last executing test programs: 3m0.887956743s ago: executing program 3 (id=113): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000c00)=@framed={{}, [@printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x21900b4, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000d00), 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r3 = syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000200)) 2m59.990623867s ago: executing program 3 (id=125): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="480000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="15460100ef010000140012800b0001006d6163736563000004000280", @ANYRES32=r1], 0x48}}, 0x0) 2m59.965852167s ago: executing program 3 (id=126): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r0}, 0x18) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/locks\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x6) 2m59.942783057s ago: executing program 3 (id=127): r0 = syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000080), 0x67, 0x534, &(0x7f0000001840)="$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") socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8942, &(0x7f0000000cc0)='lo:\x96o8\x14d\xa1\xba\xda\xd1\xa0J\x12tQ\xb16\xe3\xd7\\b\x8b\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00l \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xeb\xe1\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xfc\xfa 6(%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc50x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r1, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000001b40)='sched_switch\x00', r5}, 0x10) io_uring_enter(r2, 0x847ba, 0x2000, 0xe, 0x0, 0x0) 2m59.548548893s ago: executing program 3 (id=131): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = syz_io_uring_setup(0x123b, &(0x7f0000000380)={0x0, 0x80fd, 0x80, 0x3, 0x2b9}, &(0x7f0000000040)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r0, 0x80, &(0x7f0000000080)=@l2tp={0x2, 0x0, @local, 0x3}}) io_uring_enter(r1, 0x47bc, 0x0, 0x0, 0x0, 0x0) 2m59.548331693s ago: executing program 32 (id=131): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = syz_io_uring_setup(0x123b, &(0x7f0000000380)={0x0, 0x80fd, 0x80, 0x3, 0x2b9}, &(0x7f0000000040)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r0, 0x80, &(0x7f0000000080)=@l2tp={0x2, 0x0, @local, 0x3}}) io_uring_enter(r1, 0x47bc, 0x0, 0x0, 0x0, 0x0) 1m11.029358713s ago: executing program 4 (id=1485): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000208500000004"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x19, 0x4, 0x4, 0x1ffff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48) 1m10.950813815s ago: executing program 4 (id=1487): perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x110010, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$PROG_BIND_MAP(0x23, 0x0, 0x0) socketpair(0xa, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_clone(0xae12e400, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x8, &(0x7f0000000200)=ANY=[@ANYRES64, @ANYRES32, @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000240)=r1, 0x4) getpid() socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @remote}) 1m10.671549809s ago: executing program 4 (id=1493): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000006c0f00000a"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000e00)={&(0x7f0000000980)='sys_exit\x00'}, 0x10) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8) write$cgroup_int(r2, &(0x7f00000001c0), 0xfffffdef) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='sched_switch\x00', r0}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext, 0x102004, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x2003, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) 1m10.57381915s ago: executing program 4 (id=1497): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='./file0/file0\x00', 0x0, 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000400)='./file0/../file0\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x129c51, 0x0) umount2(&(0x7f0000000080)='./file0\x00', 0x1) 1m10.432356833s ago: executing program 4 (id=1502): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f00000004c0)=0x1000000, 0x4) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f0000000040), &(0x7f0000000080)=0x30) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r1}, 0x10) 1m8.455726512s ago: executing program 4 (id=1508): syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x403}}]}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000c80)={0x194, 0x0, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [{{0x8}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}]}}, {{0x8}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}]}}, {{0x8}, {0x80, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}]}, 0x194}, 0x1, 0x0, 0x0, 0x90}, 0x8000) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000140)=@ccm_128={{0x304}, "68c4502393926b50", "09f700", "1ab6c0e5"}, 0x28) 1m8.455524702s ago: executing program 33 (id=1508): syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x403}}]}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000c80)={0x194, 0x0, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [{{0x8}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}]}}, {{0x8}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}]}}, {{0x8}, {0x80, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}]}, 0x194}, 0x1, 0x0, 0x0, 0x90}, 0x8000) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000140)=@ccm_128={{0x304}, "68c4502393926b50", "09f700", "1ab6c0e5"}, 0x28) 56.380535063s ago: executing program 2 (id=1668): r0 = socket$kcm(0x21, 0x2, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x16, 0x0, 0x4, 0xff}, 0x48) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f0000000100)={0x0, r2}, 0x8) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x40, 0x9, 0x7ffc0002}]}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000001c000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) r4 = epoll_create1(0x0) flistxattr(r4, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={r2, 0xe0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x1e, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000400), &(0x7f00000004c0), 0x8, 0xe0, 0x8, 0x8, &(0x7f0000000500)}}, 0x10) close_range(r0, r0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001812", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) perf_event_open$cgroup(&(0x7f00000001c0)={0x3, 0x80, 0x6, 0xc, 0x4, 0x45, 0x0, 0x6, 0x8, 0xa, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5, 0x2, @perf_config_ext={0xcd7, 0x4}, 0x402, 0x5, 0x7, 0x9, 0x9, 0xf, 0x9, 0x0, 0xbc, 0x0, 0x1}, 0xffffffffffffffff, 0xd, 0xffffffffffffffff, 0x0) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYRES32=r6, @ANYBLOB="0000000004000000b705000008000000850000006a00"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r8}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) r9 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x30046, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r9) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000500000002"], 0x50) syz_emit_ethernet(0x82, &(0x7f0000000100)={@multicast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0xf5, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x3, 0x61, 0x0, {0x16, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x2f, 0x9, @dev={0xac, 0x14, 0x14, 0x10}, @remote, {[@timestamp_addr={0x44, 0x44, 0x0, 0x1, 0x0, [{@rand_addr=0x86dd}, {@remote}, {@dev={0xac, 0x14, 0x14, 0x32}}, {@rand_addr, 0x4f}, {@multicast2}, {@loopback}, {@local, 0x4}, {@multicast1}]}]}}}}}}}, 0x0) 55.678731384s ago: executing program 2 (id=1677): r0 = socket$inet6(0xa, 0x1000080002, 0x100000000000088) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @rand_addr, 0xffffffff}, 0x1c) r1 = socket$inet6(0xa, 0x802, 0x88) setsockopt$inet6_udp_int(r1, 0x11, 0x100000000a, &(0x7f00000003c0)=0x800000001, 0x4) sendto$inet6(r1, 0x0, 0x0, 0x4008840, &(0x7f0000000380)={0xa, 0x4e23, 0x0, @loopback, 0xfee}, 0x1c) recvmmsg(r0, &(0x7f0000000100)=[{{0x0, 0x0, 0x0}, 0x606e}], 0x1, 0x140, 0x0) 55.583852445s ago: executing program 2 (id=1678): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) 55.565512925s ago: executing program 2 (id=1679): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x210000, &(0x7f0000000280)={[{@user_xattr}, {@noquota}, {@dioread_nolock}, {@jqfmt_vfsv1}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x70}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7b1}}, {@stripe={'stripe', 0x3d, 0x20}}, {@bsdgroups}, {@max_batch_time={'max_batch_time', 0x3d, 0x3fe}}, {@user_xattr}, {@noinit_itable}]}, 0x3, 0x583, &(0x7f0000000800)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x185093, 0x0) mount$bind(0x0, 0x0, 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000008080)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x152) 55.416262358s ago: executing program 2 (id=1682): r0 = syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000080), 0x67, 0x534, &(0x7f0000001840)="$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") socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8942, &(0x7f0000000cc0)='lo:\x96o8\x14d\xa1\xba\xda\xd1\xa0J\x12tQ\xb16\xe3\xd7\\b\x8b\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00l \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xeb\xe1\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xfc\xfa 6(%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc50xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000180)=r4, 0x4) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) 3.590218077s ago: executing program 0 (id=2165): pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) pipe2$9p(0x0, 0x0) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r1, &(0x7f0000000300)={0x2, 0x0, @remote}, 0x10) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendto$inet(r1, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x53c, &(0x7f00000001c0)={0x0, 0xaee2, 0x800, 0xffffffff, 0xeb}, &(0x7f0000000000)=0x0, &(0x7f0000001440)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000001b40)={0x3, 0x20000000000000bb, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x8a, &(0x7f00000003c0)={[{@jqfmt_vfsold}, {@usrjquota, 0x22}, {@errors_continue}, {@journal_dev={'journal_dev', 0x3d, 0xb83}}, {@data_err_ignore}, {@grpjquota, 0x22}, {@errors_continue}, {@errors_remount}, {@noblock_validity}]}, 0xfe, 0x44e, &(0x7f0000000900)="$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") writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f00000004c0)='-', 0x1}], 0x9) splice(r1, 0x0, r0, 0x0, 0xfea8, 0xa) 3.454313308s ago: executing program 5 (id=2167): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @cgroup_sockopt=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000180100000e186c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000070000008500000006000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)=@generic={&(0x7f0000001340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}, 0x18) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x6, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_clone(0xd024100, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00'}, 0x10) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000b00)=@base={0x6, 0x4, 0x70be, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x7}, 0x48) 3.405387809s ago: executing program 6 (id=2168): socketpair$nbd(0x1, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000001b40)='sched_switch\x00', r1}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r2 = open(&(0x7f00000001c0)='./file1\x00', 0x20042, 0x45) r3 = open(&(0x7f0000000200)='./file2\x00', 0x100, 0x123) copy_file_range(r3, 0x0, r2, 0x0, 0x3df1, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x40) sendmsg$IPCTNL_MSG_CT_GET_STATS(r0, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0x14, 0x5, 0x1, 0x801, 0x0, 0x0, {0x0, 0x0, 0x7}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8881}, 0x80) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) request_key(0x0, 0x0, &(0x7f0000000280)='\',\xc8*\\\x00', 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 3.284403011s ago: executing program 6 (id=2169): socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4000000}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fdffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x200000, &(0x7f0000000200), 0x3, 0x570, &(0x7f0000000680)="$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") 3.171751603s ago: executing program 5 (id=2171): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) kexec_load(0x0, 0x1, &(0x7f0000000140)=[{0x0, 0x3e00, 0x116094000, 0x41000000}], 0x0) 3.038055655s ago: executing program 1 (id=2172): bpf$MAP_CREATE(0x0, 0x0, 0x50) syz_read_part_table(0x60d, &(0x7f0000002200)="$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") creat(&(0x7f0000000200)='./bus\x00', 0x10) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x100, 0xb4020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10000, 0x0, 0x2, 0x0, 0x88}, 0x0, 0x0, 0xffffffffffffffff, 0x9) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x3000003, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x18, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = open(&(0x7f0000000080)='./bus\x00', 0x147842, 0x0) preadv2(r2, &(0x7f0000000d80)=[{&(0x7f0000001200)=""/4096, 0x100000}], 0x1, 0x0, 0x0, 0x1b) 2.499476913s ago: executing program 1 (id=2173): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x9) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000003"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000140), 0x1, 0x4fa, &(0x7f0000000ac0)="$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") r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000380)=0x3c, 0xfcb5) 2.259000056s ago: executing program 5 (id=2176): rt_sigqueueinfo(0x0, 0x22, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYRES16], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) io_setup(0xb2, &(0x7f0000000200)) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b70300000700000085000000110000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = syz_io_uring_setup(0x6f98, &(0x7f00000001c0)={0x0, 0x0, 0x8, 0x13, 0x83}, &(0x7f0000002000), &(0x7f0000ffd000)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r3, 0x3, 0x0, 0x0) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x101002) io_submit(0x0, 0x0, 0x0) preadv(r4, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000380)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000000a40)="$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") openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x441, 0x20) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) truncate(&(0x7f0000000900)='./file1\x00', 0x3000000) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r5, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2, 0x0, 0x4}, 0x18) ppoll(&(0x7f0000000180)=[{r1}], 0x1, 0x0, 0x0, 0x0) 1.737356614s ago: executing program 1 (id=2177): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) sendmmsg$unix(r0, 0x0, 0x0, 0x0) 1.696402445s ago: executing program 1 (id=2178): rt_sigqueueinfo(0x0, 0x22, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) io_setup(0xb2, &(0x7f0000000200)) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b70300000700000085000000110000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = syz_io_uring_setup(0x6f98, &(0x7f00000001c0)={0x0, 0x0, 0x8, 0x13, 0x83}, &(0x7f0000002000), &(0x7f0000ffd000)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r3, 0x3, 0x0, 0x0) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x101002) io_submit(0x0, 0x0, 0x0) preadv(r4, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000380)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000000a40)="$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") openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x441, 0x20) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) truncate(&(0x7f0000000900)='./file1\x00', 0x3000000) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r5, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2, 0x0, 0x4}, 0x18) ppoll(&(0x7f0000000180)=[{r1}], 0x1, 0x0, 0x0, 0x0) 1.579466187s ago: executing program 7 (id=2179): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @cgroup_sockopt=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000180100000e186c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000070000008500000006000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)=@generic={&(0x7f0000001340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}, 0x18) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x6, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_clone(0xd024100, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00'}, 0x10) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000b00)=@base={0x6, 0x4, 0x70be, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x7}, 0x48) 1.259513471s ago: executing program 5 (id=2180): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000006, 0x31, 0xffffffffffffffff, 0xd0fb6000) sendmmsg(0xffffffffffffffff, &(0x7f0000003dc0)=[{{0x0, 0x0, &(0x7f0000002940)=[{0x0}], 0x1}}], 0x1, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000080)={[{@nobh}, {@usrjquota}]}, 0x1, 0x77e, &(0x7f0000000a80)="$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") r0 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000400)='kfree\x00', r0}, 0x18) mount(0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)='\x06\x00\x00\x00\x04\xb0\xfe\x98\x9a!s\x91]\xab\xc9\xa2IV\xb6-\xd9z\x81\x91\x8aP}I\xc6\x0e\xd9\v\xda\xbfS\x16 \x04\r\xcd\xdb\x9a\xd4\xaf\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\x02\x000x0, 0x0}) r5 = socket$netlink(0x10, 0x3, 0x14) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r6}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x1c, r8, 0x1, 0x0, 0x0, {{}, {0x0, 0x6}}}, 0x1c}}, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="38000000031401002dbd7000000000000900020073797a30000000000800410073697700140033006c6f0000fffffffffffffff000000000"], 0xffaf}, 0x1, 0x0, 0x0, 0x854}, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001d40)={&(0x7f0000000580)=@proc={0x10, 0x0, 0x25dfdbfd, 0x40}, 