last executing test programs: 2.806881318s ago: executing program 4 (id=2442): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="4000000010001fff00000000000000f6ff060000", @ANYRES32=0x0, @ANYBLOB="81ffffff00000000180012800e0001007769726567756172640000000400028008000a00"], 0x40}}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) 2.70336435s ago: executing program 4 (id=2443): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000700000000000000000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) setpriority(0x3, 0x0, 0xfffffffd) 2.623094971s ago: executing program 4 (id=2444): mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x90\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8M$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xe1(\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xd5j*\xad\x18I\xcc\xe9\xaa{]\xef\xfb\xff\xff\xff\xff\xff\xff\xfft\xd0s\xc4\x04\xe0\xa1\xd2@\x06\xc2`H\xf7\xcc\xe3\xa0\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c', 0x42, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000120000000000000000"], &(0x7f0000000c00)='GPL\x00'}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.current\x00', 0x275a, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2.176884587s ago: executing program 4 (id=2446): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x4c58, 0x10000, 0x0, 0x1, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x9, 0x81, &(0x7f0000000200)="000000000000000011f5b8fa6d2358fb4a4ef38d009f1aed8f9a03c993bdeedaa2632e6bbf2a367d221de6a93ac9208fc269fa140c2a65de00df69d246b30100102fc095a70780ea49625aaac73d85b2e603139a5b985e", 0x57) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000000)=ANY=[], 0xffc9) symlink(&(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000cc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r2 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)="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", 0xfa}, 0x1, 0x0, 0x0, 0x81}, 0x8000) fcntl$getownex(r0, 0x10, &(0x7f0000000280)={0x0, 0x0}) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x9, 0xf, 0x7, 0x4, 0x0, 0x6, 0x6e465, 0xa, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x400, 0x2, @perf_config_ext={0x4fb2, 0x6}, 0x200, 0x3, 0x2e, 0x8, 0x669, 0xdead, 0xd, 0x0, 0x8}, r3, 0xffffffffffffffff, r0, 0x18) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) timerfd_settime(0xffffffffffffffff, 0x3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffc}, 0x6e) bpf$ENABLE_STATS(0x20, 0x0, 0x0) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000000340)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000ff", 0x28, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0xd9, 0x0, 0x0, 0x0, {[@generic={0x1, 0x2}, @mptcp=@synack={0x1e, 0x10, 0x7, 0x2, 0x4, 0x4, 0x2}]}}}}}}}}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'macsec0\x00', 0x1}) socketpair(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x8924, &(0x7f0000000080)) readlink(&(0x7f0000000640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000002200)=""/4100, 0x105e) 2.103044878s ago: executing program 0 (id=2447): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a24000000000a07000000000000000000020000000900010073797a3000000000040006005c000000030a01020000000000000000020000000900010073797a30000000003900030091abc12404cf378042f26c43f91f68d8"], 0xbc}}, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xf, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r1}, 0x10) r2 = epoll_create1(0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r4, 0x40043d14, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0xf, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) readv(r7, &(0x7f0000001340)=[{&(0x7f0000000580)=""/148, 0x94}], 0x1) readv(r7, &(0x7f0000001240)=[{&(0x7f0000000040)=""/73, 0x49}], 0x1) ioctl$TUNSETLINK(r5, 0x400454cd, 0x6) r8 = socket$kcm(0x2, 0x5, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f00000001c0)={'syzkaller1\x00', @broadcast}) close(0x3) writev(r3, &(0x7f00000002c0)=[{&(0x7f0000000100)="89e7ee2c78dad9b4b473fec94305", 0xe}, {&(0x7f0000000540)="a13fff431a7da769caab2ff484ff2262eef21e6efc0e3f95", 0x18}], 0x2) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, &(0x7f0000000100)) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r10 = epoll_create(0x8) epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r9, &(0x7f0000000040)={0xf6c447fee59241f0}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 2.063891839s ago: executing program 3 (id=2448): socket(0xa, 0x2400000001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x20) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[], 0xfc}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000001900)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x0, 0x0, 0x3ff}}}}}}}, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r7}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r5}, 0x10) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) (fail_nth: 2) 1.811664773s ago: executing program 3 (id=2449): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010002000000000000000000000a18010000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000020d40009800800014000000006c80002800c00018008000140000000032400018008000140000000070800014000000008080001400000000908000140000000080c00018008"], 0x140}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffa2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020a07b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x6f, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000c"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002300000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r5}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x2008042, &(0x7f00000000c0), 0x1, 0x571, &(0x7f0000000780)="$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") setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', 0x0, 0x24, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r6) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="796125bd7000000000007e"], 0x1c}}, 0x4000054) r8 = socket$inet6(0xa, 0x1, 0x0) r9 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r9, &(0x7f0000002f80)=[{{&(0x7f0000000080)={0x2, 0x4e23, @remote}, 0x10, 0x0}}, {{&(0x7f0000000300)={0x2, 0x4e23, @remote}, 0x10, 0x0, 0x0, &(0x7f00000000c0)=[@ip_retopts={{0x10, 0x0, 0xffdf}}], 0x10}}], 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r8, 0x89f1, &(0x7f00000004c0)={'ip6_vti0\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x3, 0x0, 0x4e, @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x10, 0x7, 0x0, 0x4}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r8, 0x89f2, &(0x7f0000000680)={'syztnl1\x00', 0x0}) personality(0x410000e) personality(0x40000) 1.808470583s ago: executing program 1 (id=2450): r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TIOCGPKT(r0, 0x80045438, &(0x7f00000001c0)) pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ffd}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r5}, 0x10) syz_emit_ethernet(0x5e, &(0x7f0000003680)=ANY=[@ANYBLOB="ffffffffffaaaaaaaaaabb86dd60122d9200283afffe8000000000000000000000000000bbff0200000000000000000000000000018900907800000000000000000000000000000001ff0000aaff02000000000000000000000000000100"], 0x0) getsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000200), &(0x7f0000000280)=0x8) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000140)={'syztnl2\x00', &(0x7f00000000c0)={'ip6_vti0\x00', 0x0, 0x2f, 0x0, 0x7, 0x8, 0x27, @private0, @private2, 0x7, 0x700, 0x9}}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000180)={r6, 0x1, 0x6, @multicast}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080), 0x80c, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@uname={'uname', 0x3d, '\xd0\xae\xde\xc1\xaa \xff\xd8\x1d\x1b\xf8\x93)!|\xb0X\xa3\x96\xed\xa2\xab@\xa2m\x93\xdd\b<\x00t\xdc\xabl\xab!\xae\x16\xc4\xcd\xf9{\xdc5_;A\xd2{eC\x014\\\xb3\xc4\xce\xc3yS2-\x01\xbe\xaarW\x96O\xd3\x0f\xe2\xd7/\x17\x1d\xa7.8\x9d8-\xea<\x8d\x91\x90j\xea\xd5\xd5\xae\xcc\xc0\x97\xef\x10\x82\xea\x98|+\x00\x00\x00\x00\x00\x00\x00\x00'}}]}}) 1.687910135s ago: executing program 1 (id=2452): socket(0xa, 0x2400000001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x20) socket$nl_xfrm(0x10, 0x3, 0x6) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000780)={[{@data_err_ignore}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@delalloc}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}, {@quota}]}, 0x41, 0x553, &(0x7f0000000a40)="$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") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.numa_stat\x00', 0x275a, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000740)={{r3}, &(0x7f00000006c0), &(0x7f0000000700)='%pS \x00'}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) ioctl$EXT4_IOC_MOVE_EXT(r2, 0x8004587d, &(0x7f0000000080)) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000400180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r5}, 0x10) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) set_mempolicy_home_node(&(0x7f0000146000/0x1000)=nil, 0x1000, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x38, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_bp={0x0, 0xd}, 0x80, 0x10003, 0x7fff, 0x5, 0x4, 0xf095, 0x2b, 0x0, 0x0, 0x0, 0xffffffffffffff7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000dd0000000000003b810000850000006d000000a50000005000000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='kfree\x00', r6}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0, r7}, 0x18) memfd_create(0x0, 0x2) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1800403, &(0x7f0000001480)={[{@data_journal}]}, 0x1, 0x5ad, &(0x7f0000000180)="$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") r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r9, @ANYBLOB='ya\n\x00)\x00\x00\x00\x00\x00~\x00\x00\x00'], 0x14}, 0x1, 0x0, 0x0, 0x41}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 1.632345835s ago: executing program 0 (id=2453): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000040)=0x4000000000000200, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'erspan0\x00', 0x0}) bind$packet(r2, &(0x7f0000000080)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000003c0)={'gre0\x00', &(0x7f0000000300)={'syztnl1\x00', 0x0, 0x8000, 0x40, 0x9a4, 0x9, {{0x5, 0x4, 0x2, 0x8, 0x14, 0x67, 0x0, 0x7, 0x4, 0x0, @local, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}) r5 = socket(0x10, 0x803, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xe}, {0xffff, 0xffff}, {0xffe0, 0x3}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xe5}}}]}, 0x38}}, 0x4080) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000ac0)=@newtfilter={0x44, 0x2c, 0xd2b, 0x70bd2b, 0x35dfdbfb, {0x0, 0x0, 0x0, r7, {0xf}, {}, {0xe, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_SEL={0x14, 0x5, {0x3, 0x8, 0xd, 0x4, 0x7ff, 0x368, 0x7, 0x6}}]}}]}, 0x44}}, 0x24040084) r8 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="03000000000000002c0012800c0001006d6163766c616e001c000280080001000800000006000200010000001ffe02000000000008000500", @ANYRES32=r10, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r10], 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0xc010) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000000880)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000840)={&(0x7f0000000c00)=ANY=[@ANYBLOB="a0020000", @ANYRES16=0x0, @ANYBLOB="010c2bbd7000fcdbdf250c0000003c0001801400020070696d3672656730000000000000000008000100", @ANYRES32=r3, @ANYBLOB="08000300000000001400020070696d36726567300000000000000000b400038004000100ac00050040eb94ae70bb48cfb74d094b87842ea4b3fc1c14197542bc55c296022a265fa2d29815cec94efb4599e066efe16bea790142fe6309961577e28ae116e5c6690d6f05d8b46ed5bcd7f5a570e68b5668e8fa754c082b1d0aa123561959c6f5d18610af9891603032b0ce403338037fea203a1181493dd3f56c83a72612cc43ee5867f68882f924001f544203295e20d290f7016ef977b89286cca7de9e28c4ee1dfdd69a30751fae284c00018008000300000000001400020064756d6d79300000000000000000000008000100", @ANYBLOB="08000100", @ANYRES32=r4, @ANYBLOB="0800030002000000140002007465616d300000000000000000000000a000038004000100870005001e3aaeabe1f1d3b0679a3fb584985b95b6e1f98682e2b4b8404a04141b44096b7b440b50741e410e9d0fb88a120dd7ba635650ca9c77bf4cdd6b00ec53ff2120f1c4c637542a7197fbe18691f3c87988a09945f277918c3f9d7cdfedb0f3a9fff3859ef2f169422cbe6551a03354c9a06b98e47051e861fa622f81e8fffe8efa1a87500008000200f9ffffff08000200030000000c00018008000100", @ANYRES32=0x0, @ANYBLOB="440003802400040009a67a07b53a566c6632d51cb323f2bc364030ad66bdb624e1fc69c95714193219000400bffa1f355245fd834d70fb658de4774ff2205a03f80000006000018014000200767863616e3100000000000000000000140002007866726d300000000000000000000000080003000000000008000100", @ANYRES32=r10, @ANYBLOB="14003372f902007465616d5f736c6176655f300100000008", @ANYRES32=r7, @ANYBLOB="08000100", @ANYRES32=r4, @ANYBLOB], 0x2a0}, 0x1, 0x0, 0x0, 0x4040}, 0xc001) r11 = syz_genetlink_get_family_id$tipc(&(0x7f0000001ec0), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x0, 0x1dc6, &(0x7f0000000440)=ANY=[@ANYBLOB="180100000000200000000000000000001819", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x30, r11, 0x1, 0x70bd25, 0x0, {{}, {}, {0x14, 0x19, {0x80000000, 0x4000001, 0x1, 0x5}}}}, 0x30}, 0x1, 0x0, 0x0, 0x20040803}, 0x20000000) 1.151060913s ago: executing program 4 (id=2455): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a24000000000a07000000000000000000020000000900010073797a3000000000040006005c000000030a01020000000000000000020000000900010073797a30000000003900030091abc12404cf378042f26c43f91f68d8"], 0xbc}}, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xf, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r2}, 0x10) epoll_create1(0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0x40043d14, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0xf, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) readv(r5, &(0x7f0000001340)=[{&(0x7f0000000580)=""/148, 0x94}], 0x1) 1.139587063s ago: executing program 0 (id=2456): openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0xf, 0xd, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYRESDEC=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0x2}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@ipv4_delroute={0x1c, 0x19, 0x901, 0x0, 0x20, {0x2, 0x18, 0x0, 0x0, 0x0, 0x2, 0xfd, 0x9}}, 0x1c}}, 0x0) r3 = semget$private(0x0, 0x6, 0x0) semtimedop(r3, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000200)='./file1\x00', 0x10804, &(0x7f00000004c0)={[{@data_err_abort}, {@grpjquota_path={'grpjquota', 