last executing test programs: 4.926816137s ago: executing program 0 (id=1804): socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) mbind(&(0x7f00001bd000/0x2000)=nil, 0x2000, 0x1, &(0x7f0000000100)=0x9, 0x9, 0x2) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xf, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000280)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) setgroups(0x0, 0x0) set_mempolicy_home_node(&(0x7f0000146000/0x1000)=nil, 0x1000, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00'}, 0x94) getdents64(0xffffffffffffffff, &(0x7f0000000080)=""/19, 0x13) 4.505204239s ago: executing program 0 (id=1806): socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) mbind(&(0x7f00001bd000/0x2000)=nil, 0x2000, 0x1, &(0x7f0000000100)=0x9, 0x9, 0x2) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xf, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000280)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r1}, 0x10) set_mempolicy_home_node(&(0x7f0000146000/0x1000)=nil, 0x1000, 0x0, 0x0) 4.4032558s ago: executing program 0 (id=1807): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0xff, 0x7ffc1ffd}]}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) bind$inet6(r0, 0x0, 0x0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000100)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0x10) syz_emit_ethernet(0x4e, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0xb, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa010100, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@lsrr={0x83, 0x3, 0x48}, @timestamp={0x44, 0xc, 0x5, 0x0, 0x0, [0x0, 0x0]}, @cipso={0x86, 0x6}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) listen(0xffffffffffffffff, 0x3) setuid(0xee00) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000400000000000000000000850000005000000085000000d000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r2}, 0xe) sendfile(r2, r0, 0x0, 0x400) r3 = gettid() timer_create(0x0, &(0x7f00000003c0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000000380)) timer_settime(0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f0000001440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r5, 0x0, r4, 0x0, 0x3, 0x0) 3.169581908s ago: executing program 4 (id=1817): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000980)='./file0\x00', 0x3000010, &(0x7f0000000100)={[{@errors_remount}, {@nobh}]}, 0x1, 0x519, &(0x7f00000009c0)="$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") 2.99350713s ago: executing program 4 (id=1821): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000980)='./file0\x00', 0x3000010, &(0x7f0000000100)={[{@errors_remount}, {@nobh}]}, 0x1, 0x519, &(0x7f00000009c0)="$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") 2.95499089s ago: executing program 2 (id=1822): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x1c) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x200, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300000}, 0xaf) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x800) 2.786015331s ago: executing program 4 (id=1823): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x48) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f0000000b80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000980)='./file1\x00', 0x3000010, &(0x7f0000000100)={[{@errors_remount}, {@nobh}]}, 0x1, 0x519, &(0x7f00000009c0)="$eJzs3cFvI1cZAPBvJvE2u5tiFxAqlSgVLcpWsHbS0DZCCMoFTpWA5b6ExImi2HEUO2UTVZCK/wAhgcSJExck/gCkqgfEGVWqBBfEAQECIdjCAQnoII/HJevYSaBJnI1/P+mt35sZz/e9ifw8M56dCWBiPRURL0XEVEQ8GxHlYnpalDjole5yb99/daVbksiyO39JIimm9dfVbU9HxM3ibTMR8ZUvRnw9ORq3vbe/udxo1HeKdq3T3K619/ZvbzSX1+vr9a3FxYUXll5cen5pPiu8p35W+pUffeGzr3/yG7+9+6db3+ym9ZkPRSkG+nGWel0v5duir7uNds4j2BhMFf0pjTsRAABOpbuP//6I+Fi+/1+OqXxvbsDUODIDAAAAzkr2udn4VxKRAQAAAFdWGhGzkaTV4lqA2UjTa8W5gQ/GjbTRanc+sdba3VrtzouoRCld22jU54trhStRSrrtheIa2377uYH2YkQ8FhHfLV/P29WVVmN1zOc+AAAAYFLcHDj+/3s5zesnG/L/BAAAAIDLqzKyAQAAAFwVDvkBAADg6hs8/n99THkAAAAA5+JLL7/cLVn/+derr+ztbrZeub1ab29Wm7sr1ZXWznZ1vdVaz+/Z1zxpfY1Wa/tTsbV7r9aptzu19t7+3WZrd6tzd+OBR2ADAAAAF+ixj77xqyQiDj59PS9R3AcQ4AG/H3cCwFmaGncCwNi4izdMrlK/cm28eQDjk5ww38U7AADw8Jv78NHf//unAkpjzQw4b671AYDJ4/d/mFwlVwDCREsj4n296iOjlhn5+/8vThslyyLeLB+e4vwiAABcrNm8JGm1OA6YjTStViMejUgrUUrWNhr1+eL44Jfl0iPd9kL+zuTEa4YBAAAAAAAAAAAAAAAAAAAAAAAAgJ4sSyIDAAAArrSI9I9Jfjf/iLnyM7OD5weuJf8oxx+Kxg/ufO/ecqezs9Cd/tf8WV7XIqLz/TulfPpzIx8fBgAAAJy15GDkrN5xevG6cKFZAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAB3r7/6kq/XGTcP38+IirD4k/HTP46E6WIuPG3JKYPvS+JiKkziH/wWkQ8Pix+Eu9kWVYpshgW//o5x6/km2Z4/DQibp5BfJhkb3THn5eGff7SeCp/Hf75my7KezV6/EuLyI/n49yw8efRI2trDo3xxFs/qY2M/1rEE9PDx5/++JuMiP/0kbX9M8uyozG+9tX9/VHxsx9GzA39/kkeiFXrNLdr7b392xvN5fX6en1rcXHhhaUXl55fmq+tbTTqxb9DY3znIz9957j+3xgS/ze/7o2/x/X/mVErHfDvt+7d/0CvWhoW/9bTQ79/Z2JE/LT47vt4Ue/On+vXD3r1w5788ZtPHtf/1RHb/6S//61T9v/ZL3/7d6dcFAC4AO29/c3lRqO+c0xl5hTLPIyVn81cijT+x0r2rd5f7rLk8/9Wunur/53S79UlSOxQJbuwWFNxSbr8bmWswxIAAHAOfv7uTv+4MwEAAAAAAAAAAAAAAAAAAIDJdRG3ExuMeTCergIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHOs/AQAA//9GB9/T") 2.617184093s ago: executing program 4 (id=1827): r0 = shmget$private(0x0, 0x8000, 0x10, &(0x7f0000ff5000/0x8000)=nil) socket$rds(0x15, 0x5, 0x0) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000fff000/0x1000)=nil) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='rss_stat\x00', r2}, 0x10) r3 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000200)={0x9effffff, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108) socket(0x2, 0x4, 0x0) syz_clone(0x42000000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x9, &(0x7f00000002c0), 0x4, 0x50e, &(0x7f0000000e40)="$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") set_mempolicy(0x3, &(0x7f0000000000)=0x4000000ffb, 0x8) socket(0xa, 0x80805, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2, 0x0, 0xa}, 0x10) r4 = socket$inet(0xa, 0x801, 0x84) connect$inet(r4, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r4, 0x8) 2.606252822s ago: executing program 1 (id=1829): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$kcm(0x2, 0x3, 0x106) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents64(r6, &(0x7f0000002f40)=""/4098, 0x1002) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b06, &(0x7f0000000080)={'vxcan1\x00', @remote}) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x28, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NAT_TYPE={0x8}, @NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x98}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) sendmsg$inet(r4, &(0x7f0000000040)={&(0x7f0000000380)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000080)="fbd2b9ed29d8974a6ce75f08916ac3b4da11bc1a", 0xffeb}], 0x1}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@newtfilter={0x5c, 0x2c, 0xd27, 0x70bd2a, 0x8000004, {0x0, 0x0, 0x0, r3, {0x0, 0x5}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x15, 0x1, 0x0, 0x0, {{0xff, 0x1, 0xfffd}, {0x26, 0x6a6, 0xffff, 0x5, 0x6, 0x2}}}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r7}, 0x38) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x2}, 0x18) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)=@o_path={&(0x7f00000000c0)='./file0\x00', 0x0, 0x4010}, 0x18) 2.476947803s ago: executing program 1 (id=1831): socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) mbind(&(0x7f00001bd000/0x2000)=nil, 0x2000, 0x1, &(0x7f0000000100)=0x9, 0x9, 0x2) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xf, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000280)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) setgroups(0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) getdents64(0xffffffffffffffff, &(0x7f0000000080)=""/19, 0x13) 2.460703683s ago: executing program 3 (id=1832): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000980)='./file0\x00', 0x3000010, &(0x7f0000000100)={[{@errors_remount}, {@nobh}]}, 0x1, 0x519, &(0x7f00000009c0)="$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") 2.428454383s ago: executing program 3 (id=1833): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x39, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdf2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x18) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000040)={'ip6tnl0\x00', &(0x7f00000002c0)={'syztnl0\x00', 0x0, 0x29, 0x8, 0x3, 0x746, 0x20, @private0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x40, 0x40, 0x8, 0x3ff}}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000001c6d4215347bd276478519bbefeeeda400000000000061190400008f7f009500000400000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, 0xf}, 0x94) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000510700140000000000000001b7080000000000007b8af8ff00000000b7080000fcffffff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_ADDRFORM(r4, 0x29, 0x1, &(0x7f00000001c0), 0x4) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_route(0x10, 0x3, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000000), 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) syz_genetlink_get_family_id$mptcp(&(0x7f0000000240), 0xffffffffffffffff) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r7, {}, {}, {0x6}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x40d5}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r8, 0x890b, &(0x7f0000000080)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @remote}, {0x2, 0x0, @private}}) 2.423033214s ago: executing program 1 (id=1834): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x10000000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x800000, &(0x7f0000000140)={[{@shortname_mixed}, {@iocharset={'iocharset', 0x3d, 'cp775'}}, {@iocharset={'iocharset', 0x3d, 'cp865'}}, {@shortname_win95}, {@fat=@codepage={'codepage', 0x3d, '949'}}, {@shortname_winnt}, {@fat=@allow_utime={'allow_utime', 0x3d, 0x10003}}, {@uni_xlateno}, {@shortname_lower}, {@utf8no}, {@iocharset={'iocharset', 0x3d, 'iso8859-7'}}, {@utf8no}]}, 0x25, 0x35b, &(0x7f0000000200)="$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") 2.158403825s ago: executing program 3 (id=1835): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, {}, 0x0, 0x0, 0x1}, {{@in6=@dev, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0xc4, 0xfffffffe}}, 0xe8) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x1c) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x200, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300000}, 0xaf) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) socket(0x1e, 0x4, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) dup(0xffffffffffffffff) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f0ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r6, 0x0, 0x10007ffffffff}, 0x18) r7 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r7, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x28}, 0x1c) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r7, 0x4, 0x0, 0x2, 0x0, {0xa, 0x4e21, 0x8000, @empty}}}, 0x32) writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x180204}], 0x1) r8 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x800) ioctl$SG_GET_VERSION_NUM(r8, 0x2284, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x12, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000200)) 1.394298981s ago: executing program 0 (id=1836): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b00)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) syz_mount_image$iso9660(&(0x7f0000000540), &(0x7f00000001c0)='./file1\x00', 0x14004, &(0x7f00000005c0)=ANY=[@ANYRES32=0x0], 0x4, 0x70a, &(0x7f00000232c0)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702000000000002020207b1af8ff"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f6c}, 0x94) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000073797a310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d600f9fffeffffff080000000b0000000b0000008f11735a84e7e4e356b962e1411b7a56733cb4fec08764b54ab230699f4c92f94b6722f38d49482baeab8d14d4b785878ec9349cfa96fb3fddc081eef792475db6c677f015459f0c2307002a382bf3a841bb9e46d05c01986b0878c009689eb558579a7fd5a5b37442339436e96ab8863de64bc1bcb087e7ba0c55f379fb6424799f2464242ea4c0bddfd900d133af62357d1361f213ff552f09fb35ff39768ad8029800ac29afb4c69d3211eec136d3396ffda424734167a9f10a10791cc4caf569b75a392d76c3130f02eba2f217f77cfd07f65ccb351d51f187ebf3c06052ba250e7156cbbdc885db2d78b34293bbb6aa80b90de6683e3746a811a032a79349dade4fa74d708603b8447a383b74084af481c6ae5183cb09e851e98e471752c0615e9dd75d6c2acdd3d38ae8637cd4f2acdca8ea06a05d6a1a5fa8e4131a547819abc978e3c6618f01caea313fe3a2b73abdc71b7985a2"], 0x1ee) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000a80)=ANY=[@ANYBLOB="5000000002060108000000000000000000000000050005000a000000050001000700000005000400000000000900020073797a310000000015000300686173683a69702c706f72742c6e6574000000008871fc9f583fc0cad8ef0e3cbb63f6abb66228ff"], 0x50}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) read(r2, &(0x7f0000000380)=""/171, 0xab) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) 1.020404293s ago: executing program 2 (id=1837): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x48) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) syz_io_uring_setup(0x210049a, &(0x7f00000000c0)={0x0, 0x79b0, 0x3180, 0x800000, 0x40024e}, &(0x7f0000000340), &(0x7f0000000040)) syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000980)='./file1\x00', 0x3000010, &(0x7f0000000100)={[{@errors_remount}, {@nobh}]}, 0x1, 0x519, &(0x7f00000009c0)="$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") 922.472344ms ago: executing program 3 (id=1838): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0xffffffffffffffa0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f00000000c0)=@nat={'nat\x00', 0x19, 0x0, 0x90, [0x20000000, 0x800000000, 0x0, 0xa, 0x20000061], 0x11e, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000fa000000feffffff0000000073a5f19b000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000"]}, 0x106) 811.389395ms ago: executing program 3 (id=1839): bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x20, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4e, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000050b6850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0, 0x0, 0x80}, 0x18) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000200), 0x1, 0x4bc, &(0x7f0000000a40)="$eJzs3ctvW1UaAPDPdpMmaWb6mNGo7UjTSh2p81DjPDRqMjObWc3MotJoKrEBqYTEDSVOHMVOaaIuUth1wQKBQEIs2PMXsKErKiTEGvaIBSqCEiRAQjK613abOHGwII1p7u8n3ebch/2dU+s7Ovf4Xt8AMuts8k8uYjgiPoyIo43VrQecbfzZuH9zJllyUa9f/iKXHpestw5tve5IRKxHxEBE/P/fEc/ktsetrq7NT5fLpeXmerG2sFSsrq5duLYwPVeaKy2OTV6cmpocnRif2rO23n7puduX3vlv/9vfvHjv7svvvZtUa7i5b3M79lKj6X1xfNO2QxHxz0cRrAcKzfYM9roi/CTJ5/ebiDiX5v/RKKSfJpAF9Xq9/n39cKfd63XgwMqnY+BcfiQiGuV8fmSkMYb/bQzly5Vq7a9XKyuLs42x8rHoy1+9Vi6NNs8VjkVfLlkfS8sP18fb1ici0jHwK4XBdH1kplKe3d+uDmhzpC3/vy408h/ICKf8kF3yH7JL/kN2yX/ILvkP2SX/IbvkP2SX/Ifskv+QXfIfskv+Qyb979KlZKm37n+fvb66Ml+5fmG2VJ0fWViZGZmpLC+NzFUqc+k9Ows/9n7lSmVp7G+xcqNYK1Vrxerq2pWFyspi7Up6X/+VUt++tAroxvEzdz7ORcT63wfTJdHf3CdX4WCr13PR63uQgd4o9LoDAnrG1B9kl3N8oP0netvHBQOdXrj0cL4QeLzke10BoGfOn/L9H2SV+X/ILvP/kF3G+MAOj+jbYrf5f+DxZP4fsmu4w/O/frXp2V2jEfHriPio0He49awv4CDIf5Zrjv/PH/3jcPve/ty36VcE/RHx/BuXX7sxXastjyXbv3ywvfZ6c/v4phd2PGEAeqWVp608BgCya+P+zZnWsp9xP/9X4yKE7fEPNecmB9LvKIc2cluuVcjt0bUL67ci4uRO8XPN5503TmSGNgrb4p9o/s013iKt76H0uen7E//Upvh/2BT/9M/+X4FsuJP0P6M75V8+zel4kH9b+5/hPbp2onP/l3/Q/xU69H9nuozx7JsvfNox/q2I0zvGb8UbSGO1x0/qdr7L+PeeeuJ3nfbV32q8z07xW5JSsbawVKyurl1If0durrQ4NnlxampydGJ8qpjOURdbM9Xb/ePkB3d3a/9Qh/i7tT/Z9ucu2//d799/8uwu8f90bufP/8Qu8Qcj4i9dxv9q/JOnO+1L4s92aH9+l/jJtoku41df/c/hLg8FAPZBdXVtfrpcLi0rKCj0pHDrl1GNtkKveybgUauuJqfmSdL3uiYAAAAAAAAAAABAt/bjcuJetxEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4CD4IQAA//9HcdTQ") r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}}]}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value=0x2000000}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r2}, 0x10) r3 = creat(&(0x7f00000000c0)='./bus\x00', 0x1a2) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0xa4c42, 0x108) fallocate(r3, 0x0, 0xbf5, 0x2000402) ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000000040)={0xc, r3, 0x0, 0x0, 0x0, 0xfffffffffe000001}) 652.632156ms ago: executing program 2 (id=1840): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000700000000000000000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd885000000040000"], &(0x7f0000000040)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000740)=@o_path={&(0x7f0000000700)='./mnt\x00', r1}, 0x18) 564.443477ms ago: executing program 1 (id=1841): r0 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e24, 0xf1, @loopback, 0x19f49a9}], 0x1c) sendmsg$inet_sctp(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in6={0xa, 0x4e24, 0xff, @loopback, 0x5}, 0x1c, 0x0, 0x0, &(0x7f00000002c0)=[@dstaddrv4={0x18, 0x84, 0x7, @local}], 0x18, 0x4855}, 0x24000052) 478.776037ms ago: executing program 2 (id=1842): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$kcm(0x2, 0x3, 0x106) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents64(r6, &(0x7f0000002f40)=""/4098, 0x1002) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b06, &(0x7f0000000080)={'vxcan1\x00', @remote}) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x28, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NAT_TYPE={0x8}, @NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x98}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) sendmsg$inet(r4, &(0x7f0000000040)={&(0x7f0000000380)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000080)="fbd2b9ed29d8974a6ce75f08916ac3b4da11bc1a", 0xffeb}], 0x1}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@newtfilter={0x5c, 0x2c, 0xd27, 0x70bd2a, 0x8000004, {0x0, 0x0, 0x0, r3, {0x0, 0x5}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x15, 0x1, 0x0, 0x0, {{0xff, 0x1, 0xfffd}, {0x26, 0x6a6, 0xffff, 0x5, 0x6, 0x2}}}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r7}, 0x38) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x2}, 0x18) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)=@o_path={&(0x7f00000000c0)='./file0\x00', 0x0, 0x4010}, 0x18) 