0xc, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYRES8=r2, @ANYRESDEC=r1, @ANYRES32, @ANYRES32, @ANYBLOB="00000000000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="3075253f97c78b70e75f469022b12c3de45ca0c79c5217f2f164e61a5f0967ad748f3e080d98a0bd726374b642dda15d32f838df70ab74d927f8eef21675a01f18cc2a8a1a94005aa96ffde0a7d0c10ec126e5ad3b33a9b21f814bac9b701c92d22baa8ef2ff024dc09d10", @ANYRES16, @ANYRES32, @ANYRES32], 0xffffffffffffff41, 0x24040094}, 0x80) lchown(&(0x7f0000000000)='./file0\x00', 0x0, r4) ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x3) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@loopback, @in6=@empty, 0x4e25, 0x0, 0x0, 0x0, 0xa, 0x80, 0x0, 0x3a, 0x0, r3}, {0x2, 0x9, 0x3, 0x6, 0x9, 0xbffffffffffffffd, 0x5, 0x2000000000000000}, {0x800000fa, 0x1000000000008, 0x2, 0x6}, 0x0, 0x0, 0x1, 0x0, 0x6, 0x2}, {{@in=@local, 0x4cf, 0x6c}, 0x2, @in6=@dev={0xfe, 0x80, '\x00', 0x19}, 0x3506, 0x1, 0x0, 0x0, 0x4, 0x80000001, 0x2}}, 0xe8) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000a00)={'#! ', './file0'}, 0xb) 1.218030762s ago: executing program 7 (id=2182): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00007d7000/0x2000)=nil) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000080000"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r1}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004"], 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB], 0x0, 0x26, 0x0, 0x1}, 0x28) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r4, &(0x7f0000000a00)=[{{&(0x7f0000000240)={0xa, 0x4e20, 0xc52, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4}, 0x1c, &(0x7f0000000200)=[{&(0x7f00000004c0)="f3", 0x1}], 0x1}}], 0x1, 0x4000841) listen(r4, 0x2000fff) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x8126}}) io_uring_enter(0xffffffffffffffff, 0x38c5, 0x2000800, 0x8, 0x0, 0x0) r5 = accept(r4, 0xfffffffffffffffd, &(0x7f0000000180)) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0900000001000000e67f00000100000000000000", @ANYRES32=r3, @ANYRESDEC=r5, @ANYRESOCT=r4, @ANYRES32, @ANYBLOB="0000000000000000017edb000000000000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000f074adbfa3f1b2ac4706537dbb48c0501e4770dcde3aef0458c6326e213d3c27b00ac1e7739f18457da65e3795ee2a16297b00bf91fc16295aafb6662d1b87cbcd2ab0e608b3f18164c1f061363ae8011f5e37485c28f1474d38e03beda54d61dd7c8fdcabba9b2d752db85c8453c40a27f8b6132e400cba9d635d46b8b231e22ca9677bd8ef90810bf1ea5735822144008e3973a8851e8e49a0521c09b8b06c194a3da34f47ff52657892af9edafe9b7be45ee67ed44bbb2dfeac93c696c07bd11ab6c4c788793d6c09ce7c4edfcaffa4d0a733dca9474ccbcb0d007043d0916f3f99ac766154f12dd691a13a2b6d184700888da2a2df5168b79381d1161f93d19f114465bbdd57e32f294f6b545a8ac4ce22946499b359d181c47cbc94691644ee884a84e1035ac7710168d58516ff30c35491e60280f4", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r8, 0x8943, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) 1.046082014s ago: executing program 7 (id=2183): perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x110010, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$PROG_BIND_MAP(0x23, 0x0, 0x0) socketpair(0xa, 0x1, 0x0, &(0x7f0000000480)) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_clone(0xae12e400, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x8, &(0x7f0000000200)=ANY=[@ANYRES64, @ANYRES32, @ANYRESHEX, @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) getpid() socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @remote}) 903.295407ms ago: executing program 6 (id=2184): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000030000008500000043000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1d, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYBLOB="0000000000000000b704000008000000850000007800000095", @ANYRESDEC=r0, @ANYRES32=r0], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = memfd_create(&(0x7f00000003c0)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea7\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\x0f<\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\xd5\xf3\\\x00\xbe]Et\xad*\xecj\x02\xc8\xc4\f\x04\x99\xf6\xfc', 0x3) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x3, 0x1}) unshare(0x66000080) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000180), 0x800, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000001940)={'macvlan0\x00', 0x0}) gettid() ioctl$TIOCGDEV(r1, 0x80045432, &(0x7f0000000240)) r5 = socket$inet_sctp(0x2, 0x5, 0x84) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b0000000000000000", @ANYRES32=r0, @ANYBLOB="05000000000000000000000000001000000000d6fcff0ccc00", @ANYRES32=r4, @ANYRES32=r1, @ANYBLOB="04000000000000000400"/21], 0x50) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="020000000400000008000000010000008000000096261fa60a54ebad31068281ebf356537a780c3fce8a3efd1f093181de15252f4cb664959b172ffa9cf6f195cd52f24c025216453228f69f4505641f77332fd2efa90b46ea51a5b82e4626c224ec2127c9c503cf31ea4eab6995dfb2ff9d2c235a1732c3b5abaab2beb448513ca960157e7fad62d8d35774a8efa489f3fc7ebcd0dfc6374f29c7ad29fdaaa6ae195cc755e43fc01cb607f8c272c552d6729e", @ANYBLOB="020000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="050000000400000001000000000000000000"], 0x50) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x0, 0x0}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r6, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000010c0)=0x8) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r5, 0x84, 0x77, &(0x7f0000000100)=ANY=[@ANYRES32=r7], 0xc) 829.820238ms ago: executing program 7 (id=2185): socketpair$nbd(0x1, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000001b40)='sched_switch\x00', r1}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r2 = open(&(0x7f00000001c0)='./file1\x00', 0x20042, 0x45) r3 = open(&(0x7f0000000200)='./file2\x00', 0x100, 0x123) copy_file_range(r3, 0x0, r2, 0x0, 0x3df1, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x40) sendmsg$IPCTNL_MSG_CT_GET_STATS(r0, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0x14, 0x5, 0x1, 0x801, 0x0, 0x0, {0x0, 0x0, 0x7}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8881}, 0x80) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) request_key(0x0, 0x0, &(0x7f0000000280)='\',\xc8*\\\x00', 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 780.748189ms ago: executing program 7 (id=2186): rt_sigqueueinfo(0x0, 0x22, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) io_setup(0xb2, &(0x7f0000000200)) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b70300000700000085000000110000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = syz_io_uring_setup(0x6f98, &(0x7f00000001c0)={0x0, 0x0, 0x8, 0x13, 0x83}, &(0x7f0000002000), &(0x7f0000ffd000)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r3, 0x3, 0x0, 0x0) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x101002) io_submit(0x0, 0x0, 0x0) preadv(r4, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000380)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000000a40)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==") openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x441, 0x20) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) truncate(&(0x7f0000000900)='./file1\x00', 0x3000000) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r5, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2, 0x0, 0x4}, 0x18) ppoll(&(0x7f0000000180)=[{r1}], 0x1, 0x0, 0x0, 0x0) 751.984419ms ago: executing program 1 (id=2187): socketpair$nbd(0x1, 0x1, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000001b40)='sched_switch\x00'}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r2 = open(&(0x7f00000001c0)='./file1\x00', 0x20042, 0x45) r3 = open(&(0x7f0000000200)='./file2\x00', 0x100, 0x123) copy_file_range(r3, 0x0, r2, 0x0, 0x3df1, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x40) sendmsg$IPCTNL_MSG_CT_GET_STATS(r1, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0x14, 0x5, 0x1, 0x801, 0x0, 0x0, {0x0, 0x0, 0x7}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8881}, 0x80) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) request_key(0x0, 0x0, &(0x7f0000000280)='\',\xc8*\\\x00', 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 651.43374ms ago: executing program 1 (id=2188): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x9) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000003"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000140), 0x1, 0x4fa, &(0x7f0000000ac0)="$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") r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000380)=0x3c, 0xfcb5) 565.456802ms ago: executing program 0 (id=2189): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000200)='cpuset.mem_hardwall\x00', 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000080)) 487.524643ms ago: executing program 0 (id=2190): perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x110010, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$PROG_BIND_MAP(0x23, 0x0, 0x0) socketpair(0xa, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_clone(0xae12e400, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x8, &(0x7f0000000200)=ANY=[@ANYRES64, @ANYRES32, @ANYRESHEX, @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000240)=r1, 0x4) getpid() socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @remote}) 304.549105ms ago: executing program 5 (id=2191): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa48e21ec8762e1d6010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00007d7000/0x2000)=nil) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a0000000400000008000000"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000008500000050", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB], 0x0, 0x26, 0x0, 0x1}, 0x28) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r4, &(0x7f0000000a00)=[{{&(0x7f0000000240)={0xa, 0x4e20, 0xc52, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4}, 0x1c, &(0x7f0000000200)=[{&(0x7f00000004c0)="f3", 0x1}], 0x1}}], 0x1, 0x4000841) listen(r4, 0x2000fff) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x8126}}) io_uring_enter(0xffffffffffffffff, 0x38c5, 0x2000800, 0x8, 0x0, 0x0) r5 = accept(r4, 0xfffffffffffffffd, &(0x7f0000000180)) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0900000001000000e67f00000100000000000000", @ANYRES32=r3, @ANYRESDEC=r5, @ANYRESOCT=r4, @ANYRES32, @ANYBLOB="0000000000000000017edb000000000000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r8, 0x8943, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) 243.435826ms ago: executing program 6 (id=2192): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000080), 0x67, 0x534, &(0x7f0000001840)="$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") socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8942, &(0x7f0000000cc0)='lo:\x96o8\x14d\xa1\xba\xda\xd1\xa0J\x12tQ\xb16\xe3\xd7\\b\x8b\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00l \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xeb\xe1\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xfc\xfa 6(%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc50x0, &(0x7f0000000040)=0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f0000000300)=@sco={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}}) io_uring_enter(r2, 0x291c, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) fallocate(r6, 0x0, 0xa20, 0x8000c64) 2.88698ms ago: executing program 5 (id=2194): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x9) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000003000000850000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000140), 0x1, 0x4fa, &(0x7f0000000ac0)="$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") r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000380)=0x3c, 0xfcb5) 0s ago: executing program 6 (id=2195): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x60742, 0x0) ioctl$TIOCVHANGUP(r2, 0x5437, 0x2) kernel console output (not intermixed with test programs): 000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 158.629836][ T3820] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.642097][ T9326] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 158.668509][ T9326] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 49 with max blocks 4 with error 28 [ 158.681021][ T9326] EXT4-fs (loop0): This should not happen!! Data will be lost [ 158.681021][ T9326] [ 158.690726][ T9326] EXT4-fs (loop0): Total free blocks count 0 [ 158.696924][ T9326] EXT4-fs (loop0): Free/Dirty block details [ 158.702899][ T9326] EXT4-fs (loop0): free_blocks=0 [ 158.708495][ T9326] EXT4-fs (loop0): dirty_blocks=0 [ 158.713593][ T9326] EXT4-fs (loop0): Block reservation details [ 158.719668][ T9326] EXT4-fs (loop0): i_reserved_data_blocks=0 [ 158.740213][ T3307] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.768001][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.792951][ T9345] loop1: detected capacity change from 0 to 128 [ 158.924137][ T9353] loop2: detected capacity change from 0 to 4096 [ 158.941631][ T9353] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 158.959119][ T9355] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1667'. [ 159.114900][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.450733][ T9370] loop0: detected capacity change from 0 to 512 [ 159.466764][ T9370] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 159.479306][ T9370] ext4 filesystem being mounted at /315/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 159.543748][ T29] kauditd_printk_skb: 112 callbacks suppressed [ 159.543766][ T29] audit: type=1326 audit(1752107034.429:2328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9344 comm="syz.1.1663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff25ea7e929 code=0x7ffc0000 [ 159.573502][ T29] audit: type=1326 audit(1752107034.429:2329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9344 comm="syz.1.1663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff25ea7e929 code=0x7ffc0000 [ 159.599594][ T29] audit: type=1326 audit(1752107034.509:2330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9365 comm="syz.2.1668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f707c23e929 code=0x7ffc0000 [ 159.601385][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.623893][ T29] audit: type=1326 audit(1752107034.509:2331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9365 comm="syz.2.1668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f707c23e929 code=0x7ffc0000 [ 159.689510][ T29] audit: type=1326 audit(1752107034.509:2332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9365 comm="syz.2.1668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f707c23d3df code=0x7ffc0000 [ 159.713348][ T29] audit: type=1326 audit(1752107034.509:2333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9365 comm="syz.2.1668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f707c23e929 code=0x7ffc0000 [ 159.736812][ T29] audit: type=1326 audit(1752107034.509:2334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9365 comm="syz.2.1668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f707c23e929 code=0x7ffc0000 [ 159.764276][ T9379] loop6: detected capacity change from 0 to 512 [ 159.786041][ T9379] ext4: Unknown parameter 'smackfshat' [ 159.945834][ T9387] loop2: detected capacity change from 0 to 1024 [ 159.994103][ T9389] lo speed is unknown, defaulting to 1000 [ 160.002809][ T9387] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 160.021270][ T29] audit: type=1400 audit(1752107034.929:2335): avc: denied { mounton } for pid=9386 comm="syz.2.1679" path="/350/file1/file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 160.069653][ T9393] loop0: detected capacity change from 0 to 512 [ 160.096204][ T29] audit: type=1400 audit(1752107034.999:2336): avc: denied { remove_name } for pid=3311 comm="syz-executor" name="lost+found" dev="loop2" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 160.119495][ T29] audit: type=1400 audit(1752107034.999:2337): avc: denied { rmdir } for pid=3311 comm="syz-executor" name="lost+found" dev="loop2" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 160.149362][ T9393] EXT4-fs (loop0): external journal device major/minor numbers have changed [ 160.162608][ T9389] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 160.179461][ T9395] loop6: detected capacity change from 0 to 2048 [ 160.181159][ T9389] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 160.212279][ T9393] EXT4-fs (loop0): failed to open journal device unknown-block(11,131) -6 [ 160.220436][ T3508] loop6: p1 < > p4 [ 160.225309][ T3508] loop6: p4 size 8388608 extends beyond EOD, truncated [ 160.237184][ T9395] loop6: p1 < > p4 [ 160.241860][ T9395] loop6: p4 size 8388608 extends beyond EOD, truncated [ 160.293063][ T3858] udevd[3858]: inotify_add_watch(7, /dev/loop6p4, 10) failed: No such file or directory [ 160.304017][ T3508] udevd[3508]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 160.315121][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.340152][ T3508] udevd[3508]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 160.351326][ T3858] udevd[3858]: inotify_add_watch(7, /dev/loop6p4, 10) failed: No such file or directory [ 160.394440][ T3508] udevd[3508]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 160.467426][ T3858] udevd[3858]: inotify_add_watch(7, /dev/loop6p4, 10) failed: No such file or directory [ 160.935003][ T9436] loop5: detected capacity change from 0 to 512 [ 160.944846][ T9436] EXT4-fs (loop5): external journal device major/minor numbers have changed [ 160.969889][ T9420] lo speed is unknown, defaulting to 1000 [ 160.990545][ T9436] EXT4-fs (loop5): failed to open journal device unknown-block(11,131) -6 [ 161.049023][ T9420] chnl_net:caif_netlink_parms(): no params data found [ 161.067502][ T9442] loop5: detected capacity change from 0 to 2048 [ 161.101166][ T9420] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.108244][ T9420] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.115751][ T9420] bridge_slave_0: entered allmulticast mode [ 161.115893][ T3508] loop5: p1 < > p4 [ 161.122366][ T9420] bridge_slave_0: entered promiscuous mode [ 161.128820][ T3508] loop5: p4 size 8388608 extends beyond EOD, truncated [ 161.132758][ T9420] bridge0: port 2(bridge_slave_1) entered blocking state [ 161.145363][ T9420] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.155600][ T9420] bridge_slave_1: entered allmulticast mode [ 161.162041][ T9420] bridge_slave_1: entered promiscuous mode [ 161.181540][ T9420] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 161.192006][ T9420] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 161.269649][ T9442] loop5: p1 < > p4 [ 161.275045][ T9442] loop5: p4 size 8388608 extends beyond EOD, truncated [ 161.286425][ T9420] team0: Port device team_slave_0 added [ 161.313894][ T9420] team0: Port device team_slave_1 added [ 161.352904][ T2995] loop5: p1 < > p4 [ 161.357575][ T2995] loop5: p4 size 8388608 extends beyond EOD, truncated [ 161.365008][ T9420] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 161.372034][ T9420] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 161.398277][ T9420] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 161.422009][ T9420] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 161.428978][ T9420] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 161.455004][ T9420] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 161.505582][ T3858] udevd[3858]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 161.523193][ T3508] udevd[3508]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 161.553431][ T3858] udevd[3858]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 161.571839][ T9465] loop5: detected capacity change from 0 to 1024 [ 161.578991][ T9465] EXT4-fs: Ignoring removed nobh option [ 161.579931][ T3508] udevd[3508]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 161.588420][ T9465] EXT4-fs: Ignoring removed bh option [ 161.615641][ T9420] hsr_slave_0: entered promiscuous mode [ 161.625807][ T9420] hsr_slave_1: entered promiscuous mode [ 161.629082][ T9470] loop1: detected capacity change from 0 to 512 [ 161.648158][ T9465] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 161.663414][ T9420] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 161.680642][ T9420] Cannot create hsr debugfs directory [ 161.702837][ T3820] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.738544][ T9470] EXT4-fs (loop1): orphan cleanup on readonly fs [ 161.789440][ T9470] EXT4-fs error (device loop1): ext4_orphan_get:1419: comm syz.1.1705: bad orphan inode 13 [ 161.828865][ T9478] loop6: detected capacity change from 0 to 256 [ 161.849667][ T9470] ext4_test_bit(bit=12, block=18) = 1 [ 161.855109][ T9470] is_bad_inode(inode)=0 [ 161.859338][ T9470] NEXT_ORPHAN(inode)=2130706432 [ 161.864268][ T9470] max_ino=32 [ 161.867464][ T9470] i_nlink=1 [ 161.897195][ T9480] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1708'. [ 161.913896][ T9420] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 161.922375][ T9470] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 161.951107][ T9420] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 161.974064][ T9470] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1705'. [ 161.985240][ T9420] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 161.996094][ T9420] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 162.006136][ T9483] loop5: detected capacity change from 0 to 1024 [ 162.014777][ T3307] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.031216][ T9483] EXT4-fs: Ignoring removed nobh option [ 162.036983][ T9483] EXT4-fs: Ignoring removed bh option [ 162.096994][ T9483] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 162.122632][ T9478] infiniband syz1: set active [ 162.127377][ T9478] infiniband syz1: added syz_tun [ 162.195993][ T9478] RDS/IB: syz1: added [ 162.218217][ T9478] smc: adding ib device syz1 with port count 1 [ 162.222208][ T9420] 8021q: adding VLAN 0 to HW filter on device bond0 [ 162.237568][ T9420] 8021q: adding VLAN 0 to HW filter on device team0 [ 162.264300][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 162.269153][ T9478] smc: ib device syz1 port 1 has pnetid [ 162.271562][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 162.294280][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 162.301399][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 162.334138][ T9420] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 162.344772][ T9500] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1711'. [ 162.453333][ T9420] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 162.539011][ T9516] loop0: detected capacity change from 0 to 1024 [ 162.575210][ T9482] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4113: comm syz.5.1709: Allocating blocks 497-513 which overlap fs metadata [ 162.610904][ T9516] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 162.656558][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.735431][ T9420] veth0_vlan: entered promiscuous mode [ 162.744433][ T9420] veth1_vlan: entered promiscuous mode [ 162.752454][ T9537] loop1: detected capacity change from 0 to 1024 [ 162.774307][ T9537] EXT4-fs: Ignoring removed nobh option [ 162.780032][ T9537] EXT4-fs: Ignoring removed bh option [ 162.794003][ T9420] veth0_macvtap: entered promiscuous mode [ 162.809721][ T9482] EXT4-fs (loop5): pa ffff888100689d20: logic 592, phys. 449, len 4 [ 162.815713][ T9420] veth1_macvtap: entered promiscuous mode [ 162.817727][ T9482] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 1 [ 162.842251][ T9420] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 162.856167][ T9420] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 162.887466][ T9420] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.896273][ T9420] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.905039][ T9420] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.913804][ T9420] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.932090][ T9537] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 162.963519][ T3820] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.016399][ T9543] 9pnet_rdma: rdma_create_trans (9543): problem binding to privport: 13 [ 163.048924][ T9546] lo speed is unknown, defaulting to 1000 [ 163.086700][ T9548] bridge_slave_0: left allmulticast mode [ 163.092536][ T9548] bridge_slave_0: left promiscuous mode [ 163.092937][ T9549] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 163.098269][ T9548] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.117319][ T9548] bridge_slave_1: left allmulticast mode [ 163.123058][ T9548] bridge_slave_1: left promiscuous mode [ 163.128744][ T9548] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.136290][ T9549] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 163.148804][ T9548] bond0: (slave bond_slave_0): Releasing backup interface [ 163.172490][ T9548] bond0: (slave bond_slave_1): Releasing backup interface [ 163.197432][ T9548] team0: Port device team_slave_0 removed [ 163.205761][ T9548] team0: Port device team_slave_1 removed [ 163.212504][ T9548] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 163.220031][ T9548] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 163.230877][ T9548] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 163.238318][ T9548] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 163.303476][ T9528] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4113: comm syz.1.1718: Allocating blocks 497-513 which overlap fs metadata [ 163.496100][ T9560] loop6: detected capacity change from 0 to 1024 [ 163.517592][ T9560] EXT4-fs: Ignoring removed nobh option [ 163.523533][ T9560] EXT4-fs: Ignoring removed bh option [ 163.527562][ T9537] EXT4-fs (loop1): pa ffff888100689d20: logic 896, phys. 401, len 7 [ 163.536964][ T9537] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 1 [ 163.582418][ T9560] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 163.649764][ T9564] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1727'. [ 163.654973][ T3307] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.768330][ T9575] loop0: detected capacity change from 0 to 2048 [ 163.820507][ T9575] loop0: p1 < > p4 [ 163.833106][ T9558] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4113: comm syz.6.1725: Allocating blocks 497-513 which overlap fs metadata [ 163.858959][ T9575] loop0: p4 size 8388608 extends beyond EOD, truncated [ 164.103528][ T9588] loop1: detected capacity change from 0 to 512 [ 164.735334][ T9588] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 164.748025][ T9588] ext4 filesystem being mounted at /320/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 164.966330][ T9594] loop0: detected capacity change from 0 to 1024 [ 164.988947][ T9565] EXT4-fs (loop6): pa ffff888100689cb0: logic 544, phys. 273, len 15 [ 164.997141][ T9565] EXT4-fs error (device loop6): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 1 [ 165.016778][ T9596] loop5: detected capacity change from 0 to 1024 [ 165.075478][ T9596] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 165.090479][ T9594] EXT4-fs (loop0): mounted filesystem 00000000-0500-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 165.150434][ T9596] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 165.196752][ T8842] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.211218][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0500-0000-0000-000000000000. [ 165.231084][ T9596] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 5 with error 28 [ 165.243284][ T9596] EXT4-fs (loop5): This should not happen!! Data will be lost [ 165.243284][ T9596] [ 165.252983][ T9596] EXT4-fs (loop5): Total free blocks count 0 [ 165.258973][ T9596] EXT4-fs (loop5): Free/Dirty block details [ 165.264939][ T9596] EXT4-fs (loop5): free_blocks=68451041280 [ 165.270860][ T9596] EXT4-fs (loop5): dirty_blocks=16 [ 165.276047][ T9596] EXT4-fs (loop5): Block reservation details [ 165.282083][ T9596] EXT4-fs (loop5): i_reserved_data_blocks=1 [ 165.324955][ T9603] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1736'. [ 165.444223][ T9609] loop7: detected capacity change from 0 to 512 [ 165.454770][ T3820] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.490983][ T9609] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 165.514452][ T9609] ext4 filesystem being mounted at /3/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 165.535510][ T9609] __quota_error: 138 callbacks suppressed [ 165.535525][ T9609] Quota error (device loop7): do_check_range: Getting block 1702428675 out of range 1-5 [ 165.551077][ T9609] Quota error (device loop7): qtree_read_dquot: Can't read quota structure for id 0 [ 165.560516][ T9609] EXT4-fs error (device loop7): ext4_acquire_dquot:6933: comm syz.7.1739: Failed to acquire dquot type 1 [ 165.666136][ T9420] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.693330][ T29] audit: type=1400 audit(1752107040.599:2476): avc: denied { mount } for pid=9614 comm="syz.6.1735" name="/" dev="ramfs" ino=22301 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 165.693436][ T3307] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.792680][ T9621] loop6: detected capacity change from 0 to 1024 [ 165.828999][ T9620] lo speed is unknown, defaulting to 1000 [ 165.843889][ T9621] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 165.845690][ T9625] 9pnet_rdma: rdma_create_trans (9625): problem binding to privport: 13 [ 165.879774][ T9621] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 165.939840][ T9621] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 5 with error 28 [ 165.952072][ T9621] EXT4-fs (loop6): This should not happen!! Data will be lost [ 165.952072][ T9621] [ 165.961763][ T9621] EXT4-fs (loop6): Total free blocks count 0 [ 165.967739][ T9621] EXT4-fs (loop6): Free/Dirty block details [ 165.973748][ T9621] EXT4-fs (loop6): free_blocks=68451041280 [ 165.979572][ T9621] EXT4-fs (loop6): dirty_blocks=16 [ 165.984677][ T9621] EXT4-fs (loop6): Block reservation details [ 165.990676][ T9621] EXT4-fs (loop6): i_reserved_data_blocks=1 [ 166.005766][ T9629] loop5: detected capacity change from 0 to 512 [ 166.024593][ T9626] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 166.045556][ T9631] 9pnet_rdma: rdma_create_trans (9631): problem binding to privport: 13 [ 166.161311][ T8842] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.176215][ T9626] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 166.188484][ T9629] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 166.201180][ T9629] ext4 filesystem being mounted at /304/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 166.418957][ T9641] loop1: detected capacity change from 0 to 256 [ 166.427009][ T9639] loop0: detected capacity change from 0 to 1024 [ 166.478532][ T9639] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 166.499539][ T9641] rdma_rxe: rxe_newlink: failed to add syz_tun [ 166.727382][ T9639] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 166.780719][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.842207][ T29] audit: type=1326 audit(1752107041.749:2477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9640 comm="syz.1.1748" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff25ea7e929 code=0x0 [ 166.915824][ T9646] loop0: detected capacity change from 0 to 512 [ 166.946108][ T9646] EXT4-fs (loop0): orphan cleanup on readonly fs [ 166.973253][ T9646] EXT4-fs error (device loop0): ext4_orphan_get:1419: comm syz.0.1749: bad orphan inode 13 [ 166.991066][ T9646] ext4_test_bit(bit=12, block=18) = 1 [ 166.996539][ T9646] is_bad_inode(inode)=0 [ 167.000754][ T9646] NEXT_ORPHAN(inode)=2130706432 [ 167.005629][ T9646] max_ino=32 [ 167.008833][ T9646] i_nlink=1 [ 167.029725][ T9646] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 167.057196][ T9646] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1749'. [ 167.087796][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.172800][ T9655] loop1: detected capacity change from 0 to 512 [ 167.182296][ T9653] bond0: (slave lo): Releasing backup interface [ 167.195825][ T9653] bond0: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 167.209467][ T9655] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 167.249951][ T9653] team0: left allmulticast mode [ 167.254839][ T9653] team0: left promiscuous mode [ 167.256766][ T3820] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.259987][ T9653] kfree: port 1(team0) entered disabled state [ 167.274104][ T9655] ext4 filesystem being mounted at /325/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 167.301558][ T9655] Quota error (device loop1): do_check_range: Getting block 1702428675 out of range 1-5 [ 167.311365][ T9655] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 167.320789][ T9655] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.1751: Failed to acquire dquot type 1 [ 167.411246][ T9665] lo speed is unknown, defaulting to 1000 [ 167.418281][ T3307] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.467089][ T9667] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 167.483767][ T9671] loop1: detected capacity change from 0 to 512 [ 167.495559][ T9667] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 167.509782][ T9671] EXT4-fs: Ignoring removed nobh option [ 167.537321][ T9671] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -117 [ 167.549572][ T9671] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.1755: invalid indirect mapped block 256 (level 1) [ 167.567529][ T9671] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.1755: invalid indirect mapped block 2683928664 (level 1) [ 167.587650][ T9671] EXT4-fs (loop1): 1 truncate cleaned up [ 167.597661][ T9678] loop7: detected capacity change from 0 to 512 [ 167.604642][ T9671] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 167.609793][ T9678] ext4: Unknown parameter 'smackfshat' [ 167.675225][ T3307] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.698934][ T9681] loop1: detected capacity change from 0 to 128 [ 167.718246][ T9681] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 167.836958][ T9685] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1762'. [ 167.868761][ T9687] loop6: detected capacity change from 0 to 2048 [ 167.875618][ T9687] EXT4-fs: Ignoring removed nobh option [ 167.893234][ T9689] loop7: detected capacity change from 0 to 1024 [ 167.906327][ T51] kworker/u8:3: attempt to access beyond end of device [ 167.906327][ T51] loop1: rw=1, sector=137, nr_sectors = 8 limit=128 [ 167.919931][ T51] kworker/u8:3: attempt to access beyond end of device [ 167.919931][ T51] loop1: rw=1, sector=153, nr_sectors = 8 limit=128 [ 167.925835][ T9687] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 167.933450][ T51] kworker/u8:3: attempt to access beyond end of device [ 167.933450][ T51] loop1: rw=1, sector=169, nr_sectors = 8 limit=128 [ 167.948357][ T9689] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 167.963534][ T51] kworker/u8:3: attempt to access beyond end of device [ 167.963534][ T51] loop1: rw=1, sector=185, nr_sectors = 8 limit=128 [ 167.984090][ T51] kworker/u8:3: attempt to access beyond end of device [ 167.984090][ T51] loop1: rw=1, sector=201, nr_sectors = 8 limit=128 [ 167.997984][ T51] kworker/u8:3: attempt to access beyond end of device [ 167.997984][ T51] loop1: rw=1, sector=217, nr_sectors = 8 limit=128 [ 168.011438][ T51] kworker/u8:3: attempt to access beyond end of device [ 168.011438][ T51] loop1: rw=1, sector=233, nr_sectors = 8 limit=128 [ 168.012277][ T9420] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.034669][ T51] kworker/u8:3: attempt to access beyond end of device [ 168.034669][ T51] loop1: rw=1, sector=249, nr_sectors = 8 limit=128 [ 168.048175][ T51] kworker/u8:3: attempt to access beyond end of device [ 168.048175][ T51] loop1: rw=1, sector=265, nr_sectors = 8 limit=128 [ 168.061590][ T29] audit: type=1400 audit(1752107042.949:2478): avc: denied { write } for pid=9686 comm="syz.6.1763" path="/50/file1/bus" dev="loop6" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 168.084560][ T51] kworker/u8:3: attempt to access beyond end of device [ 168.084560][ T51] loop1: rw=1, sector=281, nr_sectors = 8 limit=128 [ 168.092190][ T9696] loop7: detected capacity change from 0 to 512 [ 168.099961][ T51] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 168.133250][ T9696] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 168.148992][ T9696] ext4 filesystem being mounted at /8/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 168.172833][ T9696] Quota error (device loop7): do_check_range: Getting block 1702428675 out of range 1-5 [ 168.182692][ T9696] Quota error (device loop7): qtree_read_dquot: Can't read quota structure for id 0 [ 168.192114][ T9696] EXT4-fs error (device loop7): ext4_acquire_dquot:6933: comm syz.7.1766: Failed to acquire