909][ T3303] veth0_macvtap: entered promiscuous mode [ 32.477639][ T3303] veth1_macvtap: entered promiscuous mode [ 32.495074][ T3300] veth0_macvtap: entered promiscuous mode [ 32.504741][ T3300] veth1_macvtap: entered promiscuous mode [ 32.518544][ T3298] veth0_macvtap: entered promiscuous mode [ 32.533046][ T3298] veth1_macvtap: entered promiscuous mode [ 32.551542][ T3297] veth0_vlan: entered promiscuous mode [ 32.562241][ T3300] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.575453][ T3303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.586071][ T3303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.596979][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.605970][ T3300] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.614402][ T3300] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.623220][ T3300] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.631979][ T3300] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.640728][ T3300] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.656082][ T3298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.666737][ T3298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.676607][ T3298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.687078][ T3298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.697855][ T3298] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.705682][ T3308] veth0_vlan: entered promiscuous mode [ 32.712143][ T3297] veth1_vlan: entered promiscuous mode [ 32.723308][ T3303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.733777][ T3303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.744687][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.753876][ T3303] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.762760][ T3303] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.771492][ T3303] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.780274][ T3303] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.795062][ T3298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.805596][ T3298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.815476][ T3298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.825915][ T3298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.836673][ T3298] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.847787][ T3308] veth1_vlan: entered promiscuous mode [ 32.860177][ T3298] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.868903][ T3298] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.877665][ T3298] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.886530][ T3298] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.923735][ T3300] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 32.933668][ T3297] veth0_macvtap: entered promiscuous mode [ 32.948684][ T3308] veth0_macvtap: entered promiscuous mode [ 32.964513][ T3297] veth1_macvtap: entered promiscuous mode [ 32.978969][ T3308] veth1_macvtap: entered promiscuous mode [ 33.014742][ T3297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.025391][ T3297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.030329][ T3440] xt_CT: You must specify a L4 protocol and not use inversions on it [ 33.035256][ T3297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.053880][ T3297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.063774][ T3297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.065656][ T3440] 9pnet_fd: Insufficient options for proto=fd [ 33.074254][ T3297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.092419][ T3297] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.100017][ T3443] geneve0: entered allmulticast mode [ 33.112932][ T3308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.123439][ T3308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.133284][ T3308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.143746][ T3308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.153599][ T3308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.164054][ T3308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.173926][ T3308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.184448][ T3308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.196734][ T3308] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.209467][ T3447] loop4: detected capacity change from 0 to 1024 [ 33.225098][ T3297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.235578][ T3297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.245458][ T3297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.255902][ T3297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.265794][ T3297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.276239][ T3297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.287022][ T3447] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 33.297958][ T3447] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 33.307805][ T29] kauditd_printk_skb: 55 callbacks suppressed [ 33.307817][ T29] audit: type=1400 audit(1741149214.373:147): avc: denied { write } for pid=3441 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 33.333941][ T3447] JBD2: no valid journal superblock found [ 33.339716][ T3447] EXT4-fs (loop4): Could not load journal inode [ 33.348733][ T3297] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.363994][ T3308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.374583][ T3308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.384527][ T3308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.395029][ T3308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.404872][ T3308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.415429][ T3308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.425278][ T3308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.435845][ T3308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.447856][ T3308] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.469052][ T3297] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.477930][ T3297] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.486703][ T3297] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.495428][ T3297] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.525991][ T3308] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.534927][ T3308] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.543780][ T3308] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.552573][ T3308] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.631617][ T29] audit: type=1400 audit(1741149214.713:148): avc: denied { create } for pid=3461 comm="syz.4.9" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 33.712075][ T29] audit: type=1400 audit(1741149214.763:149): avc: denied { setopt } for pid=3461 comm="syz.4.9" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 33.731607][ T29] audit: type=1400 audit(1741149214.763:150): avc: denied { write } for pid=3461 comm="syz.4.9" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 33.763520][ T3464] loop3: detected capacity change from 0 to 1024 [ 33.770866][ T3464] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 33.781860][ T3464] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 33.793598][ T3464] JBD2: no valid journal superblock found [ 33.799432][ T3464] EXT4-fs (loop3): Could not load journal inode [ 33.861872][ T3473] loop1: detected capacity change from 0 to 512 [ 33.878266][ T3448] syz.0.1 (3448) used greatest stack depth: 9504 bytes left [ 33.887109][ T3473] EXT4-fs: Ignoring removed nobh option [ 33.899043][ T3473] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 33.912230][ T3473] EXT4-fs (loop1): blocks per group (95) and clusters per group (32768) inconsistent [ 33.922584][ T29] audit: type=1326 audit(1741149214.983:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3472 comm="syz.3.13" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f883acbd169 code=0x7ffc0000 [ 33.945951][ T29] audit: type=1326 audit(1741149214.983:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3472 comm="syz.3.13" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f883acbd169 code=0x7ffc0000 [ 33.969175][ T29] audit: type=1326 audit(1741149214.983:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3472 comm="syz.3.13" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f883acbd169 code=0x7ffc0000 [ 33.992430][ T29] audit: type=1326 audit(1741149214.983:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3472 comm="syz.3.13" exe="/root/syz-executor" sig=0 arch=c000003e syscall=104 compat=0 ip=0x7f883acbd169 code=0x7ffc0000 [ 34.015604][ T29] audit: type=1326 audit(1741149214.983:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3472 comm="syz.3.13" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f883acbd169 code=0x7ffc0000 [ 34.038889][ T29] audit: type=1326 audit(1741149214.983:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3472 comm="syz.3.13" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f883acbd169 code=0x7ffc0000 [ 34.098232][ T3474] loop3: detected capacity change from 0 to 8192 [ 34.105249][ T3474] ======================================================= [ 34.105249][ T3474] WARNING: The mand mount option has been deprecated and [ 34.105249][ T3474] and is ignored by this kernel. Remove the mand [ 34.105249][ T3474] option from the mount to silence this warning. [ 34.105249][ T3474] ======================================================= [ 34.310503][ T3487] loop1: detected capacity change from 0 to 1024 [ 34.390220][ T3487] EXT4-fs: Ignoring removed orlov option [ 34.395948][ T3487] EXT4-fs: Ignoring removed orlov option [ 34.483336][ T3494] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14'. [ 34.511541][ T3487] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.577385][ T3493] loop2: detected capacity change from 0 to 8192 [ 34.616568][ T3487] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2863: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 34.730479][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.949399][ T3502] loop4: detected capacity change from 0 to 8192 [ 34.964268][ T3509] loop1: detected capacity change from 0 to 512 [ 34.974250][ T3509] EXT4-fs: Ignoring removed nobh option [ 34.998517][ T3509] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.107826][ T3509] ext4 filesystem being mounted at /4/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 35.236149][ T3520] netlink: 4 bytes leftover after parsing attributes in process `syz.3.22'. [ 35.244929][ T3520] netlink: 4 bytes leftover after parsing attributes in process `syz.3.22'. [ 35.253782][ T3520] netlink: 4 bytes leftover after parsing attributes in process `syz.3.22'. [ 35.297207][ T3521] netlink: 8 bytes leftover after parsing attributes in process `syz.3.22'. [ 35.342076][ T3509] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 35.378734][ T3509] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 35.451122][ T3520] netlink: 4 bytes leftover after parsing attributes in process `syz.3.22'. [ 35.460085][ T3520] netlink: 4 bytes leftover after parsing attributes in process `syz.3.22'. [ 35.468863][ T3520] netlink: 4 bytes leftover after parsing attributes in process `syz.3.22'. [ 35.603551][ T3520] netlink: 4 bytes leftover after parsing attributes in process `syz.3.22'. [ 35.612327][ T3520] netlink: 4 bytes leftover after parsing attributes in process `syz.3.22'. [ 35.637308][ T3519] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 35.660992][ T3519] Zero length message leads to an empty skb [ 35.740479][ T3509] xt_CT: You must specify a L4 protocol and not use inversions on it [ 35.755017][ T3529] loop2: detected capacity change from 0 to 512 [ 35.770263][ T3529] EXT4-fs: Ignoring removed nobh option [ 35.806211][ T3529] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.818940][ T3529] ext4 filesystem being mounted at /3/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 35.835806][ T3529] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 35.844873][ T3529] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 35.948926][ T3542] loop0: detected capacity change from 0 to 1024 [ 35.956496][ T3542] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 35.967440][ T3542] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 35.977851][ T3542] JBD2: no valid journal superblock found [ 35.983668][ T3542] EXT4-fs (loop0): Could not load journal inode [ 35.985773][ T3546] loop3: detected capacity change from 0 to 512 [ 35.997214][ T3546] EXT4-fs: Ignoring removed oldalloc option [ 36.003703][ T3531] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 36.018771][ T3531] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 36.027929][ T3546] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 36.042773][ T3546] EXT4-fs (loop3): 1 truncate cleaned up [ 36.048922][ T3546] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.065101][ T3529] xt_CT: You must specify a L4 protocol and not use inversions on it [ 36.099700][ T3546] loop3: detected capacity change from 512 to 64 [ 36.108830][ T3546] EXT4-fs error (device loop3): mb_free_blocks:1948: group 0, inode 15: block 101:freeing