0x3d, './file0'}}, {@norecovery}, {@i_version}, {@norecovery}, {@barrier_val={'barrier', 0x3d, 0x7}}], [{@uid_gt}, {@smackfsfloor={'smackfsfloor', 0x3d, 'norecovery'}}, {@context={'context', 0x3d, 'staff_u'}}, {@euid_eq}, {@mask={'mask', 0x3d, 'MAY_EXEC'}}, {@uid_lt}, {@smackfsroot={'smackfsroot', 0x3d, 'msize'}}]}, 0xfc, 0x576, &(0x7f00000013c0)="$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") mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000040)=@v2={0x2000000, [{0x14d, 0x5}, {0x10000, 0x1}]}, 0x14, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000240)={0xa, 0x4e20, 0x6, @mcast1}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000e80)="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", 0x53b, 0x6d91fb6102d8910c, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000a80), 0x0, 0x4000801) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="190000000400000008000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r7 = dup(r6) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r7}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}], [], 0x6b}}) semop(r3, &(0x7f00000000c0)=[{0x4}, {0x2}], 0x2) 1.134732853s ago: executing program 2 (id=2457): openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0xf, 0xd, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYRESDEC=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0x2}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@ipv4_delroute={0x1c, 0x19, 0x901, 0x0, 0x20, {0x2, 0x18, 0x0, 0x0, 0x0, 0x2, 0xfd, 0x9}}, 0x1c}}, 0x0) r3 = semget$private(0x0, 0x6, 0x0) semtimedop(r3, &(0x7f00000003c0), 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000200)='./file1\x00', 0x10804, &(0x7f00000004c0)={[{@data_err_abort}, {@grpjquota_path={'grpjquota', 0x3d, './file0'}}, {@norecovery}, {@i_version}, {@norecovery}, {@barrier_val={'barrier', 0x3d, 0x7}}], [{@uid_gt}, {@smackfsfloor={'smackfsfloor', 0x3d, 'norecovery'}}, {@context={'context', 0x3d, 'staff_u'}}, {@euid_eq}, {@mask={'mask', 0x3d, 'MAY_EXEC'}}, {@uid_lt}, {@smackfsroot={'smackfsroot', 0x3d, 'msize'}}]}, 0xfc, 0x576, &(0x7f00000013c0)="$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") mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000040)=@v2={0x2000000, [{0x14d, 0x5}, {0x10000, 0x1}]}, 0x14, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000240)={0xa, 0x4e20, 0x6, @mcast1}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000e80)="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", 0x53b, 0x6d91fb6102d8910c, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000a80), 0x0, 0x4000801) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="190000000400000008000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r7 = dup(r6) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r7}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}], [], 0x6b}}) semop(r3, &(0x7f00000000c0)=[{0x4}, {0x2}], 0x2) 1.104626744s ago: executing program 3 (id=2458): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x109202) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000180)={0x3f00}) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x10, &(0x7f0000000600)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x2, 0x3, 0x0, 0x3, 0xc, 0x0, 0x700, 0x0, [@sadb_key={0x2, 0x9, 0x10, 0x0, "01d7"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x2, 0xd}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}]}, 0x60}, 0x1, 0x7}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000801000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r4}, 0x10) r5 = syz_open_dev$tty1(0xc, 0x4, 0x4) r6 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x40000000, 0x5, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r7}, &(0x7f0000000180), &(0x7f00000001c0)=r6}, 0x20) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r9 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kmem_cache_free\x00', r9}, 0x10) quotactl$Q_GETQUOTA(0xffffffff80000700, &(0x7f0000000040)=@sg0, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r8}, 0x10) r10 = dup(r5) write$UHID_INPUT(r10, &(0x7f0000002080)={0xc, {"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", 0x4a}}, 0x1006) msync(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x4) r11 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r11, 0x0, 0xd2, &(0x7f00000000c0)={@rand_addr=0x64010101, @private=0xa010101, 0x1, "8a79348df05f496d0420922f4581040000000040001dc6d4d3c41ef8d3a4a422", 0x6, 0xfefffffe, 0xc, 0x8}, 0xfffffffffffffdc8) 1.043140885s ago: executing program 1 (id=2459): syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8052, &(0x7f00000000c0)={[{@noauto_da_alloc}, {@init_itable_val={'init_itable', 0x3d, 0x6}}, {@dioread_nolock}, {@grpquota}]}, 0x5, 0x4dd, &(0x7f0000000c40)="$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") setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r1}, 0x18) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) 1.026749225s ago: executing program 2 (id=2460): socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000340), 0xffffffffffffffff) r0 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) ioctl$SIOCGSTAMPNS(0xffffffffffffffff, 0x8907, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x50) fsmount(r0, 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMRU1(r1, 0x40047452, &(0x7f0000000980)=0xffffff94) 967.370466ms ago: executing program 0 (id=2461): bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b00"/13], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000001000000e27f00000100"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000005700)={{r3}, &(0x7f0000005680), &(0x7f00000056c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000680)='sched_switch\x00'}, 0x10) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000400)='map_files\x00') r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r4) sendmsg$NLBL_MGMT_C_ADDDEF(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000000000000000040000e41300050003030000000a0000005dc000000000010800020005000000140006"], 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x4040000) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) 895.657536ms ago: executing program 3 (id=2462): r0 = socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_int(r0, 0x29, 0x16, 0x0, 0x0) r1 = socket$key(0xf, 0x3, 0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) 869.509637ms ago: executing program 1 (id=2463): r0 = openat$sysfs(0xffffff9c, &(0x7f00000037c0)='/sys/kernel/notes', 0x0, 0x0) r1 = syz_io_uring_setup(0xbdc, &(0x7f0000000080)={0x0, 0xec21, 0x80, 0x1, 0x40000333}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r1, 0x847ba, 0x2020, 0xe, 0x0, 0x0) r4 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000014c0)={'vxcan0\x00'}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) r6 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r6) r7 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r8 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000000c0)={'gretap0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=@newqdisc={0x110, 0x24, 0x0, 0x2, 0x0, {0x60, 0x0, 0x0, r10, {0xfff3, 0x5}, {0xffff, 0xffff}, {0xf}}, [@TCA_STAB={0xec, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x7, 0x10, 0xc, 0x9, 0x3, 0x3, 0x3, 0x3}}, {0xa, 0x2, [0x4, 0x2, 0x3]}}, {{0x1c, 0x1, {0x3, 0x7, 0x0, 0x800, 0x3, 0x318, 0xfffffffa}}, {0x4}}, {{0x1c, 0x1, {0x3, 0xc, 0x0, 0x0, 0x2, 0x9, 0x3, 0x6}}, {0x10, 0x2, [0x4, 0x8, 0x9, 0x8, 0x1, 0x9]}}, {{0x1c, 0x1, {0x81, 0x5, 0x7, 0x2, 0x2, 0x9, 0x4, 0x3}}, {0xa, 0x2, [0xfffe, 0x5, 0x2]}}, {{0x1c, 0x1, {0x8b, 0xc, 0x0, 0x6, 0x1, 0xde, 0x6, 0x4}}, {0xc, 0x2, [0xd4, 0x4, 0x4, 0x3]}}, {{0x1c, 0x1, {0xf8, 0x5, 0x9, 0x84, 0x1, 0x6, 0x406e, 0x1}}, {0x6, 0x2, [0x4]}}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x844}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008f00850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r10, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone(0x0, 0x0, 0x0, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000001400)="b13468bd4c2883e01b99c1d51ee088eddb85590c52fca1b2e4cc577384be22fc2064be82a0ba8557ac3358825efa72f4a1284d671055dc17844473c1254f55e4421afaae35c009f3e64979cdebe854f73ef63c4bd3bad84f257b840d39b33e1f787f847e9f1ee877f85673d5cf00777c4c99170f90463ddd8b811f774141db49a80152568729d8d93aa11a7bb87bcc8926144ac4869f1fc2f47cfb") prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000300)={0x0, &(0x7f00000000c0)}) r11 = syz_clone(0xa0000280, 0x0, 0x0, 0x0, 0x0, 0x0) r12 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x2010, r5, 0x8000000) r13 = open$dir(&(0x7f0000000340)='./file1\x00', 0x600000, 0x6) r14 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(r12, r3, &(0x7f0000001500)=@IORING_OP_LINKAT={0x27, 0x28, 0x0, r13, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='./file1\x00', r7, 0x1000, 0x0, {0x0, r14}}) ptrace(0x10, r11) 854.152758ms ago: executing program 2 (id=2464): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7020000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) r1 = socket(0x10, 0x803, 0x0) recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x7, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x2040000, &(0x7f0000003700)={0x77359400}) 778.859439ms ago: executing program 3 (id=2465): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000040)=0x4000000000000200, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'erspan0\x00', 0x0}) bind$packet(r1, &(0x7f0000000080)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000002c0)={'tunl0\x00', &(0x7f0000000280)={'gretap0\x00', 0x0, 0x8, 0x8000, 0x0, 0xff800, {{0x7, 0x4, 0x0, 0x5, 0x1c, 0x67, 0x0, 0x20, 0x4, 0x0, @remote, @multicast1, {[@end, @generic={0x83, 0x7, "73640aad79"}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000003c0)={'gre0\x00', &(0x7f0000000300)={'syztnl1\x00', 0x0, 0x8000, 0x40, 0x9a4, 0x9, {{0x1b, 0x4, 0x2, 0x8, 0x6c, 0x67, 0x0, 0x7, 0x4, 0x0, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@ra={0x94, 0x4}, @rr={0x7, 0xf, 0x3d, [@remote, @multicast2, @empty]}, @generic={0x86, 0xf, "3c02d88f6ab9fb3e0d11cab4a9"}, @generic={0x82, 0xf, "e9d8ced459737e9f856bdf9c19"}, @cipso={0x86, 0x27, 0x3, [{0x6, 0x11, "114888d3ec78d9f809999ff6ffe910"}, {0x0, 0xe, "95e75f5c2a41383f3795ac54"}, {0x7, 0x2}]}]}}}}}) r5 = socket(0x10, 0x803, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xe}, {0xffff, 0xffff}, {0xffe0, 0x3}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xe5}}}]}, 0x38}}, 0x4080) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="03000000000000002c0012800c0001006d6163766c616e001c000280080001000800000006000200010000001ffe02000000000008000500", @ANYRES32=r8, @ANYRES32=r8], 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0xc010) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000880)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000840)={&(0x7f0000000c00)=ANY=[@ANYBLOB="a0020000", @ANYRES16=0x0, @ANYBLOB="010c2bbd7000fcdbdf250c0000003c0001801400020070696d3672656730000000000000000008000100", @ANYRES32=r2, @ANYBLOB="08000300000000001400020070696d36726567300000000000000000b400038004000100ac00050040eb94ae70bb48cfb74d094b87842ea4b3fc1c14197542bc55c296022a265fa2d29815cec94efb4599e066efe16bea790142fe6309961577e28ae116e5c6690d6f05d8b46ed5bcd7f5a570e68b5668e8fa754c082b1d0aa123561959c6f5d18610af9891603032b0ce403338037fea203a1181493dd3f56c83a72612cc43ee5867f68882f924001f544203295e20d290f7016ef977b89286cca7de9e28c4ee1dfdd69a30751fae284c00018008000300000000001400020064756d6d79300000000000000000000008000100", @ANYRES32=r3, @ANYBLOB, @ANYRES32=r4, @ANYBLOB="0800030002000000140002007465616d300000000000000000000000a000038004000100870005001e3aaeabe1f1d3b0679a3fb584985b95b6e1f98682e2b4b8404a04141b44096b7b440b50741e410e9d0fb88a120dd7ba635650ca9c77bf4cdd6b00ec53ff2120f1c4c637542a7197fbe18691f3c87988a09945f277918c3f9d7cdfedb0f3a9fff3859ef2f169422cbe6551a03354c9a06b98e47051e861fa622f81e8fffe8efa1a87500008000200f9ffffff08000200030000000c00018008000100", @ANYRES32=0x0, @ANYBLOB="440003802400040009a67a07b53a566c6632d51cb323f2bc364030ad66bdb624e1fc69c95714193219000400bffa1f355245fd834d70fb658de4774ff2205a03f80000006000018014000200767863616e3100000000000000000000140002007866726d300000000000000000000000080003000000000008000100", @ANYRES32=r8, @ANYBLOB="14003372f902007465616d5f736c6176655f300100000008", @ANYRES32=r7, @ANYBLOB="08000100", @ANYRES32=r4, @ANYBLOB], 0x2a0}, 0x1, 0x0, 0x0, 0x4040}, 0xc001) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x30, 0x0, 0x1, 0x70bd25, 0x0, {{}, {}, {0x14, 0x19, {0x80000000, 0x4000001, 0x1, 0x5}}}}, 0x30}, 0x1, 0x0, 0x0, 0x20040803}, 0x20000000) 778.109559ms ago: executing program 2 (id=2466): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000002600000007"], 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000000)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r2}, 0x10) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) ioperm(0x8, 0x3, 0x7fff) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4400000010000108fdffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008001b00000000001c001a8018002d"], 0x44}}, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000200)={0x7, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r4}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000a80)='kfree\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffffd}, 0x18) bind$inet(r6, &(0x7f0000000400)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r6, 0x0, 0x0, 0x20000fad, &(0x7f0000000440)={0x2, 0x24e23, @loopback}, 0x10) (fail_nth: 3) 474.089913ms ago: executing program 2 (id=2467): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000040)=0x4000000000000200, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'erspan0\x00', 0x0}) bind$packet(r2, &(0x7f0000000080)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000003c0)={'gre0\x00', &(0x7f0000000300)={'syztnl1\x00', 0x0, 0x8000, 0x40, 0x9a4, 0x9, {{0x5, 0x4, 0x2, 0x8, 0x14, 0x67, 0x0, 0x7, 0x4, 0x0, @local, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}) r5 = socket(0x10, 0x803, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xe}, {0xffff, 0xffff}, {0xffe0, 0x3}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xe5}}}]}, 0x38}}, 0x4080) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000ac0)=@newtfilter={0x44, 0x2c, 0xd2b, 0x70bd2b, 0x35dfdbfb, {0x0, 0x0, 0x0, r7, {0xf}, {}, {0xe, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_SEL={0x14, 0x5, {0x3, 0x8, 0xd, 0x4, 0x7ff, 0x368, 0x7, 0x6}}]}}]}, 0x44}}, 0x24040084) r8 