dquot type 1 [ 168.286801][ T9420] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.325063][ T9710] loop5: detected capacity change from 0 to 512 [ 168.341393][ T9712] loop7: detected capacity change from 0 to 1024 [ 168.350230][ T9710] EXT4-fs (loop5): external journal device major/minor numbers have changed [ 168.386394][ T9712] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 168.411500][ T9710] EXT4-fs (loop5): failed to open journal device unknown-block(11,131) -6 [ 168.421218][ T9718] loop0: detected capacity change from 0 to 2048 [ 168.427868][ T9718] EXT4-fs: Ignoring removed nobh option [ 168.451984][ T9718] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 168.464370][ T9712] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 168.492150][ T9420] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.527693][ T29] audit: type=1326 audit(1752107043.429:2479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9722 comm="syz.5.1775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ad178e929 code=0x7ffc0000 [ 168.553294][ T9723] loop5: detected capacity change from 0 to 128 [ 168.631814][ T9727] loop1: detected capacity change from 0 to 512 [ 168.646879][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.658618][ T9727] ext4: Unknown parameter 'smackfshat' [ 168.680268][ T9730] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1777'. [ 168.755771][ T9735] loop1: detected capacity change from 0 to 1024 [ 168.767068][ T9736] loop0: detected capacity change from 0 to 1024 [ 168.786998][ T9738] loop6: detected capacity change from 0 to 512 [ 168.821001][ T9738] EXT4-fs: Ignoring removed nobh option [ 168.841289][ T9738] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -117 [ 168.851049][ T9738] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #13: comm syz.6.1781: invalid indirect mapped block 256 (level 1) [ 168.865538][ T9738] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #13: comm syz.6.1781: invalid indirect mapped block 2683928664 (level 1) [ 168.881241][ T9738] EXT4-fs (loop6): 1 truncate cleaned up [ 168.951505][ T9746] loop7: detected capacity change from 0 to 1024 [ 169.043254][ T9749] loop1: detected capacity change from 0 to 512 [ 169.049847][ T9749] ext4: Unknown parameter 'smackfshat' [ 169.063053][ T9754] loop6: detected capacity change from 0 to 1024 [ 169.070745][ T9746] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 169.100561][ T9756] loop0: detected capacity change from 0 to 1024 [ 169.120752][ T9754] EXT4-fs: Ignoring removed nobh option [ 169.126383][ T9754] EXT4-fs: Ignoring removed bh option [ 169.194037][ T9756] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 169.253762][ T9756] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 5 with error 28 [ 169.266121][ T9756] EXT4-fs (loop0): This should not happen!! Data will be lost [ 169.266121][ T9756] [ 169.270155][ T9766] loop7: detected capacity change from 0 to 1024 [ 169.275923][ T9756] EXT4-fs (loop0): Total free blocks count 0 [ 169.288196][ T9756] EXT4-fs (loop0): Free/Dirty block details [ 169.293414][ T9763] bridge0: port 1(team0) entered blocking state [ 169.294177][ T9756] EXT4-fs (loop0): free_blocks=68451041280 [ 169.294195][ T9756] EXT4-fs (loop0): dirty_blocks=16 [ 169.294208][ T9756] EXT4-fs (loop0): Block reservation details [ 169.294220][ T9756] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 169.325705][ T9763] bridge0: port 1(team0) entered disabled state [ 169.333198][ T9763] team0: entered allmulticast mode [ 169.342900][ T9763] team0: entered promiscuous mode [ 169.388433][ T9766] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 169.416245][ T9776] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1791'. [ 169.456264][ T9773] loop1: detected capacity change from 0 to 2048 [ 169.487873][ T9782] loop0: detected capacity change from 0 to 512 [ 169.521313][ T9773] EXT4-fs: Ignoring removed nobh option [ 169.527992][ T9782] EXT4-fs (loop0): orphan cleanup on readonly fs [ 169.549599][ T9782] EXT4-fs error (device loop0): ext4_orphan_get:1419: comm syz.0.1795: bad orphan inode 13 [ 169.576519][ T9782] ext4_test_bit(bit=12, block=18) = 1 [ 169.581992][ T9782] is_bad_inode(inode)=0 [ 169.582101][ T9785] loop7: detected capacity change from 0 to 1024 [ 169.586135][ T9782] NEXT_ORPHAN(inode)=2130706432 [ 169.586146][ T9782] max_ino=32 [ 169.586153][ T9782] i_nlink=1 [ 169.593063][ T9785] EXT4-fs: Ignoring removed nobh option [ 169.609805][ T9785] EXT4-fs: Ignoring removed bh option [ 169.655696][ T9782] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1795'. [ 169.978382][ T9783] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4113: comm syz.7.1794: Allocating blocks 497-513 which overlap fs metadata [ 170.072572][ T9799] loop0: detected capacity change from 0 to 512 [ 170.205058][ T9799] ext4 filesystem being mounted at /350/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 170.492570][ T9783] EXT4-fs (loop7): pa ffff888100689d90: logic 592, phys. 449, len 4 [ 170.500650][ T9783] EXT4-fs error (device loop7): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 1 [ 171.669813][ T9826] loop1: detected capacity change from 0 to 1024 [ 171.707392][ T9826] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 49 with max blocks 1 with error 28 [ 171.719729][ T9826] EXT4-fs (loop1): This should not happen!! Data will be lost [ 171.719729][ T9826] [ 171.729402][ T9826] EXT4-fs (loop1): Total free blocks count 0 [ 171.735381][ T9826] EXT4-fs (loop1): Free/Dirty block details [ 171.741280][ T9826] EXT4-fs (loop1): free_blocks=0 [ 171.746357][ T9826] EXT4-fs (loop1): dirty_blocks=0 [ 171.751398][ T9826] EXT4-fs (loop1): Block reservation details [ 171.757427][ T9826] EXT4-fs (loop1): i_reserved_data_blocks=0 [ 171.947211][ T9830] loop6: detected capacity change from 0 to 512 [ 172.141302][ T9830] ext4 filesystem being mounted at /54/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 172.183486][ T29] kauditd_printk_skb: 94 callbacks suppressed [ 172.183498][ T29] audit: type=1326 audit(1752107047.089:2574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9837 comm="syz.7.1812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cd215e929 code=0x7ffc0000 [ 172.213161][ T29] audit: type=1326 audit(1752107047.089:2575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9837 comm="syz.7.1812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cd215e929 code=0x7ffc0000 [ 172.236603][ T29] audit: type=1326 audit(1752107047.089:2576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9837 comm="syz.7.1812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2cd215e929 code=0x7ffc0000 [ 172.260051][ T29] audit: type=1326 audit(1752107047.089:2577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9837 comm="syz.7.1812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cd215e929 code=0x7ffc0000 [ 172.283605][ T29] audit: type=1326 audit(1752107047.089:2578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9837 comm="syz.7.1812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cd215e929 code=0x7ffc0000 [ 172.307079][ T29] audit: type=1326 audit(1752107047.089:2579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9837 comm="syz.7.1812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2cd215e929 code=0x7ffc0000 [ 172.330474][ T29] audit: type=1326 audit(1752107047.089:2580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9837 comm="syz.7.1812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cd215e929 code=0x7ffc0000 [ 172.354141][ T29] audit: type=1326 audit(1752107047.089:2581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9837 comm="syz.7.1812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2cd215e929 code=0x7ffc0000 [ 172.377581][ T29] audit: type=1326 audit(1752107047.089:2582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9837 comm="syz.7.1812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cd215e929 code=0x7ffc0000 [ 172.499121][ T9840] loop7: detected capacity change from 0 to 1024 [ 172.506272][ T9840] EXT4-fs: Ignoring removed nobh option [ 172.511910][ T9840] EXT4-fs: Ignoring removed bh option [ 172.560175][ T29] audit: type=1326 audit(1752107047.319:2583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9837 comm="syz.7.1812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2cd215e929 code=0x7ffc0000 [ 172.785310][ T9846] loop1: detected capacity change from 0 to 512 [ 172.837203][ T9846] EXT4-fs (loop1): orphan cleanup on readonly fs [ 172.893243][ T9846] EXT4-fs error (device loop1): ext4_orphan_get:1419: comm syz.1.1813: bad orphan inode 13 [ 172.939530][ T9846] ext4_test_bit(bit=12, block=18) = 1 [ 172.944959][ T9846] is_bad_inode(inode)=0 [ 172.949132][ T9846] NEXT_ORPHAN(inode)=2130706432 [ 172.954031][ T9846] max_ino=32 [ 172.957273][ T9846] i_nlink=1 [ 173.007016][ T9846] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1813'. [ 173.298527][ T9875] 9pnet_rdma: rdma_create_trans (9875): problem binding to privport: 13 [ 173.307867][ T9877] loop0: detected capacity change from 0 to 2048 [ 173.314527][ T9873] bridge0: port 1(team0) entered blocking state [ 173.315613][ T9877] EXT4-fs: Ignoring removed nobh option [ 173.321430][ T9873] bridge0: port 1(team0) entered disabled state [ 173.347740][ T9873] team0: entered allmulticast mode [ 173.388880][ T9873] team0: entered promiscuous mode [ 173.559945][ T9885] loop5: detected capacity change from 0 to 1024 [ 173.727055][ T9886] loop7: detected capacity change from 0 to 1024 [ 173.753686][ T9885] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 49 with max blocks 1 with error 28 [ 173.766060][ T9885] EXT4-fs (loop5): This should not happen!! Data will be lost [ 173.766060][ T9885] [ 173.775793][ T9885] EXT4-fs (loop5): Total free blocks count 0 [ 173.781812][ T9885] EXT4-fs (loop5): Free/Dirty block details [ 173.787709][ T9885] EXT4-fs (loop5): free_blocks=0 [ 173.792731][ T9885] EXT4-fs (loop5): dirty_blocks=0 [ 173.797745][ T9885] EXT4-fs (loop5): Block reservation details [ 173.803787][ T9885] EXT4-fs (loop5): i_reserved_data_blocks=0 [ 173.837455][ T9886] EXT4-fs: Ignoring removed nobh option [ 173.843116][ T9886] EXT4-fs: Ignoring removed bh option [ 174.434284][ T9905] loop1: detected capacity change from 0 to 128 [ 174.486138][ T9905] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 174.523808][ T9907] loop0: detected capacity change from 0 to 512 [ 174.570931][ T9907] EXT4-fs (loop0): orphan cleanup on readonly fs [ 174.609714][ T9907] EXT4-fs error (device loop0): ext4_orphan_get:1419: comm syz.0.1826: bad orphan inode 13 [ 174.650485][ T9907] ext4_test_bit(bit=12, block=18) = 1 [ 174.655900][ T9907] is_bad_inode(inode)=0 [ 174.660070][ T9907] NEXT_ORPHAN(inode)=2130706432 [ 174.664938][ T9907] max_ino=32 [ 174.668250][ T9907] i_nlink=1 [ 174.706189][ T9907] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1826'. [ 174.959524][ T41] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 174.996379][ T9916] loop7: detected capacity change from 0 to 512 [ 174.999832][ T41] bio_check_eod: 104 callbacks suppressed [ 174.999891][ T41] kworker/u8:2: attempt to access beyond end of device [ 174.999891][ T41] loop1: rw=1, sector=137, nr_sectors = 8 limit=128 [ 175.025644][ T9920] loop5: detected capacity change from 0 to 512 [ 175.034250][ T41] kworker/u8:2: attempt to access beyond end of device [ 175.034250][ T41] loop1: rw=1, sector=153, nr_sectors = 8 limit=128 [ 175.048285][ T41] kworker/u8:2: attempt to access beyond end of device [ 175.048285][ T41] loop1: rw=1, sector=169, nr_sectors = 8 limit=128 [ 175.065872][ T9920] ext4 filesystem being mounted at /323/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 175.089442][ T9916] EXT4-fs (loop7): orphan cleanup on readonly fs [ 175.139468][ T9916] EXT4-fs error (device loop7): ext4_orphan_get:1419: comm syz.7.1831: bad orphan inode 13 [ 175.150227][ T41] kworker/u8:2: attempt to access beyond end of device [ 175.150227][ T41] loop1: rw=1, sector=185, nr_sectors = 8 limit=128 [ 175.173380][ T41] kworker/u8:2: attempt to access beyond end of device [ 175.173380][ T41] loop1: rw=1, sector=201, nr_sectors = 8 limit=128 [ 175.182954][ T9916] ext4_test_bit(bit=12, block=18) = 1 [ 175.188398][ T41] kworker/u8:2: attempt to access beyond end of device [ 175.188398][ T41] loop1: rw=1, sector=217, nr_sectors = 8 limit=128 [ 175.192081][ T9916] is_bad_inode(inode)=0 [ 175.205707][ T41] kworker/u8:2: attempt to access beyond end of device [ 175.205707][ T41] loop1: rw=1, sector=233, nr_sectors = 8 limit=128 [ 175.205745][ T41] kworker/u8:2: attempt to access beyond end of device [ 175.205745][ T41] loop1: rw=1, sector=249, nr_sectors = 8 limit=128 [ 175.205801][ T41] kworker/u8:2: attempt to access beyond end of device [ 175.205801][ T41] loop1: rw=1, sector=265, nr_sectors = 8 limit=128 [ 175.205832][ T41] kworker/u8:2: attempt to access beyond end of device [ 175.205832][ T41] loop1: rw=1, sector=281, nr_sectors = 8 limit=128 [ 175.264222][ T9916] NEXT_ORPHAN(inode)=2130706432 [ 175.269058][ T9916] max_ino=32 [ 175.272262][ T9916] i_nlink=1 [ 175.341667][ T9925] ipvlan0: entered promiscuous mode [ 175.482824][ T9947] loop7: detected capacity change from 0 to 512 [ 175.522015][ T9947] EXT4-fs (loop7): orphan cleanup on readonly fs [ 175.552506][ T9947] EXT4-fs error (device loop7): ext4_orphan_get:1419: comm syz.7.1840: bad orphan inode 13 [ 175.591451][ T9947] ext4_test_bit(bit=12, block=18) = 1 [ 175.596936][ T9947] is_bad_inode(inode)=0 [ 175.601222][ T9947] NEXT_ORPHAN(inode)=2130706432 [ 175.606337][ T9947] max_ino=32 [ 175.609659][ T9947] i_nlink=1 [ 175.663125][ T9947] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1840'. [ 175.784298][ T9970] loop7: detected capacity change from 0 to 2048 [ 175.830629][ T9975] can: request_module (can-proto-0) failed. [ 175.860756][ T3508] loop7: p1 < > p4 [ 175.865293][ T3508] loop7: p4 size 8388608 extends beyond EOD, truncated [ 175.882686][ T9970] loop7: p1 < > p4 [ 175.890022][ T9970] loop7: p4 size 8388608 extends beyond EOD, truncated [ 175.963601][ T3858] udevd[3858]: inotify_add_watch(7, /dev/loop7p4, 10) failed: No such file or directory [ 175.978698][ T3508] udevd[3508]: inotify_add_watch(7, /dev/loop7p1, 10) failed: No such file or directory [ 176.040780][ T3858] udevd[3858]: inotify_add_watch(7, /dev/loop7p4, 10) failed: No such file or directory [ 176.060375][ T3508] udevd[3508]: inotify_add_watch(7, /dev/loop7p1, 10) failed: No such file or directory [ 176.097121][ T9997] loop0: detected capacity change from 0 to 1024 [ 176.122833][ T9997] EXT4-fs: Ignoring removed nobh option [ 176.128602][ T9997] EXT4-fs: Ignoring removed bh option [ 176.328230][T10043] loop6: detected capacity change from 0 to 512 [ 176.346362][T10045] can: request_module (can-proto-0) failed. [ 176.350070][T10043] ext4: Unknown parameter 'smackfshat' [ 176.508249][T10050] loop6: detected capacity change from 0 to 1024 [ 176.542931][T10053] loop1: detected capacity change from 0 to 2048 [ 176.579682][ T3858] loop1: p1 < > p4 [ 176.586250][ T3858] loop1: p4 size 8388608 extends beyond EOD, truncated [ 176.683434][T10053] loop1: p1 < > p4 [ 176.699821][T10053] loop1: p4 size 8388608 extends beyond EOD, truncated [ 176.727852][ T9989] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4113: comm syz.0.1846: Allocating blocks 497-513 which overlap fs metadata [ 177.123537][ T3508] udevd[3508]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 177.123691][ T3858] udevd[3858]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 177.149945][T10069] loop1: detected capacity change from 0 to 128 [ 177.184113][ T3508] udevd[3508]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 177.184757][ T3858] udevd[3858]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 177.224313][ T9989] EXT4-fs (loop0): pa ffff888100689d90: logic 560, phys. 433, len 5 [ 177.232411][ T9989] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 1 [ 177.301422][T10071] loop5: detected capacity change from 0 to 512 [ 177.382846][T10071] ext4 filesystem being mounted at /329/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 177.538498][T10079] loop7: detected capacity change from 0 to 512 [ 177.593495][T10079] ext4 filesystem being mounted at /32/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 177.620398][ T29] kauditd_printk_skb: 123 callbacks suppressed [ 177.620412][ T29] audit: type=1326 audit(1752107052.529:2707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10068 comm="syz.1.1859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff25ea7e929 code=0x7ffc0000 [ 177.666612][ T29] audit: type=1326 audit(1752107052.569:2708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10068 comm="syz.1.1859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff25ea7e929 code=0x7ffc0000 [ 177.691550][T10079] Quota error (device loop7): do_check_range: Getting block 1702428675 out of range 1-5 [ 177.701409][T10079] Quota error (device loop7): qtree_read_dquot: Can't read quota structure for id 0 [ 177.710844][T10079] EXT4-fs error (device loop7): ext4_acquire_dquot:6933: comm syz.7.1863: Failed to acquire dquot type 1 [ 177.743142][ T29] audit: type=1326 audit(1752107052.629:2709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10086 comm="syz.6.1865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f203d6de929 code=0x7ffc0000 [ 177.766655][ T29] audit: type=1326 audit(1752107052.629:2710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10086 comm="syz.6.1865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f203d6de929 code=0x7ffc0000 [ 177.790162][ T29] audit: type=1326 audit(1752107052.639:2711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10086 comm="syz.6.1865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f203d6de929 code=0x7ffc0000 [ 177.813628][ T29] audit: type=1326 audit(1752107052.639:2712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10086 comm="syz.6.1865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f203d6de929 code=0x7ffc0000 [ 177.837148][ T29] audit: type=1326 audit(1752107052.639:2713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10086 comm="syz.6.1865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f203d6de929 code=0x7ffc0000 [ 177.860637][ T29] audit: type=1326 audit(1752107052.639:2714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10086 comm="syz.6.1865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f203d6de929 