478.207437ms ago: executing program 1 (id=1843): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x39, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdf2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000001c6d4215347bd276478519bbefeeeda400000000000061190400008f7f009500000400000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) semget$private(0x0, 0x1, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000510700140000000000000001b7080000000000007b8af8ff00000000b7080000fcffffff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_ADDRFORM(r3, 0x29, 0x1, &(0x7f00000001c0), 0x4) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_route(0x10, 0x3, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000000), 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) syz_genetlink_get_family_id$mptcp(&(0x7f0000000240), 0xffffffffffffffff) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r6, {}, {}, {0x6}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x40d5}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r7, 0x890b, &(0x7f0000000080)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @remote}, {0x2, 0x0, @private}}) 451.332708ms ago: executing program 0 (id=1844): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000980)='./file0\x00', 0x3000010, &(0x7f0000000100)={[{@errors_remount}, {@nobh}]}, 0x1, 0x519, &(0x7f00000009c0)="$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") 446.521608ms ago: executing program 4 (id=1845): bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x20, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4e, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000050b6850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0, 0x0, 0x80}, 0x18) openat$procfs(0xffffffffffffff9c, &(0x7f0000000500)='/proc/diskstats\x00', 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000200), 0x1, 0x4bc, &(0x7f0000000a40)="$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") r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}}]}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value=0x2000000}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r2}, 0x10) r3 = creat(&(0x7f00000000c0)='./bus\x00', 0x1a2) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0xa4c42, 0x108) fallocate(r3, 0x0, 0xbf5, 0x2000402) ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000000040)={0xc, r3, 0x0, 0x0, 0x0, 0xfffffffffe000001}) 434.644197ms ago: executing program 3 (id=1846): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x3000010, &(0x7f0000000340)={[{@errors_remount}, {@nodioread_nolock}]}, 0x1, 0x512, &(0x7f0000000380)="$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") clock_getres(0xeaffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syzkaller0\x00', 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00'}, 0x10) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r3}, 0x18) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xa, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="180000000000000000000000000000001812", @ANYBLOB="0000000000000000b7030000003e7400850000001b000000b700000000"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x32, '\x00', r1, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r5}, 0x18) r6 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r6, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x5, @mcast2}, {0xa, 0xce20, 0x7, @private0}, r7}}, 0x48) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='locks_get_lock_context\x00', r9}, 0x10) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) fcntl$lock(r10, 0x26, &(0x7f0000000000)={0x1, 0x0, 0x0, 0xffffffff}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x19, 0x6f, 0x7ffc0001}]}) mlockall(0x3) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r2, 0x2, 0x6, @remote}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000000)={r2, 0x1, 0x6, @multicast}, 0x10) socket$packet(0x11, 0x3, 0x300) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYRES64=r4], 0x48) r11 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r11, 0x84, 0x64, &(0x7f0000000200)=[@in={0x2, 0x4e24, @empty}], 0x10) 235.518689ms ago: executing program 1 (id=1847): shmget$private(0x0, 0x8000, 0x10, &(0x7f0000ff5000/0x8000)=nil) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e22, @loopback}, 0x10) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000fff000/0x1000)=nil) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='rss_stat\x00', r2}, 0x10) r3 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000200)={0x9effffff, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108) socket(0x2, 0x4, 0x0) syz_clone(0x42000000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x9, &(0x7f00000002c0), 0x4, 0x50e, &(0x7f0000000e40)="$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") set_mempolicy(0x3, &(0x7f0000000000)=0x4000000ffb, 0x8) socket(0xa, 0x80805, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2, 0x0, 0xa}, 0x10) r4 = socket$inet(0xa, 0x801, 0x84) connect$inet(r4, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r4, 0x8) 209.761789ms ago: executing program 2 (id=1848): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$kcm(0x2, 0x3, 0x106) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents64(r6, &(0x7f0000002f40)=""/4098, 0x1002) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b06, &(0x7f0000000080)={'vxcan1\x00', @remote}) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x28, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NAT_TYPE={0x8}, @NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x98}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) sendmsg$inet(r4, &(0x7f0000000040)={&(0x7f0000000380)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000080)="fbd2b9ed29d8974a6ce75f08916ac3b4da11bc1a", 0xffeb}], 0x1}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@newtfilter={0x5c, 0x2c, 0xd27, 0x70bd2a, 0x8000004, {0x0, 0x0, 0x0, r3, {0x0, 0x5}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x15, 0x1, 0x0, 0x0, {{0xff, 0x1, 0xfffd}, {0x26, 0x6a6, 0xffff, 0x5, 0x6, 0x2}}}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r8}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x18, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)=@o_path={&(0x7f00000000c0)='./file0\x00', 0x0, 0x4010}, 0x18) 99.89373ms ago: executing program 4 (id=1849): r0 = shmget$private(0x0, 0x8000, 0x10, &(0x7f0000ff5000/0x8000)=nil) socket$rds(0x15, 0x5, 0x0) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000fff000/0x1000)=nil) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='rss_stat\x00', r2}, 0x10) r3 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000200)={0x9effffff, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108) socket(0x2, 0x4, 0x0) syz_clone(0x42000000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x9, &(0x7f00000002c0), 0x4, 0x50e, &(0x7f0000000e40)="$eJzs3c1vVF8ZAOD33nZoKYUBZaFGBRFFQ5h+AA1hI2w0hpCYEOPCBdR2aJrOME2nRFpJbJfuSSRxpX+COxcmrFy4c6c7N7gwQSUSauJizL0zbQf6Kf2YXzvPk9zee84Z5j1nhnPO3APTE0DXuhgRSxFxIiIeRUSxlZ+0jrjTPLLHvX/7fGLl7fOJJBqNB/9M8vIsL9r+TOZU6zn7fx4R34v4SbIxbn1hcWa8UinPtdJD89XZofrC4rXptJUzOjYyNnzr+s3RfWvrhepv33x3+t4Pf/+7r7z+09K3f5ZVa/AXp/Oy9nbsp2bTCzHYltcbEfcOIliH9Lb+/nD0ZL3tcxFxKe//xejJ300A4DhrNIrRKLanAYDjLrv/H4wkLbXWAgYjTUul5hre+RhIK7X6/NVi7emTycjXsM5GIX08XSkPt9YKz0YhydIj+fV6evSD9Ivy9Yg4FxEv+k7m5aWJWmWykx98AKCLnfpo/n/X15z/t/fucCoHAByc/k5XAAA4dOZ/AOg+5n8A6D7/x/zv24EAcEy4/weA7mP+B4Dus+P8v3w49QAADsUP7t/PjsZK8/dfr/6m7muT5fpMqfp0ojRRm5stTdVqU5VyaaLR2On5KrXa7MiNtWR9YfFhtfb0yfzD6er4VPlhuXCQjQEAduXchVd/ySb9pdsn8yPa9nIwV8Pxlna6AkDH9HS6AkDH+D4PdK9d3ONbBoBjbpMtej+w5X8RemnzVziqrnzR+j90q72s/1s7gKPt09b/v7Pv9QAOnzkculejkdjzHwC6jDV+YE///g8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABdajA/krSU7wW+lP1MS6WI0xFxNgrJ4+lKeTgizkTEn/sKfVl6pNOVBgD2KP170tr/60rx8mB7STEiTiT/6cuuT0TET3/14JfPxufn50ay/H+t5c+/bOUnjU41AgBYdWdjVj5Pj7bObTfy798+n1g9DrOKb+42NxfN4q60jmZJb/Tm5/4oRMTAv5NWuin7vNKzD/GXliPiC+vtf9YWYTBfA2nufPpx/Cz26QOIv/76fxw//SB+mpdl50L+Wnx+H+oC3ebV3eY42ep7WRdr9b80Lubnzft/fz5C7V02/mVjycqG8S9dG/96NsRP8j5/cS29fU3e3PjD9zdkNorNsuWIL/VuFj9Zi59sPv4WLu8ufPz1y1+9tFVZ49cRVzZt/+qO1NV8mB2ar84O1RcWr01Xx6fKU+Uno6NjI2PDt67fHB3K16ibP/+4WYx/3L56ZsvXZjliYIv4/du3P76xfbPX/Oa/j378tW3if+vrm7//57eJn82J39xl/PGBO1tu353Fn1xtf6G9ZMf3P67uFDhtnl7/bXFyl1UFAA5BfWFxZrxSKc/tcJF91tzpMS6O5kUsRezXE+aLEhHxWWhXl1ykse1jfvSJPbfTIxNw0NY7fadrAgAAAAAAAAAAAAAAbKW+sDjTd8Df1up0GwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADi+/hcAAP//G4rEcQ==") set_mempolicy(0x3, &(0x7f0000000000)=0x4000000ffb, 0x8) socket(0xa, 0x80805, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2, 0x0, 0xa}, 0x10) r4 = socket$inet(0xa, 0x801, 0x84) connect$inet(r4, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r4, 0x8) 20.7816ms ago: executing program 2 (id=1850): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x20044010) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='\v\x00\x00\x00\b\x00\x00\x00\a\x00\x00\x00\t\x00\x00'], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000ff0f00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r2}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a3f0400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc2000"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 0s ago: executing program 0 (id=1851): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) r1 = syz_io_uring_setup(0x4485, &(0x7f0000000380)={0x0, 0x1e25, 0x0, 0x3, 0x2b2}, &(0x7f0000000400), &(0x7f0000000480)) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) io_uring_register$IORING_REGISTER_CLONE_BUFFERS(r1, 0x23, &(0x7f00000004c0), 0x1) sendmsg$xdp(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d", 0x5a}, {&(0x7f0000000900)="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", 0x3c4}, {&(0x7f00000003c0)="847839fc378469d5765bd74a8532b82037b02c9e", 0x14}], 0x3}, 0x0) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f0000000680)=0x1, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newtfilter={0x48, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {}, {0xd, 0xfff1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x18, 0x2, [@TCA_CGROUP_EMATCHES={0x14, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0xc, 0x1, 0x0, 0x0, {{0x3, 0x9, 0x80}}}]}]}]}}]}, 0x48}}, 0x1) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r3, 0x0, &(0x7f0000000080)) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4000000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000100000180012800e0001007769726567756172640000000400028008000a00", @ANYRES32], 0x40}, 0x1, 0x0, 0x0, 0x800}, 0xc0b0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=@ipv6_newroute={0x1c, 0x18, 0x1, 0x70bd2c, 0x0, {0xa, 0x0, 0x14, 0x0, 0xfe, 0x4, 0xff, 0x6}}, 0x1c}}, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x30}}, 0x40) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000e00000850000001b000000b700000000fa000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]}) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001a0001970000ff7f0000000080000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\b\x00', @ANYRES32=r6], 0x24}}, 0x0) kernel console output (not intermixed with test programs): ond5: (slave wireguard7): The slave device specified does not support setting the MAC address [ 221.036553][ T8609] bond5: (slave wireguard7): Enslaving as a backup interface with an up link [ 221.163341][ T8637] loop4: detected capacity change from 0 to 256 [ 221.267410][ T8673] loop1: detected capacity change from 0 to 512 [ 221.601465][ T8637] FAT-fs (loop4): codepage cp949 not found [ 221.616692][ T8679] netlink: 'syz.3.1336': attribute type 1 has an invalid length. [ 221.750650][ T8684] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 221.806234][ T8685] loop4: detected capacity change from 0 to 512 [ 221.851603][ T8684] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 221.930205][ T8679] bond5: entered promiscuous mode [ 221.940792][ T8685] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 221.974850][ T8679] 8021q: adding VLAN 0 to HW filter on device bond5 [ 221.989051][ T8685] ext4 filesystem being mounted at /273/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 222.022998][ T8682] 8021q: adding VLAN 0 to HW filter on device bond5 [ 222.031782][ T8697] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1341'. [ 222.058760][ T8682] bond5: (slave wireguard5): The slave device specified does not support setting the MAC address [ 222.069353][ T8682] bond5: (slave wireguard5): Setting fail_over_mac to active for active-backup mode [ 222.082801][ T8697] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1341'. [ 222.115771][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 222.142886][ T8682] bond5: (slave wireguard5): making interface the new active one [ 222.150740][ T8682] wireguard5: entered promiscuous mode [ 222.232186][ T8699] loop2: detected capacity change from 0 to 128 [ 222.262605][ T8682] bond5: (slave wireguard5): Enslaving as an active interface with an up link [ 222.331358][ T8703] loop4: detected capacity change from 0 to 512 [ 222.373208][ T8705] loop3: detected capacity change from 0 to 512 [ 222.382681][ T8705] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 222.392455][ T8705] EXT4-fs (loop3): orphan cleanup on readonly fs [ 222.399644][ T8705] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1345: bg 0: block 248: padding at end of block bitmap is not set [ 222.418070][ T8705] EXT4-fs error (device loop3): ext4_acquire_dquot:6945: comm syz.3.1345: Failed to acquire dquot type 1 [ 222.430639][ T8705] EXT4-fs (loop3): 1 truncate cleaned up [ 222.437026][ T8705] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 222.466410][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 222.477745][ T8703] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 222.521478][ T8703] ext4 filesystem being mounted at /275/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 223.169537][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.775527][ T8722] loop4: detected capacity change from 0 to 512 [ 223.833274][ T8722] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 223.882079][ T8722] ext4 filesystem being mounted at /276/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 223.983433][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 224.094770][ T8742] loop4: detected capacity change from 0 to 512 [ 224.136392][ T8742] EXT4-fs: Ignoring removed nobh option [ 224.181905][ T8742] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #3: comm syz.4.1354: corrupted inode contents [ 224.219008][ T8742] EXT4-fs (loop4): Remounting filesystem read-only [ 224.249655][ T8742] EXT4-fs (loop4): 1 truncate cleaned up [ 224.278721][ T8742] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 224.335242][ T8742] ext4 filesystem being mounted at /277/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 224.436887][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 224.550080][ T8766] loop4: detected capacity change from 0 to 512 [ 224.564671][ T8766] EXT4-fs: Ignoring removed nobh option [ 224.604417][ T8766] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #3: comm syz.4.1355: corrupted inode contents [ 224.626842][ T8766] EXT4-fs (loop4): Remounting filesystem read-only [ 224.647486][ T8766] __quota_error: 67 callbacks suppressed [ 224.647584][ T8766] Quota error (device loop4): write_blk: dquota write failed [ 224.835921][ T8766] Quota error (device loop4): qtree_write_dquot: Error -30 occurred while creating quota [ 224.879932][ T8802] loop2: detected capacity change from 0 to 512 [ 224.887329][ T8802] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 224.897013][ T8802] EXT4-fs (loop2): orphan cleanup on readonly fs [ 224.906354][ T8766] EXT4-fs (loop4): 1 truncate cleaned up [ 224.906920][ T8802] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1357: bg 0: block 248: padding at end of block bitmap is not set [ 224.912515][ T8766] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 224.927231][ T8802] Quota error (device loop2): write_blk: dquota write failed [ 224.940232][ T8766] ext4 filesystem being mounted at /278/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 224.946638][ T8802] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 224.967658][ T8802] EXT4-fs error (device loop2): ext4_acquire_dquot:6945: comm syz.2.1357: Failed to acquire dquot type 1 [ 224.981342][ T29] audit: type=1326 audit(1762750458.576:11812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8799 comm="syz.1.1356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c7725f6c9 code=0x7ffc0000 [ 225.005072][ T29] audit: type=1326 audit(1762750458.576:11813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8799 comm="syz.1.1356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=113 compat=0 ip=0x7f7c7725f6c9 code=0x7ffc0000 [ 225.028666][ T29] audit: type=1326 audit(1762750458.576:11814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8799 comm="syz.1.1356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c7725f6c9 code=0x7ffc0000 [ 225.052423][ T29] audit: type=1326 audit(1762750458.576:11815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8799 comm="syz.1.1356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c7725f6c9 code=0x7ffc0000 [ 225.056179][ T8806] loop3: detected capacity change from 0 to 512 [ 225.094369][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.103465][ T8802] EXT4-fs (loop2): 1 truncate cleaned up [ 225.115070][ T8802] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 225.140602][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.180048][ T8806] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 225.184269][ T8821] loop4: detected capacity change from 0 to 512 [ 225.195377][ T8806] ext4 filesystem being mounted at /278/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 225.221160][ T8821] EXT4-fs: Ignoring removed nobh option [ 225.234871][ T8824] __nla_validate_parse: 2 callbacks suppressed [ 225.234890][ T8824] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1363'. [ 225.263809][ T8821] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #3: comm syz.4.1359: corrupted inode contents [ 225.276226][ T8824] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1363'. [ 225.312176][ T8821] EXT4-fs (loop4): Remounting filesystem read-only [ 225.323965][ T8821] Quota error (device loop4): write_blk: dquota write failed [ 225.333694][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.347306][ T8821] Quota error (device loop4): qtree_write_dquot: Error -30 occurred while creating quota [ 225.366316][ T8821] EXT4-fs (loop4): 1 truncate cleaned up [ 225.385220][ T8834] loop2: detected capacity change from 0 to 2048 [ 225.397137][ T8821] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 225.425633][ T8821] ext4 filesystem being mounted at /279/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 225.459264][ T8834] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 225.492729][ T8834] ext4 filesystem being mounted at /258/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 225.522173][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.629530][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.716151][ T8863] loop1: detected capacity change from 0 to 512 [ 225.730569][ T8863] EXT4-fs: Ignoring removed nobh option [ 225.765142][ T8863] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #3: comm syz.1.1370: corrupted inode contents [ 225.810351][ T8863] EXT4-fs (loop1): Remounting filesystem read-only [ 225.829353][ T8859] loop2: detected capacity change from 0 to 512 [ 225.836488][ T8863] EXT4-fs (loop1): 1 truncate cleaned up [ 225.862311][ T8863] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 225.862433][ T8859] EXT4-fs: Ignoring removed nobh option [ 225.876592][ T8863] ext4 filesystem being mounted at /300/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 225.922692][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.932088][ T8869] loop4: detected capacity change from 0 to 512 [ 225.966518][ T8869] EXT4-fs error (device loop4): ext4_init_orphan_info:581: comm syz.4.1371: inode #0: comm syz.4.1371: iget: illegal inode # [ 225.993955][ T8880] netlink: 'syz.1.1372': attribute type 1 has an invalid length. [ 226.003298][ T8859] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #3: comm syz.2.1369: corrupted inode contents [ 226.019559][ T8859] EXT4-fs (loop2): Remounting filesystem read-only [ 226.038558][ T8859] EXT4-fs (loop2): 1 truncate cleaned up [ 226.044950][ T8869] EXT4-fs (loop4): get orphan inode failed [ 226.051738][ T8880] bond6: entered promiscuous mode [ 226.060394][ T8859] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 226.068237][ T8880] 8021q: adding VLAN 0 to HW filter on device bond6 [ 226.079641][ T8859] ext4 filesystem being mounted at /259/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 226.090502][ T8869] EXT4-fs (loop4): mount failed [ 226.110367][ T8875] lo speed is unknown, defaulting to 1000 [ 226.171451][ T8880] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 226.178514][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.188088][ T8880] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 226.196812][ T8888] 8021q: adding VLAN 0 to HW filter on device bond6 [ 226.212222][ T8901] loop2: detected capacity change from 0 to 128 [ 226.219415][ T8888] bond6: (slave wireguard7): The slave device specified does not support setting the MAC address [ 226.230013][ T8888] bond6: (slave wireguard7): Setting fail_over_mac to active for active-backup mode [ 226.351216][ T8888] bond6: (slave wireguard7): making interface the new active one [ 226.359133][ T8888] wireguard7: entered promiscuous mode [ 226.387130][ T8888] bond6: (slave wireguard7): Enslaving as an active interface with an up link [ 226.430687][ T8880] bond6: (slave wireguard8): The slave device specified does not support setting the MAC address [ 226.487288][ T8880] bond6: (slave wireguard8): Enslaving as a backup interface with an up link [ 226.584076][ T8940] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1376'. [ 226.598052][ T6388] bio_check_eod: 102 callbacks suppressed [ 226.598099][ T6388] kworker/u8:11: attempt to access beyond end of device [ 226.598099][ T6388] loop2: rw=1, sector=153, nr_sectors = 8 limit=128 [ 226.648035][ T6388] kworker/u8:11: attempt to access beyond end of device [ 226.648035][ T6388] loop2: rw=1, sector=169, nr_sectors = 8 limit=128 [ 226.681012][ T6388] kworker/u8:11: attempt to access beyond end of device [ 226.681012][ T6388] loop2: rw=1, sector=185, nr_sectors = 8 limit=128 [ 226.724980][ T6388] kworker/u8:11: attempt to access beyond end of device [ 226.724980][ T6388] loop2: rw=1, sector=201, nr_sectors = 8 limit=128 [ 226.742712][ T6388] kworker/u8:11: attempt to access beyond end of device [ 226.742712][ T6388] loop2: rw=1, sector=217, nr_sectors = 8 limit=128 [ 226.757050][ T6388] kworker/u8:11: attempt to access beyond end of device [ 226.757050][ T6388] loop2: rw=1, sector=233, nr_sectors = 8 limit=128 [ 226.765824][ T8948] loop4: detected capacity change from 0 to 512 [ 226.773297][ T6388] kworker/u8:11: attempt to access beyond end of device [ 226.773297][ T6388] loop2: rw=1, sector=249, nr_sectors = 8 limit=128 [ 226.789012][ T8948] EXT4-fs: Ignoring removed nobh option [ 226.796549][ T6388] kworker/u8:11: attempt to access beyond end of device [ 226.796549][ T6388] loop2: rw=1, sector=265, nr_sectors = 8 limit=128 [ 226.811043][ T6388] kworker/u8:11: attempt to access beyond end of device [ 226.811043][ T6388] loop2: rw=1, sector=281, nr_sectors = 8 limit=128 [ 226.825216][ T6388] kworker/u8:11: attempt to access beyond end of device [ 226.825216][ T6388] loop2: rw=1, sector=297, nr_sectors = 8 limit=128 [ 226.831740][ T8952] loop0: detected capacity change from 0 to 512 [ 226.845562][ T8952] EXT4-fs: Ignoring removed nobh option [ 226.854562][ T8948] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #3: comm syz.4.1380: corrupted inode contents [ 226.867561][ T8948] EXT4-fs (loop4): Remounting filesystem read-only [ 226.874636][ T8948] EXT4-fs (loop4): 1 truncate cleaned up [ 226.881043][ T8948] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 226.894627][ T8948] ext4 filesystem being mounted at /283/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 226.909746][ T8952] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #3: comm syz.0.1382: corrupted inode contents [ 226.923200][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.938428][ T8961] loop1: detected capacity change from 0 to 512 [ 226.945009][ T8958] loop2: detected capacity change from 0 to 2048 [ 226.946359][ T8952] EXT4-fs (loop0): Remounting filesystem read-only [ 226.959660][ T8952] EXT4-fs (loop0): 1 truncate cleaned up [ 226.961154][ T8961] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 226.966385][ T8952] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 226.980454][ T8961] ext4 filesystem being mounted at /305/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 226.990636][ T8952] ext4 filesystem being mounted at /248/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 227.008563][ T8958] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 227.037635][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 227.049622][ T8958] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 227.067118][ T8967] FAULT_INJECTION: forcing a failure. [ 227.067118][ T8967] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 227.072504][ T8958] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1378: bg 0: block 234: padding at end of block bitmap is not set [ 227.080376][ T8967] CPU: 0 UID: 0 PID: 8967 Comm: syz.4.1384 Not tainted syzkaller #0 PREEMPT(voluntary) [ 227.080496][ T8967] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 227.080533][ T8967] Call Trace: [ 227.080543][ T8967] [ 227.080563][ T8967] __dump_stack+0x1d/0x30 [ 227.080617][ T8967] dump_stack_lvl+0xe8/0x140 [ 227.080654][ T8967] dump_stack+0x15/0x1b [ 227.080680][ T8967] should_fail_ex+0x265/0x280 [ 227.080772][ T8967] should_fail+0xb/0x20 [ 227.080803][ T8967] should_fail_usercopy+0x1a/0x20 [ 227.080834][ T8967] _copy_from_user+0x1c/0xb0 [ 227.080891][ T8967] memdup_user+0x5e/0xd0 [ 227.081000][ T8967] strndup_user+0x68/0xb0 [ 227.081038][ T8967] __se_sys_mount+0x4d/0x2e0 [ 227.081079][ T8967] ? fput+0x8f/0xc0 [ 227.081190][ T8967] ? ksys_write+0x192/0x1a0 [ 227.081234][ T8967] __x64_sys_mount+0x67/0x80 [ 227.081271][ T8967] x64_sys_call+0x2b51/0x3000 [ 227.081303][ T8967] do_syscall_64+0xd2/0x200 [ 227.081339][ T8967] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 227.081381][ T8967] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 227.081429][ T8967] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 227.081531][ T8967] RIP: 0033:0x7f3b583bf6c9 [ 227.081554][ T8967] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 227.081581][ T8967] RSP: 002b:00007f3b56e1f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 227.081612][ T8967] RAX: ffffffffffffffda RBX: 00007f3b58615fa0 RCX: 00007f3b583bf6c9 [ 227.081643][ T8967] RDX: 0000200000000080 RSI: 0000200000000040 RDI: 0000000000000000 [ 227.081660][ T8967] RBP: 00007f3b56e1f090 R08: 00002000000000c0 R09: 0000000000000000 [ 227.081713][ T8967] R10: 0000000000000400 R11: 0000000000000246 R12: 0000000000000001 [ 227.081730][ T8967] R13: 00007f3b58616038 R14: 00007f3b58615fa0 R15: 00007ffffb353d48 [ 227.081757][ T8967] [ 227.282715][ T8958] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 117 [ 227.295213][ T8958] EXT4-fs (loop2): This should not happen!! Data will be lost [ 227.295213][ T8958] [ 227.305433][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 227.332426][ T8972] loop4: detected capacity change from 0 to 512 [ 227.361775][ T8972] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 227.378495][ T8972] ext4 filesystem being mounted at /286/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 227.389743][ T8978] loop1: detected capacity change from 0 to 256 [ 227.415142][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 227.424710][ T8978] FAT-fs (loop1): codepage cp949 not found [ 227.440242][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 227.444157][ T8987] loop0: detected capacity change from 0 to 164 [ 227.457076][ T8987] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 227.474116][ T8989] loop3: detected capacity change from 0 to 512 [ 227.494852][ T8994] loop4: detected capacity change from 0 to 512 [ 227.501935][ T8994] EXT4-fs: Ignoring removed nobh option [ 227.504539][ T8992] loop1: detected capacity change from 0 to 512 [ 227.515337][ T8989] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 227.529665][ T8989] ext4 filesystem being mounted at /283/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 227.548690][ T8994] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #3: comm syz.4.1395: corrupted inode contents [ 227.560966][ T8994] EXT4-fs (loop4): Remounting filesystem read-only [ 227.569146][ T8994] EXT4-fs (loop4): 1 truncate cleaned up [ 227.588858][ T8994] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 227.601457][ T8994] ext4 filesystem being mounted at /287/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 227.633284][ T8992] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 227.646057][ T8992] ext4 filesystem being mounted at /308/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 227.699915][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 227.709260][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 227.711735][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 227.734382][ T9006] loop0: detected capacity change from 0 to 512 [ 227.743091][ T9006] EXT4-fs: Ignoring removed nobh option [ 227.767557][ T9006] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #3: comm syz.0.1398: corrupted inode contents [ 227.779852][ T9006] EXT4-fs (loop0): Remounting filesystem read-only [ 227.788518][ T9006] EXT4-fs (loop0): 1 truncate cleaned up [ 227.795013][ T9006] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 227.807996][ T9006] ext4 filesystem being mounted at /252/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 227.825208][ T9017] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1402'. [ 227.835023][ T9017] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1402'. [ 227.851312][ T9008] loop3: detected capacity change from 0 to 512 [ 227.865678][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 228.023761][ T9039] loop0: detected capacity change from 0 to 164 [ 228.079192][ T9039] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 228.426673][ T9068] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1411'. [ 228.460517][ T9068] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1411'. [ 228.540414][ T9077] loop1: detected capacity change from 0 to 512 [ 228.730791][ T9063] loop0: detected capacity change from 0 to 512 [ 228.741116][ T9077] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 228.784309][ T9077] ext4 filesystem being mounted at /311/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 228.852094][ T9071] lo speed is unknown, defaulting to 1000 [ 229.102894][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.112384][ T9063] EXT4-fs error (device loop0): ext4_init_orphan_info:581: comm syz.0.1410: inode #0: comm syz.0.1410: iget: illegal inode # [ 229.153637][ T9116] loop3: detected capacity change from 0 to 512 [ 229.180431][ T9116] EXT4-fs error (device loop3): ext4_init_orphan_info:581: comm syz.3.1413: inode #0: comm syz.3.1413: iget: illegal inode # [ 229.234884][ T9063] EXT4-fs (loop0): get orphan inode failed [ 229.242342][ T9116] EXT4-fs (loop3): get orphan inode failed [ 229.258141][ T9116] EXT4-fs (loop3): mount failed [ 229.283559][ T9063] EXT4-fs (loop0): mount failed [ 229.361493][ T9124] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1415'. [ 229.386444][ T9120] lo speed is unknown, defaulting to 1000 [ 229.438054][ T9125] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1415'. [ 229.656415][ T9132] loop1: detected capacity change from 0 to 512 [ 229.817887][ T29] kauditd_printk_skb: 415 callbacks suppressed [ 229.817908][ T29] audit: type=1400 audit(1762750463.356:12219): avc: denied { block_suspend } for pid=9137 comm="syz.3.1416" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 229.845970][ T29] audit: type=1400 audit(1762750463.386:12220): avc: denied { module_load } for pid=9137 comm="syz.3.1416" path="/sys/power/wakeup_count" dev="sysfs" ino=219 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1 [ 229.903787][ T9132] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 229.922267][ T9146] netlink: 'syz.3.1416': attribute type 10 has an invalid length. [ 229.950957][ T9146] vlan0: entered allmulticast mode [ 229.956186][ T9146] veth0_vlan: entered allmulticast mode [ 229.968611][ T9132] ext4 filesystem being mounted at /312/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 230.013312][ T9146] team0: Port device vlan0 added [ 230.052249][ T29] audit: type=1400 audit(1762750463.536:12221): avc: denied { read } for pid=9137 comm="syz.3.1416" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 230.094915][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 230.688097][ T9151] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1419'. [ 230.771825][ T29] audit: type=1400 audit(1762750464.386:12222): avc: denied { create } for pid=9158 comm="syz.0.1421" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 230.819491][ T9159] loop0: detected capacity change from 0 to 1024 [ 230.830338][ T9161] netlink: 'syz.3.1423': attribute type 1 has an invalid length. [ 230.858554][ T9159] EXT4-fs: Ignoring removed orlov option [ 230.865002][ T29] audit: type=1400 audit(1762750464.406:12223): avc: denied { create } for pid=9158 comm="syz.0.1421" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 230.899424][ T9159] EXT4-fs error (device loop0): ext4_quota_enable:7136: inode #3: comm syz.0.1421: iget: special inode unallocated [ 230.924022][ T9161] bond6: entered promiscuous mode [ 230.939848][ T9161] 8021q: adding VLAN 0 to HW filter on device bond6 [ 230.947596][ T9164] loop2: detected capacity change from 0 to 512 [ 230.957037][ T9159] EXT4-fs error (device loop0): ext4_quota_enable:7139: comm syz.0.1421: Bad quota inode: 3, type: 0 [ 230.978334][ T9168] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 230.985688][ T9168] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 231.019126][ T29] audit: type=1326 audit(1762750464.626:12224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9160 comm="syz.3.1423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde8e00f6c9 code=0x7ffc0000 [ 231.042969][ T29] audit: type=1326 audit(1762750464.626:12225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9160 comm="syz.3.1423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde8e00f6c9 code=0x7ffc0000 [ 231.066612][ T29] audit: type=1326 audit(1762750464.626:12226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9160 comm="syz.3.1423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fde8e00f6c9 code=0x7ffc0000 [ 231.090137][ T29] audit: type=1326 audit(1762750464.626:12227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9160 comm="syz.3.1423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde8e00f6c9 code=0x7ffc0000 [ 231.113720][ T29] audit: type=1326 audit(1762750464.626:12228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9160 comm="syz.3.1423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde8e00f6c9 code=0x7ffc0000 [ 231.138716][ T9162] 8021q: adding VLAN 0 to HW filter on device bond6 [ 231.148475][ T9162] bond6: (slave wireguard6): The slave device specified does not support setting the MAC address [ 231.159086][ T9162] bond6: (slave wireguard6): Setting fail_over_mac to active for active-backup mode [ 231.188311][ T9159] EXT4-fs warning (device loop0): ext4_enable_quotas:7180: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 231.228120][ T9159] EXT4-fs (loop0): mount failed [ 231.248137][ T9164] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 231.268961][ T9162] bond6: (slave wireguard6): making interface