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="03000000000000002c0012800c0001006d6163766c616e001c000280080001000800000006000200010000001ffe02000000000008000500", @ANYRES32=r10, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r10], 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0xc010) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000000880)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000840)={&(0x7f0000000c00)=ANY=[@ANYBLOB="a0020000", @ANYRES16=0x0, @ANYBLOB="010c2bbd7000fcdbdf250c0000003c0001801400020070696d3672656730000000000000000008000100", @ANYRES32=r3, @ANYBLOB="08000300000000001400020070696d36726567300000000000000000b400038004000100ac00050040eb94ae70bb48cfb74d094b87842ea4b3fc1c14197542bc55c296022a265fa2d29815cec94efb4599e066efe16bea790142fe6309961577e28ae116e5c6690d6f05d8b46ed5bcd7f5a570e68b5668e8fa754c082b1d0aa123561959c6f5d18610af9891603032b0ce403338037fea203a1181493dd3f56c83a72612cc43ee5867f68882f924001f544203295e20d290f7016ef977b89286cca7de9e28c4ee1dfdd69a30751fae284c00018008000300000000001400020064756d6d79300000000000000000000008000100", @ANYBLOB="08000100", @ANYRES32=r4, @ANYBLOB="0800030002000000140002007465616d300000000000000000000000a000038004000100870005001e3aaeabe1f1d3b0679a3fb584985b95b6e1f98682e2b4b8404a04141b44096b7b440b50741e410e9d0fb88a120dd7ba635650ca9c77bf4cdd6b00ec53ff2120f1c4c637542a7197fbe18691f3c87988a09945f277918c3f9d7cdfedb0f3a9fff3859ef2f169422cbe6551a03354c9a06b98e47051e861fa622f81e8fffe8efa1a87500008000200f9ffffff08000200030000000c00018008000100", @ANYRES32=0x0, @ANYBLOB="440003802400040009a67a07b53a566c6632d51cb323f2bc364030ad66bdb624e1fc69c95714193219000400bffa1f355245fd834d70fb658de4774ff2205a03f80000006000018014000200767863616e3100000000000000000000140002007866726d300000000000000000000000080003000000000008000100", @ANYRES32=r10, @ANYBLOB="14003372f902007465616d5f736c6176655f300100000008", @ANYRES32=r7, @ANYBLOB="08000100", @ANYRES32=r4, @ANYBLOB], 0x2a0}, 0x1, 0x0, 0x0, 0x4040}, 0xc001) r11 = syz_genetlink_get_family_id$tipc(&(0x7f0000001ec0), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x0, 0x1dc6, &(0x7f0000000440)=ANY=[@ANYBLOB="180100000000200000000000000000001819", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x30, r11, 0x1, 0x70bd25, 0x0, {{}, {}, {0x14, 0x19, {0x80000000, 0x4000001, 0x1, 0x5}}}}, 0x30}, 0x1, 0x0, 0x0, 0x20040803}, 0x20000000) 445.472664ms ago: executing program 3 (id=2468): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r0 = fsopen(0x0, 0x1) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x6, 0x0, 0x0, 0x0) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r1, 0x0, 0x20004010) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00'}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) iopl(0x3) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{}, &(0x7f0000000000), &(0x7f00000005c0)}, 0x20) unshare(0x2040400) futex(0x0, 0xd, 0x2, &(0x7f0000000340)={0x0, 0x3938700}, 0x0, 0x1) r2 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) unshare(0x6040800) unshare(0x2000400) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x8002, 0x0) r3 = syz_io_uring_setup(0x5c2, &(0x7f0000000380)={0x0, 0x0, 0x80, 0x4}, &(0x7f0000000440)=0x0, 0x0) close(0xffffffffffffffff) syz_io_uring_submit(r4, 0x0, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x18, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x40, 0x1}) io_uring_enter(r3, 0x6e2, 0x3900, 0x1, 0x0, 0xe00) rt_sigsuspend(&(0x7f00000002c0)={[0x20000000004]}, 0x8) 401.631424ms ago: executing program 2 (id=2469): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000380)='signal_generate\x00', r0, 0x0, 0x1fc}, 0x18) timer_create(0x2, 0x0, &(0x7f0000000100)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x10) socket$qrtr(0x2a, 0x2, 0x0) getuid() bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x70, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0xa, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x63, 0x0, 0x0, 0x10, 0x100c93a}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x3, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0xff, 0x7ffc2000}]}) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000), 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r4) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000c80)=[{{&(0x7f0000000040)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000440)=[{0x0}], 0x1}}, {{&(0x7f0000001180)={0x2, 0x4e24, @rand_addr=0x64010100}, 0x10, &(0x7f00000011c0)=[{&(0x7f0000004d00)='f', 0x1}], 0x1}}, {{&(0x7f0000000580)={0x2, 0x4e24, @remote}, 0x10, &(0x7f0000000840)=[{&(0x7f00000005c0)='7', 0x1}], 0x1}}], 0x3, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000780)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000240)={r6, 0xa49a, 0x30}, 0xc) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip6_vti0\x00', &(0x7f0000000380)={'syztnl2\x00', 0x0, 0x29, 0x8, 0x0, 0x38e3, 0x0, @dev={0xfe, 0x80, '\x00', 0x2a}, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x80, 0x7800, 0x2, 0x2}}) sendmsg$NFNL_MSG_CTHELPER_NEW(r1, &(0x7f0000000600)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000500)={&(0x7f0000000280)={0x44, 0x0, 0x9, 0x5, 0x0, 0x0, {0x2, 0x0, 0x7}, [@NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x9}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x1f}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x77fd}]}, 0x44}}, 0x54) sendmsg$DEVLINK_CMD_RATE_NEW(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r5, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r7, 0x84, 0x4, &(0x7f00000006c0)="1ae96d0103010000", 0x8) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000740)={0x8, &(0x7f0000000680)=[{0x8, 0x8, 0xbb, 0x40}, {0x8000, 0x43, 0x9}, {0xc, 0x9, 0x20, 0x350}, {0x100, 0x4, 0x2, 0x4}, {0x6283, 0x7, 0x7, 0x2000}, {0xea7, 0xb, 0xf7, 0x1}, {0x5, 0x5, 0x9, 0x9}, {0xd, 0x2a, 0xe, 0x7}]}, 0x10) close_range(r3, r0, 0x0) sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x2, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703410000004000000000000000040014000d000a00100000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000000)={{0x77359400}, {0x0, 0x9}}, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) 318.075605ms ago: executing program 0 (id=2470): r0 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) keyctl$session_to_parent(0x12) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, 0x0, 0x0) recvmmsg(r1, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=""/82, 0x52}, 0x4}], 0x1, 0x122, 0x0) setsockopt$inet6_int(r1, 0x29, 0x31, 0x0, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1020}, 0xc, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x40) getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="580000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="46060900000000002800128009000100766c616e00000000180002800c0002001f0000001f000000060001000100000008000500", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r5, @ANYBLOB="e6d529f780455224d9cb330664e07b5b617f885e72abf6b22341e6123e3fef8e1da5c0330f94a7377ca6d150fd624eb20e23f855d3d13494783c2e"], 0x58}, 0x1, 0x0, 0x0, 0x600}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000080000000000000000000001811", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0xc2f00, 0x4d, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000980)='mm_page_free\x00', r6}, 0x18) socket(0x10, 0x803, 0x0) socket$unix(0x1, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) 86.394939ms ago: executing program 0 (id=2471): r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x1ff}}, './file0\x00'}) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000040)=[r0, r0, r0, r0, r0, r0], 0x6) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_DEL(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000ef98378d2615e407828de0002090001f8000000001f6bd3bb000001"], 0x14}, 0x1, 0x0, 0x0, 0x4000054}, 0x20000004) setgroups(0x0, 0x0) getgroups(0x1, &(0x7f0000000080)=[0xee00]) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)=[0x7], 0x0, 0x0, 0x1}}, 0x40) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xe, 0xf, &(0x7f00000003c0)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095", @ANYRESHEX=r4], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000580081044e81f782db44b904021d080009000300e8fe55a1180015000600142603600e120900210000000401a8001600a40001", 0x37}], 0x1}, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000380)={&(0x7f0000000040)="b64b6779e728a585fc6d831c9c111ee3bf867c7fa20663508d961b5b0bc1d4eded804b84c8ee0b5e7b55af44aa8bf4a16c4d4aaf896a13f650a3b4f737945a9a179a6ceb93adadb8dd841258d0f04b02868cd415ab9bc48b055a8b3f92b143cb16138c216513a045af2101e7e3c507bedee404330f1171812cdaeed17a0e89dd4863a4e6808ca6b7046c38f33b9a0417e1c8fae7a9e1b4c8161b02", 0x0, 0x0, 0x0}, 0x38) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x2000410, &(0x7f0000000000)={[{@bsdgroups}, {@jqfmt_vfsv1}]}, 0xc1, 0x7da, &(0x7f0000000fc0)="$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") gettid() timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000000), 0x208e24b) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 63.606509ms ago: executing program 1 (id=2472): open(&(0x7f0000000740)='./bus\x00', 0x143c62, 0x0) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,') 36.76799ms ago: executing program 1 (id=2473): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x36, 0x1, 0xf, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x9, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) keyctl$session_to_parent(0x12) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r2, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=""/82, 0x52}, 0x4}], 0x1, 0x122, 0x0) setsockopt$inet6_int(r2, 0x29, 0x31, &(0x7f0000000100)=0x5, 0x4) r3 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) r4 = socket(0x10, 0x803, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xb, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1020}, 0xc, &(0x7f0000000180)={&(0x7f00000003c0)={0xb0, 0x1403, 0x300, 0x70bd29, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'syzkaller1\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ip6gre0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'tunl0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth0_virt_wifi\x00'}}]}, 0xb0}, 0x1, 0x0, 0x0, 0x4}, 0x40) getsockname$packet(r4, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="580000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="46060900000000002800128009000100766c616e00000000180002800c0002001f0000001f000000060001000100", @ANYRES32=r7, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r7, @ANYBLOB="e6d529f780455224d9cb330664e07b5b617f885e72abf6b22341e6123e3fef8e1da5c0330f94a7377ca6d150fd624eb20e23f855d3d13494783c2e"], 0x58}, 0x1, 0x0, 0x0, 0x600}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r8], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0xc2f00, 0x4d, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000980)='mm_page_free\x00', r9}, 0x18) socket(0x10, 0x803, 0x0) socket$unix(0x1, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) 0s ago: executing program 4 (id=2474): syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8052, &(0x7f00000000c0)={[{@noauto_da_alloc}, {@init_itable_val={'init_itable', 0x3d, 0x6}}, {@dioread_nolock}, {@grpquota}]}, 0x5, 0x4dd, &(0x7f0000000c40)="$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") setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000280), 0x24, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) mkdir(0x0, 0x0) kernel console output (not intermixed with test programs): evice bond13 [ 115.706162][T13829] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 115.725681][T13828] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.744270][T13815] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.759300][T13832] vlan2: entered allmulticast mode [ 115.764567][T13832] bond13: entered allmulticast mode [ 115.785178][T13828] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.814906][T13815] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.904632][T13828] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.932495][T13815] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.932529][T13904] loop3: detected capacity change from 0 to 1024 [ 115.976178][T13828] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.988372][T13828] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.002327][T13828] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.020780][T13815] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.033752][T13828] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.042760][T13929] loop3: detected capacity change from 0 to 512 [ 116.057161][T13815] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.068565][T13929] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.1893: bg 0: block 5: invalid block bitmap [ 116.084969][T13815] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.100826][T13929] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 116.117459][T13815] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.133882][T13929] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.1893: invalid indirect mapped block 3 (level 2) [ 116.147426][T13929] EXT4-fs (loop3): 2 truncates cleaned up [ 116.229715][T13953] loop2: detected capacity change from 0 to 164 [ 116.294120][T13970] bridge0: port 3(macvlan2) entered blocking state [ 116.300751][T13970] bridge0: port 3(macvlan2) entered disabled state [ 116.309004][T13970] macvlan2: entered allmulticast mode [ 116.314475][T13970] bridge0: entered allmulticast mode [ 116.321262][T13970] macvlan2: left allmulticast mode [ 116.326520][T13970] bridge0: left allmulticast mode [ 116.357588][T13978] loop0: detected capacity change from 0 to 1024 [ 116.397220][T13989] loop2: detected capacity change from 0 to 2048 [ 116.411287][T13994] loop3: detected capacity change from 0 to 512 [ 116.422239][T13994] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.1906: bg 0: block 5: invalid block bitmap [ 116.448430][T13994] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 116.483552][T13994] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.1906: invalid indirect mapped block 3 (level 2) [ 116.498202][T13994] EXT4-fs (loop3): 2 truncates cleaned up [ 116.509452][T14013] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.544368][T14014] hub 6-0:1.0: USB hub found [ 116.549035][T14014] hub 6-0:1.0: 8 ports detected [ 116.554793][T14013] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.570413][T14027] netlink: 'syz.4.1909': attribute