code=0x7ffc0000 [ 177.972366][T10092] loop6: detected capacity change from 0 to 512 [ 177.986355][T10094] loop7: detected capacity change from 0 to 1024 [ 178.011296][T10092] ext4: Unknown parameter 'smackfshat' [ 178.088130][T10097] loop0: detected capacity change from 0 to 1024 [ 178.139780][T10097] EXT4-fs: Ignoring removed nobh option [ 178.145481][T10097] EXT4-fs: Ignoring removed bh option [ 178.145525][T10101] loop7: detected capacity change from 0 to 2048 [ 178.231141][ T3508] loop7: p1 < > p4 [ 178.242549][ T3508] loop7: p4 size 8388608 extends beyond EOD, truncated [ 178.274980][T10101] loop7: p1 < > p4 [ 178.295073][T10101] loop7: p4 size 8388608 extends beyond EOD, truncated [ 178.359036][T10115] loop7: detected capacity change from 0 to 512 [ 178.397223][ T3508] udevd[3508]: inotify_add_watch(7, /dev/loop7p1, 10) failed: No such file or directory [ 178.400370][ T3858] udevd[3858]: inotify_add_watch(7, /dev/loop7p4, 10) failed: No such file or directory [ 178.452085][T10115] ext4 filesystem being mounted at /35/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 178.466502][T10121] loop6: detected capacity change from 0 to 128 [ 178.513514][T10115] EXT4-fs error (device loop7): ext4_acquire_dquot:6933: comm syz.7.1872: Failed to acquire dquot type 1 [ 178.616642][T10096] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4113: comm syz.0.1869: Allocating blocks 497-513 which overlap fs metadata [ 178.704299][T10127] loop7: detected capacity change from 0 to 1024 [ 178.760395][T10127] EXT4-fs: Ignoring removed nobh option [ 178.766026][T10127] EXT4-fs: Ignoring removed bh option [ 178.790658][T10129] loop1: detected capacity change from 0 to 2048 [ 178.797484][T10129] EXT4-fs: Ignoring removed nobh option [ 179.009171][T10097] EXT4-fs (loop0): pa ffff888100689d90: logic 448, phys. 177, len 21 [ 179.017394][T10097] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 1 [ 179.281621][T10125] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4113: comm syz.7.1875: Allocating blocks 497-513 which overlap fs metadata [ 179.369559][T10141] loop0: detected capacity change from 0 to 512 [ 179.401737][T10141] ext4 filesystem being mounted at /364/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 179.572012][T10146] loop1: detected capacity change from 0 to 2048 [ 179.584662][T10125] EXT4-fs (loop7): pa ffff888106e27930: logic 496, phys. 241, len 17 [ 179.592823][T10125] EXT4-fs error (device loop7): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 1 [ 179.604059][T10148] loop6: detected capacity change from 0 to 1024 [ 179.613488][T10148] EXT4-fs: Ignoring removed nobh option [ 179.619065][T10148] EXT4-fs: inline encryption not supported [ 179.641963][T10146] loop1: p1 < > p4 [ 179.646801][T10146] loop1: p4 size 8388608 extends beyond EOD, truncated [ 179.662181][T10148] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4113: comm syz.6.1880: Allocating blocks 385-513 which overlap fs metadata [ 179.694887][ T2995] loop1: p1 < > p4 [ 179.702391][ T2995] loop1: p4 size 8388608 extends beyond EOD, truncated [ 179.749350][T10148] EXT4-fs (loop6): pa ffff888100689e70: logic 16, phys. 129, len 24 [ 179.757395][T10148] EXT4-fs error (device loop6): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 179.772315][T10148] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 28 [ 179.784572][T10148] EXT4-fs (loop6): This should not happen!! Data will be lost [ 179.784572][T10148] [ 179.794655][T10148] EXT4-fs (loop6): Total free blocks count 0 [ 179.800741][T10148] EXT4-fs (loop6): Free/Dirty block details [ 179.806660][T10148] EXT4-fs (loop6): free_blocks=128 [ 179.811945][T10148] EXT4-fs (loop6): dirty_blocks=0 [ 179.817000][T10148] EXT4-fs (loop6): Block reservation details [ 179.823048][T10148] EXT4-fs (loop6): i_reserved_data_blocks=0 [ 179.845591][T10152] team0: left allmulticast mode [ 179.850605][T10152] team0: left promiscuous mode [ 179.855640][T10152] bridge0: port 1(team0) entered disabled state [ 179.872484][T10157] loop5: detected capacity change from 0 to 512 [ 179.888710][T10157] EXT4-fs (loop5): orphan cleanup on readonly fs [ 179.918112][T10157] EXT4-fs error (device loop5): ext4_orphan_get:1419: comm syz.5.1883: bad orphan inode 13 [ 179.981097][T10157] ext4_test_bit(bit=12, block=18) = 1 [ 179.986547][T10157] is_bad_inode(inode)=0 [ 179.990755][T10157] NEXT_ORPHAN(inode)=2130706432 [ 179.995612][T10157] max_ino=32 [ 179.998814][T10157] i_nlink=1 [ 180.001538][T10162] loop1: detected capacity change from 0 to 2048 [ 180.010430][T10162] EXT4-fs: Ignoring removed nobh option [ 180.018115][T10157] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1883'. [ 180.036303][T10163] team0: left allmulticast mode [ 180.041364][T10163] team_slave_0: left allmulticast mode [ 180.046891][T10163] team_slave_1: left allmulticast mode [ 180.052409][T10163] team0: left promiscuous mode [ 180.057282][T10163] team_slave_0: left promiscuous mode [ 180.062864][T10163] team_slave_1: left promiscuous mode [ 180.068427][T10163] bridge0: port 3(team0) entered disabled state [ 180.085707][T10163] bridge_slave_0: left allmulticast mode [ 180.091450][T10163] bridge_slave_0: left promiscuous mode [ 180.097102][T10163] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.134394][T10163] bridge_slave_1: left allmulticast mode [ 180.140239][T10163] bridge_slave_1: left promiscuous mode [ 180.146146][T10163] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.165758][T10163] bond0: (slave bond_slave_0): Releasing backup interface [ 180.174396][T10172] loop5: detected capacity change from 0 to 2048 [ 180.182881][T10172] EXT4-fs: Ignoring removed nobh option [ 180.183513][T10173] loop7: detected capacity change from 0 to 256 [ 180.207035][T10163] bond0: (slave bond_slave_1): Releasing backup interface [ 180.246421][T10163] team0: Port device team_slave_0 removed [ 180.271463][T10163] team0: Port device team_slave_1 removed [ 180.279164][T10163] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 180.286678][T10163] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 180.295133][T10163] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 180.302646][T10163] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 180.455018][T10186] loop1: detected capacity change from 0 to 2048 [ 180.463698][T10186] EXT4-fs: Ignoring removed nobh option [ 180.667141][T10196] loop6: detected capacity change from 0 to 512 [ 180.775838][T10196] ext4 filesystem being mounted at /69/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 180.822790][T10199] loop0: detected capacity change from 0 to 512 [ 180.887800][T10199] ext4 filesystem being mounted at /368/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 181.592286][T10239] loop5: detected capacity change from 0 to 2048 [ 181.685717][T10243] loop7: detected capacity change from 0 to 512 [ 182.172799][T10243] ext4 filesystem being mounted at /45/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 182.282261][T10239] loop5: p1 < > p4 [ 182.474547][T10239] loop5: p4 size 8388608 extends beyond EOD, truncated [ 182.835010][T10260] loop0: detected capacity change from 0 to 512 [ 183.269599][T10260] __quota_error: 139 callbacks suppressed [ 183.269615][T10260] Quota error (device loop0): v2_read_file_info: Free block number 1 out of range (1, 6). [ 183.306980][T10267] loop7: detected capacity change from 0 to 512 [ 183.315015][ T3859] udevd[3859]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 183.325926][ T3858] udevd[3858]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 183.339557][T10267] ext4: Unknown parameter 'smackfshat' [ 183.403412][T10260] EXT4-fs warning (device loop0): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 183.540531][T10277] team0: left allmulticast mode [ 183.545658][T10277] team0: left promiscuous mode [ 183.550971][T10277] bridge0: port 1(team0) entered disabled state [ 183.594098][T10260] EXT4-fs (loop0): mount failed [ 183.816814][T10291] loop7: detected capacity change from 0 to 1024 [ 183.823343][T10287] loop6: detected capacity change from 0 to 2048 [ 183.834440][T10291] EXT4-fs: Ignoring removed nobh option [ 183.840108][T10291] EXT4-fs: inline encryption not supported [ 183.872243][T10287] EXT4-fs: Ignoring removed nobh option [ 184.099313][T10300] loop1: detected capacity change from 0 to 1024 [ 184.187117][T10291] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4113: comm syz.7.1922: Allocating blocks 385-513 which overlap fs metadata [ 184.244207][T10300] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 49 with max blocks 1 with error 28 [ 184.256726][T10300] EXT4-fs (loop1): This should not happen!! Data will be lost [ 184.256726][T10300] [ 184.266479][T10300] EXT4-fs (loop1): Total free blocks count 0 [ 184.272491][T10300] EXT4-fs (loop1): Free/Dirty block details [ 184.278388][T10300] EXT4-fs (loop1): free_blocks=0 [ 184.283355][T10300] EXT4-fs (loop1): dirty_blocks=0 [ 184.288386][T10300] EXT4-fs (loop1): Block reservation details [ 184.294457][T10300] EXT4-fs (loop1): i_reserved_data_blocks=0 [ 184.429826][T10291] EXT4-fs (loop7): pa ffff888100689ee0: logic 16, phys. 129, len 24 [ 184.437862][T10291] EXT4-fs error (device loop7): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 184.556788][T10291] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 28 [ 184.569255][T10291] EXT4-fs (loop7): This should not happen!! Data will be lost [ 184.569255][T10291] [ 184.578881][T10291] EXT4-fs (loop7): Total free blocks count 0 [ 184.584939][T10291] EXT4-fs (loop7): Free/Dirty block details [ 184.590849][T10291] EXT4-fs (loop7): free_blocks=128 [ 184.595968][T10291] EXT4-fs (loop7): dirty_blocks=0 [ 184.601036][T10291] EXT4-fs (loop7): Block reservation details [ 184.607099][T10291] EXT4-fs (loop7): i_reserved_data_blocks=0 [ 184.812110][T10305] loop5: detected capacity change from 0 to 512 [ 184.846143][T10305] EXT4-fs: Ignoring removed oldalloc option [ 184.899765][T10305] EXT4-fs (loop5): 1 truncate cleaned up [ 184.918195][ T29] audit: type=1400 audit(1752107059.819:2852): avc: denied { ioctl } for pid=10304 comm="syz.5.1924" path="/338/file1/file1" dev="loop5" ino=15 ioctlcmd=0x5829 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 185.182807][T10314] loop6: detected capacity change from 0 to 512 [ 185.214220][T10314] ext4: Unknown parameter 'smackfshat' [ 185.569385][T10324] veth0_vlan: entered allmulticast mode [ 185.582577][T10308] loop5: detected capacity change from 0 to 512 [ 185.623764][T10308] EXT4-fs (loop5): unsupported inode size: 22272 [ 185.630196][T10308] EXT4-fs (loop5): blocksize: 1024 [ 185.679108][ T29] audit: type=1326 audit(1752107060.579:2853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10330 comm="syz.7.1933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cd215e929 code=0x7ffc0000 [ 185.702762][ T29] audit: type=1326 audit(1752107060.579:2854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10330 comm="syz.7.1933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cd215e929 code=0x7ffc0000 [ 185.726249][ T29] audit: type=1326 audit(1752107060.579:2855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10330 comm="syz.7.1933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2cd215e929 code=0x7ffc0000 [ 185.749836][ T29] audit: type=1326 audit(1752107060.579:2856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10330 comm="syz.7.1933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cd215e929 code=0x7ffc0000 [ 185.773454][ T29] audit: type=1326 audit(1752107060.579:2857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10330 comm="syz.7.1933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cd215e929 code=0x7ffc0000 [ 185.797043][ T29] audit: type=1326 audit(1752107060.589:2858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10330 comm="syz.7.1933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2cd215e929 code=0x7ffc0000 [ 185.820811][ T29] audit: type=1326 audit(1752107060.699:2859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10330 comm="syz.7.1933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cd215e929 code=0x7ffc0000 [ 185.844349][ T29] audit: type=1326 audit(1752107060.709:2860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10330 comm="syz.7.1933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cd215e929 code=0x7ffc0000 [ 185.923535][T10334] loop5: detected capacity change from 0 to 2048 [ 185.931684][T10334] EXT4-fs: Ignoring removed nobh option [ 185.951391][T10335] loop1: detected capacity change from 0 to 512 [ 186.006830][T10335] ext4 filesystem being mounted at /365/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 186.092185][T10340] netlink: 'syz.6.1935': attribute type 13 has an invalid length. [ 186.155120][T10340] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 186.320423][T10346] loop6: detected capacity change from 0 to 512 [ 186.338149][T10346] EXT4-fs: Ignoring removed oldalloc option [ 186.411586][T10346] EXT4-fs (loop6): 1 truncate cleaned up [ 186.697116][T10357] loop6: detected capacity change from 0 to 1024 [ 187.155595][T10357] EXT4-fs mount: 94 callbacks suppressed [ 187.155613][T10357] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 187.242475][T10357] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 49 with max blocks 1 with error 28 [ 187.255021][T10357] EXT4-fs (loop6): This should not happen!! Data will be lost [ 187.255021][T10357] [ 187.264682][T10357] EXT4-fs (loop6): Total free blocks count 0 [ 187.270686][T10357] EXT4-fs (loop6): Free/Dirty block details [ 187.276576][T10357] EXT4-fs (loop6): free_blocks=0 [ 187.281519][T10357] EXT4-fs (loop6): dirty_blocks=0 [ 187.286542][T10357] EXT4-fs (loop6): Block reservation details [ 187.292530][T10357] EXT4-fs (loop6): i_reserved_data_blocks=0 [ 187.510430][T10362] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1941'. [ 187.622322][T10367] loop0: detected capacity change from 0 to 2048 [ 187.670955][T10367] EXT4-fs: Ignoring removed nobh option [ 188.154959][T10367] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 188.210600][T10372] can: request_module (can-proto-0) failed. [ 188.312745][ T8842] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.323100][T10382] 9pnet_rdma: rdma_create_trans (10382): problem binding to privport: 13 [ 188.345467][T10384] bridge0: port 1(team0) entered blocking state [ 188.352177][T10384] bridge0: port 1(team0) entered disabled state [ 188.391149][T10384] team0: entered allmulticast mode [ 188.407130][T10384] team0: entered promiscuous mode [ 188.407485][T10388] loop6: detected capacity change from 0 to 512 [ 188.440919][T10388] EXT4-fs: Ignoring removed oldalloc option [ 188.466148][T10388] EXT4-fs (loop6): 1 truncate cleaned up [ 188.486231][T10388] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 188.506790][T10390] ipvlan2: entered promiscuous mode [ 188.550470][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.560788][ T8842] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.581862][T10393] lo speed is unknown, defaulting to 1000 [ 188.638051][T10395] loop6: detected capacity change from 0 to 2048 [ 188.651291][T10396] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 188.679637][T10395] EXT4-fs: Ignoring removed nobh option [ 188.686171][T10396] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 188.732455][T10395] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 188.778622][ T29] kauditd_printk_skb: 41 callbacks suppressed [ 188.778637][ T29] audit: type=1326 audit(1752107063.679:2902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10405 comm="syz.0.1956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39b31fe929 code=0x7ffc0000 [ 188.884968][T10407] loop0: detected capacity change from 0 to 1024 [ 188.891432][ T29] audit: type=1326 audit(1752107063.719:2903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10405 comm="syz.0.1956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f39b31fe929 code=0x7ffc0000 [ 188.915087][ T29] audit: type=1326 audit(1752107063.719:2904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10405 comm="syz.0.1956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39b31fe929 code=0x7ffc0000 [ 188.938628][ T29] audit: type=1326 audit(1752107063.719:2905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10405 comm="syz.0.1956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39b31fe929 code=0x7ffc0000 [ 188.962244][ T29] audit: type=1326 audit(1752107063.719:2906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10405 comm="syz.0.1956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f39b31fe929 code=0x7ffc0000 [ 188.985808][ T29] audit: type=1326 audit(1752107063.719:2907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10405 comm="syz.0.1956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39b31fe929 code=0x7ffc0000 [ 189.009549][ T29] audit: type=1326 audit(1752107063.719:2908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10405 comm="syz.0.1956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39b31fe929 code=0x7ffc0000 [ 189.033051][ T29] audit: type=1326 audit(1752107063.719:2909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10405 comm="syz.0.1956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f39b31fe929 code=0x7ffc0000 [ 189.034708][T10407] EXT4-fs: Ignoring removed nobh option [ 189.056599][ T29] audit: type=1326 audit(1752107063.719:2910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10405 comm="syz.0.1956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39b31fe929 code=0x7ffc0000 [ 189.062173][T10407] EXT4-fs: Ignoring removed bh option [ 189.085606][ T29] audit: type=1326 audit(1752107063.719:2911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10405 comm="syz.0.1956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f39b31fe929 code=0x7ffc0000 [ 189.164013][T10407] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 189.201810][ T8842] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.316975][T10419] loop6: detected capacity change from 0 to 2048 [ 189.330645][T10417] loop7: detected capacity change from 0 to 1024 [ 189.352101][T10417] EXT4-fs: Ignoring removed nobh option [ 189.357692][T10417] EXT4-fs: inline encryption not supported [ 189.385816][T10419] EXT4-fs: Ignoring removed nobh option [ 189.408396][T10422] loop5: detected capacity change from 0 to 1024 [ 189.417051][T10422] EXT4-fs: Ignoring removed nobh option [ 