the new active one [ 231.276832][ T9162] wireguard6: entered promiscuous mode [ 231.306802][ T9162] bond6: (slave wireguard6): Enslaving as an active interface with an up link [ 231.387565][ T9164] EXT4-fs (loop2): orphan cleanup on readonly fs [ 231.500429][ T9164] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1424: bg 0: block 248: padding at end of block bitmap is not set [ 231.546750][ T36] hid_parser_main: 33 callbacks suppressed [ 231.546879][ T36] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 231.560433][ T36] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 231.567918][ T36] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 231.597006][ T9159] netlink: 'syz.0.1421': attribute type 10 has an invalid length. [ 231.606104][ T9159] ipvlan0: entered allmulticast mode [ 231.611472][ T9159] veth0_vlan: entered allmulticast mode [ 231.620520][ T9164] EXT4-fs error (device loop2): ext4_acquire_dquot:6945: comm syz.2.1424: Failed to acquire dquot type 1 [ 231.632638][ T9164] EXT4-fs (loop2): 1 truncate cleaned up [ 231.639203][ T9164] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 231.669649][ T9159] team0: Device ipvlan0 failed to register rx_handler [ 231.676602][ T36] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 231.684121][ T36] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 231.691554][ T36] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 231.699108][ T36] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 231.706511][ T36] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 231.713967][ T36] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 231.721467][ T36] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 231.837327][ T36] hid-generic 0000:0000:0000.0002: hidraw0: HID v8.00 Device [syz0] on syz0 [ 231.987375][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 232.127272][ T9203] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1428'. [ 232.259752][ T9209] loop0: detected capacity change from 0 to 128 [ 232.788879][ T9267] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1432'. [ 232.865383][ T9268] loop1: detected capacity change from 0 to 512 [ 232.962685][ T9268] EXT4-fs error (device loop1): ext4_init_orphan_info:581: comm syz.1.1431: inode #0: comm syz.1.1431: iget: illegal inode # [ 233.042415][ T9258] loop2: detected capacity change from 0 to 512 [ 233.051444][ T9268] EXT4-fs (loop1): get orphan inode failed [ 233.061901][ T9268] EXT4-fs (loop1): mount failed [ 233.068375][ T9273] loop3: detected capacity change from 0 to 2048 [ 233.096004][ T9259] lo speed is unknown, defaulting to 1000 [ 233.120239][ T9273] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 233.176283][ T9273] ext4 filesystem being mounted at /292/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 233.215129][ T9258] EXT4-fs error (device loop2): ext4_init_orphan_info:581: comm syz.2.1427: inode #0: comm syz.2.1427: iget: illegal inode # [ 233.299670][ T9282] loop0: detected capacity change from 0 to 512 [ 233.450579][ T9258] EXT4-fs (loop2): get orphan inode failed [ 233.504896][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 233.519389][ T9282] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 233.538646][ T9258] EXT4-fs (loop2): mount failed [ 233.556271][ T9269] lo speed is unknown, defaulting to 1000 [ 233.612615][ T9282] ext4 filesystem being mounted at /260/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 233.631441][ T9288] loop1: detected capacity change from 0 to 512 [ 233.703492][ T9288] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 233.757678][ T9288] ext4 filesystem being mounted at /319/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 234.000371][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 234.112363][ T9297] loop1: detected capacity change from 0 to 512 [ 234.148321][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 234.168126][ T9297] EXT4-fs: Ignoring removed nobh option [ 234.206607][ T9297] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #3: comm syz.1.1438: corrupted inode contents [ 234.265898][ T9297] EXT4-fs (loop1): Remounting filesystem read-only [ 234.308991][ T9297] EXT4-fs (loop1): 1 truncate cleaned up [ 234.342090][ T9297] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 234.398122][ T9297] ext4 filesystem being mounted at /320/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 234.493570][ T9317] loop0: detected capacity change from 0 to 512 [ 234.551424][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 234.580650][ T9325] loop3: detected capacity change from 0 to 128 [ 234.681300][ T9336] loop1: detected capacity change from 0 to 512 [ 234.715887][ T9336] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 234.785104][ T9336] ext4 filesystem being mounted at /321/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 234.833289][ T29] kauditd_printk_skb: 137 callbacks suppressed [ 234.833304][ T29] audit: type=1326 audit(1762750468.446:12362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9344 comm="syz.0.1446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f073f26f6c9 code=0x7ffc0000 [ 234.863285][ T29] audit: type=1326 audit(1762750468.446:12363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9344 comm="syz.0.1446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=113 compat=0 ip=0x7f073f26f6c9 code=0x7ffc0000 [ 234.886994][ T29] audit: type=1326 audit(1762750468.446:12364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9344 comm="syz.0.1446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f073f26f6c9 code=0x7ffc0000 [ 234.915789][ T9350] loop3: detected capacity change from 0 to 512 [ 234.926951][ T9350] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 234.960169][ T9350] EXT4-fs (loop3): orphan cleanup on readonly fs [ 234.967758][ T9350] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1447: bg 0: block 248: padding at end of block bitmap is not set [ 234.982656][ T9350] Quota error (device loop3): write_blk: dquota write failed [ 234.990411][ T9350] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 235.000558][ T9350] EXT4-fs error (device loop3): ext4_acquire_dquot:6945: comm syz.3.1447: Failed to acquire dquot type 1 [ 235.021914][ T9350] EXT4-fs (loop3): 1 truncate cleaned up [ 235.028967][ T9350] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 235.053290][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 235.054628][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 235.064542][ T29] audit: type=1326 audit(1762750468.446:12365): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9314 comm="syz.2.1443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2e23766567 code=0x7ffc0000 [ 235.095116][ T29] audit: type=1326 audit(1762750468.446:12366): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9314 comm="syz.2.1443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2e2370b779 code=0x7ffc0000 [ 235.119032][ T29] audit: type=1326 audit(1762750468.446:12367): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9314 comm="syz.2.1443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7f2e2376f6c9 code=0x7ffc0000 [ 235.143037][ T29] audit: type=1326 audit(1762750468.456:12368): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9314 comm="syz.2.1443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2e23766567 code=0x7ffc0000 [ 235.167071][ T29] audit: type=1326 audit(1762750468.456:12369): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9314 comm="syz.2.1443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2e2370b779 code=0x7ffc0000 [ 235.283523][ T9385] loop1: detected capacity change from 0 to 128 [ 235.396634][ T9397] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1450'. [ 235.442744][ T9397] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1450'. [ 235.663989][ T9422] loop4: detected capacity change from 0 to 164 [ 235.696546][ T9422] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 235.850732][ T9421] loop0: detected capacity change from 0 to 512 [ 236.022301][ T9428] lo speed is unknown, defaulting to 1000 [ 236.118474][ T9421] EXT4-fs error (device loop0): ext4_init_orphan_info:581: comm syz.0.1453: inode #0: comm syz.0.1453: iget: illegal inode # [ 236.189310][ T60] bio_check_eod: 102 callbacks suppressed [ 236.189327][ T60] kworker/u8:4: attempt to access beyond end of device [ 236.189327][ T60] loop1: rw=1, sector=153, nr_sectors = 8 limit=128 [ 236.210650][ T60] kworker/u8:4: attempt to access beyond end of device [ 236.210650][ T60] loop1: rw=1, sector=169, nr_sectors = 8 limit=128 [ 236.268474][ T60] kworker/u8:4: attempt to access beyond end of device [ 236.268474][ T60] loop1: rw=1, sector=185, nr_sectors = 8 limit=128 [ 236.281893][ T60] kworker/u8:4: attempt to access beyond end of device [ 236.281893][ T60] loop1: rw=1, sector=201, nr_sectors = 8 limit=128 [ 236.307641][ T60] kworker/u8:4: attempt to access beyond end of device [ 236.307641][ T60] loop1: rw=1, sector=217, nr_sectors = 8 limit=128 [ 236.328520][ T9421] EXT4-fs (loop0): get orphan inode failed [ 236.334552][ T9421] EXT4-fs (loop0): mount failed [ 236.339895][ T60] kworker/u8:4: attempt to access beyond end of device [ 236.339895][ T60] loop1: rw=1, sector=233, nr_sectors = 8 limit=128 [ 236.342251][ T9471] loop3: detected capacity change from 0 to 1024 [ 236.358305][ T60] kworker/u8:4: attempt to access beyond end of device [ 236.358305][ T60] loop1: rw=1, sector=249, nr_sectors = 8 limit=128 [ 236.388539][ T9471] EXT4-fs: Ignoring removed orlov option [ 236.414614][ T60] kworker/u8:4: attempt to access beyond end of device [ 236.414614][ T60] loop1: rw=1, sector=265, nr_sectors = 8 limit=128 [ 236.443396][ T60] kworker/u8:4: attempt to access beyond end of device [ 236.443396][ T60] loop1: rw=1, sector=281, nr_sectors = 8 limit=128 [ 236.459098][ T9475] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1459'. [ 236.467041][ T60] kworker/u8:4: attempt to access beyond end of device [ 236.467041][ T60] loop1: rw=1, sector=297, nr_sectors = 8 limit=128 [ 236.488752][ T9471] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 236.518978][ T9471] ext4 filesystem being mounted at /297/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 236.532166][ T9483] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1459'. [ 236.608582][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 236.705080][ T9489] loop0: detected capacity change from 0 to 512 [ 236.746393][ T9495] loop4: detected capacity change from 0 to 164 [ 236.758882][ T9489] EXT4-fs: Ignoring removed nobh option [ 236.773079][ T9495] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 236.792616][ T9489] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #3: comm syz.0.1463: corrupted inode contents [ 236.839277][ T9494] lo speed is unknown, defaulting to 1000 [ 236.858329][ T9489] EXT4-fs (loop0): Remounting filesystem read-only [ 236.882284][ T9489] EXT4-fs (loop0): 1 truncate cleaned up [ 236.894267][ T9489] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 236.918672][ T9489] ext4 filesystem being mounted at /266/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 236.937751][ T9501] loop3: detected capacity change from 0 to 512 [ 236.972154][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 237.019529][ T9501] EXT4-fs error (device loop3): ext4_init_orphan_info:581: comm syz.3.1462: inode #0: comm syz.3.1462: iget: illegal inode # [ 237.049336][ T9501] EXT4-fs (loop3): get orphan inode failed [ 237.062332][ T9501] EXT4-fs (loop3): mount failed [ 237.098939][ T9506] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1466'. [ 237.703718][ T9518] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1470'. [ 237.735713][ T9518] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1470'. [ 238.270767][ T9531] loop1: detected capacity change from 0 to 512 [ 238.299566][ T9533] loop3: detected capacity change from 0 to 164 [ 238.316865][ T9533] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 238.335171][ T9531] EXT4-fs error (device loop1): ext4_init_orphan_info:581: comm syz.1.1471: inode #0: comm syz.1.1471: iget: illegal inode # [ 238.372826][ T9536] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1476'. [ 238.412850][ T9531] EXT4-fs (loop1): get orphan inode failed [ 238.438127][ T9541] loop4: detected capacity change from 0 to 512 [ 238.448402][ T9541] EXT4-fs: Ignoring removed nobh option [ 238.454252][ T9531] EXT4-fs (loop1): mount failed [ 238.464735][ T9523] lo speed is unknown, defaulting to 1000 [ 238.473217][ T9541] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #3: comm syz.4.1477: corrupted inode contents [ 238.492253][ T9541] EXT4-fs (loop4): Remounting filesystem read-only [ 238.504024][ T9541] EXT4-fs (loop4): 1 truncate cleaned up [ 238.519507][ T9541] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 238.549409][ T9541] ext4 filesystem being mounted at /305/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 238.598263][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 238.630890][ T9547] loop2: detected capacity change from 0 to 128 [ 239.401019][ T9600] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1486'. [ 239.447047][ T9600] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1486'. [ 240.176908][ T9610] loop1: detected capacity change from 0 to 512 [ 240.440869][ T9606] loop3: detected capacity change from 0 to 2048 [ 241.460636][ T7268] bio_check_eod: 26 callbacks suppressed [ 241.460652][ T7268] kworker/u8:20: attempt to access beyond end of device [ 241.460652][ T7268] loop2: rw=1, sector=153, nr_sectors = 8 limit=128 [ 241.645810][ T9606] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 241.677132][ T29] kauditd_printk_skb: 505 callbacks suppressed [ 241.677150][ T29] audit: type=1400 audit(1762750475.286:12871): avc: denied { mounton } for pid=9643 comm="syz.4.1489" path="/307/bus" dev="tmpfs" ino=1700 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 241.700549][ T7268] kworker/u8:20: attempt to access beyond end of device [ 241.700549][ T7268] loop2: rw=1, sector=169, nr_sectors = 8 limit=128 [ 241.720279][ T9640] loop1: detected capacity change from 0 to 2048 [ 241.727951][ T7268] kworker/u8:20: attempt to access beyond end of device [ 241.727951][ T7268] loop2: rw=1, sector=185, nr_sectors = 8 limit=128 [ 241.742844][ T9640] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 241.756167][ T7268] kworker/u8:20: attempt to access beyond end of device [ 241.756167][ T7268] loop2: rw=1, sector=201, nr_sectors = 8 limit=128 [ 241.770441][ T7268] kworker/u8:20: attempt to access beyond end of device [ 241.770441][ T7268] loop2: rw=1, sector=217, nr_sectors = 8 limit=128 [ 241.778667][ T9640] ext4 filesystem being mounted at /329/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 241.784872][ T7268] kworker/u8:20: attempt to access beyond end of device [ 241.784872][ T7268] loop2: rw=1, sector=233, nr_sectors = 8 limit=128 [ 241.809884][ T7268] kworker/u8:20: attempt to access beyond end of device [ 241.809884][ T7268] loop2: rw=1, sector=249, nr_sectors = 8 limit=128 [ 241.825233][ T7268] kworker/u8:20: attempt to access beyond end of device [ 241.825233][ T7268] loop2: rw=1, sector=265, nr_sectors = 8 limit=128 [ 241.839058][ T7268] kworker/u8:20: attempt to access beyond end of device [ 241.839058][ T7268] loop2: rw=1, sector=281, nr_sectors = 8 limit=128 [ 241.857390][ T7268] kworker/u8:20: attempt to access beyond end of device [ 241.857390][ T7268] loop2: rw=1, sector=297, nr_sectors = 8 limit=128 [ 241.874277][ T9606] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1487: bg 0: block 234: padding at end of block bitmap is not set [ 241.893690][ T9654] loop4: detected capacity change from 0 to 512 [ 241.900137][ T29] audit: type=1326 audit(1762750475.486:12872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9637 comm="syz.1.1490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c7725f6c9 code=0x7ffc0000 [ 241.923703][ T29] audit: type=1326 audit(1762750475.506:12873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9637 comm="syz.1.1490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c7725f6c9 code=0x7ffc0000 [ 241.923923][ T9654] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 241.947329][ T29] audit: type=1326 audit(1762750475.506:12874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9637 comm="syz.1.1490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f7c7725f6c9 code=0x7ffc0000 [ 241.958604][ T9606] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 117 [ 241.979412][ T29] audit: type=1326 audit(1762750475.506:12875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9637 comm="syz.1.1490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c7725f6c9 code=0x7ffc0000 [ 241.991847][ T9606] EXT4-fs (loop3): This should not happen!! Data will be lost [ 241.991847][ T9606] [ 242.025202][ T29] audit: type=1326 audit(1762750475.506:12876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9637 comm="syz.1.1490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7c7725f6c9 code=0x7ffc0000 [ 242.048926][ T29] audit: type=1326 audit(1762750475.506:12877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9637 comm="syz.1.1490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c7725f6c9 code=0x7ffc0000 [ 242.074369][ T9654] EXT4-fs (loop4): orphan cleanup on readonly fs [ 242.074897][ T29] audit: type=1326 audit(1762750475.566:12878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9637 comm="syz.1.1490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c7725f6c9 code=0x7ffc0000 [ 242.085072][ T9654] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1493: bg 0: block 248: padding at end of block bitmap is not set [ 242.104391][ T29] audit: type=1326 audit(1762750475.626:12879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9637 comm="syz.1.1490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7c7725f6c9 code=0x7ffc0000 [ 242.104432][ T29] audit: type=1326 audit(1762750475.626:12880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9637 comm="syz.1.1490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c7725f6c9 