type 10 has an invalid length. [ 116.578332][T14027] __nla_validate_parse: 5 callbacks suppressed [ 116.578342][T14027] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1909'. [ 116.603767][T14027] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 116.653177][T14013] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.702437][T14040] loop3: detected capacity change from 0 to 164 [ 116.718061][T14013] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.827892][T14013] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.839211][T14013] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.864810][T14013] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.922556][T14013] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.957406][T14082] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.977717][T14088] loop4: detected capacity change from 0 to 512 [ 116.988713][T14015] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 117.003831][T14015] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 117.005325][T14088] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.1923: bg 0: block 5: invalid block bitmap [ 117.016444][T14015] EXT4-fs (loop2): This should not happen!! Data will be lost [ 117.016444][T14015] [ 117.029220][T14088] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 117.038436][T14015] EXT4-fs (loop2): Total free blocks count 0 [ 117.048419][T14088] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.1923: invalid indirect mapped block 3 (level 2) [ 117.053269][T14015] EXT4-fs (loop2): Free/Dirty block details [ 117.066608][T14088] EXT4-fs (loop4): 2 truncates cleaned up [ 117.072266][T14015] EXT4-fs (loop2): free_blocks=2415919104 [ 117.072280][T14015] EXT4-fs (loop2): dirty_blocks=8208 [ 117.072291][T14015] EXT4-fs (loop2): Block reservation details [ 117.072300][T14015] EXT4-fs (loop2): i_reserved_data_blocks=513 [ 117.074554][T14074] netlink: 'syz.0.1920': attribute type 1 has an invalid length. [ 117.110122][T14082] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.125306][T14085] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5123 sclass=netlink_route_socket pid=14085 comm=syz.0.1920 [ 117.136214][T14074] 8021q: adding VLAN 0 to HW filter on device bond10 [ 117.150275][T14085] vlan0: entered allmulticast mode [ 117.155473][T14085] bond10: entered allmulticast mode [ 117.191080][T14082] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.252329][ T12] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 117.265082][ T12] EXT4-fs (loop2): This should not happen!! Data will be lost [ 117.265082][ T12] [ 117.275986][T14144] loop4: detected capacity change from 0 to 164 [ 117.303432][T14144] iso9660: Corrupted directory entry in block 2 of inode 1792 [ 117.333986][T14082] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.380467][T14150] loop0: detected capacity change from 0 to 164 [ 117.399261][T14151] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1926'. [ 117.543471][T14082] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.597297][T14082] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.638380][T14082] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.684205][T14082] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.809879][T14180] loop0: detected capacity change from 0 to 512 [ 117.817968][T14178] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1932'. [ 117.829890][T14180] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.1930: bg 0: block 5: invalid block bitmap [ 117.855160][T14180] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 117.866745][T14180] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.1930: invalid indirect mapped block 3 (level 2) [ 117.894574][T14180] EXT4-fs (loop0): 2 truncates cleaned up [ 117.918471][T14196] loop4: detected capacity change from 0 to 2048 [ 117.969580][T14212] netlink: 'syz.0.1938': attribute type 21 has an invalid length. [ 118.082586][T14215] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 118.098013][T14215] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 118.101283][T14221] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1939'. [ 118.110650][T14215] EXT4-fs (loop4): This should not happen!! Data will be lost [ 118.110650][T14215] [ 118.110669][T14215] EXT4-fs (loop4): Total free blocks count 0 [ 118.135396][T14215] EXT4-fs (loop4): Free/Dirty block details [ 118.141300][T14215] EXT4-fs (loop4): free_blocks=2415919104 [ 118.147180][T14215] EXT4-fs (loop4): dirty_blocks=2464 [ 118.152529][T14215] EXT4-fs (loop4): Block reservation details [ 118.158577][T14215] EXT4-fs (loop4): i_reserved_data_blocks=154 [ 118.240953][T10963] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 24 with max blocks 2 with error 28 [ 118.253403][T10963] EXT4-fs (loop4): This should not happen!! Data will be lost [ 118.253403][T10963] [ 118.304485][T14233] loop4: detected capacity change from 0 to 164 [ 118.393894][T14239] loop4: detected capacity change from 0 to 164 [ 118.402877][T14239] iso9660: Corrupted directory entry in block 2 of inode 1792 [ 118.474512][T14254] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1946'. [ 118.487671][T14254] loop4: detected capacity change from 0 to 512 [ 118.502679][T14254] ext4 filesystem being mounted at /401/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 118.514308][T14254] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #2: comm syz.4.1946: corrupted inode contents [ 118.526285][T14254] EXT4-fs error (device loop4): ext4_dirty_inode:6459: inode #2: comm syz.4.1946: mark_inode_dirty error [ 118.537766][T14254] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #2: comm syz.4.1946: corrupted inode contents [ 118.549736][T14254] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #2: comm syz.4.1946: mark_inode_dirty error [ 118.563408][T14254] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1946'. [ 119.277911][T14284] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1949'. [ 119.338409][T14281] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1950'. [ 119.433726][T14290] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1951'. [ 119.516505][T14295] netlink: 'syz.0.1952': attribute type 21 has an invalid length. [ 119.678601][T14302] loop1: detected capacity change from 0 to 164 [ 119.689577][T14302] iso9660: Corrupted directory entry in block 2 of inode 1792 [ 119.701463][ T29] kauditd_printk_skb: 269 callbacks suppressed [ 119.701477][ T29] audit: type=1326 audit(1751861951.236:7830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14300 comm="syz.1.1954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd52812e929 code=0x7ffc0000 [ 119.731287][ T29] audit: type=1326 audit(1751861951.236:7831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14300 comm="syz.1.1954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7fd52812e929 code=0x7ffc0000 [ 119.754965][ T29] audit: type=1326 audit(1751861951.246:7832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14300 comm="syz.1.1954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd52812e929 code=0x7ffc0000 [ 119.778516][ T29] audit: type=1326 audit(1751861951.246:7833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14300 comm="syz.1.1954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fd52812e929 code=0x7ffc0000 [ 119.802245][ T29] audit: type=1326 audit(1751861951.246:7834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14300 comm="syz.1.1954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd52812e929 code=0x7ffc0000 [ 119.826127][ T29] audit: type=1326 audit(1751861951.246:7835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14300 comm="syz.1.1954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd52812e929 code=0x7ffc0000 [ 119.906177][T14326] loop1: detected capacity change from 0 to 164 [ 119.926261][ T29] audit: type=1326 audit(1751861951.476:7836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14325 comm="syz.1.1960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fd5281258e7 code=0x7ffc0000 [ 119.932389][T14326] iso9660: Corrupted directory entry in block 2 of inode 1792 [ 119.949686][ T29] audit: type=1326 audit(1751861951.476:7837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14325 comm="syz.1.1960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd5280cab19 code=0x7ffc0000 [ 119.980727][ T29] audit: type=1326 audit(1751861951.476:7838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14325 comm="syz.1.1960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fd5281258e7 code=0x7ffc0000 [ 120.004185][ T29] audit: type=1326 audit(1751861951.476:7839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14325 comm="syz.1.1960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd5280cab19 code=0x7ffc0000 [ 120.090506][T14351] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1967'. [ 120.103606][T14348] loop1: detected capacity change from 0 to 512 [ 120.167829][T14348] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.1966: bg 0: block 5: invalid block bitmap [ 120.180997][T14348] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 120.190227][T14348] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.1966: invalid indirect mapped block 3 (level 2) [ 120.204465][T14348] EXT4-fs (loop1): 2 truncates cleaned up [ 120.313324][T14371] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.381516][T14375] netlink: 'syz.4.1973': attribute type 10 has an invalid length. [ 120.416157][T14375] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 120.478989][T14371] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.574153][T14371] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.633942][T14371] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.711389][T14400] loop1: detected capacity change from 0 to 512 [ 120.739228][T14404] loop0: detected capacity change from 0 to 2048 [ 120.756174][T14400] ext4 filesystem being mounted at /423/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 120.778304][T14400] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #2: comm syz.1.1972: corrupted inode contents [ 120.792098][T14400] EXT4-fs error (device loop1): ext4_dirty_inode:6459: inode #2: comm syz.1.1972: mark_inode_dirty error [ 120.803992][T14400] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #2: comm syz.1.1972: corrupted inode contents [ 120.816024][T14400] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #2: comm syz.1.1972: mark_inode_dirty error [ 120.883560][T14416] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 120.898847][T14416] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1884 with error 28 [ 120.911331][T14416] EXT4-fs (loop0): This should not happen!! Data will be lost [ 120.911331][T14416] [ 120.921028][T14416] EXT4-fs (loop0): Total free blocks count 0 [ 120.927139][T14416] EXT4-fs (loop0): Free/Dirty block details [ 120.933152][T14416] EXT4-fs (loop0): free_blocks=2415919104 [ 120.938911][T14416] EXT4-fs (loop0): dirty_blocks=1888 [ 120.944273][T14416] EXT4-fs (loop0): Block reservation details [ 120.950286][T14416] EXT4-fs (loop0): i_reserved_data_blocks=118 [ 121.057575][T14438] loop1: detected capacity change from 0 to 2048 [ 121.093130][ T3456] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 24 with max blocks 2 with error 28 [ 121.105583][ T3456] EXT4-fs (loop0): This should not happen!! Data will be lost [ 121.105583][ T3456] [ 121.191040][T14451] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 121.216661][T14451] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1206 with error 28 [ 121.229272][T14451] EXT4-fs (loop1): This should not happen!! Data will be lost [ 121.229272][T14451] [ 121.239126][T14451] EXT4-fs (loop1): Total free blocks count 0 [ 121.245387][T14451] EXT4-fs (loop1): Free/Dirty block details [ 121.251611][T14451] EXT4-fs (loop1): free_blocks=2415919104 [ 121.257512][T14451] EXT4-fs (loop1): dirty_blocks=1216 [ 121.262994][T14451] EXT4-fs (loop1): Block reservation details [ 121.269374][T14451] EXT4-fs (loop1): i_reserved_data_blocks=76 [ 121.295667][T14478] loop3: detected capacity change from 0 to 512 [ 121.303666][T14478] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.1992: bg 0: block 5: invalid block bitmap [ 121.321075][T14478] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 121.361509][T14478] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.1992: invalid indirect mapped block 3 (level 2) [ 121.383229][T14478] EXT4-fs (loop3): 2 truncates cleaned up [ 121.398109][ T12] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 24 with max blocks 2 with error 28 [ 121.410413][ T12] EXT4-fs (loop1): This should not happen!! Data will be lost [ 121.410413][ T12] [ 121.490505][T14506] loop2: detected capacity change from 0 to 164 [ 121.500378][T14506] iso9660: Corrupted directory entry in block 2 of inode 1792 [ 121.580838][T14518] loop2: detected capacity change from 0 to 2048 [ 121.688187][T14529] netlink: 'syz.3.2002': attribute type 21 has an invalid length. [ 122.105671][T14518] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 122.127273][T14518] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 122.139763][T14518] EXT4-fs (loop2): This should not happen!! Data will be lost [ 122.139763][T14518] [ 122.142873][T14544] loop0: detected capacity change from 0 to 512 [ 122.149634][T14518] EXT4-fs (loop2): Total free blocks count 0 [ 122.162031][T14518] EXT4-fs (loop2): Free/Dirty block details [ 122.168003][T14518] EXT4-fs (loop2): free_blocks=2415919104 [ 122.169042][T14544] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.2004: bg 0: block 5: invalid block bitmap [ 122.173783][T14518] EXT4-fs (loop2): dirty_blocks=8208 [ 122.173796][T14518] EXT4-fs (loop2): Block reservation details [ 122.173808][T14518] EXT4-fs (loop2): i_reserved_data_blocks=513 [ 122.204274][T14544] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 122.213598][T14544] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.2004: invalid indirect mapped block 3 (level 2) [ 122.218282][ T3456] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 122.227116][T14544] EXT4-fs (loop0): 2 truncates cleaned up [ 122.239519][ T3456] EXT4-fs (loop2): This should not happen!! Data will be lost [ 122.239519][ T3456] [ 122.396937][T14569] loop1: detected capacity change from 0 to 164 [ 122.412734][T14574] loop0: detected capacity change from 0 to 1024 [ 122.424313][T14569] iso9660: Corrupted directory entry in block 2 of inode 1792 [ 122.446124][T14574] EXT4-fs error (device loop0): mb_free_blocks:1948: group 0, inode 15: block 241:freeing already freed block (bit 15); block bitmap corrupt. [ 122.535445][T14593] __nla_validate_parse: 4 callbacks suppressed [ 122.535458][T14593] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2014'. [ 122.555255][T14605] loop3: detected capacity change from 0 to 2048 [ 122.642217][T14371] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.663224][T14371] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.675881][T14371] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.688144][T14371] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.770613][T14633] netlink: 'syz.4.2017': attribute type 1 has an invalid length. [ 122.789003][T14605] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 122.789533][T14633] 8021q: adding VLAN 0 to HW filter on device bond14 [ 122.804448][T14605] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 122.816102][T14633] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5123 sclass=netlink_route_socket pid=14633 comm=syz.4.2017 [ 122.823133][T14605] EXT4-fs (loop3): This should not happen!! Data will be lost [ 122.823133][T14605] [ 122.845452][T14605] EXT4-fs (loop3): Total free blocks count 0 [ 122.851548][T14605] EXT4-fs (loop3): Free/Dirty block details [ 122.857453][T14605] EXT4-fs (loop3): free_blocks=2415919104 [ 122.863358][T14605] EXT4-fs (loop3): dirty_blocks=8208 [ 122.868660][T14605] EXT4-fs (loop3): Block reservation details [ 122.874848][T14605] EXT4-fs (loop3): i_reserved_data_blocks=513 [ 122.902207][T14669] loop4: detected capacity change from 0 to 8192 [ 122.924518][T10963] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 122.937298][T10963] EXT4-fs (loop3): This should not happen!! Data will be lost [ 122.937298][T10963] [ 122.948234][T14669] loop4: p1 p2[DM] p4 [ 122.953219][T14669] loop4: p1 size 196608 extends beyond EOD, truncated [ 122.962532][T14669] loop4: p2 start 4292936063 is beyond EOD, truncated [ 122.969382][T14669] loop4: p4 size 50331648 extends beyond EOD, truncated [ 123.139865][T14692] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2022'. [ 123.207049][T14705] loop4: detected capacity change from 0 to 512 [ 123.225525][T14705] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.2025: bg 0: block 5: invalid block bitmap [ 123.238558][T14705] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 123.247695][T14705] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.2025: invalid indirect mapped block 3 (level 2) [ 123.261310][T14705] EXT4-fs (loop4): 2 truncates cleaned up [ 123.286051][T14715] loop3: detected capacity change from 0 to 512 [ 123.304298][T14715] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.2026: bg 0: block 5: invalid block bitmap [ 123.328777][T14715] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 123.338194][T14715] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.2026: invalid indirect mapped block 3 (level 2) [ 123.355727][T14715] EXT4-fs (loop3): 2 truncates cleaned up [ 123.449815][T14746] loop0: detected capacity change from 0 to 2048 [ 123.544603][T14759] hub 6-0:1.0: USB hub found [ 123.551686][T14759] hub 6-0:1.0: 8 ports detected [ 123.627145][T14776] loop2: detected capacity change from 0 to 512 [ 123.690190][T14771] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2035'. [ 123.701571][T14362] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 123.755187][T14790] loop1: detected capacity change from 0 to 512 [ 123.762774][T14784] netlink: 'syz.4.2039': attribute type 1 has an invalid length. [ 123.781588][T14746] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 123.791534][T14776] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.2037: bg 0: block 5: invalid block bitmap [ 123.794316][T14746] EXT4-fs (loop0): This should not happen!! Data will be lost [ 123.794316][T14746] [ 123.807214][T14776] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 123.816256][T14746] EXT4-fs (loop0): Total free blocks count 0 [ 123.825163][T14788] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5123 sclass=netlink_route_socket pid=14788 comm=syz.4.2039 [ 123.830855][T14746] EXT4-fs (loop0): Free/Dirty block details [ 123.846435][T14776] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.2037: invalid indirect mapped block 3 (level 2) [ 123.849442][T14746] EXT4-fs (loop0): free_blocks=2415919104 [ 123.849457][T14746] EXT4-fs (loop0): dirty_blocks=8208 [ 123.849470][T14746] EXT4-fs (loop0): Block reservation details [ 123.863405][T14776] EXT4-fs (loop2): 2 truncates cleaned up [ 123.868367][T14746] EXT4-fs (loop0): i_reserved_data_blocks=513 [ 123.902448][T14790] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.2040: bg 0: block 5: invalid block bitmap [ 123.904770][T14784] 8021q: adding VLAN 0 to HW filter on device bond15 [ 123.923246][T14790] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 123.932322][T14790] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.2040: invalid indirect mapped block 3 (level 2) [ 123.937393][T14788] vlan2: entered allmulticast mode [ 123.950722][T14788] bond15: entered allmulticast mode [ 123.958572][T14790] EXT4-fs (loop1): 2 truncates cleaned up [ 123.977250][T10963] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 123.990125][T10963] EXT4-fs (loop0): This should not happen!! Data will be lost [ 123.990125][T10963] [ 124.023032][T14844] loop1: detected capacity change from 0 to 1024 [ 124.030081][T14844] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 124.105723][T14856] hub 6-0:1.0: USB hub found [ 124.110508][T14856] hub 6-0:1.0: 8 ports detected [ 124.134691][T14865] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2042'. [ 124.158235][T14865] bridge0: port 3(macvlan2) entered blocking state [ 124.164826][T14865] bridge0: port 3(macvlan2) entered disabled state [ 124.171725][T14865] macvlan2: entered allmulticast mode [ 124.171845][T14869] loop4: detected capacity change from 0 to 2048 [ 124.177108][T14865] bridge0: entered allmulticast mode [ 124.189220][T14865] macvlan2: left allmulticast mode [ 124.194563][T14865] bridge0: left allmulticast mode [ 124.316149][T14882] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 124.331184][T14882] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1892 with error 28 [ 124.343696][T14882] EXT4-fs (loop4): This should not happen!! Data will be lost [ 124.343696][T14882] [ 124.345051][T14885] netlink: 'syz.0.2046': attribute type 1 has an invalid length. [ 124.353382][T14882] EXT4-fs (loop4): Total free blocks count 0 [ 124.353395][T14882] EXT4-fs (loop4): Free/Dirty block details [ 124.353437][T14882] EXT4-fs (loop4): free_blocks=2415919104 [ 124.353448][T14882] EXT4-fs (loop4): dirty_blocks=1904 [ 124.353458][T14882] EXT4-fs (loop4): Block reservation details [ 124.353467][T14882] EXT4-fs (loop4): i_reserved_data_blocks=119 [ 124.396697][T14893] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5123 sclass=netlink_route_socket pid=14893 comm=syz.0.2046 [ 124.478697][T14885] 8021q: adding VLAN 0 to HW filter on device bond11 [ 124.500881][ T37] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 24 with max blocks 2 with error 28 [ 124.513221][ T37] EXT4-fs (loop4): This should not happen!! Data will be lost [ 124.513221][ T37] [ 124.598715][T14935] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2048'. [ 124.781684][ T29] kauditd_printk_skb: 505 callbacks suppressed [ 124.781697][ T29] audit: type=1326 audit(1751861956.296:8345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14936 comm="syz.4.2049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa198efe929 code=0x7ffc0000 [ 124.811391][ T29] audit: type=1326 audit(1751861956.296:8346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14936 comm="syz.4.2049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa198efe929 code=0x7ffc0000 [ 124.835073][ T29] audit: type=1326 audit(1751861956.296:8347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14936 comm="syz.4.2049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7fa198efe929 code=0x7ffc0000 [ 124.858555][ T29] audit: type=1326 audit(1751861956.296:8348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14936 comm="syz.4.2049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa198efe929 code=0x7ffc0000 [ 124.882043][ T29] audit: type=1326 audit(1751861956.296:8349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14936 comm="syz.4.2049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa198efe929 code=0x7ffc0000 [ 124.978589][T14939] loop4: detected capacity change from 0 to 512 [ 125.011164][T14939] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.2051: bg 0: block 5: invalid block bitmap [ 125.011524][T14939] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 125.014333][T14939] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.2051: invalid indirect mapped block 3 (level 2) [ 125.053529][T14939] EXT4-fs (loop4): 2 truncates cleaned up [ 125.177663][T14973] loop2: detected capacity change from 0 to 164 [ 125.203284][T14973] iso9660: Corrupted directory entry in block 2 of inode 1792 [ 125.211730][ T29] audit: type=1326 audit(1751861956.756:8350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14972 comm="syz.2.2056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78b3c1e929 code=0x7ffc0000 [ 125.235303][ T29] audit: type=1326 audit(1751861956.756:8351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14972 comm="syz.2.2056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f78b3c1e929 code=0x7ffc0000 [ 125.258919][ T29] audit: type=1326 audit(1751861956.756:8352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14972 comm="syz.2.2056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78b3c1e929 code=0x7ffc0000 [ 125.282539][ T29] audit: type=1326 audit(1751861956.756:8353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14972 comm="syz.2.2056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f78b3c1e929 code=0x7ffc0000 [ 125.306161][ T29] audit: type=1326 audit(1751861956.756:8354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14972 comm="syz.2.2056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78b3c1e929 code=0x7ffc0000 [ 125.364978][T14986] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2058'. [ 125.433754][T15000] loop2: detected capacity change from 0 to 1024 [ 125.442496][T15000] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 125.473691][T14995] netlink: 'syz.3.2060': attribute type 1 has an invalid length. [ 125.491672][T14995] 8021q: adding VLAN 0 to HW filter on device bond7 [ 125.498757][T15048] netlink: 'syz.4.2064': attribute type 1 has an invalid length. [ 125.508390][T14995] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5123 sclass=netlink_route_socket pid=14995 comm=syz.3.2060 [ 125.544883][T15048] 8021q: adding VLAN 0 to HW filter on device bond16 [ 125.556713][T15087] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2066'. [ 125.559144][T15088] vlan2: entered allmulticast mode [ 125.570957][T15088] bond16: entered allmulticast mode [ 125.587477][T15087] bridge0: port 3(macvlan2) entered blocking state [ 125.594104][T15087] bridge0: port 3(macvlan2) entered disabled state [ 125.600932][T15087] macvlan2: entered allmulticast mode [ 125.606450][T15087] bridge0: entered allmulticast mode [ 125.612214][T15087] macvlan2: left allmulticast mode [ 125.617373][T15087] bridge0: left allmulticast mode [ 125.715099][T15110] loop3: detected capacity change from 0 to 164 [ 125.724218][T15110] iso9660: Corrupted directory entry in block 2 of inode 1792 [ 125.810415][T15128] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2072'. [ 125.864745][T15139] loop3: detected capacity change from 0 to 512 [ 125.873565][T15139] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.2075: bg 0: block 5: invalid block bitmap [ 125.886199][T15139] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 125.895267][T15139] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.2075: invalid indirect mapped block 3 (level 2) [ 125.908806][T15139] EXT4-fs (loop3): 2 truncates cleaned up [ 125.987573][T15148] netlink: 'syz.3.2076': attribute type 1 has an invalid length. [ 125.995611][T15148] 8021q: adding VLAN 0 to HW filter on device bond8 [ 126.004832][T15148] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5123 sclass=netlink_route_socket pid=15148 comm=syz.3.2076 [ 126.074947][T15200] loop1: detected capacity change from 0 to 2048 [ 126.105789][T15211] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2084'. [ 126.119176][T15211] loop3: detected capacity change from 0 to 512 [ 126.133367][T15211] ext4 filesystem being mounted at /376/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 126.145727][T15211] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #2: comm syz.3.2084: corrupted inode contents [ 126.157796][T15211] EXT4-fs error (device loop3): ext4_dirty_inode:6459: inode #2: comm syz.3.2084: mark_inode_dirty error [ 126.169758][T15211] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #2: comm syz.3.2084: corrupted inode contents [ 126.182306][T15211] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #2: comm syz.3.2084: mark_inode_dirty error [ 126.198143][T15211] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2084'. [ 126.211735][T15216] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 126.226946][T15216] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2006 with error 28 [ 126.239472][T15216] EXT4-fs (loop1): This should not happen!! Data will be lost [ 126.239472][T15216] [ 126.249236][T15216] EXT4-fs (loop1): Total free blocks count 0 [ 126.255277][T15216] EXT4-fs (loop1): Free/Dirty block details [ 126.261261][T15216] EXT4-fs (loop1): free_blocks=2415919104 [ 126.267033][T15216] EXT4-fs (loop1): dirty_blocks=2016 [ 126.272514][T15216] EXT4-fs (loop1): Block reservation details [ 126.278652][T15216] EXT4-fs (loop1): i_reserved_data_blocks=126 [ 126.355803][T10963] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 24 with max blocks 2 with error 28 [ 126.358905][T15229] netlink: 'syz.4.2086': attribute type 1 has an invalid length. [ 126.368255][T10963] EXT4-fs (loop1): This should not happen!! Data will be lost [ 126.368255][T10963] [ 126.383311][T15229] 8021q: adding VLAN 0 to HW filter on device bond17 [ 126.429009][T15230] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5123 sclass=netlink_route_socket pid=15230 comm=syz.4.2086 [ 126.432094][T15230] vlan2: entered allmulticast mode [ 126.432112][T15230] bond17: entered allmulticast mode [ 126.465268][T15273] loop1: detected capacity change from 0 to 512 [ 126.482067][T15273] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.2087: bg 0: block 5: invalid block bitmap [ 126.526628][T15273] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 126.538012][T15273] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.2087: invalid indirect mapped block 3 (level 2) [ 126.551847][T15273] EXT4-fs (loop1): 2 truncates cleaned up [ 126.581386][T15292] netlink: 'syz.0.2090': attribute type 1 has an invalid length. [ 126.597048][T15292] 8021q: adding VLAN 0 to HW filter on device bond12 [ 126.615613][T15292] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5123 sclass=netlink_route_socket pid=15292 comm=syz.0.2090 [ 126.638509][T15307] loop4: detected capacity change from 0 to 164 [ 126.695658][T15351] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.744084][T15360] loop2: detected capacity change from 0 to 2048 [ 126.746914][T15361] netlink: 'syz.1.2096': attribute type 10 has an invalid length. [ 126.778744][T15361] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 126.802748][T15351] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.903983][T15374] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 126.904145][T15374] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 126.904167][T15374] EXT4-fs (loop2): This should not happen!! Data will be lost [ 126.904167][T15374] [ 126.904181][T15374] EXT4-fs (loop2): Total free blocks count 0 [ 126.904274][T15374] EXT4-fs (loop2): Free/Dirty block details [ 126.904284][T15374] EXT4-fs (loop2): free_blocks=2415919104 [ 126.904295][T15374] EXT4-fs (loop2): dirty_blocks=2192 [ 126.904305][T15374] EXT4-fs (loop2): Block reservation details [ 126.904314][T15374] EXT4-fs (loop2): i_reserved_data_blocks=137 [ 126.908698][T15351] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.981923][T15351] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.983380][ T3456] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 24 with max blocks 2 with error 28 [ 127.020666][ T3456] EXT4-fs (loop2): This should not happen!! Data will be lost [ 127.020666][ T3456] [ 127.062781][T15351] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.066192][T15351] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.084714][T15351] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.088169][T15351] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.162674][T15408] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.198310][T15421] loop1: detected capacity change from 0 to 512 [ 127.206908][T15421] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.2105: bg 0: block 5: invalid block bitmap [ 127.220035][T15421] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 127.228988][T15421] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.2105: invalid indirect mapped block 3 (level 2) [ 127.242918][T15421] EXT4-fs (loop1): 2 truncates cleaned up [ 127.249742][T15408] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.303197][T15408] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.343416][T15408] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.349884][T15434] netlink: 'syz.1.2107': attribute type 1 has an invalid length. [ 127.369404][T15434] 8021q: adding VLAN 0 to HW filter on device bond8 [ 127.379247][T15434] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5123 sclass=netlink_route_socket pid=15434 comm=syz.1.2107 [ 127.414207][T15477] loop1: detected capacity change from 0 to 512 [ 127.443032][T15477] ext4 filesystem being mounted at /451/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 127.456760][T15477] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #2: comm syz.1.2108: corrupted inode contents [ 127.467921][T15486] loop3: detected capacity change from 0 to 512 [ 127.469709][T15477] EXT4-fs error (device loop1): ext4_dirty_inode:6459: inode #2: comm syz.1.2108: mark_inode_dirty error [ 127.487303][T15477] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #2: comm syz.1.2108: corrupted inode contents [ 127.495535][T15408] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.500582][T15486] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.2110: bg 0: block 5: invalid block bitmap [ 127.510835][T15408] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.520527][T15477] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #2: comm syz.1.2108: mark_inode_dirty error [ 127.532143][T15408] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.548066][T15486] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 127.551010][T15408] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.558798][T15494] __nla_validate_parse: 4 callbacks suppressed [ 127.558823][T15494] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2108'. [ 127.590450][T15486] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.2110: invalid indirect mapped block 3 (level 2) [ 127.612942][T15486] EXT4-fs (loop3): 2 truncates cleaned up [ 127.620570][T15486] EXT4-fs mount: 79 callbacks suppressed [ 127.620591][T15486] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 127.648938][T15501] loop4: detected capacity change from 0 to 164 [ 127.657707][T15501] iso9660: Corrupted directory entry in block 2 of inode 1792 [ 127.681655][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.722861][T15517] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2112'. [ 127.742818][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.764785][T15517] loop3: detected capacity change from 0 to 512 [ 127.834598][T15517] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 127.834692][T15517] ext4 filesystem being mounted at /380/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 127.837077][T15517] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #2: comm syz.3.2112: corrupted inode contents [ 127.837270][T15517] EXT4-fs error (device loop3): ext4_dirty_inode:6459: inode #2: comm syz.3.2112: mark_inode_dirty error [ 127.837477][T15517] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #2: comm syz.3.2112: corrupted inode contents [ 127.837590][T15517] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #2: comm syz.3.2112: mark_inode_dirty error [ 127.840481][T15517] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2112'. [ 127.866264][T15533] netlink: 'syz.0.2118': attribute type 1 has an invalid length. [ 127.885066][T15533] 8021q: adding VLAN 0 to HW filter on device bond13 [ 127.922736][T15542] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5123 sclass=netlink_route_socket pid=15542 comm=syz.0.2118 [ 128.026028][T15595] loop0: detected capacity change from 0 to 512 [ 128.034916][T15595] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.2122: bg 0: block 5: invalid block bitmap [ 128.048582][T15595] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 128.060075][T15595] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.2122: invalid indirect mapped block 3 (level 2) [ 128.073797][T15595] EXT4-fs (loop0): 2 truncates cleaned up [ 128.074214][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.080016][T15595] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 128.123683][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.139319][T15604] loop3: detected capacity change from 0 to 164 [ 128.157167][T15604] iso9660: Corrupted directory entry in block 2 of inode 1792 [ 128.253673][T15624] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2127'. [ 128.258214][T15624] loop4: detected capacity change from 0 to 512 [ 128.308779][T15624] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 128.327298][T15624] ext4 filesystem being mounted at /445/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 128.341026][T15633] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2130'. [ 128.351210][T15624] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #2: comm syz.4.2127: corrupted inode contents [ 128.351454][T15624] EXT4-fs error (device loop4): ext4_dirty_inode:6459: inode #2: comm syz.4.2127: mark_inode_dirty error [ 128.351745][T15624] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #2: comm syz.4.2127: corrupted inode contents [ 128.351926][T15624] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #2: comm syz.4.2127: mark_inode_dirty error [ 128.353466][T15624] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2127'. [ 128.359223][T15633] bridge0: port 3(macvlan2) entered blocking state [ 128.359374][T15633] bridge0: port 3(macvlan2) entered disabled state [ 128.359428][T15633] macvlan2: entered allmulticast mode [ 128.359440][T15633] bridge0: entered allmulticast mode [ 128.361968][T15633] macvlan2: left allmulticast mode [ 128.361980][T15633] bridge0: left allmulticast mode [ 128.467366][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.510756][T15649] loop3: detected capacity change from 0 to 2048 [ 128.533105][T15649] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 128.634236][T15662] loop0: detected capacity change from 0 to 2048 [ 128.657953][T15663] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 128.680011][T15663] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1798 with error 28 [ 128.692631][T15663] EXT4-fs (loop3): This should not happen!! Data will be lost [ 128.692631][T15663] [ 128.695176][T15667] loop4: detected capacity change from 0 to 512 [ 128.702312][T15663] EXT4-fs (loop3): Total free blocks count 0 [ 128.702330][T15663] EXT4-fs (loop3): Free/Dirty block details [ 128.720627][T15663] EXT4-fs (loop3): free_blocks=2415919104 [ 128.726682][T15663] EXT4-fs (loop3): dirty_blocks=1808 [ 128.729251][T15667] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.2134: bg 0: block 5: invalid block bitmap [ 128.732181][T15663] EXT4-fs (loop3): Block reservation details [ 128.745312][T15667] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 128.750403][T15663] EXT4-fs (loop3): i_reserved_data_blocks=113 [ 128.762804][T15662] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 128.778657][T15667] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.2134: invalid indirect mapped block 3 (level 2) [ 128.793292][T15667] EXT4-fs (loop4): 2 truncates cleaned up [ 128.803259][T15667] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 128.866991][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.915371][ T1025] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 24 with max blocks 2 with error 28 [ 129.024569][T15700] loop3: detected capacity change from 0 to 164 [ 129.033532][T15700] iso9660: Corrupted directory entry in block 2 of inode 1792 [ 129.176943][T15725] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2142'. [ 129.196095][T15721] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2141'. [ 129.217359][T15725] loop2: detected capacity change from 0 to 512 [ 129.220214][T15678] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 129.251009][T15678] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 129.251893][T15725] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 129.263581][T15678] EXT4-fs (loop0): This should not happen!! Data will be lost [ 129.263581][T15678] [ 129.285704][T15678] EXT4-fs (loop0): Total free blocks count 0 [ 129.291729][T15678] EXT4-fs (loop0): Free/Dirty block details [ 129.297639][T15678] EXT4-fs (loop0): free_blocks=2415919104 [ 129.303440][T15678] EXT4-fs (loop0): dirty_blocks=8208 [ 129.308740][T15678] EXT4-fs (loop0): Block reservation details [ 129.314782][T15678] EXT4-fs (loop0): i_reserved_data_blocks=513 [ 129.328231][T15725] ext4 filesystem being mounted at /424/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 129.354396][T15736] loop4: detected capacity change from 0 to 8192 [ 129.359957][T15725] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #2: comm syz.2.2142: corrupted inode contents [ 129.372936][T15725] EXT4-fs error (device loop2): ext4_dirty_inode:6459: inode #2: comm syz.2.2142: mark_inode_dirty error [ 129.386848][T15725] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #2: comm syz.2.2142: corrupted inode contents [ 129.399794][T15725] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #2: comm syz.2.2142: mark_inode_dirty error [ 129.406278][T15741] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2142'. [ 129.412557][ T3500] loop4: p1 p2[DM] p4 [ 129.424330][ T3500] loop4: p1 size 196608 extends beyond EOD, truncated [ 129.431824][ T3500] loop4: p2 start 4292936063 is beyond EOD, truncated [ 129.438669][ T3500] loop4: p4 size 50331648 extends beyond EOD, truncated [ 129.450791][T15736] loop4: p1 p2[DM] p4 [ 129.455100][T15736] loop4: p1 size 196608 extends beyond EOD, truncated [ 129.463493][T15736] loop4: p2 start 4292936063 is beyond EOD, truncated [ 129.468353][ T3456] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 129.470410][T15736] loop4: p4 size 50331648 extends beyond EOD, truncated [ 129.512807][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.526978][T15736] blktrace: Concurrent blktraces are not allowed on loop4p1 [ 129.617235][T15767] loop4: detected capacity change from 0 to 164 [ 129.625574][T15767] iso9660: Corrupted directory entry in block 2 of inode 1792 [ 129.648090][T15781] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2149'. [ 129.657675][ T3298] udevd[3298]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 129.675730][ T3500] udevd[3500]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 129.699145][ T3298] udevd[3298]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 129.717431][ T3500] udevd[3500]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 129.799663][T15817] pim6reg: entered allmulticast mode [ 129.811225][T15817] pim6reg: left allmulticast mode [ 129.834721][T15826] bridge0: port 3(macvlan2) entered blocking state [ 129.841280][T15826] bridge0: port 3(macvlan2) entered disabled state [ 129.848382][T15826] macvlan2: entered allmulticast mode [ 129.853863][T15826] bridge0: entered allmulticast mode [ 129.855533][ T29] kauditd_printk_skb: 460 callbacks suppressed [ 129.855547][ T29] audit: type=1400 audit(1751861961.406:8815): avc: denied { read } for pid=15782 comm="syz.4.2150" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 129.885242][T15826] macvlan2: left allmulticast mode [ 129.890534][T15826] bridge0: left allmulticast mode [ 129.945852][T15845] wireguard0: entered promiscuous mode [ 129.951371][T15845] wireguard0: entered allmulticast mode [ 129.969554][T15817] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15817 comm=syz.4.2150 [ 129.977221][T15854] loop1: detected capacity change from 0 to 512 [ 129.982773][T15817] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2052 sclass=netlink_route_socket