189.422719][T10422] EXT4-fs: Ignoring removed bh option [ 189.450303][T10417] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 189.478945][T10419] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 189.523682][T10417] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4113: comm syz.7.1960: Allocating blocks 385-513 which overlap fs metadata [ 189.526080][ T3307] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.551305][T10422] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 189.579469][T10417] EXT4-fs (loop7): pa ffff888100689ee0: logic 16, phys. 129, len 24 [ 189.587515][T10417] EXT4-fs error (device loop7): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 189.600045][T10417] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 28 [ 189.612344][T10417] EXT4-fs (loop7): This should not happen!! Data will be lost [ 189.612344][T10417] [ 189.622123][T10417] EXT4-fs (loop7): Total free blocks count 0 [ 189.628260][T10417] EXT4-fs (loop7): Free/Dirty block details [ 189.634325][T10417] EXT4-fs (loop7): free_blocks=128 [ 189.639535][T10417] EXT4-fs (loop7): dirty_blocks=0 [ 189.644631][T10417] EXT4-fs (loop7): Block reservation details [ 189.650663][T10417] EXT4-fs (loop7): i_reserved_data_blocks=0 [ 189.711716][T10421] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4113: comm syz.5.1961: Allocating blocks 497-513 which overlap fs metadata [ 189.794683][T10436] loop7: detected capacity change from 0 to 512 [ 189.821328][T10436] EXT4-fs (loop7): orphan cleanup on readonly fs [ 189.844767][T10436] EXT4-fs error (device loop7): ext4_orphan_get:1419: comm syz.7.1963: bad orphan inode 13 [ 189.860861][T10436] ext4_test_bit(bit=12, block=18) = 1 [ 189.866276][T10436] is_bad_inode(inode)=0 [ 189.870579][T10436] NEXT_ORPHAN(inode)=2130706432 [ 189.875501][T10436] max_ino=32 [ 189.878691][T10436] i_nlink=1 [ 189.912705][T10436] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 189.971446][T10436] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1963'. [ 189.982069][T10439] loop1: detected capacity change from 0 to 512 [ 189.987724][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.993027][T10439] EXT4-fs: Ignoring removed oldalloc option [ 190.013916][ T9420] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.028439][T10439] EXT4-fs (loop1): 1 truncate cleaned up [ 190.038601][T10439] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 190.076396][ T3307] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.140362][T10449] loop7: detected capacity change from 0 to 1024 [ 190.149035][T10449] EXT4-fs: Ignoring removed nobh option [ 190.154809][T10451] loop0: detected capacity change from 0 to 512 [ 190.154811][T10449] EXT4-fs: Ignoring removed bh option [ 190.155122][T10451] ext4: Unknown parameter 'smackfshat' [ 190.205480][T10449] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 190.222703][ T8842] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.266725][T10422] EXT4-fs (loop5): pa ffff888106e27a80: logic 0, phys. 113, len 25 [ 190.274742][T10422] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:5364: group 0, free 22, pa_free 23 [ 190.310867][ T5454] EXT4-fs error (device loop5): mb_free_blocks:1948: group 0, inode 15: block 433:freeing already freed block (bit 27); block bitmap corrupt. [ 190.339057][ T3820] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.577055][T10465] loop0: detected capacity change from 0 to 1024 [ 190.642721][T10465] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 190.668304][T10465] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 49 with max blocks 1 with error 28 [ 190.680619][T10465] EXT4-fs (loop0): This should not happen!! Data will be lost [ 190.680619][T10465] [ 190.690282][T10465] EXT4-fs (loop0): Total free blocks count 0 [ 190.696330][T10465] EXT4-fs (loop0): Free/Dirty block details [ 190.702293][T10465] EXT4-fs (loop0): free_blocks=0 [ 190.707218][T10465] EXT4-fs (loop0): dirty_blocks=0 [ 190.712258][T10465] EXT4-fs (loop0): Block reservation details [ 190.718253][T10465] EXT4-fs (loop0): i_reserved_data_blocks=0 [ 191.438121][T10486] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1978'. [ 191.622506][ T9420] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.687363][T10493] loop7: detected capacity change from 0 to 512 [ 191.712928][T10493] ext4: Unknown parameter 'smackfshat' [ 191.724947][T10495] loop1: detected capacity change from 0 to 2048 [ 191.808851][T10497] netlink: 'syz.6.1984': attribute type 13 has an invalid length. [ 191.821060][ T3858] loop1: p1 < > p4 [ 191.825627][ T3858] loop1: p4 size 8388608 extends beyond EOD, truncated [ 191.882380][T10497] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 191.910150][T10495] loop1: p1 < > p4 [ 191.914429][T10495] loop1: p4 size 8388608 extends beyond EOD, truncated [ 191.962286][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.973115][ T2995] loop1: p1 < > p4 [ 191.977334][ T2995] loop1: p4 size 8388608 extends beyond EOD, truncated [ 191.986706][T10499] 9pnet_rdma: rdma_create_trans (10499): problem binding to privport: 13 [ 192.054127][ T3508] udevd[3508]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 192.055909][T10511] loop6: detected capacity change from 0 to 2048 [ 192.072146][ T3859] udevd[3859]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 192.093482][T10511] EXT4-fs: Ignoring removed nobh option [ 192.124274][T10511] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 192.139446][T10509] bridge0: port 1(team0) entered blocking state [ 192.146222][T10509] bridge0: port 1(team0) entered disabled state [ 192.153822][T10509] team0: entered allmulticast mode [ 192.163230][T10509] team0: entered promiscuous mode [ 192.305730][T10525] loop0: detected capacity change from 0 to 2048 [ 192.323272][T10527] loop7: detected capacity change from 0 to 512 [ 192.342669][T10527] EXT4-fs (loop7): orphan cleanup on readonly fs [ 192.359792][ T3508] loop0: p1 < > p4 [ 192.365252][ T3508] loop0: p4 size 8388608 extends beyond EOD, truncated [ 192.379941][T10527] EXT4-fs error (device loop7): ext4_orphan_get:1419: comm syz.7.1995: bad orphan inode 13 [ 192.410996][T10525] loop0: p1 < > p4 [ 192.423694][T10525] loop0: p4 size 8388608 extends beyond EOD, truncated [ 192.440119][T10527] ext4_test_bit(bit=12, block=18) = 1 [ 192.445529][T10527] is_bad_inode(inode)=0 [ 192.449824][T10527] NEXT_ORPHAN(inode)=2130706432 [ 192.454669][T10527] max_ino=32 [ 192.457861][T10527] i_nlink=1 [ 192.467368][T10527] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 192.499071][T10530] loop5: detected capacity change from 0 to 2048 [ 192.521988][ T3859] udevd[3859]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 192.524795][ T3508] udevd[3508]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 192.542037][T10530] EXT4-fs: Ignoring removed nobh option [ 192.559614][T10527] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1995'. [ 192.576189][ T3858] udevd[3858]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 192.587663][ T3508] udevd[3508]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 192.638351][ T9420] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.652076][T10530] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 192.675514][T10536] loop0: detected capacity change from 0 to 512 [ 192.682122][T10536] ext4: Unknown parameter 'smackfshat' [ 192.696701][ T8842] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.730154][T10540] loop7: detected capacity change from 0 to 2048 [ 192.870189][ T3508] loop7: p1 < > p4 [ 192.897192][ T3508] loop7: p4 size 8388608 extends beyond EOD, truncated [ 193.114088][T10540] loop7: p1 < > p4 [ 193.128858][T10540] loop7: p4 size 8388608 extends beyond EOD, truncated [ 193.147514][ T2995] loop7: p1 < > p4 [ 193.156097][ T2995] loop7: p4 size 8388608 extends beyond EOD, truncated [ 193.169780][T10550] bridge0: port 1(team0) entered blocking state [ 193.176603][T10550] bridge0: port 1(team0) entered disabled state [ 193.185425][T10550] team0: entered allmulticast mode [ 193.194477][T10550] team0: entered promiscuous mode [ 193.243716][ T3508] udevd[3508]: inotify_add_watch(7, /dev/loop7p1, 10) failed: No such file or directory [ 193.324597][ T3858] udevd[3858]: inotify_add_watch(7, /dev/loop7p4, 10) failed: No such file or directory [ 193.354752][ T3820] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.395691][ T3508] udevd[3508]: inotify_add_watch(7, /dev/loop7p1, 10) failed: No such file or directory [ 193.415276][ T3858] udevd[3858]: inotify_add_watch(7, /dev/loop7p4, 10) failed: No such file or directory [ 193.488722][T10562] loop7: detected capacity change from 0 to 1024 [ 193.506259][T10564] loop6: detected capacity change from 0 to 1024 [ 193.524563][T10564] EXT4-fs: Ignoring removed nobh option [ 193.530280][T10564] EXT4-fs: inline encryption not supported [ 193.616184][T10562] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 193.620730][T10564] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 193.638132][T10561] team0: left allmulticast mode [ 193.645180][T10561] team0: left promiscuous mode [ 193.650560][T10561] bridge0: port 1(team0) entered disabled state [ 193.775133][T10564] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4113: comm syz.6.2008: Allocating blocks 385-513 which overlap fs metadata [ 193.837226][T10564] EXT4-fs (loop6): pa ffff888106e27a80: logic 16, phys. 129, len 24 [ 193.845290][T10564] EXT4-fs error (device loop6): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 193.874107][T10564] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 28 [ 193.886404][T10564] EXT4-fs (loop6): This should not happen!! Data will be lost [ 193.886404][T10564] [ 193.896086][T10564] EXT4-fs (loop6): Total free blocks count 0 [ 193.902112][T10564] EXT4-fs (loop6): Free/Dirty block details [ 193.908098][T10564] EXT4-fs (loop6): free_blocks=128 [ 193.913243][T10564] EXT4-fs (loop6): dirty_blocks=0 [ 193.918267][T10564] EXT4-fs (loop6): Block reservation details [ 193.924386][T10564] EXT4-fs (loop6): i_reserved_data_blocks=0 [ 194.106853][T10587] loop6: detected capacity change from 0 to 2048 [ 194.132382][T10587] EXT4-fs: Ignoring removed nobh option [ 194.167349][T10587] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 194.210063][T10594] loop1: detected capacity change from 0 to 128 [ 194.220875][ T29] kauditd_printk_skb: 162 callbacks suppressed [ 194.220887][ T29] audit: type=1326 audit(1752107069.109:3074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10593 comm="syz.1.2015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff25ea7e929 code=0x7ffc0000 [ 194.250681][ T29] audit: type=1326 audit(1752107069.109:3075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10593 comm="syz.1.2015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff25ea7e929 code=0x7ffc0000 [ 194.274368][ T29] audit: type=1326 audit(1752107069.109:3076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10593 comm="syz.1.2015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff25ea7d290 code=0x7ffc0000 [ 194.297860][ T29] audit: type=1326 audit(1752107069.109:3077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10593 comm="syz.1.2015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff25ea7e929 code=0x7ffc0000 [ 194.321340][ T29] audit: type=1326 audit(1752107069.109:3078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10593 comm="syz.1.2015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff25ea7e929 code=0x7ffc0000 [ 194.344895][ T29] audit: type=1326 audit(1752107069.109:3079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10593 comm="syz.1.2015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7ff25ea7e929 code=0x7ffc0000 [ 194.368423][ T29] audit: type=1326 audit(1752107069.109:3080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10593 comm="syz.1.2015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ff25ea7e963 code=0x7ffc0000 [ 194.391813][ T29] audit: type=1326 audit(1752107069.119:3081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10593 comm="syz.1.2015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7ff25ea7d3df code=0x7ffc0000 [ 194.415107][ T29] audit: type=1326 audit(1752107069.119:3082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10593 comm="syz.1.2015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7ff25ea7e9b7 code=0x7ffc0000 [ 194.438574][ T29] audit: type=1326 audit(1752107069.119:3083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10593 comm="syz.1.2015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff25ea7d290 code=0x7ffc0000 [ 195.197189][ T8842] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.277861][T10609] loop6: detected capacity change from 0 to 512 [ 195.331401][T10609] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 195.357354][T10614] loop5: detected capacity change from 0 to 1024 [ 195.364345][T10614] EXT4-fs: Ignoring removed nobh option [ 195.370016][T10614] EXT4-fs: Ignoring removed bh option [ 195.404013][T10614] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 195.440346][T10609] ext4 filesystem being mounted at /93/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 195.484952][T10609] EXT4-fs error (device loop6): ext4_acquire_dquot:6933: comm syz.6.2019: Failed to acquire dquot type 1 [ 195.561366][T10611] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4113: comm syz.5.2020: Allocating blocks 497-513 which overlap fs metadata [ 195.636106][ T8842] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.708736][T10628] loop6: detected capacity change from 0 to 512 [ 195.812342][T10623] loop0: detected capacity change from 0 to 512 [ 195.819564][T10628] EXT4-fs (loop6): orphan cleanup on readonly fs [ 195.825996][T10623] EXT4-fs (loop0): unsupported inode size: 22272 [ 195.832418][T10623] EXT4-fs (loop0): blocksize: 1024 [ 195.862760][T10628] EXT4-fs error (device loop6): ext4_orphan_get:1419: comm syz.6.2025: bad orphan inode 13 [ 195.904512][T10628] ext4_test_bit(bit=12, block=18) = 1 [ 195.909979][T10628] is_bad_inode(inode)=0 [ 195.914181][T10628] NEXT_ORPHAN(inode)=2130706432 [ 195.919112][T10628] max_ino=32 [ 195.922330][T10628] i_nlink=1 [ 195.953533][T10628] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 195.974693][T10633] siw: device registration error -23 [ 195.982753][T10628] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2025'. [ 196.007353][ T8842] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.187995][T10624] EXT4-fs (loop5): pa ffff888100689e70: logic 0, phys. 113, len 25 [ 196.196009][T10624] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:5364: group 0, free 23, pa_free 24 [ 196.219092][ T3820] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.313025][ T9420] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.368932][T10673] loop0: detected capacity change from 0 to 512 [ 196.420288][T10673] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 196.435695][T10673] ext4 filesystem being mounted at /387/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 196.455632][T10673] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.2031: Failed to acquire dquot type 1 [ 196.494573][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.816019][T10708] loop0: detected capacity change from 0 to 2048 [ 196.952137][ T3508] loop0: p1 < > p4 [ 196.961908][ T3508] loop0: p4 size 8388608 extends beyond EOD, truncated [ 196.994469][T10708] loop0: p1 < > p4 [ 197.014770][T10708] loop0: p4 size 8388608 extends beyond EOD, truncated [ 197.098464][T10752] loop1: detected capacity change from 0 to 2048 [ 197.135296][T10752] EXT4-fs: Ignoring removed nobh option [ 197.181911][T10752] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 197.269909][ T3508] udevd[3508]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 197.299696][ T3858] udevd[3858]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 197.337928][T10785] loop6: detected capacity change from 0 to 2048 [ 197.341129][ T3508] udevd[3508]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 197.358961][ T3858] udevd[3858]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 197.421085][ T3858] loop6: p1 < > p4 [ 197.431090][ T3858] loop6: p4 size 8388608 extends beyond EOD, truncated [ 197.453892][T10785] loop6: p1 < > p4 [ 197.458573][T10785] loop6: p4 size 8388608 extends beyond EOD, truncated [ 197.524937][T10794] loop0: detected capacity change from 0 to 512 [ 197.614782][T10794] EXT4-fs warning (device loop0): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 197.636444][ T3307] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.657491][T10794] EXT4-fs (loop0): mount failed [ 197.690124][ T3859] udevd[3859]: inotify_add_watch(7, /dev/loop6p4, 10) failed: No such file or directory [ 197.701490][ T3508] udevd[3508]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 197.786450][T10801] lo speed is unknown, defaulting to 1000 [ 197.802521][T10802] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 197.862947][T10802] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 197.928137][T10804] bridge0: port 1(team0) entered blocking state [ 197.934912][T10804] bridge0: port 1(team0) entered disabled state [ 197.961304][T10804] team0: entered allmulticast mode [ 197.989850][T10804] team0: entered promiscuous mode [ 198.097987][T10813] loop6: detected capacity change from 0 to 2048 [ 198.136297][T10813] EXT4-fs: Ignoring removed nobh option [ 198.204697][T10813] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 198.464005][T10834] loop7: detected capacity change from 0 to 2048 [ 198.529637][ T3508] loop7: p1 < > p4 [ 198.534911][ T3508] loop7: p4 size 8388608 extends beyond EOD, truncated [ 198.544757][T10834] loop7: p1 < > p4 [ 198.549385][T10834] loop7: p4 size 8388608 extends beyond EOD, truncated [ 198.613563][T10838] 9pnet_rdma: rdma_create_trans (10838): problem binding to privport: 13 [ 198.625988][ T3858] udevd[3858]: inotify_add_watch(7, /dev/loop7p4, 10) failed: No such file or directory [ 198.637633][ T3508] udevd[3508]: inotify_add_watch(7, /dev/loop7p1, 10) failed: No such file or directory [ 198.676648][ T3858] udevd[3858]: inotify_add_watch(7, /dev/loop7p4, 10) failed: No such file or directory [ 198.687676][ T3508] udevd[3508]: inotify_add_watch(7, /dev/loop7p1, 10) failed: No such file or directory [ 198.958533][ T8842] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.013369][T10847] loop7: detected capacity change from 0 to 512 [ 