code=0x7ffc0000 [ 242.119101][ T9654] EXT4-fs error (device loop4): ext4_acquire_dquot:6945: comm syz.4.1493: Failed to acquire dquot type 1 [ 242.178267][ T9654] EXT4-fs (loop4): 1 truncate cleaned up [ 242.184556][ T9654] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 242.216498][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 242.226064][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 242.230901][ T9661] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1488'. [ 242.244278][ T9661] 0ªX¹¦À: renamed from caif0 [ 242.264748][ T9661] 0ªX¹¦À: entered allmulticast mode [ 242.270122][ T9661] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 242.294430][ T9666] netlink: 'syz.3.1495': attribute type 1 has an invalid length. [ 242.296671][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 242.338569][ T9671] loop4: detected capacity change from 0 to 512 [ 242.345108][ T9669] loop0: detected capacity change from 0 to 512 [ 242.354087][ T9666] bond7: entered promiscuous mode [ 242.369060][ T9666] 8021q: adding VLAN 0 to HW filter on device bond7 [ 242.382465][ T9669] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 242.397909][ T9672] 8021q: adding VLAN 0 to HW filter on device bond7 [ 242.405101][ T9666] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 242.412703][ T9666] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 242.420658][ T9672] bond7: (slave wireguard7): The slave device specified does not support setting the MAC address [ 242.431314][ T9672] bond7: (slave wireguard7): Setting fail_over_mac to active for active-backup mode [ 242.432467][ T9669] ext4 filesystem being mounted at /276/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 242.451578][ T9679] 9pnet_fd: Insufficient options for proto=fd [ 242.477557][ T9672] bond7: (slave wireguard7): making interface the new active one [ 242.485468][ T9672] wireguard7: entered promiscuous mode [ 242.524277][ T9672] bond7: (slave wireguard7): Enslaving as an active interface with an up link [ 242.526595][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 242.544020][ T9688] netlink: 'syz.1.1503': attribute type 1 has an invalid length. [ 242.559229][ T9688] bond7: entered promiscuous mode [ 242.581446][ T9688] 8021q: adding VLAN 0 to HW filter on device bond7 [ 242.602345][ T9693] loop2: detected capacity change from 0 to 2048 [ 242.635038][ T9694] 8021q: adding VLAN 0 to HW filter on device bond7 [ 242.641957][ T9697] loop0: detected capacity change from 0 to 512 [ 242.648869][ T9697] EXT4-fs: Ignoring removed nobh option [ 242.655916][ T9694] bond7: (slave wireguard9): The slave device specified does not support setting the MAC address [ 242.666566][ T9694] bond7: (slave wireguard9): Setting fail_over_mac to active for active-backup mode [ 242.679677][ T9697] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #3: comm syz.0.1505: corrupted inode contents [ 242.680349][ T9694] bond7: (slave wireguard9): making interface the new active one [ 242.696368][ T9700] loop3: detected capacity change from 0 to 512 [ 242.699404][ T9694] wireguard9: entered promiscuous mode [ 242.711462][ T9697] EXT4-fs (loop0): Remounting filesystem read-only [ 242.720093][ T9697] EXT4-fs (loop0): 1 truncate cleaned up [ 242.720760][ T9688] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 242.726440][ T9697] ext4 filesystem being mounted at /277/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 242.733564][ T9700] EXT4-fs: Ignoring removed nobh option [ 242.746740][ T9694] bond7: (slave wireguard9): Enslaving as an active interface with an up link [ 242.758895][ T9688] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 242.777557][ T9693] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1506: bg 0: block 234: padding at end of block bitmap is not set [ 242.794819][ T9693] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 117 [ 242.807296][ T9693] EXT4-fs (loop2): This should not happen!! Data will be lost [ 242.807296][ T9693] [ 242.825610][ T9706] loop4: detected capacity change from 0 to 512 [ 242.843001][ T9700] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #3: comm syz.3.1507: corrupted inode contents [ 242.898990][ T9700] EXT4-fs (loop3): Remounting filesystem read-only [ 242.906107][ T9700] EXT4-fs (loop3): 1 truncate cleaned up [ 242.919103][ T9700] ext4 filesystem being mounted at /305/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 242.957236][ T10] hid_parser_main: 20 callbacks suppressed [ 242.957270][ T10] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 242.970683][ T10] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 242.978108][ T10] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 242.985523][ T10] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 242.993003][ T10] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 243.000488][ T10] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 243.007915][ T10] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 243.015399][ T10] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 243.022817][ T10] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 243.030288][ T10] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 243.038581][ T9713] FAULT_INJECTION: forcing a failure. [ 243.038581][ T9713] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 243.048529][ T9710] loop0: detected capacity change from 0 to 2048 [ 243.051756][ T9713] CPU: 1 UID: 0 PID: 9713 Comm: syz.1.1509 Not tainted syzkaller #0 PREEMPT(voluntary) [ 243.051818][ T9713] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 243.051848][ T9713] Call Trace: [ 243.051862][ T9713] [ 243.051929][ T9713] __dump_stack+0x1d/0x30 [ 243.051962][ T9713] dump_stack_lvl+0xe8/0x140 [ 243.051993][ T9713] dump_stack+0x15/0x1b [ 243.052019][ T9713] should_fail_ex+0x265/0x280 [ 243.052047][ T9713] should_fail+0xb/0x20 [ 243.052069][ T9713] should_fail_usercopy+0x1a/0x20 [ 243.052147][ T9713] _copy_from_user+0x1c/0xb0 [ 243.052202][ T9713] uhid_char_write+0xef/0x650 [ 243.052247][ T9713] ? __pfx_uhid_char_write+0x10/0x10 [ 243.052307][ T9713] vfs_write+0x269/0x960 [ 243.052416][ T9713] ? __rcu_read_unlock+0x4f/0x70 [ 243.052456][ T9713] ? __fget_files+0x184/0x1c0 [ 243.052499][ T9713] ksys_write+0xda/0x1a0 [ 243.052579][ T9713] __x64_sys_write+0x40/0x50 [ 243.052617][ T9713] x64_sys_call+0x2802/0x3000 [ 243.052650][ T9713] do_syscall_64+0xd2/0x200 [ 243.052681][ T9713] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 243.052803][ T9713] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 243.052851][ T9713] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.052899][ T9713] RIP: 0033:0x7f7c7725f6c9 [ 243.052922][ T9713] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 243.052947][ T9713] RSP: 002b:00007f7c75c9e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 243.053029][ T9713] RAX: ffffffffffffffda RBX: 00007f7c774b6090 RCX: 00007f7c7725f6c9 [ 243.053047][ T9713] RDX: 0000000000000004 RSI: 0000200000000080 RDI: 0000000000000005 [ 243.053065][ T9713] RBP: 00007f7c75c9e090 R08: 0000000000000000 R09: 0000000000000000 [ 243.053081][ T9713] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 243.053099][ T9713] R13: 00007f7c774b6128 R14: 00007f7c774b6090 R15: 00007ffecbe1b078 [ 243.053127][ T9713] [ 243.263415][ T10] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz0] on syz1 [ 243.335216][ T9710] ext4 filesystem being mounted at /278/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 243.427979][ T9725] loop2: detected capacity change from 0 to 512 [ 243.490546][ T9728] IPVS: sync thread started: state = MASTER, mcast_ifn = vcan0, syncid = 0, id = 0 [ 243.523201][ T9731] loop1: detected capacity change from 0 to 512 [ 243.558054][ T9734] netlink: 'syz.1.1517': attribute type 1 has an invalid length. [ 243.573952][ T9734] bond8: entered promiscuous mode [ 243.579661][ T9734] 8021q: adding VLAN 0 to HW filter on device bond8 [ 243.640581][ T9737] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 243.647954][ T9737] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 243.719085][ T9744] loop1: detected capacity change from 0 to 128 [ 243.747284][ T9746] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1515'. [ 243.758511][ T9742] loop2: detected capacity change from 0 to 512 [ 243.873939][ T9750] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 243.926181][ T3402] hid-generic 0000:0000:0000.0004: unexpected long global item [ 243.934029][ T3402] hid-generic 0000:0000:0000.0004: probe with driver hid-generic failed with error -22 [ 244.014086][ T9755] loop2: detected capacity change from 0 to 2048 [ 244.075039][ T9755] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1523: bg 0: block 234: padding at end of block bitmap is not set [ 244.110947][ T9755] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 117 [ 244.123495][ T9755] EXT4-fs (loop2): This should not happen!! Data will be lost [ 244.123495][ T9755] [ 244.308257][ T9762] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1524'. [ 244.331424][ T9764] loop3: detected capacity change from 0 to 512 [ 244.784890][ T9802] netlink: 'syz.0.1529': attribute type 1 has an invalid length. [ 244.821960][ T9802] bond6: entered promiscuous mode [ 244.838415][ T9802] 8021q: adding VLAN 0 to HW filter on device bond6 [ 244.851375][ T9814] loop1: detected capacity change from 0 to 128 [ 244.859709][ T9802] 8021q: adding VLAN 0 to HW filter on device bond6 [ 244.869825][ T9802] bond6: (slave wireguard7): The slave device specified does not support setting the MAC address [ 244.880468][ T9802] bond6: (slave wireguard7): Setting fail_over_mac to active for active-backup mode [ 244.912518][ T9817] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 244.923429][ T9802] bond6: (slave wireguard7): making interface the new active one [ 244.931308][ T9802] wireguard7: entered promiscuous mode [ 244.945623][ T9817] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 244.958768][ T9802] bond6: (slave wireguard7): Enslaving as an active interface with an up link [ 245.055229][ T9829] loop1: detected capacity change from 0 to 512 [ 245.062936][ T9829] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 245.072664][ T9829] EXT4-fs (loop1): orphan cleanup on readonly fs [ 245.079938][ T9829] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1533: bg 0: block 248: padding at end of block bitmap is not set [ 245.096026][ T9829] EXT4-fs error (device loop1): ext4_acquire_dquot:6945: comm syz.1.1533: Failed to acquire dquot type 1 [ 245.108048][ T9829] EXT4-fs (loop1): 1 truncate cleaned up [ 245.274936][ T9836] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1534'. [ 245.392219][ T9836] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1534'. [ 245.687377][ T9890] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1539'. [ 245.741784][ T9894] loop0: detected capacity change from 0 to 512 [ 245.763565][ T9894] ext4 filesystem being mounted at /286/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 245.888815][ T9907] loop4: detected capacity change from 0 to 128 [ 245.980409][ T9909] loop0: detected capacity change from 0 to 512 [ 246.288555][ T9928] loop1: detected capacity change from 0 to 2048 [ 246.384165][ T9928] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1550: bg 0: block 234: padding at end of block bitmap is not set [ 246.437476][ T9928] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 117 [ 246.450078][ T9928] EXT4-fs (loop1): This should not happen!! Data will be lost [ 246.450078][ T9928] [ 246.613766][ T9953] loop1: detected capacity change from 0 to 512 [ 246.689100][ T29] kauditd_printk_skb: 721 callbacks suppressed [ 246.689120][ T29] audit: type=1326 audit(1762750480.306:13594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9959 comm="syz.1.1552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c7725f6c9 code=0x7ffc0000 [ 246.754717][ T29] audit: type=1326 audit(1762750480.306:13595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9959 comm="syz.1.1552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c7725f6c9 code=0x7ffc0000 [ 246.778414][ T29] audit: type=1326 audit(1762750480.306:13596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9959 comm="syz.1.1552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=316 compat=0 ip=0x7f7c7725f6c9 code=0x7ffc0000 [ 246.802134][ T29] audit: type=1326 audit(1762750480.306:13597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9959 comm="syz.1.1552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c7725f6c9 code=0x7ffc0000 [ 246.836104][ T9965] loop1: detected capacity change from 0 to 512 [ 246.850622][ T29] audit: type=1326 audit(1762750480.416:13598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9963 comm="syz.1.1553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c7725f6c9 code=0x7ffc0000 [ 246.874413][ T29] audit: type=1326 audit(1762750480.416:13599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9963 comm="syz.1.1553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7c7725f6c9 code=0x7ffc0000 [ 246.876014][ T9965] EXT4-fs: Ignoring removed nobh option [ 246.898044][ T29] audit: type=1326 audit(1762750480.416:13600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9963 comm="syz.1.1553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c7725f6c9 code=0x7ffc0000 [ 246.927073][ T29] audit: type=1326 audit(1762750480.416:13601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9963 comm="syz.1.1553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f7c7725f6c9 code=0x7ffc0000 [ 246.950641][ T29] audit: type=1326 audit(1762750480.416:13602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9963 comm="syz.1.1553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f7c7725f703 code=0x7ffc0000 [ 246.963580][ T9965] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #3: comm syz.1.1553: corrupted inode contents [ 246.974058][ T29] audit: type=1326 audit(1762750480.416:13603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9963 comm="syz.1.1553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f7c7725e17f code=0x7ffc0000 [ 246.987340][ T9965] EXT4-fs (loop1): Remounting filesystem read-only [ 247.051502][ T7799] bio_check_eod: 179 callbacks suppressed [ 247.051519][ T7799] kworker/u8:22: attempt to access beyond end of device [ 247.051519][ T7799] loop4: rw=1, sector=153, nr_sectors = 8 limit=128 [ 247.120347][ T9965] EXT4-fs (loop1): 1 truncate cleaned up [ 247.127153][ T9965] ext4 filesystem being mounted at /347/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 247.135099][T10005] loop0: detected capacity change from 0 to 512 [ 247.138150][ T7799] kworker/u8:22: attempt to access beyond end of device [ 247.138150][ T7799] loop4: rw=1, sector=169, nr_sectors = 8 limit=128 [ 247.152474][T10005] EXT4-fs: Ignoring removed nobh option [ 247.163591][ T7799] kworker/u8:22: attempt to access beyond end of device [ 247.163591][ T7799] loop4: rw=1, sector=185, nr_sectors = 8 limit=128 [ 247.177207][ T7799] kworker/u8:22: attempt to access beyond end of device [ 247.177207][ T7799] loop4: rw=1, sector=201, nr_sectors = 8 limit=128 [ 247.191527][ T7799] kworker/u8:22: attempt to access beyond end of device [ 247.191527][ T7799] loop4: rw=1, sector=217, nr_sectors = 8 limit=128 [ 247.205870][ T7799] kworker/u8:22: attempt to access beyond end of device [ 247.205870][ T7799] loop4: rw=1, sector=233, nr_sectors = 8 limit=128 [ 247.219624][ T7799] kworker/u8:22: attempt to access beyond end of device [ 247.219624][ T7799] loop4: rw=1, sector=249, nr_sectors = 8 limit=128 [ 247.222857][T10005] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #3: comm syz.0.1556: corrupted inode contents [ 247.233217][ T7799] kworker/u8:22: attempt to access beyond end of device [ 247.233217][ T7799] loop4: rw=1, sector=265, nr_sectors = 8 limit=128 [ 247.258377][ T7799] kworker/u8:22: attempt to access beyond end of device [ 247.258377][ T7799] loop4: rw=1, sector=281, nr_sectors = 8 limit=128 [ 247.271039][T10005] EXT4-fs (loop0): Remounting filesystem read-only [ 247.272161][ T7799] kworker/u8:22: attempt to access beyond end of device [ 247.272161][ T7799] loop4: rw=1, sector=297, nr_sectors = 8 limit=128 [ 247.289673][T10014] loop1: detected capacity change from 0 to 128 [ 247.294863][T10005] EXT4-fs (loop0): 1 truncate cleaned up [ 247.304589][T10005] ext4 filesystem being mounted at /290/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 247.331332][T10016] loop4: detected capacity change from 0 to 512 [ 247.386805][T10020] loop4: detected capacity change from 0 to 512 [ 247.404371][T10022] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1560'. [ 247.436313][T10026] loop0: detected capacity change from 0 to 128 [ 247.668832][T10038] loop0: detected capacity change from 0 to 164 [ 247.683434][T10036] loop4: detected capacity change from 0 to 512 [ 247.696909][T10038] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 247.743070][T10036] EXT4-fs error (device loop4): ext4_init_orphan_info:581: comm syz.4.1562: inode #0: comm syz.4.1562: iget: illegal inode # [ 247.756627][T10029] lo speed is unknown, defaulting to 1000 [ 247.810444][T10036] EXT4-fs (loop4): get orphan inode failed [ 247.841959][T10036] EXT4-fs (loop4): mount failed [ 247.896742][T10046] loop3: detected capacity change from 0 to 2048 [ 247.919691][T10046] ext4 filesystem being mounted at /312/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 248.103027][T10050] loop3: detected capacity change from 0 to 512 [ 248.115579][T10050] EXT4-fs: Ignoring removed nobh option [ 248.140780][T10052] loop1: detected capacity change from 0 to 512 [ 248.148135][T10050] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #3: comm syz.3.1568: corrupted inode contents [ 248.173182][T10050] EXT4-fs (loop3): Remounting filesystem read-only [ 248.184362][T10050] EXT4-fs (loop3): 1 truncate cleaned up [ 248.202548][T10050] ext4 filesystem being mounted at /313/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 248.251614][T10058] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1571'. [ 