already freed block (bit 100); block bitmap corrupt. [ 36.123636][ T3546] EXT4-fs (loop3): pa ffff888106596000: logic 0, phys. 65, len 64 [ 36.131535][ T3546] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5366: group 0, free 64, pa_free 63 [ 36.150671][ T3546] team0 (unregistering): Port device team_slave_0 removed [ 36.160179][ T3546] team0 (unregistering): Port device team_slave_1 removed [ 36.214067][ T3550] loop0: detected capacity change from 0 to 8192 [ 36.285101][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.335742][ T3557] loop1: detected capacity change from 0 to 512 [ 36.346180][ T3557] EXT4-fs: Ignoring removed oldalloc option [ 36.354003][ T3557] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 36.365547][ T3557] EXT4-fs (loop1): 1 truncate cleaned up [ 36.372158][ T3557] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.429674][ T3557] loop1: detected capacity change from 512 to 64 [ 36.439619][ T3557] EXT4-fs error (device loop1): mb_free_blocks:1948: group 0, inode 15: block 101:freeing already freed block (bit 100); block bitmap corrupt. [ 36.454310][ T3557] EXT4-fs (loop1): pa ffff8881064f5000: logic 0, phys. 65, len 64 [ 36.462242][ T3557] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5366: group 0, free 64, pa_free 63 [ 36.480399][ T3557] team0 (unregistering): Port device team_slave_0 removed [ 36.489652][ T3557] team0 (unregistering): Port device team_slave_1 removed [ 36.541871][ T3298] EXT4-fs warning (device loop1): ext4_evict_inode:276: xattr delete (err -12) [ 36.562598][ T3298] ------------[ cut here ]------------ [ 36.568099][ T3298] bad length passed for symlink [/tmp/syz-imagegen2884317625/] (got 39, expected 29) [ 36.568414][ T3298] WARNING: CPU: 1 PID: 3298 at ./include/linux/fs.h:803 inode_set_cached_link+0xc4/0xd0 [ 36.588088][ T3298] Modules linked in: [ 36.592064][ T3298] CPU: 1 UID: 0 PID: 3298 Comm: syz-executor Not tainted 6.14.0-rc5-syzkaller-00016-g48a5eed9ad58 #0 [ 36.602956][ T3298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 36.613123][ T3298] RIP: 0010:inode_set_cached_link+0xc4/0xd0 [ 36.619095][ T3298] Code: ff 48 c7 c7 1e f5 b2 86 e8 79 61 c4 ff c6 05 a0 71 0b 05 01 90 48 c7 c7 67 33 1b 86 4c 89 f6 89 ea 44 89 f9 e8 fd b5 8c ff 90 <0f> 0b 90 90 eb 84 66 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90 90 [ 36.638847][ T3298] RSP: 0018:ffffc900015fbac8 EFLAGS: 00010246 [ 36.644953][ T3298] RAX: 5670d7deec183400 RBX: ffff888115613ba8 RCX: ffff888103976300 [ 36.652966][ T3298] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 36.661204][ T3298] RBP: 0000000000000027 R08: ffffffff81343af7 R09: 0000000000000000 [ 36.669199][ T3298] R10: 0001ffffffffffff R11: ffff888103976300 R12: ffff888115613ba8 [ 36.677217][ T3298] R13: ffff888115613bd0 R14: ffff888115613a80 R15: 000000000000001d [ 36.685220][ T3298] FS: 000055556b8a7500(0000) GS:ffff888237d00000(0000) knlGS:0000000000000000 [ 36.694206][ T3298] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 36.700823][ T3298] CR2: 00007ffde687bbe8 CR3: 0000000104ba6000 CR4: 00000000003506f0 [ 36.708860][ T3298] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 36.716885][ T3298] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 36.724907][ T3298] Call Trace: [ 36.728254][ T3298] [ 36.731229][ T3298] ? __warn+0x141/0x350 [ 36.735688][ T3298] ? report_bug+0x315/0x420 [ 36.740330][ T3298] ? inode_set_cached_link+0xc4/0xd0 [ 36.745791][ T3298] ? handle_bug+0x60/0x90 [ 36.750188][ T3298] ? exc_invalid_op+0x1a/0x50 [ 36.754967][ T3298] ? asm_exc_invalid_op+0x1a/0x20 [ 36.760054][ T3298] ? __warn_printk+0x167/0x1b0 [ 36.764846][ T3298] ? inode_set_cached_link+0xc4/0xd0 [ 36.770267][ T3298] ? inode_set_cached_link+0xc3/0xd0 [ 36.775668][ T3298] __ext4_iget+0x1bb5/0x1e20 [ 36.780392][ T3298] ext4_lookup+0x15b/0x390 [ 36.784840][ T3298] __lookup_slow+0x18a/0x250 [ 36.789462][ T3298] lookup_slow+0x3c/0x60 [ 36.793770][ T3298] walk_component+0x1f5/0x230 [ 36.798577][ T3298] ? path_lookupat+0xfd/0x2b0 [ 36.803384][ T3298] path_lookupat+0x10a/0x2b0 [ 36.808006][ T3298] filename_lookup+0x150/0x340 [ 36.812826][ T3298] user_path_at+0x3c/0x120 [ 36.817344][ T3298] __x64_sys_umount+0x85/0xe0 [ 36.822261][ T3298] x64_sys_call+0x20cd/0x2dc0 [ 36.826987][ T3298] do_syscall_64+0xc9/0x1c0 [ 36.831698][ T3298] ? clear_bhb_loop+0x55/0xb0 [ 36.836475][ T3298] ? clear_bhb_loop+0x55/0xb0 [ 36.841218][ T3298] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 36.847223][ T3298] RIP: 0033:0x7f286702e497 [ 36.851738][ T3298] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 36.871402][ T3298] RSP: 002b:00007ffde687c398 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 36.874121][ T3561] loop4: detected capacity change from 0 to 8192 [ 36.879862][ T3298] RAX: ffffffffffffffda RBX: 00007f28670ae08c RCX: 00007f286702e497 [ 36.879881][ T3298] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffde687c450 [ 36.879895][ T3298] RBP: 00007ffde687c450 R08: 0000000000000000 R09: 0000000000000000 [ 36.879910][ T3298] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffde687d540 [ 36.918418][ T3298] R13: 00007f28670ae08c R14: 0000000000008eb1 R15: 00007ffde687f700 [ 36.926437][ T3298] [ 36.929631][ T3298] ---[ end trace 0000000000000000 ]--- [ 36.938894][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.939148][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.007520][ T3563] loop2: detected capacity change from 0 to 512 [ 37.027416][ T3565] loop1: detected capacity change from 0 to 8192 [ 37.048445][ T3297] EXT4-fs warning (device loop3): ext4_evict_inode:276: xattr delete (err -12) [ 37.064101][ T3563] EXT4-fs: Ignoring removed oldalloc option [ 37.074279][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.084914][ T3563] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 37.128009][ T3563] EXT4-fs (loop2): 1 truncate cleaned up [ 37.134378][ T3563] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.199769][ T3563] loop2: detected capacity change from 512 to 64 [ 37.210698][ T3563] EXT4-fs error (device loop2): mb_free_blocks:1948: group 0, inode 15: block 101:freeing already freed block (bit 100); block bitmap corrupt. [ 37.225529][ T3563] EXT4-fs (loop2): pa ffff8881064f5000: logic 0, phys. 65, len 64 [ 37.233450][ T3563] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5366: group 0, free 64, pa_free 63 [ 37.325396][ T3578] loop3: detected capacity change from 0 to 8192 [ 37.354273][ T3308] EXT4-fs warning (device loop2): ext4_evict_inode:276: xattr delete (err -12) [ 37.397396][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.439041][ T3587] loop2: detected capacity change from 0 to 1024 [ 37.462641][ T3587] EXT4-fs: Ignoring removed orlov option [ 37.468336][ T3587] EXT4-fs: Ignoring removed orlov option [ 37.512548][ T3587] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.629745][ T3593] loop4: detected capacity change from 0 to 512 [ 37.636677][ T3593] EXT4-fs: Ignoring removed nobh option [ 37.657926][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.668390][ T3593] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.681071][ T3593] ext4 filesystem being mounted at /10/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 37.697304][ T3593] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 37.711425][ T3593] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 37.858124][ T3593] xt_CT: You must specify a L4 protocol and not use inversions on it [ 38.100101][ T3616] FAULT_INJECTION: forcing a failure. [ 38.100101][ T3616] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 38.114939][ T3616] CPU: 0 UID: 0 PID: 3616 Comm: syz.1.53 Tainted: G W 6.14.0-rc5-syzkaller-00016-g48a5eed9ad58 #0 [ 38.114974][ T3616] Tainted: [W]=WARN [ 38.114981][ T3616] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 38.115065][ T3616] Call Trace: [ 38.115071][ T3616] [ 38.115078][ T3616] dump_stack_lvl+0xf2/0x150 [ 38.115106][ T3616] dump_stack+0x15/0x1a [ 38.115127][ T3616] should_fail_ex+0x24a/0x260 [ 38.115207][ T3616] should_fail+0xb/0x10 [ 38.115237][ T3616] should_fail_usercopy+0x1a/0x20 [ 38.115274][ T3616] strncpy_from_user+0x25/0x210 [ 38.115316][ T3616] ? kmem_cache_alloc_noprof+0x18e/0x320 [ 38.115339][ T3616] ? getname_flags+0x81/0x3b0 [ 38.115381][ T3616] getname_flags+0xb0/0x3b0 [ 38.115495][ T3616] __x64_sys_rmdir+0x21/0x40 [ 38.115539][ T3616] x64_sys_call+0x27ca/0x2dc0 [ 38.115570][ T3616] do_syscall_64+0xc9/0x1c0 [ 38.115606][ T3616] ? clear_bhb_loop+0x55/0xb0 [ 38.115648][ T3616] ? clear_bhb_loop+0x55/0xb0 [ 38.115679][ T3616] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 38.115710][ T3616] RIP: 0033:0x7f286702d169 [ 38.115745][ T3616] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 38.115766][ T3616] RSP: 002b:00007f2865691038 EFLAGS: 00000246 ORIG_RAX: 0000000000000054 [ 38.115823][ T3616] RAX: ffffffffffffffda RBX: 00007f2867245fa0 RCX: 00007f286702d169 [ 38.115834][ T3616] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 38.115845][ T3616] RBP: 00007f2865691090 R08: 0000000000000000 R09: 0000000000000000 [ 38.115856][ T3616] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 38.115878][ T3616] R13: 0000000000000001 R14: 00007f2867245fa0 R15: 00007ffde687f2e8 [ 38.115897][ T3616] [ 38.300390][ T3606] loop0: detected capacity change from 0 to 8192 [ 38.321402][ T29] kauditd_printk_skb: 363 callbacks suppressed [ 38.321420][ T29] audit: type=1326 audit(1741149475.383:518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3605 comm="syz.0.49" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6b8da6bad0 code=0x7ffc0000 [ 38.351059][ T29] audit: type=1326 audit(1741149475.383:519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3605 comm="syz.0.49" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6b8da6cd6b code=0x7ffc0000 [ 38.374658][ T29] audit: type=1326 audit(1741149475.383:520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3605 comm="syz.0.49" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f6b8da6bdca code=0x7ffc0000 [ 38.397759][ T29] audit: type=1326 audit(1741149475.383:521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3605 comm="syz.0.49" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f6b8da6bdca code=0x7ffc0000 [ 38.421107][ T29] audit: type=1326 audit(1741149475.383:522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3605 comm="syz.0.49" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f6b8da6b9d7 code=0x7ffc0000 [ 38.444573][ T29] audit: type=1326 audit(1741149475.383:523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3605 comm="syz.0.49" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f6b8da6e90a code=0x7ffc0000 [ 38.467738][ T29] audit: type=1326 audit(1741149475.393:524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3605 comm="syz.0.49" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6b8da6bad0 code=0x7ffc0000 [ 38.490992][ T29] audit: type=1326 audit(1741149475.393:525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3605 comm="syz.0.49" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7f6b8da6beb7 code=0x7ffc0000 [ 38.514405][ T29] audit: type=1326 audit(1741149475.393:526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3605 comm="syz.0.49" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6b8da6bad0 code=0x7ffc0000 [ 38.538062][ T29] audit: type=1326 audit(1741149475.393:527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3605 comm="syz.0.49" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b8da6d169 code=0x7ffc0000 [ 38.562089][ T3610] loop2: detected capacity change from 0 to 8192 [ 38.661900][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.889164][ T3632] loop3: detected capacity change from 0 to 128 [ 38.963718][ T3637] loop4: detected capacity change from 0 to 256 [ 39.014710][ T3620] tipc: Started in network mode [ 39.019674][ T3620] tipc: Node identity ac14140f, cluster identity 4711 [ 39.034883][ T3637] FAT-fs (loop4): Directory bread(block 64) failed [ 39.043150][ T3637] FAT-fs (loop4): Directory bread(block 65) failed [ 39.050074][ T3620] tipc: New replicast peer: 255.0.0.255 [ 39.051631][ T3636] loop0: detected capacity change from 0 to 8192 [ 39.055682][ T3620] tipc: Enabled bearer , priority 10 [ 39.063889][ T3637] FAT-fs (loop4): Directory bread(block 66) failed [ 39.074777][ T3637] FAT-fs (loop4): Directory bread(block 67) failed [ 39.130781][ T3647] xt_hashlimit: max too large, truncated to 1048576 [ 39.137441][ T3647] xt_hashlimit: overflow, try lower: 0/0 [ 39.148924][ T3637] FAT-fs (loop4): Directory bread(block 68) failed [ 39.156011][ T3637] FAT-fs (loop4): Directory bread(block 69) failed [ 39.162958][ T3637] FAT-fs (loop4): Directory bread(block 70) failed [ 39.170006][ T3637] FAT-fs (loop4): Directory bread(block 71) failed [ 39.178494][ T3637] FAT-fs (loop4): Directory bread(block 72) failed [ 39.189330][ T3637] FAT-fs (loop4): Directory bread(block 73) failed [ 39.242573][ T3657] loop2: detected capacity change from 0 to 1024 [ 39.249337][ T3657] EXT4-fs: Ignoring removed nobh option [ 39.259678][ T3657] EXT4-fs: Ignoring removed bh option [ 39.276098][ T3657] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.389258][ T3657] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4115: comm syz.2.69: Allocating blocks 497-513 which overlap fs metadata [ 39.441971][ T3647] loop3: detected capacity change from 0 to 8192 [ 39.509739][ T3657] EXT4-fs (loop2): pa ffff888106596070: logic 256, phys. 385, len 8 [ 39.517922][ T3657] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5366: group 0, free 0, pa_free 1 [ 39.569068][ T3637] syz.4.60: attempt to access beyond end of device [ 39.569068][ T3637] loop4: rw=0, sector=1816, nr_sectors = 4 limit=256 [ 39.649714][ T3637] FAT-fs (loop4): error, fat_free: invalid cluster chain (i_pos 326) [ 39.657983][ T3637] FAT-fs (loop4): Filesystem has been set read-only [ 39.709544][ T3637] FAT-fs (loop4): error, fat_free: invalid cluster chain (i_pos 326) [ 39.760689][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.838589][ T3668] loop3: detected capacity change from 0 to 8192 [ 39.886492][ T3670] loop1: detected capacity change from 0 to 8192 [ 39.927679][ T3672] loop2: detected capacity change from 0 to 8192 [ 39.939554][ T3676] loop4: detected capacity change from 0 to 512 [ 39.952713][ T3676] EXT4-fs: Ignoring removed oldalloc option [ 39.974617][ T3676] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 39.997776][ T3676] EXT4-fs (loop4): 1 truncate cleaned up [ 40.010636][ T3676] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.070946][ T3676] loop4: detected capacity change from 512 to 64 [ 40.150723][ T3676] EXT4-fs error (device loop4): mb_free_blocks:1948: group 0, inode 15: block 101:freeing already freed block (bit 100); block bitmap corrupt. [ 40.165351][ T3676] EXT4-fs (loop4): pa ffff888106596000: logic 0, phys. 65, len 64 [ 40.170689][ T3359] tipc: Node number set to 2886997007 [ 40.173188][ T3676] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5366: group 0, free 64, pa_free 63 [ 40.235606][ T3690] __nla_validate_parse: 15 callbacks suppressed [ 40.235623][ T3690] netlink: 4 bytes leftover after parsing attributes in process `syz.4.74'. [ 40.256472][ T3690] team0 (unregistering): Port device team_slave_0 removed [ 40.266175][ T3690] team0 (unregistering): Port device team_slave_1 removed [ 40.288225][ T3676] netlink: 4 bytes leftover after parsing attributes in process `syz.4.74'. [ 40.341775][ T3676] netlink: 4 bytes leftover after parsing attributes in process `syz.4.74'. [ 40.351254][ T3676] netlink: 12 bytes leftover after parsing attributes in process `syz.4.74'. [ 40.371769][ T3303] EXT4-fs warning (device loop4): ext4_evict_inode:276: xattr delete (err -12) [ 40.388277][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.441526][ T3692] 9pnet_fd: Insufficient options for proto=fd [ 40.521744][ T3698] loop0: detected capacity change from 0 to 512 [ 40.540801][ T3698] EXT4-fs: Ignoring removed nobh option [ 40.552173][ T3698] EXT4-fs (loop0): blocks per group (95) and clusters per group (32768) inconsistent [ 40.681930][ T3701] bond0: entered promiscuous mode [ 40.687109][ T3701] bond_slave_0: entered promiscuous mode [ 40.693037][ T3701] bond_slave_1: entered promiscuous mode [ 40.723921][ T3701] bond0: left promiscuous mode [ 40.728765][ T3701] bond_slave_0: left promiscuous mode [ 40.734397][ T3701] bond_slave_1: left promiscuous mode [ 40.866986][ T3709] FAULT_INJECTION: forcing a failure. [ 40.866986][ T3709] name failslab, interval 1, probability 0, space 0, times 0 [ 40.879950][ T3709] CPU: 1 UID: 0 PID: 3709 Comm: syz.0.83 Tainted: G W 6.14.0-rc5-syzkaller-00016-g48a5eed9ad58 #0 [ 40.879986][ T3709] Tainted: [W]=WARN [ 40.880045][ T3709] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 40.880059][ T3709] Call Trace: [ 40.880067][ T3709] [ 40.880076][ T3709] dump_stack_lvl+0xf2/0x150 [ 40.880110][ T3709] dump_stack+0x15/0x1a [ 40.880163][ T3709] should_fail_ex+0x24a/0x260 [ 40.880273][ T3709] should_failslab+0x8f/0xb0 [ 40.880306][ T3709] kmem_cache_alloc_noprof+0x52/0x320 [ 40.880377][ T3709] ? getname_flags+0x81/0x3b0 [ 40.880420][ T3709] getname_flags+0x81/0x3b0 [ 40.880461][ T3709] getname+0x17/0x20 [ 40.880493][ T3709] do_sys_openat2+0x67/0x120 [ 40.880513][ T3709] __x64_sys_openat+0xf3/0x120 [ 40.880562][ T3709] x64_sys_call+0x2b30/0x2dc0 [ 40.880595][ T3709] do_syscall_64+0xc9/0x1c0 [ 40.880632][ T3709] ? clear_bhb_loop+0x55/0xb0 [ 40.880660][ T3709] ? clear_bhb_loop+0x55/0xb0 [ 40.880733][ T3709] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 40.880766][ T3709] RIP: 0033:0x7f6b8da6d169 [ 40.880810][ T3709] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 40.880827][ T3709] RSP: 002b:00007f6b8c0d7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 40.880844][ T3709] RAX: ffffffffffffffda RBX: 00007f6b8dc85fa0 RCX: 00007f6b8da6d169 [ 40.880856][ T3709] RDX: 0000000000a0c401 RSI: 0000400000000040 RDI: ffffffffffffff9c [ 40.880869][ T3709] RBP: 00007f6b8c0d7090 R08: 0000000000000000 R09: 0000000000000000 [ 40.880883][ T3709] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 40.880896][ T3709] R13: 0000000000000000 R14: 00007f6b8dc85fa0 R15: 00007ffc9190b798 [ 40.880967][ T3709] [ 41.198560][ T3713] syz.2.82: attempt to access beyond end of device [ 41.198560][ T3713] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 41.251486][ T3718] loop0: detected capacity change from 0 to 8192 [ 41.414565][ T3723] loop3: detected capacity change from 0 to 8192 [ 41.544053][ T3720] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 41.562913][ T3720] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 41.751763][ T3729] loop1: detected capacity change from 0 to 8192 [ 42.020824][ T3753] loop2: detected capacity change from 0 to 512 [ 42.027452][ T3753] EXT4-fs: Ignoring removed nobh option [ 42.067466][ T3753] EXT4-fs (loop2): blocks per group (95) and clusters per group (32768) inconsistent [ 42.191088][ T3760] loop2: detected capacity change from 0 to 1024 [ 42.213784][ T3762] loop4: detected capacity change from 0 to 512 [ 42.229270][ T3760] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.241754][ T3762] EXT4-fs: Ignoring removed oldalloc option [ 42.253286][ T3762] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 42.292330][ T3762] EXT4-fs (loop4): 1 truncate cleaned up [ 42.298470][ T3762] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.323746][ T3760] FAULT_INJECTION: forcing a failure. [ 42.323746][ T3760] name failslab, interval 1, probability 0, space 0, times 0 [ 42.336551][ T3760] CPU: 1 UID: 0 PID: 3760 Comm: syz.2.98 Tainted: G W 6.14.0-rc5-syzkaller-00016-g48a5eed9ad58 #0 [ 42.336637][ T3760] Tainted: [W]=WARN [ 42.336643][ T3760] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 42.336657][ T3760] Call Trace: [ 42.336664][ T3760] [ 42.336672][ T3760] dump_stack_lvl+0xf2/0x150 [ 42.336705][ T3760] dump_stack+0x15/0x1a [ 42.336788][ T3760] should_fail_ex+0x24a/0x260 [ 42.336866][ T3760] should_failslab+0x8f/0xb0 [ 42.336900][ T3760] __kmalloc_noprof+0xab/0x3f0 [ 42.336974][ T3760] ? ext4_find_extent+0x172/0x7c0 [ 42.337002][ T3760] ext4_find_extent+0x172/0x7c0 [ 42.337054][ T3760] ? __es_remove_extent+0xd1d/0xd80 [ 42.337101][ T3760] ext4_ext_map_blocks+0x11f/0x35c0 [ 42.337130][ T3760] ? xas_find+0x24b/0x3f0 [ 42.337209][ T3760] ? find_get_entry+0x379/0x390 [ 42.337230][ T3760] ? rb_next+0x61/0x80 [ 42.337258][ T3760] ? _raw_write_unlock+0xd/0x30 [ 42.337363][ T3760] ? __rcu_read_unlock+0x4e/0x70 [ 42.337392][ T3760] ? ext4_es_lookup_extent+0x35b/0x520 [ 42.337426][ T3760] ext4_map_blocks+0x5aa/0xd20 [ 42.337461][ T3760] _ext4_get_block+0x104/0x370 [ 42.337530][ T3760] ext4_get_block_unwritten+0x2c/0xb0 [ 42.337598][ T3760] __block_write_begin_int+0x417/0xfa0 [ 42.337636][ T3760] ? __pfx_ext4_get_block_unwritten+0x10/0x10 [ 42.337668][ T3760] ? __pfx_ext4_get_block_unwritten+0x10/0x10 [ 42.337831][ T3760] block_page_mkwrite+0x1bd/0x3f0 [ 42.337931][ T3760] ext4_page_mkwrite+0x371/0xb70 [ 42.337953][ T3760] ? __pfx_ext4_get_block_unwritten+0x10/0x10 [ 42.337991][ T3760] handle_mm_fault+0x12f7/0x2ac0 [ 42.338014][ T3760] ? avc_has_perm+0xd4/0x160 [ 42.338043][ T3760] ? __rcu_read_lock+0x36/0x50 [ 42.338066][ T3760] ? __pte_offset_map_lock+0x1ce/0x280 [ 42.338132][ T3760] __get_user_pages+0xf6a/0x2350 [ 42.338189][ T3760] faultin_page_range+0x352/0x5d0 [ 42.338273][ T3760] do_madvise+0x42b/0x2ad0 [ 42.338294][ T3760] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 42.338329][ T3760] ? __fget_files+0x17c/0x1c0 [ 42.338367][ T3760] ? fput+0x1c4/0x200 [ 42.338422][ T3760] ? ksys_write+0x176/0x1b0 [ 42.338452][ T3760] __x64_sys_madvise+0x61/0x70 [ 42.338473][ T3760] x64_sys_call+0x23ab/0x2dc0 [ 42.338503][ T3760] do_syscall_64+0xc9/0x1c0 [ 42.338537][ T3760] ? clear_bhb_loop+0x55/0xb0 [ 42.338635][ T3760] ? clear_bhb_loop+0x55/0xb0 [ 42.338666][ T3760] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 42.338698][ T3760] RIP: 0033:0x7fa3356cd169 [ 42.338715][ T3760] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 42.338748][ T3760] RSP: 002b:00007fa333d31038 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 42.338769][ T3760] RAX: ffffffffffffffda RBX: 00007fa3358e5fa0 RCX: 00007fa3356cd169 [ 42.338783][ T3760] RDX: 0000000000000017 RSI: 0000000000600000 RDI: 0000400000000000 [ 42.338811][ T3760] RBP: 00007fa333d31090 R08: 0000000000000000 R09: 0000000000000000 [ 42.338825][ T3760] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 42.338838][ T3760] R13: 0000000000000000 R14: 00007fa3358e5fa0 R15: 00007ffee0bbd688 [ 42.338917][ T3760] [ 42.701213][ T3762] loop4: detected capacity change from 512 to 64 [ 42.720981][ T3762] EXT4-fs error (device loop4): mb_free_blocks:1948: group 0, inode 15: block 101:freeing already freed block (bit 100); block bitmap corrupt. [ 42.735692][ T3762] EXT4-fs (loop4): pa ffff8881064f5070: logic 0, phys. 65, len 64 [ 42.743561][ T3762] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5366: group 0, free 64, pa_free 63 [ 42.808481][ T3762] netlink: 4 bytes leftover after parsing attributes in process `syz.4.99'. [ 42.817813][ T3778] loop0: detected capacity change from 0 to 128 [ 42.829311][ T3762] netlink: 4 bytes leftover after parsing attributes in process `syz.4.99'. [ 42.841611][ T3762] netlink: 4 bytes leftover after parsing attributes in process `syz.4.99'. [ 42.850758][ T3762] netlink: 12 bytes leftover after parsing attributes in process `syz.4.99'. [ 42.863109][ T3778] syz.0.103: attempt to access beyond end of device [ 42.863109][ T3778] loop0: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 42.897866][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.912485][ T3303] EXT4-fs warning (device loop4): ext4_evict_inode:276: xattr delete (err -12) [ 42.924273][ T3789] FAULT_INJECTION: forcing a failure. [ 42.924273][ T3789] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 42.937413][ T3789] CPU: 0 UID: 0 PID: 3789 Comm: syz.1.108 Tainted: G W 6.14.0-rc5-syzkaller-00016-g48a5eed9ad58 #0 [ 42.937445][ T3789] Tainted: [W]=WARN [ 42.937453][ T3789] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 42.937467][ T3789] Call Trace: [ 42.937474][ T3789] [ 42.937482][ T3789] dump_stack_lvl+0xf2/0x150 [ 42.937548][ T3789] dump_stack+0x15/0x1a [ 42.937568][ T3789] should_fail_ex+0x24a/0x260 [ 42.937662][ T3789] should_fail+0xb/0x10 [ 42.937695][ T3789] should_fail_usercopy+0x1a/0x20 [ 42.937817][ T3789] _copy_to_user+0x20/0xa0 [ 42.937879][ T3789] simple_read_from_buffer+0xa0/0x110 [ 42.937944][ T3789] proc_fail_nth_read+0xf9/0x140 [ 42.937981][ T3789] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 42.938040][ T3789] vfs_read+0x19b/0x6f0 [ 42.938068][ T3789] ? __rcu_read_unlock+0x4e/0x70 [ 42.938090][ T3789] ? __fget_files+0x17c/0x1c0 [ 42.938122][ T3789] ksys_read+0xe8/0x1b0 [ 42.938224][ T3789] __x64_sys_read+0x42/0x50 [ 42.938257][ T3789] x64_sys_call+0x2874/0x2dc0 [ 42.938290][ T3789] do_syscall_64+0xc9/0x1c0 [ 42.938381][ T3789] ? clear_bhb_loop+0x55/0xb0 [ 42.938415][ T3789] ? clear_bhb_loop+0x55/0xb0 [ 42.938446][ T3789] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 42.938498][ T3789] RIP: 0033:0x7f286702bb7c [ 42.938512][ T3789] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 42.938532][ T3789] RSP: 002b:00007f2865691030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 42.938554][ T3789] RAX: ffffffffffffffda RBX: 00007f2867245fa0 RCX: 00007f286702bb7c [ 42.938568][ T3789] RDX: 000000000000000f RSI: 00007f28656910a0 RDI: 0000000000000003 [ 42.938582][ T3789] RBP: 00007f2865691090 R08: 0000000000000000 R09: 0000000000000000 [ 42.938596][ T3789] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 42.938610][ T3789] R13: 0000000000000001 R14: 00007f2867245fa0 R15: 00007ffde687f2e8 [ 42.938693][ T3789] [ 43.140003][ T3786] loop3: detected capacity change from 0 to 128 [ 43.173096][ T3792] loop0: detected capacity change from 0 to 1024 [ 43.190380][ T3792] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.205519][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.221654][ T3796] 9pnet_fd: Insufficient options for proto=fd [ 43.258119][ T3786] syz.3.106: attempt to access beyond