199.047763][T10851] loop6: detected capacity change from 0 to 512 [ 199.102862][T10851] EXT4-fs (loop6): orphan cleanup on readonly fs [ 199.147711][T10851] EXT4-fs error (device loop6): ext4_orphan_get:1419: comm syz.6.2060: bad orphan inode 13 [ 199.207939][T10847] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 199.209396][T10851] ext4_test_bit(bit=12, block=18) = 1 [ 199.220711][T10847] ext4 filesystem being mounted at /80/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 199.225890][T10851] is_bad_inode(inode)=0 [ 199.240350][T10851] NEXT_ORPHAN(inode)=2130706432 [ 199.245192][T10851] max_ino=32 [ 199.248373][T10851] i_nlink=1 [ 199.304259][T10851] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 199.341888][T10860] loop1: detected capacity change from 0 to 512 [ 199.360289][T10851] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2060'. [ 199.376438][T10860] ext4: Unknown parameter 'smackfshat' [ 199.413904][ T8842] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.708628][T10870] lo speed is unknown, defaulting to 1000 [ 199.736224][T10871] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 199.812570][T10871] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 200.001458][T10876] loop1: detected capacity change from 0 to 512 [ 200.034018][T10876] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 200.046683][T10876] ext4 filesystem being mounted at /390/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 200.357544][T10900] loop0: detected capacity change from 0 to 2048 [ 200.366451][T10900] EXT4-fs: Ignoring removed nobh option [ 200.393915][T10900] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 200.620715][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.736007][ T3307] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.150991][T11001] lo speed is unknown, defaulting to 1000 [ 201.210127][T11005] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 201.218587][T11005] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 201.277686][T11006] loop6: detected capacity change from 0 to 512 [ 201.367946][T11006] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 201.410173][T11006] ext4 filesystem being mounted at /110/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 201.435290][T11012] loop0: detected capacity change from 0 to 512 [ 201.473216][T11012] EXT4-fs: Ignoring removed oldalloc option [ 201.483641][T11012] EXT4-fs (loop0): 1 truncate cleaned up [ 201.501718][T11012] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 201.561024][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.651019][T11015] team0: left allmulticast mode [ 201.661531][T11015] team0: left promiscuous mode [ 201.670748][T11015] bridge0: port 1(team0) entered disabled state [ 201.827750][T11020] loop0: detected capacity change from 0 to 1024 [ 201.849354][T11020] EXT4-fs: Ignoring removed nobh option [ 201.854987][T11020] EXT4-fs: inline encryption not supported [ 201.961937][T11020] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 202.188342][ T29] kauditd_printk_skb: 95 callbacks suppressed [ 202.188358][ T29] audit: type=1326 audit(1752107077.079:3174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11025 comm="syz.5.2088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ad178e929 code=0x7ffc0000 [ 202.218125][ T29] audit: type=1326 audit(1752107077.079:3175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11025 comm="syz.5.2088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ad178e929 code=0x7ffc0000 [ 202.241657][ T29] audit: type=1326 audit(1752107077.079:3176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11025 comm="syz.5.2088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8ad178e929 code=0x7ffc0000 [ 202.265142][ T29] audit: type=1326 audit(1752107077.079:3177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11025 comm="syz.5.2088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ad178e929 code=0x7ffc0000 [ 202.288769][ T29] audit: type=1326 audit(1752107077.079:3178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11025 comm="syz.5.2088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ad178e929 code=0x7ffc0000 [ 202.312338][ T29] audit: type=1326 audit(1752107077.079:3179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11025 comm="syz.5.2088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8ad178e929 code=0x7ffc0000 [ 202.335836][ T29] audit: type=1326 audit(1752107077.079:3180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11025 comm="syz.5.2088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ad178e929 code=0x7ffc0000 [ 202.359432][ T29] audit: type=1326 audit(1752107077.079:3181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11025 comm="syz.5.2088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ad178e929 code=0x7ffc0000 [ 202.382904][ T29] audit: type=1326 audit(1752107077.079:3182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11025 comm="syz.5.2088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f8ad178e929 code=0x7ffc0000 [ 202.406449][ T29] audit: type=1326 audit(1752107077.079:3183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11025 comm="syz.5.2088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ad178e929 code=0x7ffc0000 [ 202.478249][T11020] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4113: comm syz.0.2086: Allocating blocks 385-513 which overlap fs metadata [ 202.513159][T11020] EXT4-fs (loop0): pa ffff888100689f50: logic 16, phys. 129, len 24 [ 202.521348][T11020] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 202.555790][T11020] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 28 [ 202.568080][T11020] EXT4-fs (loop0): This should not happen!! Data will be lost [ 202.568080][T11020] [ 202.577770][T11020] EXT4-fs (loop0): Total free blocks count 0 [ 202.584088][T11020] EXT4-fs (loop0): Free/Dirty block details [ 202.590422][T11020] EXT4-fs (loop0): free_blocks=128 [ 202.595548][T11020] EXT4-fs (loop0): dirty_blocks=0 [ 202.600821][T11020] EXT4-fs (loop0): Block reservation details [ 202.606819][T11020] EXT4-fs (loop0): i_reserved_data_blocks=0 [ 202.617249][ T9420] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.752728][T11034] loop7: detected capacity change from 0 to 512 [ 202.759373][T11034] ext4: Unknown parameter 'smackfshat' [ 202.872447][T11048] loop5: detected capacity change from 0 to 1024 [ 202.903814][T11048] EXT4-fs: Ignoring removed nobh option [ 202.909484][T11048] EXT4-fs: Ignoring removed bh option [ 203.055551][T11058] lo speed is unknown, defaulting to 1000 [ 203.062978][T11048] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 203.096182][T11063] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 203.129361][T11063] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 203.329079][T11065] loop7: detected capacity change from 0 to 512 [ 203.367009][T11065] EXT4-fs warning (device loop7): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 203.416101][T11065] EXT4-fs (loop7): mount failed [ 203.947902][ T3820] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.018602][T11071] loop1: detected capacity change from 0 to 2048 [ 204.094351][T11074] loop5: detected capacity change from 0 to 1024 [ 204.102371][ T3508] loop1: p1 < > p4 [ 204.109176][ T3508] loop1: p4 size 8388608 extends beyond EOD, truncated [ 204.117760][T11074] EXT4-fs: Ignoring removed nobh option [ 204.123368][T11074] EXT4-fs: Ignoring removed bh option [ 204.149414][T11071] loop1: p1 < > p4 [ 204.159819][T11071] loop1: p4 size 8388608 extends beyond EOD, truncated [ 204.215210][ T2995] loop1: p1 < > p4 [ 204.231653][ T2995] loop1: p4 size 8388608 extends beyond EOD, truncated [ 204.299705][ T3508] udevd[3508]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 204.336479][ T3858] udevd[3858]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 204.355245][T11080] loop6: detected capacity change from 0 to 2048 [ 204.368767][T11082] loop1: detected capacity change from 0 to 1024 [ 204.410938][T11080] loop6: p1 < > p4 [ 204.415398][T11080] loop6: p4 size 8388608 extends beyond EOD, truncated [ 204.439816][T11082] EXT4-fs: Ignoring removed nobh option [ 204.445431][T11082] EXT4-fs: inline encryption not supported [ 204.460739][ T3508] udevd[3508]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 204.471543][ T3858] udevd[3858]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 204.486758][T11087] loop0: detected capacity change from 0 to 512 [ 204.493879][T11087] ext4: Unknown parameter 'smackfshat' [ 204.532947][ T2995] loop6: p1 < > p4 [ 204.538659][ T2995] loop6: p4 size 8388608 extends beyond EOD, truncated [ 204.585056][T11091] loop6: detected capacity change from 0 to 1024 [ 204.594351][T11082] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4113: comm syz.1.2104: Allocating blocks 385-513 which overlap fs metadata [ 204.612310][ T3858] udevd[3858]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 204.616322][T11091] EXT4-fs: Ignoring removed nobh option [ 204.627676][T11091] EXT4-fs: inline encryption not supported [ 204.631676][ T3508] udevd[3508]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 204.638050][T11093] loop0: detected capacity change from 0 to 2048 [ 204.660184][T11082] EXT4-fs (loop1): pa ffff888100689e00: logic 16, phys. 129, len 24 [ 204.668265][T11082] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 204.686216][T11093] EXT4-fs: Ignoring removed nobh option [ 204.706024][ T3859] udevd[3859]: inotify_add_watch(7, /dev/loop6p4, 10) failed: No such file or directory [ 204.727773][T11082] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 28 [ 204.740328][T11082] EXT4-fs (loop1): This should not happen!! Data will be lost [ 204.740328][T11082] [ 204.750012][T11082] EXT4-fs (loop1): Total free blocks count 0 [ 204.756019][T11082] EXT4-fs (loop1): Free/Dirty block details [ 204.762061][T11082] EXT4-fs (loop1): free_blocks=128 [ 204.767221][T11082] EXT4-fs (loop1): dirty_blocks=0 [ 204.772319][T11082] EXT4-fs (loop1): Block reservation details [ 204.778357][T11082] EXT4-fs (loop1): i_reserved_data_blocks=0 [ 204.789982][T10512] udevd[10512]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 204.797998][T11073] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4113: comm syz.5.2100: Allocating blocks 497-513 which overlap fs metadata [ 204.842508][ T3859] udevd[3859]: inotify_add_watch(7, /dev/loop6p4, 10) failed: No such file or directory [ 204.861731][ T3858] udevd[3858]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 204.871810][T11091] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4113: comm syz.6.2107: Allocating blocks 385-513 which overlap fs metadata [ 204.950737][T11074] EXT4-fs (loop5): pa ffff888100689d90: logic 592, phys. 449, len 4 [ 204.958755][T11074] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 1 [ 204.979617][T11099] EXT4-fs (loop6): pa ffff888106e27b60: logic 16, phys. 129, len 24 [ 204.987666][T11099] EXT4-fs error (device loop6): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 205.025412][T11101] lo speed is unknown, defaulting to 1000 [ 205.036483][T11099] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 28 [ 205.048751][T11099] EXT4-fs (loop6): This should not happen!! Data will be lost [ 205.048751][T11099] [ 205.058459][T11099] EXT4-fs (loop6): Total free blocks count 0 [ 205.064504][T11099] EXT4-fs (loop6): Free/Dirty block details [ 205.070475][T11099] EXT4-fs (loop6): free_blocks=128 [ 205.075584][T11099] EXT4-fs (loop6): dirty_blocks=0 [ 205.080695][T11099] EXT4-fs (loop6): Block reservation details [ 205.086723][T11099] EXT4-fs (loop6): i_reserved_data_blocks=0 [ 205.100232][T11102] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 205.158875][T11102] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 205.164332][T11106] loop5: detected capacity change from 0 to 2048 [ 205.180887][T11106] EXT4-fs: Ignoring removed nobh option [ 205.363176][T11110] loop6: detected capacity change from 0 to 512 [ 205.381611][T11110] ext4 filesystem being mounted at /113/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 205.400129][T11109] loop0: detected capacity change from 0 to 512 [ 205.407206][T11109] EXT4-fs (loop0): unsupported inode size: 22272 [ 205.413634][T11109] EXT4-fs (loop0): blocksize: 1024 [ 205.982218][T11123] loop1: detected capacity change from 0 to 512 [ 206.038980][T11122] veth0_vlan: entered allmulticast mode [ 206.122388][T11123] ext4 filesystem being mounted at /402/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 206.385067][T11140] loop5: detected capacity change from 0 to 1024 [ 206.397396][T11148] loop7: detected capacity change from 0 to 1024 [ 206.416096][T11140] EXT4-fs: Ignoring removed nobh option [ 206.421729][T11140] EXT4-fs: Ignoring removed bh option [ 206.473046][T11148] EXT4-fs: Ignoring removed nobh option [ 206.478726][T11148] EXT4-fs: Ignoring removed bh option [ 206.550834][T11151] loop6: detected capacity change from 0 to 1024 [ 206.587646][T11151] EXT4-fs: Ignoring removed nobh option [ 206.593255][T11151] EXT4-fs: inline encryption not supported [ 206.838000][T11169] loop6: detected capacity change from 0 to 512 [ 206.904165][T11169] EXT4-fs (loop6): orphan cleanup on readonly fs [ 206.932889][T11169] EXT4-fs error (device loop6): ext4_orphan_get:1419: comm syz.6.2123: bad orphan inode 13 [ 207.024832][T11169] ext4_test_bit(bit=12, block=18) = 1 [ 207.030341][T11169] is_bad_inode(inode)=0 [ 207.034589][T11169] NEXT_ORPHAN(inode)=2130706432 [ 207.039471][T11169] max_ino=32 [ 207.042664][T11169] i_nlink=1 [ 207.087997][T11169] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2123'. [ 207.158190][T11177] loop6: detected capacity change from 0 to 1024 [ 207.172028][T11177] EXT4-fs: Ignoring removed nobh option [ 207.177668][T11177] EXT4-fs: inline encryption not supported [ 207.217903][T11177] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4113: comm syz.6.2125: Allocating blocks 385-513 which overlap fs metadata [ 207.251373][T11179] loop0: detected capacity change from 0 to 512 [ 207.281434][T11179] EXT4-fs (loop0): external journal device major/minor numbers have changed [ 207.294052][T11177] EXT4-fs (loop6): pa ffff888100689cb0: logic 16, phys. 129, len 24 [ 207.302180][T11177] EXT4-fs error (device loop6): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 207.314134][T11177] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 28 [ 207.326427][T11177] EXT4-fs (loop6): This should not happen!! Data will be lost [ 207.326427][T11177] [ 207.336147][T11177] EXT4-fs (loop6): Total free blocks count 0 [ 207.342145][T11177] EXT4-fs (loop6): Free/Dirty block details [ 207.348092][T11177] EXT4-fs (loop6): free_blocks=128 [ 207.353241][T11177] EXT4-fs (loop6): dirty_blocks=0 [ 207.358254][T11177] EXT4-fs (loop6): Block reservation details [ 207.364323][T11177] EXT4-fs (loop6): i_reserved_data_blocks=0 [ 207.406676][T11179] EXT4-fs (loop0): failed to open journal device unknown-block(11,131) -6 [ 207.507156][T11190] loop0: detected capacity change from 0 to 2048 [ 207.535190][T11190] EXT4-fs: Ignoring removed nobh option [ 207.561832][T11194] loop5: detected capacity change from 0 to 512 [ 207.591498][T11194] EXT4-fs (loop5): external journal device major/minor numbers have changed [ 207.673767][T11194] EXT4-fs (loop5): failed to open journal device unknown-block(11,131) -6 [ 207.695924][T11201] loop6: detected capacity change from 0 to 512 [ 207.719135][T11201] EXT4-fs (loop6): orphan cleanup on readonly fs [ 207.737371][T11201] EXT4-fs error (device loop6): ext4_orphan_get:1419: comm syz.6.2132: bad orphan inode 13 [ 207.738537][T11204] loop0: detected capacity change from 0 to 512 [ 207.778254][T11201] ext4_test_bit(bit=12, block=18) = 1 [ 207.783696][T11201] is_bad_inode(inode)=0 [ 207.787876][T11201] NEXT_ORPHAN(inode)=2130706432 [ 207.792782][T11201] max_ino=32 [ 207.795973][T11201] i_nlink=1 [ 207.850200][T11204] ext4 filesystem being mounted at /410/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 207.872845][T11201] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2132'. [ 207.885890][T11204] __quota_error: 116 callbacks suppressed [ 207.885904][T11204] Quota error (device loop0): do_check_range: Getting block 1702428675 out of range 1-5 [ 207.901485][T11204] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 207.911017][T11204] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.2133: Failed to acquire dquot type 1 [ 207.961649][T11214] loop6: detected capacity change from 0 to 512 [ 207.990782][T11214] EXT4-fs (loop6): orphan cleanup on readonly fs [ 208.037427][T11217] loop0: detected capacity change from 0 to 2048 [ 208.044496][T11214] EXT4-fs error (device loop6): ext4_orphan_get:1419: comm syz.6.2135: bad orphan inode 13 [ 208.073260][T11214] ext4_test_bit(bit=12, block=18) = 1 [ 208.078770][T11214] is_bad_inode(inode)=0 [ 208.083182][T11214] NEXT_ORPHAN(inode)=2130706432 [ 208.088086][T11214] max_ino=32 [ 208.091315][T11214] i_nlink=1 [ 208.133674][T11217] loop0: p1 < > p4 [ 208.140449][T11217] loop0: p4 size 8388608 extends beyond EOD, truncated [ 208.153139][T11214] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2135'. [ 208.168568][ T2995] loop0: p1 < > p4 [ 208.174689][ T2995] loop0: p4 size 8388608 extends beyond EOD, truncated [ 208.417532][ T29] audit: type=1326 audit(1752107083.319:3299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11235 comm="syz.6.2143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f203d6de929 code=0x7ffc0000 [ 208.441124][ T29] audit: type=1326 audit(1752107083.319:3300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11235 comm="syz.6.2143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f203d6de929 code=0x7ffc0000 [ 208.444837][T11238] loop6: detected capacity change from 0 to 2048 [ 208.464753][ T29] audit: type=1326 audit(1752107083.319:3301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11235 comm="syz.6.2143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f203d6de929 code=0x7ffc0000 [ 208.480887][T11238] EXT4-fs: Ignoring removed nobh option [ 208.494514][ T29] audit: type=1326 audit(1752107083.319:3302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11235 comm="syz.6.2143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f203d6de929 code=0x7ffc0000 [ 208.494567][ T29] audit: type=1326 audit(1752107083.319:3303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11235 