248.309008][T10064] loop1: detected capacity change from 0 to 2048 [ 248.328860][T10064] ext4 filesystem being mounted at /353/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 248.351397][T10068] loop3: detected capacity change from 0 to 512 [ 248.370643][T10068] ext4 filesystem being mounted at /314/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 248.409833][T10072] loop3: detected capacity change from 0 to 512 [ 248.416546][T10072] EXT4-fs: Ignoring removed nobh option [ 248.444559][T10072] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #3: comm syz.3.1575: corrupted inode contents [ 248.457572][T10072] EXT4-fs (loop3): Remounting filesystem read-only [ 248.467488][T10072] EXT4-fs (loop3): 1 truncate cleaned up [ 248.488188][T10072] ext4 filesystem being mounted at /315/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 248.547065][T10084] loop0: detected capacity change from 0 to 512 [ 248.572489][T10084] ext4 filesystem being mounted at /297/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 248.624950][T10087] vhci_hcd: invalid port number 9 [ 248.630114][T10087] vhci_hcd: invalid port number 9 [ 248.671847][T10098] loop4: detected capacity change from 0 to 512 [ 248.684887][T10096] loop0: detected capacity change from 0 to 256 [ 248.705285][T10096] FAT-fs (loop0): codepage cp949 not found [ 248.761247][T10102] loop0: detected capacity change from 0 to 512 [ 248.792997][T10102] ext4 filesystem being mounted at /299/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 248.905434][T10112] loop4: detected capacity change from 0 to 512 [ 248.921348][T10112] EXT4-fs: Ignoring removed nobh option [ 248.934180][T10118] loop0: detected capacity change from 0 to 164 [ 248.942447][T10118] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 248.952566][T10112] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #3: comm syz.4.1589: corrupted inode contents [ 248.965931][T10112] EXT4-fs (loop4): Remounting filesystem read-only [ 248.973235][T10112] EXT4-fs (loop4): 1 truncate cleaned up [ 248.979948][T10112] ext4 filesystem being mounted at /324/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 248.993014][T10106] lo speed is unknown, defaulting to 1000 [ 249.041483][T10092] loop3: detected capacity change from 0 to 512 [ 249.065397][T10092] EXT4-fs error (device loop3): ext4_init_orphan_info:581: comm syz.3.1581: inode #0: comm syz.3.1581: iget: illegal inode # [ 249.127578][T10129] loop4: detected capacity change from 0 to 2048 [ 249.152532][T10092] EXT4-fs (loop3): get orphan inode failed [ 249.166736][T10092] EXT4-fs (loop3): mount failed [ 249.218725][T10138] loop2: detected capacity change from 0 to 512 [ 249.251381][ T3313] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 249.303048][ T3313] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 249.386175][T10142] loop4: detected capacity change from 0 to 128 [ 249.437686][T10144] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1600'. [ 249.441400][T10147] loop2: detected capacity change from 0 to 512 [ 249.485759][T10147] EXT4-fs: Ignoring removed nobh option [ 249.494409][T10150] loop1: detected capacity change from 0 to 128 [ 249.510610][T10147] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #3: comm syz.2.1601: corrupted inode contents [ 249.530955][T10086] syz.3.1581 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 249.545181][T10086] CPU: 1 UID: 0 PID: 10086 Comm: syz.3.1581 Not tainted syzkaller #0 PREEMPT(voluntary) [ 249.545217][T10086] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 249.545308][T10086] Call Trace: [ 249.545318][T10086] [ 249.545327][T10086] __dump_stack+0x1d/0x30 [ 249.545350][T10086] dump_stack_lvl+0xe8/0x140 [ 249.545374][T10086] dump_stack+0x15/0x1b [ 249.545392][T10086] dump_header+0x81/0x220 [ 249.545491][T10086] oom_kill_process+0x342/0x400 [ 249.545533][T10086] out_of_memory+0x979/0xb80 [ 249.545578][T10086] try_charge_memcg+0x610/0xa10 [ 249.545652][T10086] obj_cgroup_charge_pages+0xa6/0x150 [ 249.545682][T10086] __memcg_kmem_charge_page+0x9f/0x170 [ 249.545709][T10086] __alloc_frozen_pages_noprof+0x188/0x360 [ 249.545741][T10086] alloc_pages_mpol+0xb3/0x260 [ 249.545803][T10086] ? alloc_pages_noprof+0xf4/0x130 [ 249.545889][T10086] alloc_pages_noprof+0x90/0x130 [ 249.545965][T10086] __vmalloc_node_range_noprof+0x7a5/0xed0 [ 249.546017][T10086] __kvmalloc_node_noprof+0x483/0x670 [ 249.546066][T10086] ? ip_set_alloc+0x24/0x30 [ 249.546105][T10086] ? ip_set_alloc+0x24/0x30 [ 249.546135][T10086] ? __kmalloc_cache_noprof+0x249/0x4a0 [ 249.546185][T10086] ip_set_alloc+0x24/0x30 [ 249.546294][T10086] hash_netiface_create+0x282/0x740 [ 249.546338][T10086] ? __pfx_hash_netiface_create+0x10/0x10 [ 249.546384][T10086] ip_set_create+0x3cc/0x970 [ 249.546420][T10086] ? __nla_parse+0x40/0x60 [ 249.546452][T10086] nfnetlink_rcv_msg+0x4c6/0x590 [ 249.546541][T10086] netlink_rcv_skb+0x123/0x220 [ 249.546674][T10086] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 249.546719][T10086] nfnetlink_rcv+0x167/0x16c0 [ 249.546753][T10086] ? kmem_cache_free+0xe4/0x3d0 [ 249.546873][T10086] ? __kfree_skb+0x109/0x150 [ 249.546913][T10086] ? nlmon_xmit+0x4f/0x60 [ 249.547009][T10086] ? consume_skb+0x49/0x150 [ 249.547073][T10086] ? nlmon_xmit+0x4f/0x60 [ 249.547097][T10086] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 249.547201][T10086] ? __dev_queue_xmit+0x1200/0x2000 [ 249.547224][T10086] ? __dev_queue_xmit+0x182/0x2000 [ 249.547242][T10086] ? merge_sched_in+0x605/0xa30 [ 249.547284][T10086] ? ref_tracker_free+0x37d/0x3e0 [ 249.547338][T10086] ? __netlink_deliver_tap+0x4dc/0x500 [ 249.547390][T10086] netlink_unicast+0x5c0/0x690 [ 249.547432][T10086] netlink_sendmsg+0x58b/0x6b0 [ 249.547514][T10086] ? __pfx_netlink_sendmsg+0x10/0x10 [ 249.547539][T10086] __sock_sendmsg+0x145/0x180 [ 249.547574][T10086] ____sys_sendmsg+0x31e/0x4e0 [ 249.547687][T10086] ___sys_sendmsg+0x17b/0x1d0 [ 249.547722][T10086] __x64_sys_sendmsg+0xd4/0x160 [ 249.547749][T10086] x64_sys_call+0x191e/0x3000 [ 249.547818][T10086] do_syscall_64+0xd2/0x200 [ 249.547846][T10086] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 249.547880][T10086] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 249.547920][T10086] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.547970][T10086] RIP: 0033:0x7fde8e00f6c9 [ 249.547989][T10086] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 249.548013][T10086] RSP: 002b:00007fde8ca77038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 249.548037][T10086] RAX: ffffffffffffffda RBX: 00007fde8e265fa0 RCX: 00007fde8e00f6c9 [ 249.548054][T10086] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000005 [ 249.548086][T10086] RBP: 00007fde8e091f91 R08: 0000000000000000 R09: 0000000000000000 [ 249.548100][T10086] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 249.548112][T10086] R13: 00007fde8e266038 R14: 00007fde8e265fa0 R15: 00007ffe87990a38 [ 249.548131][T10086] [ 249.581299][T10147] EXT4-fs (loop2): Remounting filesystem read-only [ 249.583291][T10086] memory: usage 307200kB, limit 307200kB, failcnt 1308 [ 249.590401][T10147] EXT4-fs (loop2): 1 truncate cleaned up [ 249.591785][T10086] memory+swap: usage 307396kB, limit 9007199254740988kB, failcnt 0 [ 249.600589][T10147] ext4 filesystem being mounted at /294/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 249.601254][T10086] kmem: usage 307176kB, limit 9007199254740988kB, failcnt 0 [ 249.943751][T10086] Memory cgroup stats for /syz3: [ 249.944106][T10086] cache 0 [ 249.952155][T10086] rss 0 [ 249.954931][T10086] shmem 0 [ 249.957915][T10086] mapped_file 0 [ 249.961380][T10086] dirty 0 [ 249.964364][T10086] writeback 0 [ 249.967716][T10086] workingset_refault_anon 850 [ 249.972409][T10086] workingset_refault_file 6371 [ 249.977228][T10086] swap 200704 [ 249.980524][T10086] swapcached 16384 [ 249.984234][T10086] pgpgin 234760 [ 249.987712][T10086] pgpgout 234754 [ 249.991263][T10086] pgfault 274504 [ 249.994871][T10086] pgmajfault 580 [ 249.998439][T10086] inactive_anon 12288 [ 250.002513][T10086] active_anon 4096 [ 250.006311][T10086] inactive_file 8192 [ 250.010238][T10086] active_file 0 [ 250.013937][T10086] unevictable 0 [ 250.017393][T10086] hierarchical_memory_limit 314572800 [ 250.022931][T10086] hierarchical_memsw_limit 9223372036854771712 [ 250.029189][T10086] total_cache 0 [ 250.032710][T10086] total_rss 0 [ 250.035991][T10086] total_shmem 0 [ 250.039462][T10086] total_mapped_file 0 [ 250.043454][T10086] total_dirty 0 [ 250.046934][T10086] total_writeback 0 [ 250.050773][T10086] total_workingset_refault_anon 850 [ 250.056025][T10086] total_workingset_refault_file 6371 [ 250.061323][T10086] total_swap 200704 [ 250.065200][T10086] total_swapcached 16384 [ 250.069462][T10086] total_pgpgin 234760 [ 250.073435][T10086] total_pgpgout 234754 [ 250.077513][T10086] total_pgfault 274504 [ 250.081678][T10086] total_pgmajfault 580 [ 250.085736][T10086] total_inactive_anon 12288 [ 250.090242][T10086] total_active_anon 4096 [ 250.094478][T10086] total_inactive_file 8192 [ 250.098905][T10086] total_active_file 0 [ 250.102886][T10086] total_unevictable 0 [ 250.106865][T10086] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.1581,pid=10085,uid=0 [ 250.121606][T10086] Memory cgroup out of memory: Killed process 10085 (syz.3.1581) total-vm:96140kB, anon-rss:1264kB, file-rss:22644kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 250.372534][T10171] loop3: detected capacity change from 0 to 128 [ 250.385740][T10173] loop0: detected capacity change from 0 to 512 [ 250.392676][T10173] EXT4-fs: Ignoring removed nobh option [ 250.400348][T10166] loop1: detected capacity change from 0 to 512 [ 250.407298][T10166] EXT4-fs: Ignoring removed nobh option [ 250.419790][T10173] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #3: comm syz.0.1611: corrupted inode contents [ 250.426341][T10166] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #3: comm syz.1.1608: corrupted inode contents [ 250.431852][T10173] EXT4-fs (loop0): Remounting filesystem read-only [ 250.444051][T10166] EXT4-fs (loop1): Remounting filesystem read-only [ 250.451858][T10173] EXT4-fs (loop0): 1 truncate cleaned up [ 250.463472][T10173] ext4 filesystem being mounted at /303/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 250.485877][T10180] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1612'. [ 250.490004][T10166] EXT4-fs (loop1): 1 truncate cleaned up [ 250.501381][T10166] ext4 filesystem being mounted at /361/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 250.502261][T10180] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1612'. [ 250.652181][T10194] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.687163][T10210] loop3: detected capacity change from 0 to 164 [ 250.698901][T10210] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 250.723083][T10194] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.764044][T10194] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.822209][T10194] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.939668][ T6401] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.951385][T10239] loop3: detected capacity change from 0 to 512 [ 250.958997][T10239] EXT4-fs: Ignoring removed nobh option [ 250.967790][ T6401] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.976434][ T6401] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.985000][ T6401] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.996208][T10239] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #3: comm syz.3.1623: corrupted inode contents [ 251.012370][T10239] EXT4-fs (loop3): Remounting filesystem read-only [ 251.029194][T10239] EXT4-fs (loop3): 1 truncate cleaned up [ 251.042950][T10239] ext4 filesystem being mounted at /327/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 251.094621][T10261] loop2: detected capacity change from 0 to 256 [ 251.119811][T10261] FAT-fs (loop2): codepage cp949 not found [ 251.148991][T10264] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1625'. [ 251.195590][T10275] loop1: detected capacity change from 0 to 164 [ 251.228276][T10275] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 251.236645][T10270] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1630'. [ 251.285424][T10290] loop2: detected capacity change from 0 to 2048 [ 251.349667][ T3321] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 251.438135][ T3321] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 251.475728][T10331] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1636'. [ 251.497251][T10303] loop1: detected capacity change from 0 to 4096 [ 251.504302][T10332] loop0: detected capacity change from 0 to 512 [ 251.511138][T10332] EXT4-fs: Ignoring removed nobh option [ 251.520882][T10332] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #3: comm syz.0.1639: corrupted inode contents [ 251.543091][T10338] loop2: detected capacity change from 0 to 512 [ 251.565628][T10332] EXT4-fs (loop0): Remounting filesystem read-only [ 251.573025][T10332] EXT4-fs (loop0): 1 truncate cleaned up [ 251.579346][T10332] ext4 filesystem being mounted at /305/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 251.658527][T10341] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1642'. [ 251.675645][T10347] loop0: detected capacity change from 0 to 256 [ 251.696971][T10347] FAT-fs (loop0): codepage cp949 not found [ 251.700430][ T29] kauditd_printk_skb: 1030 callbacks suppressed [ 251.700514][ T29] audit: type=1326 audit(1762750485.316:14612): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10287 comm="syz.4.1635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f3b583b6567 code=0x7ffc0000 [ 251.733466][ T29] audit: type=1326 audit(1762750485.316:14613): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10287 comm="syz.4.1635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3b5835b779 code=0x7ffc0000 [ 251.757462][ T29] audit: type=1326 audit(1762750485.316:14614): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10287 comm="syz.4.1635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7f3b583bf6c9 code=0x7ffc0000 [ 251.781536][ T29] audit: type=1326 audit(1762750485.346:14615): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10287 comm="syz.4.1635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f3b583b6567 code=0x7ffc0000 [ 251.805607][ T29] audit: type=1326 audit(1762750485.346:14616): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10287 comm="syz.4.1635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3b5835b779 code=0x7ffc0000 [ 251.814735][T10352] netlink: 'syz.0.1643': attribute type 1 has an invalid length. [ 251.829733][ T29] audit: type=1326 audit(1762750485.346:14617): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10287 comm="syz.4.1635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7f3b583bf6c9 code=0x7ffc0000 [ 251.861824][ T29] audit: type=1326 audit(1762750485.376:14618): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10287 comm="syz.4.1635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f3b583b6567 code=0x7ffc0000 [ 251.864485][T10303] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.885720][ T29] audit: type=1326 audit(1762750485.376:14619): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10287 comm="syz.4.1635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3b5835b779 code=0x7ffc0000 [ 251.885760][ T29] audit: type=1326 audit(1762750485.376:14620): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10287 comm="syz.4.1635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7f3b583bf6c9 code=0x7ffc0000 [ 251.943617][ T29] audit: type=1326 audit(1762750485.376:14621): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10287 comm="syz.4.1635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f3b583b6567 code=0x7ffc0000 [ 251.968546][T10354] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 251.976392][T10354] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 251.993415][T10352] bond7: entered promiscuous mode [ 251.999093][T10352] 8021q: adding VLAN 0 to HW filter on device bond7 [ 252.015646][T10353] 8021q: adding VLAN 0 to HW filter on device bond7 [ 252.023298][T10353] bond7: (slave wireguard8): The slave device specified does not support setting the MAC address [ 252.034019][T10353] bond7: (slave wireguard8): Setting fail_over_mac to active for active-backup mode [ 252.050735][T10353] bond7: (slave wireguard8): making interface the new active one [ 252.058539][T10353] wireguard8: entered promiscuous mode [ 252.066371][T10353] bond7: (slave wireguard8): Enslaving as an active interface with an up link [ 252.074719][T10360] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1645'. [ 252.085585][T10303] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.180460][T10303] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.221158][T10368] loop2: detected capacity change from 0 to 512 [ 252.228090][T10368] EXT4-fs: Ignoring removed nobh option [ 252.239882][T10303] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.251944][T10368] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #3: comm syz.2.1649: corrupted inode contents [ 252.267743][T10368] EXT4-fs (loop2): Remounting filesystem read-only [ 252.275377][T10368] EXT4-fs (loop2): 1 truncate cleaned up [ 252.282742][T10368] ext4 filesystem being mounted at /306/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 252.305036][T10380] loop4: detected capacity change from 0 to 2048 [ 252.340176][T10380] ext4 filesystem being mounted at /334/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 252.568573][T10391] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 252.577732][T10391] SELinux: Context system_u:object_r:crond_var_run_t:s0 is not valid (left unmapped). [ 252.684625][T10390] loop2: detected capacity change from 0 to 2048 [ 252.693227][T10395] loop4: detected capacity change from 0 to 256 [ 252.709128][T10395] FAT-fs (loop4): codepage cp949 not found [ 252.716139][T10390] ext4 filesystem being mounted at /307/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 252.743004][T10400] loop4: detected capacity change from 0 to 128 [ 252.916074][T10402] __nla_validate_parse: 1 callbacks suppressed [ 252.916096][T10402] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1658'. [ 253.077102][T10410] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1661'. [ 253.127406][T10418] loop2: detected capacity change from 0 to 512 [ 253.233135][T10423] loop2: detected capacity change from 0 to 256 [ 253.262244][T10423] FAT-fs (loop2): codepage cp949 not found [ 253.459742][ T6767] bio_check_eod: 189 callbacks suppressed [ 253.459762][ T6767] kworker/u8:17: attempt to access beyond end of device [ 253.459762][ T6767] loop4: rw=1, sector=153, nr_sectors = 8 limit=128 [ 253.479633][ T6767] kworker/u8:17: attempt to access beyond end of device [ 253.479633][ T6767] loop4: rw=1, sector=169, nr_sectors = 8 limit=128 [ 253.493758][ T6767] kworker/u8:17: attempt to access beyond end of device [ 253.493758][ T6767] loop4: rw=1, sector=185, nr_sectors = 8 limit=128 [ 253.507713][ T6767] kworker/u8:17: attempt to access beyond end of device [ 253.507713][ T6767] loop4: rw=1, sector=201, nr_sectors = 8 limit=128 [ 253.522049][ T6767] kworker/u8:17: attempt to access beyond end of device [ 253.522049][ T6767] loop4: rw=1, sector=217, nr_sectors = 8 limit=128 [ 253.536010][ T6767] kworker/u8:17: attempt to access beyond end of device [ 253.536010][ T6767] loop4: rw=1, sector=233, nr_sectors = 8 limit=128 [ 253.550108][ T6767] kworker/u8:17: attempt to access beyond end of device [ 253.550108][ T6767] loop4: rw=1, sector=249, nr_sectors = 8 limit=128 [ 253.563604][ T6767] kworker/u8:17: attempt to access beyond end of device [ 253.563604][ T6767] loop4: rw=1, sector=265, nr_sectors = 8 limit=128 [ 253.578453][ T6767] kworker/u8:17: attempt to access beyond end of device [ 253.578453][ T6767] loop4: rw=1, sector=281, nr_sectors = 8 limit=128 [ 253.592119][ T6767] kworker/u8:17: attempt to access beyond end of device [ 253.592119][ T6767] loop4: rw=1, sector=297, nr_sectors = 8 limit=128 [ 253.640818][T10436] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1671'. [ 253.715328][T10445] loop4: detected capacity change from 0 to 512 [ 253.722136][T10445] EXT4-fs: Ignoring removed nobh option [ 253.749537][T10445] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #3: comm syz.4.1674: corrupted inode contents [ 253.762103][T10445] EXT4-fs (loop4): Remounting filesystem read-only [ 253.769686][T10445] EXT4-fs (loop4): 1 truncate cleaned up [ 253.776530][T10445] ext4 filesystem being mounted at /340/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 253.882506][T10449] loop0: detected capacity change from 0 to 512 [ 254.005742][T10458] loop0: detected capacity change from 0 to 512 [ 254.027460][T10458] EXT4-fs: Ignoring removed nobh option [ 254.036270][T10462] loop2: detected capacity change from 0 to 164 [ 254.044005][T10462] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 254.044218][T10460] loop4: detected capacity change from 0 to 2048 [ 254.055601][T10458] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #3: comm syz.0.1679: corrupted inode contents [ 254.070809][T10458] EXT4-fs (loop0): Remounting filesystem read-only [ 254.078159][T10458] EXT4-fs (loop0): 1 truncate cleaned up [ 254.084089][T10460] ext4 filesystem being mounted at /342/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 254.084472][T10458] ext4 filesystem being mounted at /313/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 254.261059][T10473] loop4: detected capacity change from 0 to 512 [ 254.268355][T10473] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 254.308176][T10473] EXT4-fs (loop4): orphan cleanup on readonly fs [ 254.315198][T10473] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1684: bg 0: block 248: padding at end of block bitmap is not set [ 254.335759][T10473] EXT4-fs error (device loop4): ext4_acquire_dquot:6945: comm syz.4.1684: Failed to acquire dquot type 1 [ 254.349858][T10473] EXT4-fs (loop4): 1 truncate cleaned up [ 254.381854][T10478] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1686'. [ 254.391438][T10478] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1686'. [ 254.426652][T10482] loop4: detected capacity change from 0 to 512 [ 254.467356][T10486] loop4: detected capacity change from 0 to 2048 [ 254.511428][ T3313] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 254.526420][ T3313] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 254.580754][T10492] loop4: detected capacity change from 0 to 2048 [ 254.592562][T10488] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1691'. [ 254.603309][T10492] ext4 filesystem being mounted at /349/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 254.691864][T10503] netlink: 'syz.4.1695': attribute type 1 has an invalid length. [ 254.707301][T10503] bond7: entered promiscuous mode [ 254.712891][T10503] 8021q: adding VLAN 0 to HW filter on device bond7 [ 254.736889][T10503] 8021q: adding VLAN 0 to HW filter on device bond7 [ 254.745071][T10503] bond7: (slave wireguard10): The slave device specified does not support setting the MAC address [ 254.755853][T10503] bond7: (slave wireguard10): Setting fail_over_mac to active for active-backup mode [ 254.768779][T10503] bond7: (slave wireguard10): making interface the new active one [ 254.776765][T10503] wireguard10: entered promiscuous mode [ 254.802555][T10506] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 254.848054][T10503] bond7: (slave wireguard10): Enslaving as an active interface with an up link [ 254.857250][T10506] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 254.966694][T10512] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1698'. [ 255.010568][T10521] loop2: detected capacity change from 0 to 512 [ 255.038886][T10523] netlink: 'syz.4.1702': attribute type 1 has an invalid length. [ 255.061379][T10523] bond8: entered promiscuous mode [ 255.071974][T10523] 8021q: adding VLAN 0 to HW filter on device bond8 [ 255.128267][T10523] 8021q: adding VLAN 0 to HW filter on device bond8 [ 255.137412][T10523] bond8: (slave wireguard11): The slave device specified does not support setting the MAC address [ 255.145288][T10541] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 255.148244][T10523] bond8: (slave wireguard11): Setting fail_over_mac to active for active-backup mode [ 255.167546][T10541] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 255.179780][T10523] bond8: (slave wireguard11): making interface the new active one [ 255.187658][T10523] wireguard11: entered promiscuous mode [ 255.196525][T10523] bond8: (slave wireguard11): Enslaving as an active interface with an up link [ 255.260145][T10551] loop4: detected capacity change from 0 to 164 [ 255.269595][T10551] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 255.407595][T10569] loop4: detected capacity change from 0 to 128 [ 255.746559][T10601] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1711'. [ 255.813199][T10618] loop0: detected capacity change from 0 to 512 [ 255.828263][T10618] EXT4-fs: Ignoring removed nobh option [ 255.867927][T10618] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #3: comm syz.0.1712: corrupted inode contents [ 255.886634][T10618] EXT4-fs (loop0): Remounting filesystem read-only [ 255.899152][T10618] EXT4-fs (loop0): 1 truncate cleaned up [ 255.910861][T10618] EXT4-fs mount: 69 callbacks suppressed [ 255.910882][T10618] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 256.038045][T10647] siw: device registration error -23 [ 256.060351][T10647] smc: removing ib device syz0 [ 256.088120][T10618] ext4 filesystem being mounted at /316/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 256.114100][T10651] netlink: 'syz.3.1713': attribute type 1 has an invalid length. [ 256.124344][T10650] loop2: detected capacity change from 0 to 512 [ 256.180819][T10654] loop2: detected capacity change from 0 to 128 [ 256.231298][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 256.249342][ T6399] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.309590][ T6399] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.327725][T10659] loop2: detected capacity change from 0 to 2048 [ 256.344282][ T6399] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.376662][ T6399] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.385602][T10659] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 256.390386][T10661] loop4: detected capacity change from 0 to 2048 [ 256.421840][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 256.430980][T10659] ext4 filesystem being mounted at /318/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 256.455103][T10661] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 256.489882][T10668] loop0: detected capacity change from 0 to 2048 [ 256.520822][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 256.527375][ T3313] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 256.546101][ T3313] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 256.547082][T10668] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 256.575215][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 256.628701][T10683] loop4: detected capacity change from 0 to 512 [ 256.635479][T10683] EXT4-fs: Ignoring removed nobh option [ 256.646359][ T3318] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 256.668218][ T3318] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 256.689397][T10683] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #3: comm syz.4.1725: corrupted inode contents [ 256.713050][ T29] kauditd_printk_skb: 1239 callbacks suppressed [ 256.713065][ T29] audit: type=1326 audit(1762750490.326:15851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10671 comm="syz.3.1722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fde8e006567 code=0x7ffc0000 [ 256.734820][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 256.743303][ T29] audit: type=1326 audit(1762750490.326:15852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10671 comm="syz.3.1722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fde8dfab779 code=0x7ffc0000 [ 256.782950][ T29] audit: type=1326 audit(1762750490.326:15853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10671 comm="syz.3.1722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7fde8e00f6c9 code=0x7ffc0000 [ 256.806684][ T29] audit: type=1326 audit(1762750490.366:15854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10671 comm="syz.3.1722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fde8e006567 code=0x7ffc0000 [ 256.830380][ T29] audit: type=1326 audit(1762750490.366:15855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10671 comm="syz.3.1722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fde8dfab779 code=0x7ffc0000 [ 256.853911][ T29] audit: type=1326 audit(1762750490.366:15856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10671 comm="syz.3.1722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7fde8e00f6c9 code=0x7ffc0000 [ 256.879104][ T29] audit: type=1326 audit(1762750490.476:15857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10671 comm="syz.3.1722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fde8e006567 code=0x7ffc0000 [ 256.879771][T10683] EXT4-fs (loop4): Remounting filesystem read-only [ 256.902666][ T29] audit: type=1326 audit(1762750490.476:15858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10671 comm="syz.3.1722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fde8dfab779 code=0x7ffc0000 [ 256.902705][ T29] audit: type=1326 audit(1762750490.476:15859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10671 comm="syz.3.1722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7fde8e00f6c9 code=0x7ffc0000 [ 256.933507][T10683] Quota error (device loop4): write_blk: dquota write failed [ 256.974626][T10683] EXT4-fs (loop4): 1 truncate cleaned up [ 256.988591][T10701] netlink: 'syz.1.1729': attribute type 1 has an invalid length. [ 256.990893][T10683] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 257.004477][T10701] bond9: entered promiscuous mode [ 257.014470][T10701] 8021q: adding VLAN 0 to HW filter on device bond9 [ 257.026395][T10683] ext4 filesystem being mounted at /357/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 257.041586][T10701] 8021q: adding VLAN 0 to HW filter on device bond9 [ 257.049520][T10701] bond9: (slave wireguard10): The slave device specified does not support setting the MAC address [ 257.060236][T10701] bond9: (slave wireguard10): Setting fail_over_mac to active for active-backup mode [ 257.074851][T10701] bond9: (slave wireguard10): making interface the new active one [ 257.082872][T10701] wireguard10: entered promiscuous mode [ 257.098704][T10710] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 257.108001][T10701] bond9: (slave wireguard10): Enslaving as an active interface with an up link [ 257.131000][T10710] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 257.183448][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 257.309564][T10737] loop4: detected capacity change from 0 to 1024 [ 257.309641][T10736] loop1: detected capacity change from 0 to 2048 [ 257.327502][T10737] EXT4-fs (loop4): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 257.339540][T10730] loop0: detected capacity change from 0 to 2048 [ 257.346304][T10730] EXT4-fs: dax option not supported [ 257.354492][T10737] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 2: comm syz.4.1730: lblock 2 mapped to illegal pblock 2 (length 1) [ 257.370880][T10737] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 48: comm syz.4.1730: lblock 0 mapped to illegal pblock 48 (length 1) [ 257.389269][T10736] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 257.401740][T10737] EXT4-fs error (device loop4): ext4_acquire_dquot:6945: comm syz.4.1730: Failed to acquire dquot type 0 [ 257.402859][T10736] ext4 filesystem being mounted at /375/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 257.436190][T10748] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 257.444982][T10737] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 257.467300][T10750] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1736'. [ 257.534827][T10737] EXT4-fs error (device loop4): ext4_evict_inode:254: inode #11: comm syz.4.1730: mark_inode_dirty error [ 257.552259][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 257.556910][T10748] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 257.569216][T10737] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 257.588089][T10737] EXT4-fs (loop4): 1 orphan inode deleted [ 257.593993][ T117] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:5: lblock 1 mapped to illegal pblock 1 (length 1) [ 257.594515][T10737] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 257.617643][ T117] EXT4-fs error (device loop4): ext4_release_dquot:6981: comm kworker/u8:5: Failed to release dquot type 0 [ 257.674227][T10781] loop1: detected capacity change from 0 to 2048 [ 257.698994][T10748] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1733'. [ 257.730114][T10748] syz_tun: entered allmulticast mode [ 257.744969][T10781] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 257.877087][ T3314] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 257.898079][ T3314] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 257.923014][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 257.951168][T10783] __nla_validate_parse: 1 callbacks suppressed [ 257.951190][T10783] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1740'. [ 257.976735][T10809] netlink: 'syz.1.1741': attribute type 1 has an invalid length. [ 258.008262][T10809] bond10: entered promiscuous mode [ 258.013810][T10809] 8021q: adding VLAN 0 to HW filter on device bond10 [ 258.039714][T10809] 8021q: adding VLAN 0 to HW filter on device bond10 [ 258.052087][T10809] bond10: (slave wireguard11): The slave device specified does not support setting the MAC address [ 258.062884][T10809] bond10: (slave wireguard11): Setting fail_over_mac to active for active-backup mode [ 258.075785][T10809] bond10: (slave wireguard11): making interface the new active one [ 258.083811][T10809] wireguard11: entered promiscuous mode [ 258.093324][T10809] bond10: (slave wireguard11): Enslaving as an active interface with an up link [ 258.098612][T10818] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 258.123232][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 258.128439][T10818] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 258.139995][ T6405] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:16: lblock 1 mapped to illegal pblock 1 (length 1) [ 258.154849][ T6405] EXT4-fs error (device loop4): ext4_release_dquot:6981: comm kworker/u8:16: Failed to release dquot type 0 [ 258.183447][ T3313] EXT4-fs error (device loop4): __ext4_get_inode_loc:4832: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 258.216464][ T3313] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 258.228986][ T3313] EXT4-fs error (device loop4): ext4_quota_off:7229: inode #3: comm syz-executor: mark_inode_dirty error [ 258.252915][T10834] loop1: detected capacity change from 0 to 2048 [ 258.269093][T10834] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 258.283281][T10834] ext4 filesystem being mounted at /379/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 258.330129][T10842] loop4: detected capacity change from 0 to 512 [ 258.379326][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 258.401639][T10842] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 258.434875][T10842] ext4 filesystem being mounted at /359/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 258.617140][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 258.640934][T10887] loop2: detected capacity change from 0 to 512 [ 258.662188][T10891] netlink: 'syz.1.1756': attribute type 1 has an invalid length. [ 258.695034][T10891] bond11: entered promiscuous mode [ 258.713321][T10891] 8021q: adding VLAN 0 to HW filter on device bond11 [ 258.760432][T10898] 8021q: adding VLAN 0 to HW filter on device bond11 [ 