end of device [ 43.258119][ T3786] loop3: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 43.295132][ T3794] loop2: detected capacity change from 0 to 1024 [ 43.303612][ T3794] EXT4-fs: Ignoring removed orlov option [ 43.309298][ T3794] EXT4-fs: Ignoring removed orlov option [ 43.331855][ T29] kauditd_printk_skb: 665 callbacks suppressed [ 43.331923][ T29] audit: type=1326 audit(1741149480.413:1193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3785 comm="syz.3.106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f883acbd169 code=0x7ffc0000 [ 43.370066][ T29] audit: type=1326 audit(1741149480.443:1194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3785 comm="syz.3.106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f883acbd169 code=0x7ffc0000 [ 43.406909][ T3794] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.437086][ T29] audit: type=1400 audit(1741149480.513:1195): avc: denied { read } for pid=3038 comm="dhcpcd" name="n29" dev="tmpfs" ino=1360 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 43.459048][ T29] audit: type=1400 audit(1741149480.513:1196): avc: denied { open } for pid=3038 comm="dhcpcd" path="/run/udev/data/n29" dev="tmpfs" ino=1360 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 43.482157][ T29] audit: type=1400 audit(1741149480.513:1197): avc: denied { getattr } for pid=3038 comm="dhcpcd" path="/run/udev/data/n29" dev="tmpfs" ino=1360 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 43.545787][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.569838][ T3807] 9pnet_fd: Insufficient options for proto=fd [ 43.634201][ T29] audit: type=1326 audit(1741149480.523:1198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3793 comm="syz.2.107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa3356cbad0 code=0x7ffc0000 [ 43.638369][ T3810] pimreg: entered allmulticast mode [ 43.657694][ T29] audit: type=1326 audit(1741149480.523:1199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3793 comm="syz.2.107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7fa3356cbeb7 code=0x7ffc0000 [ 43.686374][ T29] audit: type=1326 audit(1741149480.523:1200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3793 comm="syz.2.107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa3356cbad0 code=0x7ffc0000 [ 43.709844][ T29] audit: type=1326 audit(1741149480.523:1201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3793 comm="syz.2.107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3356cd169 code=0x7ffc0000 [ 43.733201][ T29] audit: type=1326 audit(1741149480.523:1202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3793 comm="syz.2.107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3356cd169 code=0x7ffc0000 [ 43.882291][ T3829] pimreg: left allmulticast mode [ 44.361978][ T3889] loop4: detected capacity change from 0 to 128 [ 44.646148][ T2928] kworker/u8:7: attempt to access beyond end of device [ 44.646148][ T2928] loop4: rw=1, sector=145, nr_sectors = 896 limit=128 [ 44.656973][ T3939] loop3: detected capacity change from 0 to 512 [ 44.684576][ T3939] EXT4-fs: Ignoring removed oldalloc option [ 44.704121][ T3939] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 44.726011][ T3944] FAULT_INJECTION: forcing a failure. [ 44.726011][ T3944] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 44.739298][ T3944] CPU: 0 UID: 0 PID: 3944 Comm: syz.2.122 Tainted: G W 6.14.0-rc5-syzkaller-00016-g48a5eed9ad58 #0 [ 44.739327][ T3944] Tainted: [W]=WARN [ 44.739333][ T3944] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 44.739345][ T3944] Call Trace: [ 44.739350][ T3944] [ 44.739380][ T3944] dump_stack_lvl+0xf2/0x150 [ 44.739408][ T3944] dump_stack+0x15/0x1a [ 44.739428][ T3944] should_fail_ex+0x24a/0x260 [ 44.739456][ T3944] should_fail+0xb/0x10 [ 44.739488][ T3944] should_fail_usercopy+0x1a/0x20 [ 44.739563][ T3944] _copy_from_user+0x1c/0xa0 [ 44.739586][ T3944] copy_msghdr_from_user+0x54/0x2a0 [ 44.739628][ T3944] ? __fget_files+0x17c/0x1c0 [ 44.739668][ T3944] __sys_sendmsg+0x13e/0x230 [ 44.739708][ T3944] __x64_sys_sendmsg+0x46/0x50 [ 44.739802][ T3944] x64_sys_call+0x2734/0x2dc0 [ 44.739873][ T3944] do_syscall_64+0xc9/0x1c0 [ 44.739957][ T3944] ? clear_bhb_loop+0x55/0xb0 [ 44.740040][ T3944] ? clear_bhb_loop+0x55/0xb0 [ 44.740067][ T3944] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 44.740139][ T3944] RIP: 0033:0x7fa3356cd169 [ 44.740156][ T3944] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 44.740176][ T3944] RSP: 002b:00007fa333d31038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 44.740233][ T3944] RAX: ffffffffffffffda RBX: 00007fa3358e5fa0 RCX: 00007fa3356cd169 [ 44.740248][ T3944] RDX: 0000000000008840 RSI: 0000400000000140 RDI: 0000000000000004 [ 44.740262][ T3944] RBP: 00007fa333d31090 R08: 0000000000000000 R09: 0000000000000000 [ 44.740276][ T3944] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 44.740312][ T3944] R13: 0000000000000000 R14: 00007fa3358e5fa0 R15: 00007ffee0bbd688 [ 44.740374][ T3944] [ 44.934889][ T3939] EXT4-fs (loop3): 1 truncate cleaned up [ 44.942105][ T3939] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.009771][ T3939] loop3: detected capacity change from 512 to 64 [ 45.018363][ T3939] EXT4-fs error (device loop3): mb_free_blocks:1948: group 0, inode 15: block 101:freeing already freed block (bit 100); block bitmap corrupt. [ 45.032986][ T3939] EXT4-fs (loop3): pa ffff8881064f50e0: logic 0, phys. 65, len 64 [ 45.040836][ T3939] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5366: group 0, free 64, pa_free 63 [ 45.095601][ T3950] loop4: detected capacity change from 0 to 8192 [ 45.191756][ T3939] netlink: 4 bytes leftover after parsing attributes in process `syz.3.120'. [ 45.201624][ T3939] netlink: 4 bytes leftover after parsing attributes in process `syz.3.120'. [ 45.234923][ T3955] loop1: detected capacity change from 0 to 1024 [ 45.284416][ T3955] EXT4-fs: Ignoring removed orlov option [ 45.290135][ T3955] EXT4-fs: Ignoring removed orlov option [ 45.306500][ T3297] EXT4-fs warning (device loop3): ext4_evict_inode:276: xattr delete (err -12) [ 45.331786][ T3955] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.378144][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.395876][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.468266][ T3968] 9pnet_fd: Insufficient options for proto=fd [ 45.492487][ T3964] loop2: detected capacity change from 0 to 8192 [ 45.548950][ T3973] bond0: entered promiscuous mode [ 45.554145][ T3973] bond_slave_0: entered promiscuous mode [ 45.560062][ T3973] bond_slave_1: entered promiscuous mode [ 45.568833][ T3973] bond0: left promiscuous mode [ 45.573690][ T3973] bond_slave_0: left promiscuous mode [ 45.579152][ T3973] bond_slave_1: left promiscuous mode [ 45.731677][ T3978] __nla_validate_parse: 2 callbacks suppressed [ 45.731695][ T3978] netlink: 56 bytes leftover after parsing attributes in process `syz.1.132'. [ 45.958569][ T3980] loop1: detected capacity change from 0 to 8192 [ 45.988065][ T3982] loop4: detected capacity change from 0 to 8192 [ 46.348704][ T3989] loop3: detected capacity change from 0 to 8192 [ 46.589864][ T3994] pim6reg1: entered promiscuous mode [ 46.595221][ T3994] pim6reg1: entered allmulticast mode [ 46.675815][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.747749][ T3998] loop0: detected capacity change from 0 to 1024 [ 46.792001][ T3998] EXT4-fs: Ignoring removed orlov option [ 46.797716][ T3998] EXT4-fs: Ignoring removed orlov option [ 46.826263][ T4002] loop1: detected capacity change from 0 to 512 [ 46.834369][ T4000] support for cryptoloop has been removed. Use dm-crypt instead. [ 46.839409][ T4002] EXT4-fs: Ignoring removed oldalloc option [ 46.858559][ T4002] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 46.875069][ T3998] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.912078][ T4002] EXT4-fs (loop1): 1 truncate cleaned up [ 46.918229][ T4002] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.936298][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.969326][ T4008] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 46.975874][ T4008] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 46.983615][ T4008] vhci_hcd vhci_hcd.0: Device attached [ 46.995439][ T4007] loop4: detected capacity change from 0 to 1024 [ 47.010218][ T4002] loop1: detected capacity change from 512 to 64 [ 47.023222][ T4007] EXT4-fs: Ignoring removed orlov option [ 47.028884][ T4002] EXT4-fs error (device loop1): mb_free_blocks:1948: group 0, inode 15: block 101:freeing already freed block (bit 100); block bitmap corrupt. [ 47.028934][ T4007] EXT4-fs: Ignoring removed orlov option [ 47.043538][ T4002] EXT4-fs (loop1): pa ffff8881064f50e0: logic 0, phys. 65, len 64 [ 47.057113][ T4002] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5366: group 0, free 64, pa_free 63 [ 47.101223][ T4007] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.113585][ T4002] netlink: 4 bytes leftover after parsing attributes in process `syz.1.139'. [ 47.123712][ T4002] netlink: 4 bytes leftover after parsing attributes in process `syz.1.139'. [ 47.136314][ T4002] netlink: 4 bytes leftover after parsing attributes in process `syz.1.139'. [ 47.158450][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.168344][ T4002] netlink: 12 bytes leftover after parsing attributes in process `syz.1.139'. [ 47.198549][ T3298] EXT4-fs warning (device loop1): ext4_evict_inode:276: xattr delete (err -12) [ 47.219708][ T3374] usb 5-1: new low-speed USB device number 2 using vhci_hcd [ 47.237131][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.280239][ T4024] loop3: detected capacity change from 0 to 1024 [ 47.287257][ T4024] EXT4-fs: Ignoring removed orlov option [ 47.293090][ T4024] EXT4-fs: Ignoring removed orlov option [ 47.311172][ T4024] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.324288][ T4020] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 47.339689][ T4020] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 47.352083][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.415478][ T4026] FAULT_INJECTION: forcing a failure. [ 47.415478][ T4026] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 47.428698][ T4026] CPU: 1 UID: 0 PID: 4026 Comm: syz.1.146 Tainted: G W 6.14.0-rc5-syzkaller-00016-g48a5eed9ad58 #0 [ 47.428727][ T4026] Tainted: [W]=WARN [ 47.428734][ T4026] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 47.428748][ T4026] Call Trace: [ 47.428756][ T4026] [ 47.428764][ T4026] dump_stack_lvl+0xf2/0x150 [ 47.428836][ T4026] dump_stack+0x15/0x1a [ 47.428858][ T4026] should_fail_ex+0x24a/0x260 [ 47.428888][ T4026] should_fail+0xb/0x10 [ 47.428932][ T4026] should_fail_usercopy+0x1a/0x20 [ 47.428968][ T4026] _copy_from_user+0x1c/0xa0 [ 47.428988][ T4026] kstrtouint_from_user+0x76/0xe0 [ 47.429058][ T4026] ? 0xffffffff81000000 [ 47.429129][ T4026] ? selinux_file_permission+0x22a/0x360 [ 47.429162][ T4026] proc_fail_nth_write+0x4f/0x150 [ 47.429196][ T4026] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 47.429231][ T4026] vfs_write+0x27d/0x920 [ 47.429273][ T4026] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 47.429302][ T4026] ? __fget_files+0x17c/0x1c0 [ 47.429344][ T4026] ksys_write+0xe8/0x1b0 [ 47.429451][ T4026] __x64_sys_write+0x42/0x50 [ 47.429476][ T4026] x64_sys_call+0x287e/0x2dc0 [ 47.429505][ T4026] do_syscall_64+0xc9/0x1c0 [ 47.429541][ T4026] ? clear_bhb_loop+0x55/0xb0 [ 47.429622][ T4026] ? clear_bhb_loop+0x55/0xb0 [ 47.429650][ T4026] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 47.429677][ T4026] RIP: 0033:0x7f286702bc1f [ 47.429693][ T4026] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 47.429714][ T4026] RSP: 002b:00007f2865691030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 47.429735][ T4026] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f286702bc1f [ 47.429756][ T4026] RDX: 0000000000000001 RSI: 00007f28656910a0 RDI: 0000000000000003 [ 47.429768][ T4026] RBP: 00007f2865691090 R08: 0000000000000000 R09: 0000000000000000 [ 47.429858][ T4026] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 47.429871][ T4026] R13: 0000000000000000 R14: 00007f2867245fa0 R15: 00007ffde687f2e8 [ 47.429891][ T4026] [ 47.639662][ T4041] loop3: detected capacity change from 0 to 8192 [ 47.652164][ T4045] loop4: detected capacity change from 0 to 512 [ 47.687265][ T4045] EXT4-fs: Ignoring removed oldalloc option [ 47.707844][ T4045] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842c01d, mo2=0002] [ 47.719719][ T4045] System zones: 1-12 [ 47.726852][ T4045] EXT4-fs error (device loop4): ext4_xattr_inode_iget:436: comm syz.4.145: Parent and EA inode have the same ino 15 [ 47.757586][ T4010] vhci_hcd: connection reset by peer [ 47.808925][ T4045] EXT4-fs error (device loop4): ext4_xattr_inode_iget:436: comm syz.4.145: Parent and EA inode have the same ino 15 [ 47.839422][ T4045] EXT4-fs (loop4): 1 orphan inode deleted [ 47.854663][ T4045] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.860768][ T3925] vhci_hcd: stop threads [ 47.870977][ T3925] vhci_hcd: release socket [ 47.875406][ T3925] vhci_hcd: disconnect device [ 48.011536][ T4069] bond0: entered promiscuous mode [ 48.016628][ T4069] bond_slave_0: entered promiscuous mode [ 48.022430][ T4069] bond_slave_1: entered promiscuous mode [ 48.079889][ T4069] bond0: left promiscuous mode [ 48.084726][ T4069] bond_slave_0: left promiscuous mode [ 48.090248][ T4069] bond_slave_1: left promiscuous mode [ 48.279450][ T4079] loop2: detected capacity change from 0 to 512 [ 48.300264][ T4074] loop0: detected capacity change from 0 to 8192 [ 48.301700][ T4079] EXT4-fs: Ignoring removed oldalloc option [ 48.337695][ T4079] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 48.350285][ T29] kauditd_printk_skb: 558 callbacks suppressed [ 48.350345][ T29] audit: type=1326 audit(1741149485.423:1761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4073 comm="syz.0.155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b8da6d169 code=0x7ffc0000 [ 48.372708][ T4079] EXT4-fs (loop2): 1 truncate cleaned up [ 48.379842][ T29] audit: type=1326 audit(1741149485.433:1762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4073 comm="syz.0.155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b8da6d169 code=0x7ffc0000 [ 48.385787][ T4079] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.408729][ T29] audit: type=1326 audit(1741149485.433:1763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4073 comm="syz.0.155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=77 compat=0 ip=0x7f6b8da6d169 code=0x7ffc0000 [ 48.445237][ T29] audit: type=1326 audit(1741149485.493:1764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4086 comm="syz.3.157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f883acbd169 code=0x7ffc0000 [ 48.468625][ T29] audit: type=1326 audit(1741149485.493:1765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4086 comm="syz.3.157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f883acbd169 code=0x7ffc0000 [ 48.492300][ T29] audit: type=1326 audit(1741149485.503:1766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4086 comm="syz.3.157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f883acbd169 code=0x7ffc0000 [ 48.515686][ T29] audit: type=1326 audit(1741149485.503:1767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4086 comm="syz.3.157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f883acbd169 code=0x7ffc0000 [ 48.539506][ T29] audit: type=1326 audit(1741149485.503:1768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4086 comm="syz.3.157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f883acbd169 code=0x7ffc0000 [ 48.562938][ T29] audit: type=1326 audit(1741149485.503:1769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4086 comm="syz.3.157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f883acbd169 code=0x7ffc0000 [ 48.586338][ T29] audit: type=1326 audit(1741149485.503:1770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4086 comm="syz.3.157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f883acbd169 code=0x7ffc0000 [ 48.664680][ T4102] loop1: detected capacity change from 0 to 1024 [ 48.671503][ T4102] EXT4-fs: Ignoring removed orlov option [ 48.677225][ T4102] EXT4-fs: Ignoring removed orlov option [ 48.689698][ T4079] loop2: detected capacity change from 512 to 64 [ 48.714580][ T4079] netlink: 4 bytes leftover after parsing attributes in process `syz.2.156'. [ 48.725943][ T4102] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.745166][ T4079] team0 (unregistering): Port device team_slave_0 removed [ 48.759082][ T4087] loop3: detected capacity change from 0 to 1024 [ 48.769143][ T4093] netlink: 4 bytes leftover after parsing attributes in process `syz.2.156'. [ 48.778305][ T4093] netlink: 4 bytes leftover after parsing attributes in process `syz.2.156'. [ 48.793188][ T4087] EXT4-fs: Ignoring removed orlov option [ 48.798883][ T4087] EXT4-fs: Ignoring removed orlov option [ 48.820009][ T4079] team0 (unregistering): Port device team_slave_1 removed [ 48.830076][ T4093] netlink: 12 bytes leftover after parsing attributes in process `syz.2.156'. [ 48.830078][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.859820][ T4087] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.921864][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.955896][ T3308] EXT4-fs error (device loop2): mb_free_blocks:1948: group 0, inode 16: block 35:freeing already freed block (bit 34); block bitmap corrupt. [ 49.000051][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.058024][ T4138] loop2: detected capacity change from 0 to 1024 [ 49.071725][ T4138] EXT4-fs: Ignoring removed oldalloc option [ 49.082290][ T4141] FAULT_INJECTION: forcing a failure. [ 49.082290][ T4141] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 49.095398][ T4141] CPU: 1 UID: 0 PID: 4141 Comm: syz.3.166 Tainted: G W 6.14.0-rc5-syzkaller-00016-g48a5eed9ad58 #0 [ 49.095433][ T4141] Tainted: [W]=WARN [ 49.095442][ T4141] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 49.095455][ T4141] Call Trace: [ 49.095487][ T4141] [ 49.095495][ T4141] dump_stack_lvl+0xf2/0x150 [ 49.095525][ T4141] dump_stack+0x15/0x1a [ 49.095554][ T4141] should_fail_ex+0x24a/0x260 [ 49.095586][ T4141] should_fail+0xb/0x10 [ 49.095730][ T4141] should_fail_usercopy+0x1a/0x20 [ 49.095764][ T4141] _copy_to_user+0x20/0xa0 [ 49.095795][ T4141] __se_sys_getcwd+0x225/0x2d0 [ 49.095818][ T4141] __x64_sys_getcwd+0x31/0x40 [ 49.095836][ T4141] x64_sys_call+0x1f29/0x2dc0 [ 49.095961][ T4141] do_syscall_64+0xc9/0x1c0 [ 49.095993][ T4141] ? clear_bhb_loop+0x55/0xb0 [ 49.096021][ T4141] ? clear_bhb_loop+0x55/0xb0 [ 49.096049][ T4141] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 49.096107][ T4141] RIP: 0033:0x7f883acbd169 [ 49.096123][ T4141] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 49.096142][ T4141] RSP: 002b:00007f8839327038 EFLAGS: 00000246 ORIG_RAX: 000000000000004f [ 49.096162][ T4141] RAX: ffffffffffffffda RBX: 00007f883aed5fa0 RCX: 00007f883acbd169 [ 49.096175][ T4141] RDX: 0000000000000000 RSI: 00000000000000ce RDI: 0000400000002080 [ 49.096188][ T4141] RBP: 00007f8839327090 R08: 0000000000000000 R09: 0000000000000000 [ 49.096201][ T4141] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 49.096219][ T4141] R13: 0000000000000001 R14: 00007f883aed5fa0 R15: 00007ffd885bc6e8 [ 49.096237][ T4141] [ 49.098404][ T4138] EXT4-fs (loop2): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 49.188732][ T4144] Cannot find map_set index 0 as target [ 49.249135][ T4151] loop3: detected capacity change from 0 to 2048 [ 49.272506][ T4138] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.344848][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.385996][ T4163] netlink: 8 bytes leftover after parsing attributes in process `syz.2.169'. [ 49.525351][ T4176] loop3: detected capacity change from 0 to 1024 [ 49.544856][ T4176] EXT4-fs: Ignoring removed orlov option [ 49.550610][ T4176] EXT4-fs: Ignoring removed orlov option [ 49.611448][ T4176] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.715547][ T4205] loop2: detected capacity change from 0 to 512 [ 49.753143][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.782500][ T4205] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2240: inode #15: comm syz.2.178: corrupted in-inode xattr: invalid ea_ino [ 49.805950][ T4205] EXT4-fs error (device loop2): ext4_orphan_get:1394: comm syz.2.178: couldn't read orphan inode 15 (err -117) [ 49.817969][ T4213] loop1: detected capacity change from 0 to 1024 [ 49.818774][ T4205] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.828257][ T4213] EXT4-fs: Ignoring removed oldalloc option [ 49.850970][ T4213] EXT4-fs (loop1): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 49.887170][ T4220] loop0: detected capacity change from 0 to 512 [ 49.897387][ T4220] EXT4-fs: Ignoring removed i_version option [ 49.903614][ T4220] EXT4-fs: Ignoring removed mblk_io_submit option [ 49.912282][ T4220] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 49.916875][ T4213] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.922590][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.967432][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.981855][ T4220] EXT4-fs (loop0): 1 truncate cleaned up [ 50.014448][ T4220] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.029044][ T4239] loop1: detected capacity change from 0 to 128 [ 50.048170][ T4245] SET target dimension over the limit! [ 50.092017][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.093500][ T4239] syz.1.184: attempt to access beyond end of device [ 50.093500][ T4239] loop1: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 50.174642][ T4262] loop1: detected capacity change from 0 to 1024 [ 50.220143][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.240490][ T4262] EXT4-fs: Mount option(s) incompatible with ext3 [ 50.244582][ T4273] loop0: detected capacity change from 0 to 1024 [ 50.254070][ T4273] EXT4-fs: Ignoring removed orlov option [ 50.259793][ T4273] EXT4-fs: Ignoring removed orlov option [ 50.279807][ T4273] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.319862][ T4262] loop1: detected capacity change from 0 to 1024 [ 50.350099][ T4262] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.389548][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.432472][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.438271][ T4294] loop4: detected capacity change from 0 to 1024 [ 50.459853][ T4294] EXT4-fs: Ignoring removed oldalloc option [ 50.466730][ T4296] loop0: detected capacity change from 0 to 128 [ 50.480401][ T4294] EXT4-fs (loop4): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 50.511453][ T4291] loop3: detected capacity change from 0 to 1024 [ 50.522170][ T4291] EXT4-fs: Ignoring removed orlov option [ 50.527873][ T4291] EXT4-fs: Ignoring removed orlov option [ 50.534332][ T4294] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.546806][ T4296] syz.0.192: attempt to access beyond end of device [ 50.546806][ T4296] loop0: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 50.573950][ T4291] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.591858][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.617947][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.650321][ T4306] loop0: detected capacity change from 0 to 128 [ 50.686695][ T4306] syz.0.196: attempt to access beyond end of device [ 50.686695][ T4306] loop0: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 50.815247][ T4334] loop1: detected capacity change from 0 to 512 [ 50.822087][ T4334] EXT4-fs: Ignoring removed oldalloc option [ 50.838608][ T4334] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842c01d, mo2=0002] [ 50.863067][ T4334] System zones: 1-12 [ 50.868189][ T4334] EXT4-fs error (device loop1): ext4_xattr_inode_iget:436: comm syz.1.193: Parent and EA inode have the same ino 15 [ 50.883256][ T4333] loop3: detected capacity change from 0 to 8192 [ 50.895768][ T4334] EXT4-fs error (device loop1): ext4_xattr_inode_iget:436: comm syz.1.193: Parent and EA inode have the same ino 15 [ 50.909172][ T4334] EXT4-fs (loop1): 1 orphan inode deleted [ 50.915552][ T4333] netlink: 'syz.3.204': attribute type 1 has an invalid length. [ 50.936738][ T4334] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.945490][ T4333] 8021q: adding VLAN 0 to HW filter on device bond1 [ 50.964416][ T4333] FAULT_INJECTION: forcing a failure. [ 50.964416][ T4333] name failslab, interval 1, probability 0, space 0, times 0 [ 50.971584][ T4348] loop0: detected capacity change from 0 to 1024 [ 50.977066][ T4333] CPU: 1 UID: 0 PID: 4333 Comm: syz.3.204 Tainted: G W 6.14.0-rc5-syzkaller-00016-g48a5eed9ad58 #0 [ 50.977111][ T4333] Tainted: [W]=WARN [ 50.977120][ T4333] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 50.977135][ T4333] Call Trace: [ 50.977209][ T4333] [ 50.977219][ T4333] dump_stack_lvl+0xf2/0x150 [ 50.977246][ T4333] dump_stack+0x15/0x1a [ 50.977266][ T4333] should_fail_ex+0x24a/0x260 [ 50.977298][ T4333] ? __pfx_ipgre_tap_setup+0x10/0x10 [ 50.977354][ T4333] should_failslab+0x8f/0xb0 [ 50.977391][ T4333] __kmalloc_node_noprof+0xad/0x410 [ 50.977419][ T4333] ? __kvmalloc_node_noprof+0x72/0x170 [ 50.977455][ T4333] ? __pfx_ipgre_tap_setup+0x10/0x10 [ 50.977539][ T4333] __kvmalloc_node_noprof+0x72/0x170 [ 50.977575][ T4333] alloc_netdev_mqs+0xa5/0xab0 [ 50.977607][ T4333] rtnl_create_link+0x232/0x720 [ 50.977634][ T4333] rtnl_newlink_create+0x133/0x5d0 [ 50.977705][ T4333] rtnl_newlink+0xe9f/0x1250 [ 50.977740][ T4333] ? bpf_send_signal_common+0x28e/0x320 [ 50.977778][ T4333] ? __rcu_read_unlock+0x34/0x70 [ 50.977806][ T4333] ? bpf_trace_run3+0x12b/0x1d0 [ 50.977834][ T4333] ? __memcg_slab_free_hook+0xc9/0x1e0 [ 50.977923][ T4333] ? __rcu_read_unlock+0x4e/0x70 [ 50.977950][ T4333] ? avc_has_perm_noaudit+0x1cc/0x210 [ 50.977996][ T4333] ? selinux_capable+0x1f2/0x260 [ 50.978068][ T4333] ? security_capable+0x81/0x90 [ 50.978200][ T4333] ? ns_capable+0x7d/0xb0 [ 50.978292][ T4333] ? __pfx_rtnl_newlink+0x10/0x10 [ 50.978324][ T4333] rtnetlink_rcv_msg+0x651/0x710 [ 50.978387][ T4333] ? ref_tracker_free+0x3a5/0x410 [ 50.978426][ T4333] netlink_rcv_skb+0x12c/0x230 [ 50.978463][ T4333] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 50.978504][ T4333] rtnetlink_rcv+0x1c/0x30 [ 50.978582][ T4333] netlink_unicast+0x599/0x670 [ 50.978659][ T4333] netlink_sendmsg+0x5cc/0x6e0 [ 50.978728][ T4333] ? __pfx_netlink_sendmsg+0x10/0x10 [ 50.978790][ T4333] __sock_sendmsg+0x140/0x180 [ 50.978828][ T4333] ____sys_sendmsg+0x326/0x4b0 [ 50.978932][ T4333] __sys_sendmsg+0x19d/0x230 [ 50.978979][ T4333] __x64_sys_sendmsg+0x46/0x50 [ 50.979010][ T4333] x64_sys_call+0x2734/0x2dc0 [ 50.979041][ T4333] do_syscall_64+0xc9/0x1c0 [ 50.979079][ T4333] ? clear_bhb_loop+0x55/0xb0 [ 50.979234][ T4333] ? clear_bhb_loop+0x55/0xb0 [ 50.979291][ T4333] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.979325][ T4333] RIP: 0033:0x7f883acbd169 [ 50.979345][ T4333] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 50.979366][ T4333] RSP: 002b:00007f8839327038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 50.979390][ T4333] RAX: ffffffffffffffda RBX: 00007f883aed5fa0 RCX: 00007f883acbd169 [ 50.979435][ T4333] RDX: 0000000000000000 RSI: 00004000000000c0 RDI: 0000000000000007 [ 50.979450][ T4333] RBP: 00007f8839327090 R08: 0000000000000000 R09: 0000000000000000 [ 50.979465][ T4333] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 50.979489][ T4333] R13: 0000000000000000 R14: 00007f883aed5fa0 R15: 00007ffd885bc6e8 [ 50.979513][ T4333] [ 51.289435][ T4348] EXT4-fs: Ignoring removed oldalloc option [ 51.297014][ T4348] EXT4-fs (loop0): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 51.343686][ T4348] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.374042][ T4393] program syz.3.207 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 51.411727][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.469982][ T4409] __nla_validate_parse: 1 callbacks suppressed [ 51.470000][ T4409] netlink: 8 bytes leftover after parsing attributes in process `+}[@'. [ 51.526965][ T4405] loop3: detected capacity change from 0 to 8192 [ 51.649463][ T4440] loop4: detected capacity change from 0 to 128 [ 51.704682][ T4426] loop0: detected capacity change from 0 to 8192 [ 51.729332][ T4440] syz.4.211: attempt to access beyond end of device [ 51.729332][ T4440] loop4: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 51.881065][ T4472] netlink: 8 bytes leftover after parsing attributes in process `+}[@'. [ 52.124372][ T4480] loop4: detected capacity change from 0 to 8192 [ 52.271660][ T3374] usb 5-1: enqueue for inactive port 0 [ 52.277209][ T3374] usb 5-1: enqueue for inactive port 0 [ 52.370110][ T3374] vhci_hcd: vhci_device speed not set [ 52.419451][ T4515] loop2: detected capacity change from 0 to 1024 [ 52.427198][ T4515] EXT4-fs: Ignoring removed oldalloc option [ 52.435290][ T4515] EXT4-fs (loop2): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 52.455571][ T4515] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.491696][ T4518] loop3: detected capacity change from 0 to 512 [ 52.505480][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.514972][ T4518] EXT4-fs: Ignoring removed i_version option [ 52.521136][ T4518] EXT4-fs: Ignoring removed mblk_io_submit option [ 52.533830][ T4518] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 52.556456][ T4522] loop0: detected capacity change from 0 to 1024 [ 52.577340][ T4522] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.698602][ T4518] EXT4-fs (loop3): 1 truncate cleaned up [ 52.704747][ T4518] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.098043][ T4562] loop4: detected capacity change from 0 to 2048 [ 53.130443][ T4557] loop3: detected capacity change from 0 to 8192 [ 53.281872][ T4562] netlink: 12 bytes leftover after parsing attributes in process `+}[@'. [ 53.431615][ T4562] netlink: 36 bytes leftover after parsing attributes in process `+}[@'. [ 53.605669][ T4582] xt_CT: You must specify a L4 protocol and not use inversions on it [ 53.616898][ T29] kauditd_printk_skb: 533 callbacks suppressed [ 53.616914][ T29] audit: type=1326 audit(1741149490.693:2304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4583 comm="syz.1.232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f286702d169 code=0x7ffc0000 [ 53.655937][ T4585] 9pnet_fd: Insufficient options for proto=fd [ 53.671668][ T29] audit: type=1326 audit(1741149490.693:2305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4583 comm="syz.1.232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f286702d169 code=0x7ffc0000 [ 53.695106][ T29] audit: type=1326 audit(1741149490.703:2306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4583 comm="syz.1.232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f286702d169 code=0x7ffc0000 [ 53.718461][ T29] audit: type=1326 audit(1741149490.703:2307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4583 comm="syz.1.232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f286702d169 code=0x7ffc0000 [ 53.741846][ T29] audit: type=1326 audit(1741149490.703:2308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4583 comm="syz.1.232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f286702d169 code=0x7ffc0000 [ 53.765255][ T29] audit: type=1326 audit(1741149490.703:2309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4583 comm="syz.1.232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f286702d169 code=0x7ffc0000 [ 53.788707][ T29] audit: type=1326 audit(1741149490.703:2310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4583 comm="syz.1.232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f286702d169 code=0x7ffc0000 [ 53.812191][ T29] audit: type=1326 audit(1741149490.703:2311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4583 comm="syz.1.232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f286702d169 code=0x7ffc0000 [ 53.835536][ T29] audit: type=1326 audit(1741149490.703:2312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4583 comm="syz.1.232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f286702d169 code=0x7ffc0000 [ 53.842466][ T4584] loop1: detected capacity change from 0 to 1024 [ 53.858925][ T29] audit: type=1326 audit(1741149490.703:2313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4583 comm="syz.1.232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f286702d169 code=0x7ffc0000 [ 53.890491][ T4584] EXT4-fs: Ignoring removed orlov option [ 53.896177][ T4584] EXT4-fs: Ignoring removed orlov option [ 53.949856][ T4587] FAULT_INJECTION: forcing a failure. [ 53.949856][ T4587] name failslab, interval 1, probability 0, space 0, times 0 [ 53.962609][ T4587] CPU: 0 UID: 0 PID: 4587 Comm: syz.2.233 Tainted: G W 6.14.0-rc5-syzkaller-00016-g48a5eed9ad58 #0 [ 53.962644][ T4587] Tainted: [W]=WARN [ 53.962651][ T4587] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 53.962666][ T4587] Call Trace: [ 53.962672][ T4587] [ 53.962678][ T4587] dump_stack_lvl+0xf2/0x150 [ 53.962705][ T4587] dump_stack+0x15/0x1a [ 53.962762][ T4587] should_fail_ex+0x24a/0x260 [ 53.962791][ T4587] should_failslab+0x8f/0xb0 [ 53.962822][ T4587] kmem_cache_alloc_node_noprof+0x59/0x320 [ 53.962874][ T4587] ? __alloc_skb+0x10b/0x310 [ 53.962900][ T4587] __alloc_skb+0x10b/0x310 [ 53.962922][ T4587] netlink_alloc_large_skb+0xad/0xe0 [ 53.962957][ T4587] netlink_sendmsg+0x3b4/0x6e0 [ 53.963048][ T4587] ? __pfx_netlink_sendmsg+0x10/0x10 [ 53.963086][ T4587] __sock_sendmsg+0x140/0x180 [ 53.963123][ T4587] ____sys_sendmsg+0x326/0x4b0 [ 53.963235][ T4587] __sys_sendmsg+0x19d/0x230 [ 53.963280][ T4587] __x64_sys_sendmsg+0x46/0x50 [ 53.963307][ T4587] x64_sys_call+0x2734/0x2dc0 [ 53.963337][ T4587] do_syscall_64+0xc9/0x1c0 [ 53.963383][ T4587] ? clear_bhb_loop+0x55/0xb0 [ 53.963413][ T4587] ? clear_bhb_loop+0x55/0xb0 [ 53.963445][ T4587] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.963478][ T4587] RIP: 0033:0x7fa3356cd169 [ 53.963495][ T4587] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 53.963572][ T4587] RSP: 002b:00007fa333d31038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 53.963593][ T4587] RAX: ffffffffffffffda RBX: 00007fa3358e5fa0 RCX: 00007fa3356cd169 [ 53.963607][ T4587] RDX: 0000000000000000 RSI: 0000400000000040 RDI: 0000000000000007 [ 53.963618][ T4587] RBP: 00007fa333d31090 R08: 0000000000000000 R09: 0000000000000000 [ 53.963631][ T4587] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 53.963668][ T4587] R13: 0000000000000000 R14: 00007fa3358e5fa0 R15: 00007ffee0bbd688 [ 53.963685][ T4587] [ 54.264318][ T4599] pim6reg1: entered promiscuous mode [ 54.269718][ T4599] pim6reg1: entered allmulticast mode [ 54.291288][ T4597] loop2: detected capacity change from 0 to 8192 [ 54.306909][ T4601] loop1: detected capacity change from 0 to 128 [ 54.368657][ T4601] syz.1.238: attempt to access beyond end of device [ 54.368657][ T4601] loop1: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 54.557694][ T4614] bond0: entered promiscuous mode [ 54.562802][ T4614] bond_slave_0: entered promiscuous mode [ 54.568652][ T4614] bond_slave_1: entered promiscuous mode [ 54.587413][ T4608] loop4: detected capacity change from 0 to 8192 [ 54.596539][ T4614] bond0: left promiscuous mode [ 54.601454][ T4614] bond_slave_0: left promiscuous mode [ 54.606938][ T4614] bond_slave_1: left promiscuous mode [ 54.698598][ T4616] loop1: detected capacity change from 0 to 8192 [ 54.859082][ T4619] loop3: detected capacity change from 0 to 8192 [ 55.404991][ T4639] loop2: detected capacity change from 0 to 512 [ 55.431408][ T4642] pimreg: entered allmulticast mode [ 55.438043][ T4639] EXT4-fs: Ignoring removed oldalloc option [ 55.444134][ T4642] pimreg: left allmulticast mode [ 55.457226][ T4639] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842c01d, mo2=0002] [ 55.465599][ T4639] System zones: 1-12 [ 55.470977][ T4639] EXT4-fs error (device loop2): ext4_xattr_inode_iget:436: comm syz.2.246: Parent and EA inode have the same ino 15 [ 55.516904][ T4639] EXT4-fs error (device loop2): ext4_xattr_inode_iget:436: comm syz.2.246: Parent and EA inode have the same ino 15 [ 55.554541][ T4639] EXT4-fs (loop2): 1 orphan inode deleted [ 55.628340][ T4665] loop3: detected capacity change from 0 to 512 [ 55.636293][ T4665] EXT4-fs: Ignoring removed oldalloc option [ 55.642917][ T4665] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 55.655895][ T4665] EXT4-fs (loop3): 1 truncate cleaned up [ 55.719601][ T4665] loop3: detected capacity change from 512 to 64 [ 55.740914][ T4665] EXT4-fs error (device loop3): mb_free_blocks:1948: group 0, inode 15: block 101:freeing already freed block (bit 100); block bitmap corrupt. [ 55.755605][ T4665] EXT4-fs (loop3): pa ffff8881064f50e0: logic 0, phys. 65, len 64 [ 55.763449][ T4665] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5366: group 0, free 64, pa_free 63 [ 55.820610][ T4665] netlink: 4 bytes leftover after parsing attributes in process `syz.3.249'. [ 55.831977][ T4665] netlink: 4 bytes leftover after parsing attributes in process `syz.3.249'. [ 55.841422][ T4665] netlink: 4 bytes leftover after parsing attributes in process `syz.3.249'. [ 55.853928][ T4665] netlink: 12 bytes leftover after parsing attributes in process `syz.3.249'. [ 55.882095][ T3297] EXT4-fs warning (device loop3): ext4_evict_inode:276: xattr delete (err -12) [ 56.003895][ T4701] loop3: detected capacity change from 0 to 8192 [ 56.141152][ T4722] loop4: detected capacity change from 0 to 1024 [ 56.151938][ T4722] EXT4-fs: Ignoring removed orlov option [ 56.157690][ T4722] EXT4-fs: Ignoring removed orlov option [ 56.305796][ T4741] loop4: detected capacity change from 0 to 512 [ 56.356719][ T4741] EXT4-fs: Ignoring removed i_version option [ 56.362902][ T4741] EXT4-fs: Ignoring removed mblk_io_submit option [ 56.410890][ T4741] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 56.467371][ T4741] EXT4-fs (loop4): 1 truncate cleaned up [ 56.656611][ T4775] loop0: detected capacity change from 0 to 512 [ 56.664444][ T4775] EXT4-fs: Ignoring removed i_version option [ 56.670541][ T4775] EXT4-fs: Ignoring removed mblk_io_submit option [ 56.686473][ T4775] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 56.722974][ T4775] EXT4-fs (loop0): 1 truncate cleaned up [ 56.906175][ T4786] loop1: detected capacity change from 0 to 1024 [ 56.918320][ T4790] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 56.927544][ T4788] loop3: detected capacity change from 0 to 8192 [ 56.927950][ T4786] EXT4-fs: Ignoring removed orlov option [ 56.940073][ T4786] EXT4-fs: Ignoring removed orlov option [ 56.988186][ T4794] loop4: detected capacity change from 0 to 128 [ 57.034597][ T4784] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 57.055143][ T4784] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 57.074021][ T4799] syz.4.261: attempt to access beyond end of device [ 57.074021][ T4799] loop4: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 57.087817][ T4798] loop1: detected capacity change from 0 to 512 [ 57.112543][ T4798] EXT4-fs: Ignoring removed i_version option [ 57.118624][ T4798] EXT4-fs: Ignoring removed mblk_io_submit option [ 57.154793][ T4798] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 57.178747][ T4803] loop4: detected capacity change from 0 to 512 [ 57.192161][ T4803] EXT4-fs: Ignoring removed oldalloc option [ 57.203930][ T4798] EXT4-fs (loop1): 1 truncate cleaned up [ 57.215603][ T4803] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 57.240032][ T4803] EXT4-fs (loop4): 1 truncate cleaned up [ 57.260897][ T4807] loop1: detected capacity change from 0 to 512 [ 57.267416][ T4807] EXT4-fs: Ignoring removed i_version option [ 57.273501][ T4807] EXT4-fs: Ignoring removed mblk_io_submit option [ 57.286449][ T4807] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 57.297789][ T4807] EXT4-fs (loop1): 1 truncate cleaned up [ 57.302975][ T4803] loop4: detected capacity change from 512 to 64 [ 57.313510][ T4803] EXT4-fs error (device loop4): mb_free_blocks:1948: group 0, inode 15: block 101:freeing already freed block (bit 100); block bitmap corrupt. [ 57.328127][ T4803] EXT4-fs (loop4): pa ffff8881064f50e0: logic 0, phys. 65, len 64 [ 57.335980][ T4803] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5366: group 0, free 64, pa_free 63 [ 57.375937][ T4803] netlink: 4 bytes leftover after parsing attributes in process `syz.4.264'. [ 57.387283][ T4813] SET target dimension over the limit! [ 57.395680][ T4803] netlink: 4 bytes leftover after parsing attributes in process `syz.4.264'. [ 57.405066][ T4803] netlink: 4 bytes leftover after parsing attributes in process `syz.4.264'. [ 57.425232][ T3303] EXT4-fs warning (device loop4): ext4_evict_inode:276: xattr delete (err -12) [ 57.490186][ T4815] loop3: detected capacity change from 0 to 512 [ 57.510288][ T4815] EXT4-fs: Ignoring removed orlov option [ 57.510564][ T4826] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 57.529389][ T4815] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 57.538355][ T4824] loop1: detected capacity change from 0 to 512 [ 57.539932][ T4815] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 57.550055][ T4824] EXT4-fs: Ignoring removed i_version option [ 57.554756][ T4815] EXT4-fs (loop3): orphan cleanup on readonly fs [ 57.558493][ T4824] EXT4-fs: Ignoring removed mblk_io_submit option [ 57.565593][ T4815] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.268: bg 0: block 248: padding at end of block bitmap is not set [ 57.590485][ T4815] EXT4-fs error (device loop3): ext4_acquire_dquot:6927: comm syz.3.268: Failed to acquire dquot type 1 [ 57.602606][ T4815] EXT4-fs (loop3): 1 truncate cleaned up [ 57.635316][ T4815] syz.3.268 (4815) used greatest stack depth: 9136 bytes left [ 57.658288][ T4824] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 57.667208][ T4830] loop0: detected capacity change from 0 to 8192 [ 57.681487][ T4832] bond0: entered promiscuous mode [ 57.686574][ T4832] bond_slave_0: entered promiscuous mode [ 57.692374][ T4832] bond_slave_1: entered promiscuous mode [ 57.700151][ T4824] EXT4-fs (loop1): 1 truncate cleaned up [ 57.708736][ T4832] bond0: left promiscuous mode [ 57.713596][ T4832] bond_slave_0: left promiscuous mode [ 57.719096][ T4832] bond_slave_1: left promiscuous mode [ 57.759833][ T4835] loop3: detected capacity change from 0 to 8192 [ 57.808509][ T4835] netlink: 'syz.3.273': attribute type 1 has an invalid length. [ 57.824226][ T4835] 8021q: adding VLAN 0 to HW filter on device bond2 [ 57.852019][ T4835] bond2: (slave gretap1): making interface the new active one [ 57.861000][ T4835] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 57.903755][ T4843] loop0: detected capacity change from 0 to 8192 [ 57.921562][ T4848] xt_CT: You must specify a L4 protocol and not use inversions on it [ 57.930223][ T4848] 9pnet_fd: Insufficient options for proto=fd [ 58.252974][ T4862] bond0: entered promiscuous mode [ 58.258057][ T4862] bond_slave_0: entered promiscuous mode [ 58.264024][ T4862] bond_slave_1: entered promiscuous mode [ 58.273702][ T4862] bond0: left promiscuous mode [ 58.278521][ T4862] bond_slave_0: left promiscuous mode [ 58.284043][ T4862] bond_slave_1: left promiscuous mode [ 58.362898][ T4864] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 58.597820][ T4881] loop4: detected capacity change from 0 to 512 [ 58.604536][ T4881] EXT4-fs: Ignoring removed oldalloc option [ 58.641098][ T4881] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842c01d, mo2=0002] [ 58.659800][ T4881] System zones: 1-12 [ 58.680110][ T4881] EXT4-fs error (device loop4): ext4_xattr_inode_iget:436: comm syz.4.285: Parent and EA inode have the same ino 15 [ 58.743434][ T4881] EXT4-fs error (device loop4): ext4_xattr_inode_iget:436: comm syz.4.285: Parent and EA inode have the same ino 15 [ 58.775967][ T29] kauditd_printk_skb: 644 callbacks suppressed [ 58.775982][ T29] audit: type=1326 audit(1741149495.853:2956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4892 comm="syz.1.287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f286702d169 code=0x7ffc0000 [ 58.805610][ T29] audit: type=1326 audit(1741149495.853:2957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4892 comm="syz.1.287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f286702d169 code=0x7ffc0000 [ 58.839016][ T4881] EXT4-fs (loop4): 1 orphan inode deleted [ 58.846228][ T4893] loop1: detected capacity change from 0 to 1024 [ 58.875811][ T4893] EXT4-fs: Ignoring removed orlov option [ 58.881551][ T4893] EXT4-fs: Ignoring removed orlov option [ 58.883087][ T29] audit: type=1326 audit(1741149495.903:2958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4892 comm="syz.1.287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f286702d169 code=0x7ffc0000 [ 58.910641][ T29] audit: type=1326 audit(1741149495.903:2959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4892 comm="syz.1.287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f286702d169 code=0x7ffc0000 [ 58.934010][ T29] audit: type=1326 audit(1741149495.903:2960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4892 comm="syz.1.287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f286702d169 code=0x7ffc0000 [ 58.957408][ T29] audit: type=1326 audit(1741149495.903:2961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4892 comm="syz.1.287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f286702d169 code=0x7ffc0000 [ 58.980758][ T29] audit: type=1326 audit(1741149495.903:2962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4892 comm="syz.1.287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f286702d169 code=0x7ffc0000 [ 59.004205][ T29] audit: type=1326 audit(1741149495.903:2963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4892 comm="syz.1.287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f286702d169 code=0x7ffc0000 [ 59.014230][ T4898] SET target dimension over the limit! [ 59.027537][ T29] audit: type=1326 audit(1741149495.903:2964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4892 comm="syz.1.287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f286702d169 code=0x7ffc0000 [ 59.035921][ T4900] loop0: detected capacity change from 0 to 512 [ 59.056377][ T29] audit: type=1326 audit(1741149495.903:2965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4892 comm="syz.1.287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f286702d169 code=0x7ffc0000 [ 59.066295][ T4900] EXT4-fs: Ignoring removed nobh option [ 59.129265][ T4900] ext4 filesystem being mounted at /45/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 59.185200][ T4900] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 59.201624][ T4900] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 59.349275][ T4900] xt_CT: You must specify a L4 protocol and not use inversions on it [ 59.837893][ T5021] xt_CT: You must specify a L4 protocol and not use inversions on it [ 59.838099][ T5019] loop3: detected capacity change from 0 to 1024 [ 59.855589][ T5019] EXT4-fs: Ignoring removed orlov option [ 59.860979][ T5021] 9pnet_fd: Insufficient options for proto=fd [ 59.861899][ T5019] EXT4-fs: Ignoring removed orlov option [ 59.923709][ T5028] netlink: 4 bytes leftover after parsing attributes in process `syz.0.300'. [ 59.948257][ T5028] team0 (unregistering): Port device team_slave_0 removed [ 59.964791][ T5028] team0 (unregistering): Port device team_slave_1 removed [ 60.017805][ T5031] loop3: detected capacity change from 0 to 8192 [ 60.036243][ T5032] loop0: detected capacity change from 0 to 1024 [ 60.130607][ T5028] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4115: comm syz.0.300: Allocating blocks 385-513 which overlap fs metadata [ 60.218148][ T5028] EXT4-fs (loop0): pa ffff8881064f5150: logic 16, phys. 129, len 24 [ 60.226277][ T5028] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5366: group 0, free 0, pa_free 8 [ 60.312687][ T5046] loop1: detected capacity change from 0 to 512 [ 60.321980][ T5046] EXT4-fs: Ignoring removed oldalloc option [ 60.337801][ T5046] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 60.350974][ T5046] EXT4-fs (loop1): 1 truncate cleaned up [ 60.409721][ T5046] loop1: detected capacity change from 512 to 64 [ 60.425213][ T5049] EXT4-fs error (device loop1): mb_free_blocks:1948: group 0, inode 15: block 101:freeing already freed block (bit 100); block bitmap corrupt. [ 60.439893][ T5049] EXT4-fs (loop1): pa ffff8881064f5150: logic 0, phys. 65, len 64 [ 60.447788][ T5049] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5366: group 0, free 64, pa_free 63 [ 60.476407][ T5046] netlink: 4 bytes leftover after parsing attributes in process `syz.1.306'. [ 60.486052][ T5046] netlink: 4 bytes leftover after parsing attributes in process `syz.1.306'. [ 60.496872][ T5046] netlink: 4 bytes leftover after parsing attributes in process `syz.1.306'. [ 60.523904][ T3298] EXT4-fs warning (device loop1): ext4_evict_inode:276: xattr delete (err -12) [ 60.580907][ T5055] SET target dimension over the limit! [ 60.594010][ T5057] loop0: detected capacity change from 0 to 512 [ 60.600774][ T5057] EXT4-fs: Ignoring removed i_version option [ 60.606877][ T5057] EXT4-fs: Ignoring removed mblk_io_submit option [ 60.614045][ T5057] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 60.625773][ T5057] EXT4-fs (loop0): 1 truncate cleaned up [ 60.765247][ T5068] bond0: entered promiscuous mode [ 60.770422][ T5068] bond_slave_0: entered promiscuous mode [ 60.776154][ T5068] bond_slave_1: entered promiscuous mode [ 60.792558][ T5068] bond0: left promiscuous mode [ 60.797431][ T5068] bond_slave_0: left promiscuous mode [ 60.803010][ T5068] bond_slave_1: left promiscuous mode [ 60.895983][ T5070] loop2: detected capacity change from 0 to 8192 [ 61.060700][ T5077] loop2: detected capacity change from 0 to 1024 [ 61.068037][ T5077] EXT4-fs: Ignoring removed orlov option [ 61.073754][ T5077] EXT4-fs: Ignoring removed orlov option [ 61.085320][ T5079] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 61.094834][ T5079] infiniband s}z1: RDMA CMA: cma_listen_on_dev, error -98 [ 61.145684][ T5084] loop2: detected capacity change from 0 to 1024 [ 61.256531][ T5091] loop3: detected capacity change from 0 to 512 [ 61.263329][ T5091] EXT4-fs: Ignoring removed i_version option [ 61.269376][ T5091] EXT4-fs: Ignoring removed mblk_io_submit option [ 61.281489][ T5091] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 61.293786][ T5091] EXT4-fs (loop3): 1 truncate cleaned up [ 61.327852][ T5095] loop3: detected capacity change from 0 to 1024 [ 61.334971][ T5095] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 61.346048][ T5095] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 61.359834][ T5095] JBD2: no valid journal superblock found [ 61.365604][ T5095] EXT4-fs (loop3): Could not load journal inode [ 61.464529][ T5106] loop0: detected capacity change from 0 to 512 [ 61.485993][ T5106] EXT4-fs: Ignoring removed oldalloc option [ 61.543587][ T5106] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842c01d, mo2=0002] [ 61.567928][ T5106] System zones: 1-12 [ 61.575033][ T5106] EXT4-fs error (device loop0): ext4_xattr_inode_iget:436: comm syz.0.320: Parent and EA inode have the same ino 15 [ 61.601303][ T5106] EXT4-fs error (device loop0): ext4_xattr_inode_iget:436: comm syz.0.320: Parent and EA inode have the same ino 15 [ 61.615567][ T5106] EXT4-fs (loop0): 1 orphan inode deleted [ 61.652408][ T5118] loop1: detected capacity change from 0 to 1024 [ 61.670802][ T5118] EXT4-fs: Ignoring removed orlov option [ 61.676575][ T5118] EXT4-fs: Ignoring removed orlov option [ 61.714835][ T5117] loop3: detected capacity change from 0 to 8192 [ 61.856214][ T5131] loop1: detected capacity change from 0 to 1024 [ 61.897957][ T5131] mmap: syz.1.326 (5131) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 61.976752][ T5131] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 62.072388][ T5145] loop1: detected capacity change from 0 to 512 [ 62.078988][ T5145] EXT4-fs: Ignoring removed nobh option [ 62.106088][ T5145] ext4 filesystem being mounted at /77/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 62.135326][ T5145] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 62.152728][ T5145] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 