comm="syz.6.2143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f203d6de929 code=0x7ffc0000 [ 208.547214][ T29] audit: type=1326 audit(1752107083.319:3304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11235 comm="syz.6.2143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f203d6de929 code=0x7ffc0000 [ 208.571024][ T29] audit: type=1326 audit(1752107083.319:3305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11235 comm="syz.6.2143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f203d6de929 code=0x7ffc0000 [ 208.594511][ T29] audit: type=1326 audit(1752107083.319:3306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11235 comm="syz.6.2143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f203d6de929 code=0x7ffc0000 [ 208.623154][T11239] loop1: detected capacity change from 0 to 1024 [ 208.713785][T11246] loop0: detected capacity change from 0 to 2048 [ 208.751104][T11246] loop0: p1 < > p4 [ 208.755596][T11246] loop0: p4 size 8388608 extends beyond EOD, truncated [ 208.894861][T11249] loop0: detected capacity change from 0 to 512 [ 208.924031][T11249] ext4 filesystem being mounted at /415/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 208.936186][T11249] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.2146: Failed to acquire dquot type 1 [ 209.006491][T11254] loop0: detected capacity change from 0 to 128 [ 209.352374][T11259] loop7: detected capacity change from 0 to 512 [ 209.421952][T11259] ext4 filesystem being mounted at /90/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 209.623376][T11264] loop6: detected capacity change from 0 to 512 [ 209.881750][T11264] ext4 filesystem being mounted at /126/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 210.550733][T11285] loop6: detected capacity change from 0 to 512 [ 210.580037][T11285] EXT4-fs (loop6): unsupported inode size: 22272 [ 210.586416][T11285] EXT4-fs (loop6): blocksize: 1024 [ 210.661408][T11292] loop5: detected capacity change from 0 to 2048 [ 210.729661][ T3508] loop5: p1 < > p4 [ 210.739258][ T3508] loop5: p4 size 8388608 extends beyond EOD, truncated [ 210.752448][T11292] loop5: p1 < > p4 [ 210.769706][T11292] loop5: p4 size 8388608 extends beyond EOD, truncated [ 210.838176][ T3858] udevd[3858]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 210.839121][ T3508] udevd[3508]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 210.882130][T11296] loop5: detected capacity change from 0 to 512 [ 210.904738][T11296] ext4 filesystem being mounted at /383/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 210.940146][T11296] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.2157: Failed to acquire dquot type 1 [ 211.106593][T11304] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2158'. [ 211.345030][T11289] syz.1.2155 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 211.359247][T11289] CPU: 1 UID: 0 PID: 11289 Comm: syz.1.2155 Not tainted 6.16.0-rc5-syzkaller-00053-g8c2e52ebbe88 #0 PREEMPT(voluntary) [ 211.359279][T11289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 211.359297][T11289] Call Trace: [ 211.359302][T11289] [ 211.359309][T11289] __dump_stack+0x1d/0x30 [ 211.359379][T11289] dump_stack_lvl+0xe8/0x140 [ 211.359397][T11289] dump_stack+0x15/0x1b [ 211.359411][T11289] dump_header+0x81/0x220 [ 211.359442][T11289] oom_kill_process+0x334/0x3f0 [ 211.359492][T11289] out_of_memory+0x979/0xb80 [ 211.359524][T11289] try_charge_memcg+0x5e6/0x9e0 [ 211.359569][T11289] obj_cgroup_charge_pages+0xa6/0x150 [ 211.359600][T11289] __memcg_kmem_charge_page+0x9f/0x170 [ 211.359640][T11289] __alloc_frozen_pages_noprof+0x188/0x360 [ 211.359722][T11289] alloc_pages_mpol+0xb3/0x250 [ 211.359754][T11289] alloc_pages_noprof+0x90/0x130 [ 211.359786][T11289] __vmalloc_node_range_noprof+0x6f2/0xe00 [ 211.359830][T11289] __kvmalloc_node_noprof+0x30f/0x4e0 [ 211.359857][T11289] ? ip_set_alloc+0x1f/0x30 [ 211.359918][T11289] ? ip_set_alloc+0x1f/0x30 [ 211.359945][T11289] ? __kmalloc_cache_noprof+0x189/0x320 [ 211.359972][T11289] ip_set_alloc+0x1f/0x30 [ 211.360001][T11289] hash_netiface_create+0x282/0x740 [ 211.360068][T11289] ? __pfx_hash_netiface_create+0x10/0x10 [ 211.360101][T11289] ip_set_create+0x3c9/0x960 [ 211.360134][T11289] ? save_fpregs_to_fpstate+0x100/0x160 [ 211.360174][T11289] nfnetlink_rcv_msg+0x4c3/0x590 [ 211.360216][T11289] ? should_fail_ex+0x30/0x280 [ 211.360264][T11289] ? selinux_capable+0x1f9/0x270 [ 211.360318][T11289] netlink_rcv_skb+0x120/0x220 [ 211.360348][T11289] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 211.360442][T11289] nfnetlink_rcv+0x16b/0x1690 [ 211.360468][T11289] ? __kfree_skb+0x109/0x150 [ 211.360502][T11289] ? nlmon_xmit+0x4f/0x60 [ 211.360524][T11289] ? consume_skb+0x49/0x150 [ 211.360554][T11289] ? nlmon_xmit+0x4f/0x60 [ 211.360575][T11289] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 211.360669][T11289] ? __dev_queue_xmit+0x11c0/0x1fb0 [ 211.360703][T11289] ? __dev_queue_xmit+0x182/0x1fb0 [ 211.360738][T11289] ? ref_tracker_free+0x37d/0x3e0 [ 211.360854][T11289] ? __netlink_deliver_tap+0x4dc/0x500 [ 211.360892][T11289] netlink_unicast+0x59e/0x670 [ 211.360921][T11289] netlink_sendmsg+0x58b/0x6b0 [ 211.360978][T11289] ? __pfx_netlink_sendmsg+0x10/0x10 [ 211.361009][T11289] __sock_sendmsg+0x142/0x180 [ 211.361034][T11289] ____sys_sendmsg+0x31e/0x4e0 [ 211.361075][T11289] ___sys_sendmsg+0x17b/0x1d0 [ 211.361183][T11289] __x64_sys_sendmsg+0xd4/0x160 [ 211.361217][T11289] x64_sys_call+0x2999/0x2fb0 [ 211.361235][T11289] do_syscall_64+0xd2/0x200 [ 211.361285][T11289] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 211.361356][T11289] ? clear_bhb_loop+0x40/0x90 [ 211.361378][T11289] ? clear_bhb_loop+0x40/0x90 [ 211.361401][T11289] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.361442][T11289] RIP: 0033:0x7ff25ea7e929 [ 211.361465][T11289] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 211.361484][T11289] RSP: 002b:00007ff25d0e7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 211.361504][T11289] RAX: ffffffffffffffda RBX: 00007ff25eca5fa0 RCX: 00007ff25ea7e929 [ 211.361517][T11289] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000007 [ 211.361529][T11289] RBP: 00007ff25eb00b39 R08: 0000000000000000 R09: 0000000000000000 [ 211.361542][T11289] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 211.361610][T11289] R13: 0000000000000000 R14: 00007ff25eca5fa0 R15: 00007ffcb30a2228 [ 211.361626][T11289] [ 211.361637][T11289] memory: usage 307200kB, limit 307200kB, failcnt 1077 [ 211.537339][T11316] loop5: detected capacity change from 0 to 512 [ 211.539072][T11289] memory+swap: usage 307408kB, limit 9007199254740988kB, failcnt 0 [ 211.547043][T11316] EXT4-fs (loop5): external journal device major/minor numbers have changed [ 211.547907][T11289] kmem: usage 307096kB, limit 9007199254740988kB, failcnt 0 [ 211.579872][T11316] EXT4-fs (loop5): failed to open journal device unknown-block(11,131) -6 [ 211.583630][T11289] Memory cgroup stats for /syz1: [ 211.759574][T11289] cache 0 [ 211.767900][T11289] rss 4096 [ 211.770960][T11289] shmem 0 [ 211.773901][T11289] mapped_file 0 [ 211.777352][T11289] dirty 0 [ 211.780397][T11289] writeback 0 [ 211.783677][T11289] workingset_refault_anon 310 [ 211.788348][T11289] workingset_refault_file 1163 [ 211.793131][T11289] swap 212992 [ 211.796455][T11289] swapcached 12288 [ 211.800199][T11289] pgpgin 247254 [ 211.803657][T11289] pgpgout 247251 [ 211.807315][T11289] pgfault 261655 [ 211.810887][T11289] pgmajfault 491 [ 211.814472][T11289] inactive_anon 12288 [ 211.818539][T11289] active_anon 0 [ 211.822092][T11289] inactive_file 0 [ 211.825722][T11289] active_file 0 [ 211.829179][T11289] unevictable 0 [ 211.832689][T11289] hierarchical_memory_limit 314572800 [ 211.838058][T11289] hierarchical_memsw_limit 9223372036854771712 [ 211.844469][T11289] total_cache 0 [ 211.847930][T11289] total_rss 4096 [ 211.851506][T11289] total_shmem 0 [ 211.854963][T11289] total_mapped_file 0 [ 211.858937][T11289] total_dirty 0 [ 211.862426][T11289] total_writeback 0 [ 211.866334][T11289] total_workingset_refault_anon 310 [ 211.871577][T11289] total_workingset_refault_file 1163 [ 211.877083][T11289] total_swap 212992 [ 211.880934][T11289] total_swapcached 12288 [ 211.885358][T11289] total_pgpgin 247254 [ 211.889358][T11289] total_pgpgout 247251 [ 211.893433][T11289] total_pgfault 261657 [ 211.897787][T11289] total_pgmajfault 491 [ 211.902016][T11289] total_inactive_anon 12288 [ 211.906684][T11289] total_active_anon 0 [ 211.910694][T11289] total_inactive_file 0 [ 211.914866][T11289] total_active_file 0 [ 211.918896][T11289] total_unevictable 0 [ 211.922898][T11289] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.2155,pid=11288,uid=0 [ 211.923919][T11322] loop0: detected capacity change from 0 to 512 [ 211.937656][T11289] Memory cgroup out of memory: Killed process 11288 (syz.1.2155) total-vm:95936kB, anon-rss:940kB, file-rss:22052kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 211.950327][T11322] EXT4-fs (loop0): external journal device major/minor numbers have changed [ 212.013453][T11325] lo speed is unknown, defaulting to 1000 [ 212.037663][T11322] EXT4-fs (loop0): failed to open journal device unknown-block(11,131) -6 [ 212.072531][T11331] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 212.112049][T11331] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 212.461464][T11345] loop6: detected capacity change from 0 to 1024 [ 212.471310][T11347] loop1: detected capacity change from 0 to 2048 [ 212.925985][ T3858] loop1: p1 < > p4 [ 212.930359][ T3858] loop1: p4 size 8388608 extends beyond EOD, truncated [ 212.940835][T11347] loop1: p1 < > p4 [ 212.945425][T11347] loop1: p4 size 8388608 extends beyond EOD, truncated [ 213.113379][T11358] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2175'. [ 213.238283][ T3508] udevd[3508]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 213.249558][ T29] kauditd_printk_skb: 78 callbacks suppressed [ 213.249570][ T29] audit: type=1326 audit(1752107088.159:3381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11361 comm="syz.5.2176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ad178e929 code=0x7ffc0000 [ 213.279548][ T29] audit: type=1326 audit(1752107088.159:3382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11361 comm="syz.5.2176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ad178e929 code=0x7ffc0000 [ 213.292204][ T3858] udevd[3858]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 213.310188][ T29] audit: type=1326 audit(1752107088.209:3383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11361 comm="syz.5.2176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8ad178e929 code=0x7ffc0000 [ 213.336357][ T29] audit: type=1326 audit(1752107088.209:3384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11361 comm="syz.5.2176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ad178e929 code=0x7ffc0000 [ 213.359860][ T29] audit: type=1326 audit(1752107088.209:3385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11361 comm="syz.5.2176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ad178e929 code=0x7ffc0000 [ 213.383376][ T29] audit: type=1326 audit(1752107088.209:3386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11361 comm="syz.5.2176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8ad178e929 code=0x7ffc0000 [ 213.383484][T11360] loop1: detected capacity change from 0 to 512 [ 213.406959][ T29] audit: type=1326 audit(1752107088.209:3387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11361 comm="syz.5.2176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ad178e929 code=0x7ffc0000 [ 213.436850][ T29] audit: type=1326 audit(1752107088.209:3388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11361 comm="syz.5.2176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8ad178e929 code=0x7ffc0000 [ 213.460483][ T29] audit: type=1326 audit(1752107088.209:3389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11361 comm="syz.5.2176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ad178e929 code=0x7ffc0000 [ 213.484011][ T29] audit: type=1326 audit(1752107088.209:3390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11361 comm="syz.5.2176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8ad178e929 code=0x7ffc0000 [ 213.492288][T11360] ext4 filesystem being mounted at /407/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 213.517886][T11364] loop5: detected capacity change from 0 to 1024 [ 213.536553][T11364] EXT4-fs: Ignoring removed nobh option [ 213.542249][T11364] EXT4-fs: Ignoring removed bh option [ 213.561050][ T3859] udevd[3859]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 213.573279][ T3508] udevd[3508]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 213.851317][T11362] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4113: comm syz.5.2176: Allocating blocks 497-513 which overlap fs metadata [ 213.901222][T11374] loop1: detected capacity change from 0 to 1024 [ 213.915070][T11374] EXT4-fs: Ignoring removed nobh option [ 213.920728][T11374] EXT4-fs: Ignoring removed bh option [ 214.174066][T11369] EXT4-fs (loop5): pa ffff888100689e00: logic 528, phys. 257, len 16 [ 214.182245][T11369] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 1 [ 214.207484][T11373] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4113: comm syz.1.2178: Allocating blocks 497-513 which overlap fs metadata [ 214.241378][T11383] siw: device registration error -23 [ 214.331917][T11387] loop5: detected capacity change from 0 to 2048 [ 214.348958][T11387] EXT4-fs: Ignoring removed nobh option [ 214.603716][T11397] lo speed is unknown, defaulting to 1000 [ 214.652030][T11397] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 214.667093][T11397] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 214.774197][T11406] loop7: detected capacity change from 0 to 1024 [ 214.805891][T11406] EXT4-fs: Ignoring removed nobh option [ 214.811531][T11406] EXT4-fs: Ignoring removed bh option [ 215.088383][T11421] loop1: detected capacity change from 0 to 512 [ 215.095306][T11403] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4113: comm syz.7.2186: Allocating blocks 497-513 which overlap fs metadata [ 215.133557][T11421] ext4 filesystem being mounted at /411/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 215.255485][T11427] loop6: detected capacity change from 0 to 512 [ 215.275610][T11427] EXT4-fs (loop6): orphan cleanup on readonly fs [ 215.287800][T11429] loop0: detected capacity change from 0 to 1024 [ 215.296442][T11427] EXT4-fs error (device loop6): ext4_orphan_get:1419: comm syz.6.2192: bad orphan inode 13 [ 215.328063][T11427] ext4_test_bit(bit=12, block=18) = 1 [ 215.333541][T11427] is_bad_inode(inode)=0 [ 215.337741][T11427] NEXT_ORPHAN(inode)=2130706432 [ 215.338802][T11429] EXT4-fs: Ignoring removed nobh option [ 215.342647][T11427] max_ino=32 [ 215.342656][T11427] i_nlink=1 [ 215.354724][T11429] EXT4-fs: inline encryption not supported [ 215.427385][T11429] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4113: comm syz.0.2193: Allocating blocks 385-513 which overlap fs metadata [ 215.446275][T11427] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2192'. [ 215.455904][T11428] EXT4-fs (loop0): pa ffff888100689bd0: logic 16, phys. 129, len 24 [ 215.464047][T11428] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 215.493611][ T2995] ================================================================== [ 215.501722][ T2995] BUG: KCSAN: data-race in set_nlink / set_nlink [ 215.508071][ T2995] [ 215.510386][ T2995] read to 0xffff888106d1f388 of 4 bytes by task 3858 on cpu 0: [ 215.517915][ T2995] set_nlink+0x29/0xb0 [ 215.521983][ T2995] kernfs_iop_permission+0x1e2/0x220 [ 215.527265][ T2995] inode_permission+0x1c7/0x310 [ 215.532107][ T2995] link_path_walk+0x162/0x900 [ 215.536773][ T2995] path_openat+0x1de/0x2170 [ 215.541274][ T2995] do_filp_open+0x109/0x230 [ 215.545779][ T2995] do_sys_openat2+0xa6/0x110 [ 215.550382][ T2995] __x64_sys_openat+0xf2/0x120 [ 215.555144][ T2995] x64_sys_call+0x1af/0x2fb0 [ 215.559730][ T2995] do_syscall_64+0xd2/0x200 [ 215.564240][ T2995] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.570127][ T2995] [ 215.572438][ T2995] write to 0xffff888106d1f388 of 4 bytes by task 2995 on cpu 1: [ 215.580054][ T2995] set_nlink+0x99/0xb0 [ 215.584124][ T2995] kernfs_iop_permission+0x1e2/0x220 [ 215.589408][ T2995] inode_permission+0x1c7/0x310 [ 215.594251][ T2995] link_path_walk+0x162/0x900 [ 215.598919][ T2995] path_lookupat+0x63/0x2a0 [ 215.603416][ T2995] filename_lookup+0x147/0x340 [ 215.608175][ T2995] vfs_statx+0x9d/0x390 [ 215.612326][ T2995] vfs_fstatat+0x115/0x170 [ 215.616748][ T2995] __se_sys_newfstatat+0x55/0x260 [ 215.621768][ T2995] __x64_sys_newfstatat+0x55/0x70 [ 215.626789][ T2995] x64_sys_call+0x2c22/0x2fb0 [ 215.631460][ T2995] do_syscall_64+0xd2/0x200 [ 215.635972][ T2995] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.641858][ T2995] [ 215.644167][ T2995] value changed: 0x00000009 -> 0x00000008 [ 215.649870][ T2995] [ 215.652182][ T2995] Reported by Kernel Concurrency Sanitizer on: [ 215.658328][ T2995] CPU: 1 UID: 0 PID: 2995 Comm: udevd Not tainted 6.16.0-rc5-syzkaller-00053-g8c2e52ebbe88 #0 PREEMPT(voluntary) [ 215.670310][ T2995] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 215.680389][ T2995] ================================================================== [ 215.847561][T11406] EXT4-fs (loop7): pa ffff888100689cb0: logic 432, phys. 177, len 21 [ 215.855725][T11406] EXT4-fs error (device loop7): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 1 [ 215.868722][T11437] loop5: detected capacity change from 0 to 512 [ 215.889996][T11437] ext4 filesystem being mounted at /393/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 223.044059][ T5454] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.082824][ T5454] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.131790][ T5454] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.182181][ T5454] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.242095][ T5454] team0: left allmulticast mode [ 223.246981][ T5454] team0: left promiscuous mode [ 223.251882][ T5454] bridge0: port 1(team0) entered disabled state [ 223.421260][ T5454] bond0 (unregistering): Released all slaves [ 223.476672][ T5454] hsr_slave_0: left promiscuous mode [ 223.482750][ T5454] hsr_slave_1: left promiscuous mode [ 223.490948][ T5454] veth0_macvtap: left promiscuous mode