258.797020][T10891] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 258.817365][T10898] bond11: (slave wireguard12): The slave device specified does not support setting the MAC address [ 258.828213][T10898] bond11: (slave wireguard12): Setting fail_over_mac to active for active-backup mode [ 258.851861][T10906] loop2: detected capacity change from 0 to 2048 [ 258.859160][T10891] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 258.869414][T10906] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 258.882897][T10898] bond11: (slave wireguard12): making interface the new active one [ 258.890907][T10898] wireguard12: entered promiscuous mode [ 258.896883][T10906] ext4 filesystem being mounted at /325/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 258.900205][T10898] bond11: (slave wireguard12): Enslaving as an active interface with an up link [ 258.920495][T10911] loop4: detected capacity change from 0 to 256 [ 258.936420][T10911] FAT-fs (loop4): codepage cp949 not found [ 258.963584][T10914] loop1: detected capacity change from 0 to 512 [ 258.991735][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 259.001710][T10914] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 259.014526][T10914] ext4 filesystem being mounted at /383/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 259.063122][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 259.133183][T10922] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1764'. [ 259.193340][T10930] loop1: detected capacity change from 0 to 512 [ 259.258514][T10941] netlink: 'syz.3.1773': attribute type 1 has an invalid length. [ 259.279307][T10941] bond8: entered promiscuous mode [ 259.288188][T10941] 8021q: adding VLAN 0 to HW filter on device bond8 [ 259.306616][T10941] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 259.367412][T10941] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 259.494344][T10954] lo speed is unknown, defaulting to 1000 [ 259.561522][T10946] loop1: detected capacity change from 0 to 512 [ 259.583720][T10946] EXT4-fs error (device loop1): ext4_init_orphan_info:581: comm syz.1.1772: inode #0: comm syz.1.1772: iget: illegal inode # [ 259.769480][T10946] EXT4-fs (loop1): get orphan inode failed [ 259.787572][T10946] EXT4-fs (loop1): mount failed [ 259.968994][T10981] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1778'. [ 259.994651][T10981] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1778'. [ 260.578987][T11032] loop2: detected capacity change from 0 to 512 [ 260.625663][T11046] loop4: detected capacity change from 0 to 512 [ 260.715068][T11032] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 260.780828][T11032] ext4 filesystem being mounted at /332/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 260.954234][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 261.193013][T11071] loop2: detected capacity change from 0 to 512 [ 261.201616][T11070] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1782'. [ 261.313788][T11077] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1784'. [ 261.514119][T11093] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1791'. [ 261.605371][T11091] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1790'. [ 261.657319][T11101] loop2: detected capacity change from 0 to 512 [ 261.738490][T11101] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 261.768579][T11101] EXT4-fs (loop2): orphan cleanup on readonly fs [ 261.775596][T11101] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1792: bg 0: block 248: padding at end of block bitmap is not set [ 261.790519][T11101] __quota_error: 648 callbacks suppressed [ 261.790534][T11101] Quota error (device loop2): write_blk: dquota write failed [ 261.803790][T11101] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 261.813814][T11101] EXT4-fs error (device loop2): ext4_acquire_dquot:6945: comm syz.2.1792: Failed to acquire dquot type 1 [ 261.825863][T11101] EXT4-fs (loop2): 1 truncate cleaned up [ 262.014702][T11109] loop0: detected capacity change from 0 to 512 [ 262.058015][ T29] audit: type=1326 audit(1762750495.606:16503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11108 comm="syz.0.1795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f073f26f6c9 code=0x7ffc0000 [ 262.081783][ T29] audit: type=1326 audit(1762750495.606:16504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11108 comm="syz.0.1795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f073f26f6c9 code=0x7ffc0000 [ 262.105439][ T29] audit: type=1326 audit(1762750495.606:16505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11108 comm="syz.0.1795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f073f26f6c9 code=0x7ffc0000 [ 262.129082][ T29] audit: type=1326 audit(1762750495.606:16506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11108 comm="syz.0.1795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f073f26f6c9 code=0x7ffc0000 [ 262.152853][ T29] audit: type=1326 audit(1762750495.606:16507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11108 comm="syz.0.1795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f073f26f6c9 code=0x7ffc0000 [ 262.176536][ T29] audit: type=1326 audit(1762750495.606:16508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11108 comm="syz.0.1795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f073f26f6c9 code=0x7ffc0000 [ 262.200193][ T29] audit: type=1326 audit(1762750495.606:16509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11108 comm="syz.0.1795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f073f26f6c9 code=0x7ffc0000 [ 262.223857][ T29] audit: type=1326 audit(1762750495.606:16510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11108 comm="syz.0.1795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7f073f26f6c9 code=0x7ffc0000 [ 262.395088][T11115] netlink: 'syz.0.1797': attribute type 1 has an invalid length. [ 262.509422][T11115] bond8: entered promiscuous mode [ 262.535349][T11115] 8021q: adding VLAN 0 to HW filter on device bond8 [ 262.568443][T11121] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 262.583980][T11101] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 262.609447][T11121] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 263.255932][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 263.423565][T11175] loop2: detected capacity change from 0 to 512 [ 263.472266][T11180] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1809'. [ 263.488378][T11180] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1809'. [ 263.548576][T11188] loop2: detected capacity change from 0 to 512 [ 263.589555][T11188] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 263.607945][T11188] ext4 filesystem being mounted at /343/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 263.691713][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 263.807374][T11227] netlink: 'syz.1.1812': attribute type 1 has an invalid length. [ 263.863293][T11227] bond12: entered promiscuous mode [ 263.876754][T11227] 8021q: adding VLAN 0 to HW filter on device bond12 [ 263.992035][T11227] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 263.999548][T11227] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 264.189637][T11257] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1815'. [ 264.218390][T11257] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1815'. [ 264.306324][T11260] loop1: detected capacity change from 0 to 512 [ 264.313686][T11260] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 264.323870][T11260] EXT4-fs (loop1): orphan cleanup on readonly fs [ 264.330820][T11260] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1816: bg 0: block 248: padding at end of block bitmap is not set [ 264.345428][T11260] EXT4-fs error (device loop1): ext4_acquire_dquot:6945: comm syz.1.1816: Failed to acquire dquot type 1 [ 264.357339][T11260] EXT4-fs (loop1): 1 truncate cleaned up [ 264.363744][T11260] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 264.618158][T11263] loop4: detected capacity change from 0 to 512 [ 264.624906][T11263] EXT4-fs: Ignoring removed nobh option [ 264.663342][T11263] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #3: comm syz.4.1817: corrupted inode contents [ 264.681605][T11263] EXT4-fs (loop4): Remounting filesystem read-only [ 264.696613][T11263] EXT4-fs (loop4): 1 truncate cleaned up [ 264.709254][T11263] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 264.729445][T11263] ext4 filesystem being mounted at /368/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 264.740103][T11271] loop2: detected capacity change from 0 to 512 [ 264.750652][T11271] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 264.767955][T11271] ext4 filesystem being mounted at /347/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 264.783618][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 264.824859][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 264.844229][T11275] loop4: detected capacity change from 0 to 512 [ 264.862508][T11275] EXT4-fs: Ignoring removed nobh option [ 264.897052][T11275] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #3: comm syz.4.1821: corrupted inode contents [ 264.918205][T11275] EXT4-fs (loop4): Remounting filesystem read-only [ 264.929755][T11275] EXT4-fs (loop4): 1 truncate cleaned up [ 264.936175][T11275] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 264.948797][T11275] ext4 filesystem being mounted at /369/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 264.993378][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 265.035851][T11296] loop4: detected capacity change from 0 to 512 [ 265.042782][T11296] EXT4-fs: Ignoring removed nobh option [ 265.062250][T11296] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #3: comm syz.4.1823: corrupted inode contents [ 265.080997][T11296] EXT4-fs (loop4): Remounting filesystem read-only [ 265.092402][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 265.101750][T11296] EXT4-fs (loop4): 1 truncate cleaned up [ 265.108605][T11296] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 265.121528][T11296] ext4 filesystem being mounted at /370/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 265.159195][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 265.276719][T11329] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1830'. [ 265.342660][T11330] lo speed is unknown, defaulting to 1000 [ 265.369277][T11349] loop4: detected capacity change from 0 to 512 [ 265.397347][T11349] EXT4-fs error (device loop4): ext4_init_orphan_info:581: comm syz.4.1827: inode #0: comm syz.4.1827: iget: illegal inode # [ 265.449948][T11349] EXT4-fs (loop4): get orphan inode failed [ 265.468677][T11360] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1833'. [ 265.481528][T11349] EXT4-fs (loop4): mount failed [ 265.492393][T11361] loop1: detected capacity change from 0 to 256 [ 265.523425][T11361] FAT-fs (loop1): codepage cp949 not found [ 266.417530][T11410] loop0: detected capacity change from 0 to 164 [ 266.442574][T11410] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 266.807883][T11459] loop2: detected capacity change from 0 to 512 [ 266.826928][T11459] EXT4-fs: Ignoring removed nobh option [ 266.859413][T11459] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #3: comm syz.2.1837: corrupted inode contents [ 266.892790][T11459] EXT4-fs (loop2): Remounting filesystem read-only [ 266.915573][T11459] __quota_error: 274 callbacks suppressed [ 266.915596][T11459] Quota error (device loop2): write_blk: dquota write failed [ 266.956229][T11459] Quota error (device loop2): qtree_write_dquot: Error -30 occurred while creating quota [ 266.988267][T11459] EXT4-fs (loop2): 1 truncate cleaned up [ 267.007944][T11459] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 267.046566][T11459] ext4 filesystem being mounted at /349/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 267.126564][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 267.274923][ T29] audit: type=1326 audit(1762750500.886:16777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11471 comm="syz.2.1842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e2376f6c9 code=0x7ffc0000 [ 267.301898][ T29] audit: type=1326 audit(1762750500.886:16778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11471 comm="syz.2.1842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2e2376f6c9 code=0x7ffc0000 [ 267.325657][ T29] audit: type=1326 audit(1762750500.886:16779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11471 comm="syz.2.1842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e2376f6c9 code=0x7ffc0000 [ 267.349324][ T29] audit: type=1326 audit(1762750500.886:16780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11471 comm="syz.2.1842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2e2376f6c9 code=0x7ffc0000 [ 267.373048][ T29] audit: type=1326 audit(1762750500.886:16781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11471 comm="syz.2.1842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e2376f6c9 code=0x7ffc0000 [ 267.396817][ T29] audit: type=1326 audit(1762750500.886:16782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11471 comm="syz.2.1842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2e2376f6c9 code=0x7ffc0000 [ 267.420831][ T29] audit: type=1326 audit(1762750500.886:16783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11471 comm="syz.2.1842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e2376f6c9 code=0x7ffc0000 [ 267.444509][ T29] audit: type=1326 audit(1762750500.886:16784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11471 comm="syz.2.1842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2e2376f6c9 code=0x7ffc0000 [ 267.485855][T11482] loop0: detected capacity change from 0 to 512 [ 267.494316][T11482] EXT4-fs: Ignoring removed nobh option [ 267.512650][T11481] loop4: detected capacity change from 0 to 512 [ 267.518178][T11474] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1843'. [ 267.539915][T11481] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 267.548391][T11482] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #3: comm syz.0.1844: corrupted inode contents [ 267.578082][T11481] ext4 filesystem being mounted at /372/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 267.617992][T11493] syzkaller0: entered allmulticast mode [ 267.628201][T11482] EXT4-fs (loop0): Remounting filesystem read-only [ 267.634188][T11493] syzkaller0: entered promiscuous mode [ 267.643126][T11482] EXT4-fs (loop0): 1 truncate cleaned up [ 267.658357][T11482] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 267.675842][T11482] ext4 filesystem being mounted at /334/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 267.689338][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 267.763473][T11494] lo speed is unknown, defaulting to 1000 [ 267.779182][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 267.793502][T11501] loop1: detected capacity change from 0 to 512 [ 267.851246][T11501] EXT4-fs error (device loop1): ext4_init_orphan_info:581: comm syz.1.1847: inode #0: comm syz.1.1847: iget: illegal inode # [ 267.864927][T11505] netlink: 'syz.0.1851': attribute type 1 has an invalid length. [ 267.886367][T11501] EXT4-fs (loop1): get orphan inode failed [ 267.902569][T11502] lo speed is unknown, defaulting to 1000 [ 267.915228][T11501] EXT4-fs (loop1): mount failed [ 267.936752][T11510] loop4: detected capacity change from 0 to 512 [ 267.960501][T11511] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 267.968952][T11510] EXT4-fs error (device loop4): ext4_init_orphan_info:581: comm syz.4.1849: inode #0: comm syz.4.1849: iget: illegal inode # [ 267.988037][T11511] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 268.010589][T11501] ================================================================== [ 268.018752][T11501] BUG: KCSAN: data-race in mlock_new_folio / need_mlock_drain [ 268.026377][T11501] [ 268.028723][T11501] read-write to 0xffff888237d26a90 of 1 bytes by task 11477 on cpu 1: [ 268.036913][T11501] mlock_new_folio+0x143/0x240 [ 268.041737][T11501] folio_add_lru_vma+0x5f/0x70 [ 268.046527][T11501] handle_mm_fault+0x27e2/0x2be0 [ 268.051501][T11501] __get_user_pages+0x102a/0x1ed0 [ 268.056551][T11501] __mm_populate+0x243/0x3a0 [ 268.061161][T11501] __se_sys_mlockall+0x368/0x3d0 [ 268.066132][T11501] __x64_sys_mlockall+0x1f/0x30 [ 268.071008][T11501] x64_sys_call+0xd68/0x3000 [ 268.075618][T11501] do_syscall_64+0xd2/0x200 [ 268.080139][T11501] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 268.086087][T11501] [ 268.088452][T11501] read to 0xffff888237d26a90 of 1 bytes by task 11501 on cpu 0: [ 268.096090][T11501] need_mlock_drain+0x30/0x50 [ 268.100802][T11501] __lru_add_drain_all+0x273/0x450 [ 268.105928][T11501] lru_add_drain_all+0x10/0x20 [ 268.110707][T11501] invalidate_bdev+0x47/0x70 [ 268.115309][T11501] ext4_fill_super+0x2d2c/0x3810 [ 268.120260][T11501] get_tree_bdev_flags+0x291/0x300 [ 268.125433][T11501] get_tree_bdev+0x1f/0x30 [ 268.129871][T11501] ext4_get_tree+0x1c/0x30 [ 268.134306][T11501] vfs_get_tree+0x57/0x1d0 [ 268.138749][T11501] do_new_mount+0x24d/0x660 [ 268.143273][T11501] path_mount+0x4a5/0xb70 [ 268.147642][T11501] __se_sys_mount+0x28c/0x2e0 [ 268.152345][T11501] __x64_sys_mount+0x67/0x80 [ 268.156968][T11501] x64_sys_call+0x2b51/0x3000 [ 268.161663][T11501] do_syscall_64+0xd2/0x200 [ 268.166199][T11501] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 268.172116][T11501] [ 268.174455][T11501] value changed: 0x13 -> 0x18 [ 268.179145][T11501] [ 268.181477][T11501] Reported by Kernel Concurrency Sanitizer on: [ 268.187637][T11501] CPU: 0 UID: 0 PID: 11501 Comm: syz.1.1847 Not tainted syzkaller #0 PREEMPT(voluntary) [ 268.197461][T11501] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 268.207527][T11501] ================================================================== [ 268.233482][T11510] EXT4-fs (loop4): get orphan inode failed [ 268.247951][T11510] EXT4-fs (loop4): mount failed [ 268.339674][T11476] syzkaller0: left promiscuous mode [ 268.345080][T11476] syzkaller0: left allmulticast mode