62.259703][ T5145] xt_CT: You must specify a L4 protocol and not use inversions on it [ 62.555967][ T5184] __nla_validate_parse: 1 callbacks suppressed [ 62.555986][ T5184] netlink: 4 bytes leftover after parsing attributes in process `syz.3.328'. [ 62.586869][ T5184] loop3: detected capacity change from 0 to 1024 [ 62.607299][ T5184] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4115: comm syz.3.328: Allocating blocks 385-513 which overlap fs metadata [ 62.674061][ T5184] EXT4-fs (loop3): pa ffff8881065960e0: logic 16, phys. 129, len 24 [ 62.682265][ T5184] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5366: group 0, free 0, pa_free 8 [ 62.825170][ T5231] loop3: detected capacity change from 0 to 1024 [ 62.863853][ T5231] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 63.029439][ T5252] SET target dimension over the limit! [ 63.115010][ T5257] loop4: detected capacity change from 0 to 1024 [ 63.143246][ T5257] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 63.154372][ T5257] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 63.169179][ T5257] JBD2: no valid journal superblock found [ 63.175004][ T5257] EXT4-fs (loop4): Could not load journal inode [ 63.220915][ T5259] loop1: detected capacity change from 0 to 512 [ 63.227525][ T5259] EXT4-fs: Ignoring removed i_version option [ 63.233657][ T5259] EXT4-fs: Ignoring removed mblk_io_submit option [ 63.241131][ T5259] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 63.269692][ T5259] EXT4-fs (loop1): 1 truncate cleaned up [ 63.306930][ T5263] loop1: detected capacity change from 0 to 1024 [ 63.338285][ T5263] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 63.493428][ T5284] loop1: detected capacity change from 0 to 1024 [ 63.531741][ T5284] EXT4-fs: Ignoring removed orlov option [ 63.537434][ T5284] EXT4-fs: Ignoring removed orlov option [ 63.674913][ T5309] loop1: detected capacity change from 0 to 512 [ 63.682482][ T5309] EXT4-fs: Ignoring removed i_version option [ 63.688654][ T5309] EXT4-fs: Ignoring removed mblk_io_submit option [ 63.696107][ T5309] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 63.742282][ T5309] EXT4-fs (loop1): 1 truncate cleaned up [ 63.903483][ T5325] loop3: detected capacity change from 0 to 1024 [ 63.910468][ T5325] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 63.921504][ T5325] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 63.936777][ T5325] JBD2: no valid journal superblock found [ 63.942585][ T5325] EXT4-fs (loop3): Could not load journal inode [ 64.056461][ T5339] loop1: detected capacity change from 0 to 512 [ 64.064673][ T5339] EXT4-fs: Ignoring removed i_version option [ 64.070751][ T5339] EXT4-fs: Ignoring removed mblk_io_submit option [ 64.081927][ T5339] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 64.111019][ T5339] EXT4-fs (loop1): 1 truncate cleaned up [ 64.267385][ T29] kauditd_printk_skb: 677 callbacks suppressed [ 64.267402][ T29] audit: type=1326 audit(1741149501.343:3643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5366 comm="syz.0.353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b8da6d169 code=0x7ffc0000 [ 64.315350][ T29] audit: type=1326 audit(1741149501.343:3644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5366 comm="syz.0.353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b8da6d169 code=0x7ffc0000 [ 64.338867][ T29] audit: type=1326 audit(1741149501.343:3645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5366 comm="syz.0.353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6b8da6d169 code=0x7ffc0000 [ 64.357427][ T5367] loop0: detected capacity change from 0 to 1024 [ 64.362182][ T29] audit: type=1326 audit(1741149501.343:3646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5366 comm="syz.0.353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b8da6d169 code=0x7ffc0000 [ 64.362214][ T29] audit: type=1326 audit(1741149501.343:3647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5366 comm="syz.0.353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6b8da6d169 code=0x7ffc0000 [ 64.362324][ T29] audit: type=1326 audit(1741149501.343:3648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5366 comm="syz.0.353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b8da6d169 code=0x7ffc0000 [ 64.362354][ T29] audit: type=1326 audit(1741149501.343:3649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5366 comm="syz.0.353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6b8da6d169 code=0x7ffc0000 [ 64.362394][ T29] audit: type=1326 audit(1741149501.343:3650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5366 comm="syz.0.353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b8da6d169 code=0x7ffc0000 [ 64.362422][ T29] audit: type=1326 audit(1741149501.343:3651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5366 comm="syz.0.353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6b8da6d169 code=0x7ffc0000 [ 64.362454][ T29] audit: type=1326 audit(1741149501.343:3652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5366 comm="syz.0.353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b8da6d169 code=0x7ffc0000 [ 64.536483][ T5367] EXT4-fs: Ignoring removed orlov option [ 64.542274][ T5367] EXT4-fs: Ignoring removed orlov option [ 64.640584][ T5375] loop0: detected capacity change from 0 to 128 [ 64.699791][ T5375] syz.0.354: attempt to access beyond end of device [ 64.699791][ T5375] loop0: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 64.730304][ T5373] loop3: detected capacity change from 0 to 8192 [ 64.789223][ T5386] loop2: detected capacity change from 0 to 1024 [ 64.789752][ T5387] loop4: detected capacity change from 0 to 1024 [ 64.805571][ T5383] loop1: detected capacity change from 0 to 8192 [ 64.814624][ T5387] EXT4-fs: Ignoring removed nobh option [ 64.837546][ T5387] EXT4-fs: Ignoring removed bh option [ 64.876736][ T5386] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 64.926587][ T5396] pim6reg1: entered promiscuous mode [ 64.931996][ T5396] pim6reg1: entered allmulticast mode [ 64.944079][ T5387] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4115: comm syz.4.361: Allocating blocks 497-513 which overlap fs metadata [ 64.964824][ T5387] EXT4-fs (loop4): pa ffff888106596700: logic 256, phys. 385, len 8 [ 64.972972][ T5387] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5366: group 0, free 0, pa_free 1 [ 65.149384][ T5400] loop2: detected capacity change from 0 to 8192 [ 65.188892][ T5403] loop0: detected capacity change from 0 to 8192 [ 65.367675][ T5422] loop4: detected capacity change from 0 to 512 [ 65.393458][ T5422] EXT4-fs: Ignoring removed oldalloc option [ 65.418404][ T5422] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842c01d, mo2=0002] [ 65.426926][ T5422] System zones: 1-12 [ 65.432530][ T5422] EXT4-fs error (device loop4): ext4_xattr_inode_iget:436: comm syz.4.364: Parent and EA inode have the same ino 15 [ 65.447084][ T5422] EXT4-fs error (device loop4): ext4_xattr_inode_iget:436: comm syz.4.364: Parent and EA inode have the same ino 15 [ 65.459933][ T5422] EXT4-fs (loop4): 1 orphan inode deleted [ 65.754619][ T5446] loop3: detected capacity change from 0 to 1024 [ 65.767939][ T5446] EXT4-fs: Ignoring removed orlov option [ 65.773667][ T5446] EXT4-fs: Ignoring removed orlov option [ 65.886567][ T5456] loop3: detected capacity change from 0 to 1024 [ 66.235501][ T5488] loop2: detected capacity change from 0 to 1024 [ 66.311415][ T5488] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 66.339139][ T5485] loop0: detected capacity change from 0 to 8192 [ 66.940766][ T5534] loop1: detected capacity change from 0 to 8192 [ 67.329049][ T5564] loop0: detected capacity change from 0 to 512 [ 67.340232][ T5564] EXT4-fs: Ignoring removed oldalloc option [ 67.362107][ T5564] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 67.429823][ T5564] EXT4-fs (loop0): 1 truncate cleaned up [ 67.445205][ T5564] EXT4-fs mount: 81 callbacks suppressed [ 67.445267][ T5564] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.529951][ T5564] loop0: detected capacity change from 512 to 64 [ 67.572243][ T5564] netlink: 4 bytes leftover after parsing attributes in process `syz.0.379'. [ 67.599974][ T5564] netlink: 4 bytes leftover after parsing attributes in process `syz.0.379'. [ 67.609163][ T5564] netlink: 4 bytes leftover after parsing attributes in process `syz.0.379'. [ 67.625637][ T5564] netlink: 12 bytes leftover after parsing attributes in process `syz.0.379'. [ 67.664041][ T3300] EXT4-fs warning (device loop0): ext4_evict_inode:276: xattr delete (err -12) [ 67.705011][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.751630][ T5582] bond0: entered promiscuous mode [ 67.756761][ T5582] bond_slave_0: entered promiscuous mode [ 67.762662][ T5582] bond_slave_1: entered promiscuous mode [ 67.799783][ T5582] bond0: left promiscuous mode [ 67.804614][ T5582] bond_slave_0: left promiscuous mode [ 67.810158][ T5582] bond_slave_1: left promiscuous mode [ 67.821425][ T5584] loop0: detected capacity change from 0 to 8192 [ 67.948808][ T5586] loop1: detected capacity change from 0 to 8192 [ 67.963594][ T5591] loop2: detected capacity change from 0 to 1024 [ 68.002274][ T5586] syz.1.383: attempt to access beyond end of device [ 68.002274][ T5586] loop1: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 68.005613][ T5591] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 68.029178][ T5586] FAT-fs (loop1): error, invalid access to FAT (entry 0x0000e1b1) [ 68.037100][ T5586] FAT-fs (loop1): Filesystem has been set read-only [ 68.052455][ T5586] FAT-fs (loop1): error, invalid access to FAT (entry 0x0000e1b1) [ 68.067926][ T5586] FAT-fs (loop1): error, invalid access to FAT (entry 0x0000e1b1) [ 68.082430][ T5591] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 68.182816][ T5597] loop1: detected capacity change from 0 to 1024 [ 68.193691][ T5597] EXT4-fs: Ignoring removed orlov option [ 68.199372][ T5597] EXT4-fs: Ignoring removed orlov option [ 68.217180][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.256467][ T5597] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 68.323048][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.496506][ T5603] loop1: detected capacity change from 0 to 8192 [ 68.526695][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.633752][ T5603] ================================================================== [ 68.641890][ T5603] BUG: KCSAN: data-race in mark_buffer_dirty_inode / mark_buffer_dirty_inode [ 68.650705][ T5603] [ 68.653043][ T5603] write to 0xffff8881064cefc8 of 8 bytes by task 5606 on cpu 0: [ 68.660687][ T5603] mark_buffer_dirty_inode+0x18d/0x1c0 [ 68.666177][ T5603] fat_mirror_bhs+0x242/0x330 [ 68.670891][ T5603] fat_alloc_clusters+0x994/0xa80 [ 68.675955][ T5603] fat_get_block+0x25c/0x5e0 [ 68.680577][ T5603] __block_write_begin_int+0x417/0xfa0 [ 68.686067][ T5603] cont_write_begin+0x546/0x860 [ 68.690954][ T5603] fat_write_begin+0x51/0xe0 [ 68.695559][ T5603] generic_perform_write+0x1a8/0x4a0 [ 68.700863][ T5603] __generic_file_write_iter+0xa1/0x120 [ 68.706444][ T5603] generic_file_write_iter+0x8f/0x310 [ 68.711842][ T5603] do_iter_readv_writev+0x403/0x4b0 [ 68.717070][ T5603] vfs_writev+0x2d9/0x880 [ 68.721421][ T5603] __se_sys_pwritev2+0x100/0x1c0 [ 68.726388][ T5603] __x64_sys_pwritev2+0x78/0x90 [ 68.731274][ T5603] x64_sys_call+0x2afe/0x2dc0 [ 68.735975][ T5603] do_syscall_64+0xc9/0x1c0 [ 68.740499][ T5603] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.746407][ T5603] [ 68.748740][ T5603] read to 0xffff8881064cefc8 of 8 bytes by task 5603 on cpu 1: [ 68.756299][ T5603] mark_buffer_dirty_inode+0x96/0x1c0 [ 68.761690][ T5603] fat_mirror_bhs+0x242/0x330 [ 68.766391][ T5603] fat_alloc_clusters+0x994/0xa80 [ 68.771444][ T5603] fat_get_block+0x25c/0x5e0 [ 68.776070][ T5603] __block_write_begin_int+0x417/0xfa0 [ 68.781550][ T5603] cont_write_begin+0x546/0x860 [ 68.786435][ T5603] fat_write_begin+0x51/0xe0 [ 68.791043][ T5603] cont_write_begin+0x18b/0x860 [ 68.795927][ T5603] fat_write_begin+0x51/0xe0 [ 68.800523][ T5603] generic_cont_expand_simple+0xaa/0x150 [ 68.806180][ T5603] fat_cont_expand+0x3a/0x160 [ 68.810888][ T5603] fat_setattr+0x2aa/0x840 [ 68.815337][ T5603] notify_change+0x85c/0x8e0 [ 68.819944][ T5603] do_ftruncate+0x332/0x440 [ 68.824461][ T5603] __x64_sys_ftruncate+0x67/0xc0 [ 68.829420][ T5603] x64_sys_call+0x9d9/0x2dc0 [ 68.834034][ T5603] do_syscall_64+0xc9/0x1c0 [ 68.838567][ T5603] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.844487][ T5603] [ 68.846810][ T5603] value changed: 0x0000000000000000 -> 0xffff888115619d08 [ 68.853917][ T5603] [ 68.856239][ T5603] Reported by Kernel Concurrency Sanitizer on: [ 68.862420][ T5603] CPU: 1 UID: 0 PID: 5603 Comm: syz.1.388 Tainted: G W 6.14.0-rc5-syzkaller-00016-g48a5eed9ad58 #0 [ 68.874487][ T5603] Tainted: [W]=WARN [ 68.878284][ T5603] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 68.888338][ T5603] ================================================================== [ 69.045246][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.