pid=15817 comm=syz.4.2150 [ 130.004793][T15854] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.2156: bg 0: block 5: invalid block bitmap [ 130.017490][T15854] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 130.026753][T15854] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.2156: invalid indirect mapped block 3 (level 2) [ 130.040238][T15854] EXT4-fs (loop1): 2 truncates cleaned up [ 130.046790][T15854] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 130.072099][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.092228][ T29] audit: type=1326 audit(1751861961.646:8816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15862 comm="syz.1.2157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd52812e929 code=0x7ffc0000 [ 130.115970][ T29] audit: type=1326 audit(1751861961.646:8817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15862 comm="syz.1.2157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd52812e929 code=0x7ffc0000 [ 130.139507][ T29] audit: type=1326 audit(1751861961.646:8818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15862 comm="syz.1.2157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd52812e929 code=0x7ffc0000 [ 130.145242][T15863] hub 6-0:1.0: USB hub found [ 130.163132][ T29] audit: type=1326 audit(1751861961.646:8819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15862 comm="syz.1.2157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd52812e929 code=0x7ffc0000 [ 130.191477][ T29] audit: type=1326 audit(1751861961.646:8820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15862 comm="syz.1.2157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd52812e929 code=0x7ffc0000 [ 130.193635][T15863] hub 6-0:1.0: 8 ports detected [ 130.215414][ T29] audit: type=1326 audit(1751861961.646:8821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15862 comm="syz.1.2157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd52812e929 code=0x7ffc0000 [ 130.243475][ T29] audit: type=1326 audit(1751861961.646:8822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15862 comm="syz.1.2157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd52812e929 code=0x7ffc0000 [ 130.267290][ T29] audit: type=1326 audit(1751861961.646:8823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15862 comm="syz.1.2157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd52812d290 code=0x7ffc0000 [ 130.267964][ T29] audit: type=1326 audit(1751861961.696:8824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15862 comm="syz.1.2157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd52812e929 code=0x7ffc0000 [ 130.355805][T15874] loop1: detected capacity change from 0 to 164 [ 130.367069][T15874] iso9660: Corrupted directory entry in block 2 of inode 1792 [ 130.693969][T15952] netlink: 'syz.4.2168': attribute type 1 has an invalid length. [ 130.712368][T15952] 8021q: adding VLAN 0 to HW filter on device bond18 [ 130.730932][T15952] vlan3: entered allmulticast mode [ 130.736186][T15952] bond18: entered allmulticast mode [ 130.751674][T15989] loop3: detected capacity change from 0 to 164 [ 130.760565][T15989] iso9660: Corrupted directory entry in block 2 of inode 1792 [ 130.866926][T16003] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.901941][T16008] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.914373][T16011] netlink: 'syz.3.2175': attribute type 10 has an invalid length. [ 130.915297][T16003] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.935281][T16011] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 130.953272][T16014] netlink: 'syz.1.2176': attribute type 10 has an invalid length. [ 130.954456][T16008] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.972188][T16014] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 130.994047][T16003] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.042972][T16008] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.073885][T16003] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.092596][T16008] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.128595][T16003] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.139826][T16003] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.151187][T16003] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.163146][T16003] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.176062][T16008] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.190331][T16008] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.208592][T16008] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.220244][T16008] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.229518][T16042] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.263146][T16042] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.280653][T16055] netlink: 'syz.3.2177': attribute type 10 has an invalid length. [ 131.288681][T16056] loop1: detected capacity change from 0 to 512 [ 131.296332][T16055] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 131.300709][T16056] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.2178: bg 0: block 5: invalid block bitmap [ 131.324643][T16056] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 131.333478][T16056] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.2178: invalid indirect mapped block 3 (level 2) [ 131.347081][T16056] EXT4-fs (loop1): 2 truncates cleaned up [ 131.353446][T16056] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 131.370647][T16042] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.390199][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.414954][T16042] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.571936][T16087] loop0: detected capacity change from 0 to 164 [ 131.583293][T16087] iso9660: Corrupted directory entry in block 2 of inode 1792 [ 131.630604][T16096] bridge0: port 3(macvlan2) entered blocking state [ 131.637422][T16096] bridge0: port 3(macvlan2) entered disabled state [ 131.644839][T16096] macvlan2: entered allmulticast mode [ 131.650261][T16096] bridge0: entered allmulticast mode [ 131.656740][T16090] netlink: 'syz.2.2185': attribute type 1 has an invalid length. [ 131.664931][T16096] macvlan2: left allmulticast mode [ 131.670167][T16096] bridge0: left allmulticast mode [ 131.689234][T16090] 8021q: adding VLAN 0 to HW filter on device bond9 [ 131.698671][T16090] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5123 sclass=netlink_route_socket pid=16090 comm=syz.2.2185 [ 131.714614][T16090] vlan2: entered allmulticast mode [ 131.719858][T16090] bond9: entered allmulticast mode [ 131.760677][T16143] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.833704][T16143] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.997060][T16143] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.064385][T16143] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.145796][T16143] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.162136][T16143] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.178685][T16143] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.194797][T16143] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.430368][T16189] loop4: detected capacity change from 0 to 512 [ 132.447332][T16189] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.2193: bg 0: block 5: invalid block bitmap [ 132.459883][T16189] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 132.468893][T16189] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.2193: invalid indirect mapped block 3 (level 2) [ 132.482845][T16189] EXT4-fs (loop4): 2 truncates cleaned up [ 132.489186][T16189] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 132.514830][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.624410][T16209] loop0: detected capacity change from 0 to 164 [ 132.633725][T16209] iso9660: Corrupted directory entry in block 2 of inode 1792 [ 132.659437][T16216] __nla_validate_parse: 9 callbacks suppressed [ 132.659453][T16216] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2197'. [ 132.678585][T16216] bridge0: port 3(macvlan2) entered blocking state [ 132.685248][T16216] bridge0: port 3(macvlan2) entered disabled state [ 132.691923][T16216] macvlan2: entered allmulticast mode [ 132.697376][T16216] bridge0: entered allmulticast mode [ 132.703290][T16216] macvlan2: left allmulticast mode [ 132.708404][T16216] bridge0: left allmulticast mode [ 132.814839][T16224] loop0: detected capacity change from 0 to 256 [ 132.886395][T16253] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2199'. [ 132.988695][T16260] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2201'. [ 133.000752][T16260] bridge0: port 3(macvlan2) entered blocking state [ 133.007408][T16260] bridge0: port 3(macvlan2) entered disabled state [ 133.014121][T16260] macvlan2: entered allmulticast mode [ 133.019510][T16260] bridge0: entered allmulticast mode [ 133.025301][T16260] macvlan2: left allmulticast mode [ 133.030480][T16260] bridge0: left allmulticast mode [ 133.129502][T16278] netlink: 'syz.0.2205': attribute type 21 has an invalid length. [ 133.346962][T16288] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2206'. [ 133.901096][T16317] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2213'. [ 133.920406][T16317] bridge0: port 3(macvlan2) entered blocking state [ 133.927095][T16317] bridge0: port 3(macvlan2) entered disabled state [ 133.939317][T16317] macvlan2: entered allmulticast mode [ 133.944833][T16317] bridge0: entered allmulticast mode [ 133.956999][T16327] loop4: detected capacity change from 0 to 1024 [ 133.963651][T16317] macvlan2: left allmulticast mode [ 133.968886][T16317] bridge0: left allmulticast mode [ 133.986325][T16327] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 134.005017][T16337] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2217'. [ 134.085231][T16350] loop1: detected capacity change from 0 to 164 [ 134.114491][T16350] iso9660: Corrupted directory entry in block 2 of inode 1792 [ 134.188996][T16363] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2216'. [ 134.450333][T16327] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 134.465482][T16327] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 134.477881][T16327] EXT4-fs (loop4): This should not happen!! Data will be lost [ 134.477881][T16327] [ 134.487666][T16327] EXT4-fs (loop4): Total free blocks count 0 [ 134.493679][T16327] EXT4-fs (loop4): Free/Dirty block details [ 134.499561][T16327] EXT4-fs (loop4): free_blocks=68451041280 [ 134.505438][T16327] EXT4-fs (loop4): dirty_blocks=16416 [ 134.510884][T16327] EXT4-fs (loop4): Block reservation details [ 134.516938][T16327] EXT4-fs (loop4): i_reserved_data_blocks=1026 [ 134.537437][ T51] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 36 with max blocks 2048 with error 28 [ 134.867204][T16396] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2229'. [ 135.170608][T16404] netlink: 'syz.1.2231': attribute type 1 has an invalid length. [ 135.192893][T16404] 8021q: adding VLAN 0 to HW filter on device bond9 [ 135.212111][T16404] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5123 sclass=netlink_route_socket pid=16404 comm=syz.1.2231 [ 135.216224][T16404] vlan2: entered allmulticast mode [ 135.216236][T16404] bond9: entered allmulticast mode [ 135.341334][T16448] loop1: detected capacity change from 0 to 8192 [ 135.391989][T16448] loop1: p1 p2[DM] p4 [ 135.400640][T16448] loop1: p1 size 196608 extends beyond EOD, truncated [ 135.409283][T16448] loop1: p2 start 4292936063 is beyond EOD, truncated [ 135.416213][T16448] loop1: p4 size 50331648 extends beyond EOD, truncated [ 135.512812][ T3298] udevd[3298]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 135.587861][T16467] loop0: detected capacity change from 0 to 1024 [ 135.612887][T16492] loop2: detected capacity change from 0 to 512 [ 135.614481][T16467] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 135.632414][T16467] ext4 filesystem being mounted at /448/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 135.639579][T16492] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.2241: bg 0: block 5: invalid block bitmap [ 135.645966][T16498] netlink: 'syz.1.2240': attribute type 1 has an invalid length. [ 135.655812][T16492] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 135.672203][T16492] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.2241: invalid indirect mapped block 3 (level 2) [ 135.688901][T16498] 8021q: adding VLAN 0 to HW filter on device bond10 [ 135.701148][T16492] EXT4-fs (loop2): 2 truncates cleaned up [ 135.707866][T16492] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 135.725464][T16535] vlan2: entered allmulticast mode [ 135.730738][T16535] bond10: entered allmulticast mode [ 135.741101][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.762993][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 135.772404][ T29] kauditd_printk_skb: 245 callbacks suppressed [ 135.772418][ T29] audit: type=1326 audit(1751861967.316:9068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16544 comm="syz.2.2243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78b3c1e929 code=0x7ffc0000 [ 135.802299][ T29] audit: type=1326 audit(1751861967.316:9069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16544 comm="syz.2.2243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78b3c1e929 code=0x7ffc0000 [ 135.812703][T16534] netlink: 'syz.4.2242': attribute type 1 has an invalid length. [ 135.826032][ T29] audit: type=1326 audit(1751861967.316:9070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16544 comm="syz.2.2243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7f78b3c1e929 code=0x7ffc0000 [ 135.857194][ T29] audit: type=1326 audit(1751861967.316:9071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16544 comm="syz.2.2243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78b3c1e929 code=0x7ffc0000 [ 135.870285][T16534] 8021q: adding VLAN 0 to HW filter on device bond19 [ 135.881004][ T29] audit: type=1326 audit(1751861967.316:9072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16544 comm="syz.2.2243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78b3c1e929 code=0x7ffc0000 [ 135.897358][T16534] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5123 sclass=netlink_route_socket pid=16534 comm=syz.4.2242 [ 135.948352][T16534] vlan3: entered allmulticast mode [ 135.953632][T16534] bond19: entered allmulticast mode [ 136.007235][T16595] loop0: detected capacity change from 0 to 8192 [ 136.032861][T16603] netlink: 'syz.4.2248': attribute type 21 has an invalid length. [ 136.092706][T16595] loop0: p1 p2[DM] p4 [ 136.098266][ T29] audit: type=1326 audit(1751861967.646:9073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16615 comm="syz.2.2252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78b3c1e929 code=0x7ffc0000 [ 136.099125][T16595] loop0: p1 size 196608 extends beyond EOD, truncated [ 136.129557][T16616] loop2: detected capacity change from 0 to 1024 [ 136.132884][ T29] audit: type=1326 audit(1751861967.676:9074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16615 comm="syz.2.2252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f78b3c1e929 code=0x7ffc0000 [ 136.142477][T16616] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 136.159497][ T29] audit: type=1326 audit(1751861967.676:9075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16615 comm="syz.2.2252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78b3c1e929 code=0x7ffc0000 [ 136.191273][ T29] audit: type=1326 audit(1751861967.676:9076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16615 comm="syz.2.2252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f78b3c1e929 code=0x7ffc0000 [ 136.204939][T16595] loop0: p2 start 4292936063 is beyond EOD, [ 136.214780][ T29] audit: type=1326 audit(1751861967.676:9077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16615 comm="syz.2.2252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78b3c1e929 code=0x7ffc0000 [ 136.244719][T16595] truncated [ 136.247855][T16595] loop0: p4 size 50331648 extends beyond EOD, truncated [ 136.300586][ T3298] udevd[3298]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 136.300693][ T3500] udevd[3500]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 136.327933][T16042] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.338699][T16042] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.349696][T16042] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.361572][T16042] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.422765][T16657] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2255'. [ 136.443191][T16657] loop3: detected capacity change from 0 to 512 [ 136.464641][T16657] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 136.477276][T16657] ext4 filesystem being mounted at /401/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 136.493031][T16657] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #2: comm syz.3.2255: corrupted inode contents [ 136.505399][T16657] EXT4-fs error (device loop3): ext4_dirty_inode:6459: inode #2: comm syz.3.2255: mark_inode_dirty error [ 136.517117][T16657] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #2: comm syz.3.2255: corrupted inode contents [ 136.529307][T16657] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #2: comm syz.3.2255: mark_inode_dirty error [ 136.543121][T16670] FAULT_INJECTION: forcing a failure. [ 136.543121][T16670] name failslab, interval 1, probability 0, space 0, times 0 [ 136.543319][T16657] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2255'. [ 136.555930][T16670] CPU: 1 UID: 0 PID: 16670 Comm: syz.1.2257 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT(voluntary) [ 136.555959][T16670] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 136.555975][T16670] Call Trace: [ 136.555982][T16670] [ 136.555990][T16670] __dump_stack+0x1d/0x30 [ 136.556017][T16670] dump_stack_lvl+0xe8/0x140 [ 136.556042][T16670] dump_stack+0x15/0x1b [ 136.556060][T16670] should_fail_ex+0x265/0x280 [ 136.556111][T16670] ? sctp_association_new+0x71/0x1200 [ 136.556145][T16670] should_failslab+0x8c/0xb0 [ 136.556172][T16670] __kmalloc_cache_noprof+0x4c/0x320 [ 136.556285][T16670] sctp_association_new+0x71/0x1200 [ 136.556320][T16670] ? __ipv6_addr_type+0xe2/0x210 [ 136.556354][T16670] sctp_connect_new_asoc+0x1a8/0x3a0 [ 136.556468][T16670] sctp_sendmsg+0xf10/0x18d0 [ 136.556545][T16670] ? selinux_socket_sendmsg+0xa1/0x1b0 [ 136.556585][T16670] ? __pfx_sctp_sendmsg+0x10/0x10 [ 136.556616][T16670] inet_sendmsg+0xc5/0xd0 [ 136.556654][T16670] __sock_sendmsg+0x102/0x180 [ 136.556693][T16670] __sys_sendto+0x268/0x330 [ 136.556745][T16670] __x64_sys_sendto+0x76/0x90 [ 136.556781][T16670] x64_sys_call+0x2eb6/0x2fb0 [ 136.556806][T16670] do_syscall_64+0xd2/0x200 [ 136.556842][T16670] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 136.556914][T16670] ? clear_bhb_loop+0x40/0x90 [ 136.556938][T16670] ? clear_bhb_loop+0x40/0x90 [ 136.556964][T16670] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.557021][T16670] RIP: 0033:0x7fd52812e929 [ 136.557038][T16670] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 136.557060][T16670] RSP: 002b:00007fd526797038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 136.557082][T16670] RAX: ffffffffffffffda RBX: 00007fd528355fa0 RCX: 00007fd52812e929 [ 136.557097][T16670] RDX: 0000000000000001 RSI: 0000200000000000 RDI: 0000000000000005 [ 136.557110][T16670] RBP: 00007fd526797090 R08: 0000200000000100 R09: 000000000000001c [ 136.557124][T16670] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 136.557139][T16670] R13: 0000000000000000 R14: 00007fd528355fa0 R15: 00007fff97f2c5e8 [ 136.557244][T16670] [ 136.607591][T16673] loop1: detected capacity change from 0 to 164 [ 136.802154][T16673] iso9660: Corrupted directory entry in block 2 of inode 1792 [ 136.835886][T16689] loop1: detected capacity change from 0 to 1024 [ 136.849983][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.853780][T16689] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 136.907012][T16703] bridge0: port 3(macvlan2) entered blocking state [ 136.913812][T16703] bridge0: port 3(macvlan2) entered disabled state [ 136.920891][T16703] macvlan2: entered allmulticast mode [ 136.926346][T16703] bridge0: entered allmulticast mode [ 136.946292][T16703] macvlan2: left allmulticast mode [ 136.951528][T16703] bridge0: left allmulticast mode [ 136.985654][T16711] loop4: detected capacity change from 0 to 8192 [ 137.062674][T16711] loop4: p1 p2[DM] p4 [ 137.067678][T16711] loop4: p1 size 196608 extends beyond EOD, truncated [ 137.077106][T16711] loop4: p2 start 4292936063 is beyond EOD, truncated [ 137.083951][T16711] loop4: p4 size 50331648 extends beyond EOD, truncated [ 137.174015][T16711] blktrace: Concurrent blktraces are not allowed on loop4p1 [ 137.694830][ T3500] udevd[3500]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 137.696858][ T3298] udevd[3298]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 137.708141][T16742] loop4: detected capacity change from 0 to 2048 [ 137.752572][ T3456] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 137.752702][ T3456] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 137.752728][ T3456] EXT4-fs (loop1): This should not happen!! Data will be lost [ 137.752728][ T3456] [ 137.752810][ T3456] EXT4-fs (loop1): Total free blocks count 0 [ 137.752823][ T3456] EXT4-fs (loop1): Free/Dirty block details [ 137.752835][ T3456] EXT4-fs (loop1): free_blocks=68451041280 [ 137.752849][ T3456] EXT4-fs (loop1): dirty_blocks=9200 [ 137.752863][ T3456] EXT4-fs (loop1): Block reservation details [ 137.752875][ T3456] EXT4-fs (loop1): i_reserved_data_blocks=575 [ 137.755453][ T3456] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 36 with max blocks 2048 with error 28 [ 137.882465][T16742] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 137.955561][T16772] FAULT_INJECTION: forcing a failure. [ 137.955561][T16772] name failslab, interval 1, probability 0, space 0, times 0 [ 137.968272][T16772] CPU: 0 UID: 0 PID: 16772 Comm: syz.1.2270 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT(voluntary) [ 137.968294][T16772] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 137.968325][T16772] Call Trace: [ 137.968331][T16772] [ 137.968338][T16772] __dump_stack+0x1d/0x30 [ 137.968355][T16772] dump_stack_lvl+0xe8/0x140 [ 137.968376][T16772] dump_stack+0x15/0x1b [ 137.968394][T16772] should_fail_ex+0x265/0x280 [ 137.968431][T16772] ? nfnetlink_rcv+0xa04/0x1690 [ 137.968469][T16772] should_failslab+0x8c/0xb0 [ 137.968490][T16772] __kmalloc_cache_noprof+0x4c/0x320 [ 137.968575][T16772] nfnetlink_rcv+0xa04/0x1690 [ 137.968628][T16772] netlink_unicast+0x5a1/0x670 [ 137.968662][T16772] netlink_sendmsg+0x58b/0x6b0 [ 137.968700][T16772] ? __pfx_netlink_sendmsg+0x10/0x10 [ 137.968759][T16772] __sock_sendmsg+0x145/0x180 [ 137.968780][T16772] ____sys_sendmsg+0x31e/0x4e0 [ 137.968833][T16772] ___sys_sendmsg+0x17b/0x1d0 [ 137.968887][T16772] __x64_sys_sendmsg+0xd4/0x160 [ 137.968949][T16772] x64_sys_call+0x2999/0x2fb0 [ 137.969069][T16772] do_syscall_64+0xd2/0x200 [ 137.969161][T16772] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 137.969252][T16772] ? clear_bhb_loop+0x40/0x90 [ 137.969274][T16772] ? clear_bhb_loop+0x40/0x90 [ 137.969297][T16772] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.969323][T16772] RIP: 0033:0x7fd52812e929 [ 137.969336][T16772] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 137.969355][T16772] RSP: 002b:00007fd526797038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 137.969375][T16772] RAX: ffffffffffffffda RBX: 00007fd528355fa0 RCX: 00007fd52812e929 [ 137.969388][T16772] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 137.969444][T16772] RBP: 00007fd526797090 R08: 0000000000000000 R09: 0000000000000000 [ 137.969456][T16772] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 137.969482][T16772] R13: 0000000000000000 R14: 00007fd528355fa0 R15: 00007fff97f2c5e8 [ 137.969501][T16772] [ 138.188631][T16761] loop2: detected capacity change from 0 to 512 [ 138.214007][T16761] EXT4-fs (loop2): too many log groups per flexible block group [ 138.221778][T16761] EXT4-fs (loop2): failed to initialize mballoc (-12) [ 138.241824][T16761] EXT4-fs (loop2): mount failed [ 138.267963][T16787] loop1: detected capacity change from 0 to 164 [ 138.289205][T16787] iso9660: Corrupted directory entry in block 2 of inode 1792 [ 138.430830][T16774] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 138.445763][T16774] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 138.458305][T16774] EXT4-fs (loop4): This should not happen!! Data will be lost [ 138.458305][T16774] [ 138.467976][T16774] EXT4-fs (loop4): Total free blocks count 0 [ 138.467992][T16774] EXT4-fs (loop4): Free/Dirty block details [ 138.468025][T16774] EXT4-fs (loop4): free_blocks=2415919104 [ 138.468040][T16774] EXT4-fs (loop4): dirty_blocks=8208 [ 138.468063][T16774] EXT4-fs (loop4): Block reservation details [ 138.468076][T16774] EXT4-fs (loop4): i_reserved_data_blocks=513 [ 138.512117][ T51] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 138.990778][T16871] loop2: detected capacity change from 0 to 512 [ 139.013148][T16871] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 139.025975][T16871] ext4 filesystem being mounted at /459/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 139.236132][T16882] hub 6-0:1.0: USB hub found [ 139.240903][T16882] hub 6-0:1.0: 8 ports detected [ 139.318417][T16887] netlink: 'syz.0.2293': attribute type 1 has an invalid length. [ 139.333197][T16887] 8021q: adding VLAN 0 to HW filter on device bond14 [ 139.342508][T16887] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5123 sclass=netlink_route_socket pid=16887 comm=syz.0.2293 [ 139.357614][T16887] vlan0: entered allmulticast mode [ 139.362882][T16887] bond14: entered allmulticast mode [ 139.457856][T16931] __nla_validate_parse: 3 callbacks suppressed [ 139.457870][T16931] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2295'. [ 139.477147][T16931] loop0: detected capacity change from 0 to 512 [ 139.493552][T16931] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 139.506128][T16931] ext4 filesystem being mounted at /458/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 139.517889][T16931] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #2: comm syz.0.2295: corrupted inode contents [ 139.529991][T16931] EXT4-fs error (device loop0): ext4_dirty_inode:6459: inode #2: comm syz.0.2295: mark_inode_dirty error [ 139.541944][T16931] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #2: comm syz.0.2295: corrupted inode contents [ 139.554986][T16931] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #2: comm syz.0.2295: mark_inode_dirty error [ 139.568058][T16931] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2295'. [ 139.700365][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.821372][T16984] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2307'. [ 139.852226][T16989] loop4: detected capacity change from 0 to 164 [ 139.868885][T16989] iso9660: Corrupted directory entry in block 2 of inode 1792 [ 139.907875][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.927675][T17004] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2310'. [ 139.936827][T17004] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2310'. [ 139.945829][T17004] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2310'. [ 139.958368][T17004] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2310'. [ 139.986492][T17011] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 139.993064][T17011] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 140.001019][T17011] vhci_hcd vhci_hcd.0: Device attached [ 140.039250][T17011] SELinux: failed to load policy [ 140.046128][T17012] vhci_hcd: connection closed [ 140.046280][ T51] vhci_hcd: stop threads [ 140.055278][ T51] vhci_hcd: release socket [ 140.059765][ T51] vhci_hcd: disconnect device [ 140.579736][T17028] veth0_vlan: entered allmulticast mode [ 140.670657][T17028] veth0_vlan: left promiscuous mode [ 140.676102][T17028] veth0_vlan: entered promiscuous mode [ 140.686506][T17039] loop1: detected capacity change from 0 to 1024 [ 140.709510][T17039] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 140.783439][ T29] kauditd_printk_skb: 272 callbacks suppressed [ 140.783451][ T29] audit: type=1400 audit(1751861972.336:9350): avc: denied { tracepoint } for pid=17046 comm="syz.4.2322" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 140.831907][ T29] audit: type=1400 audit(1751861972.376:9351): avc: denied { setopt } for pid=17046 comm="syz.4.2322" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 140.851473][ T29] audit: type=1400 audit(1751861972.376:9352): avc: denied { write } for pid=17046 comm="syz.4.2322" name="event2" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 140.875032][ T29] audit: type=1400 audit(1751861972.376:9353): avc: denied { open } for pid=17046 comm="syz.4.2322" path="/dev/input/event2" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 140.899444][ T29] audit: type=1400 audit(1751861972.376:9354): avc: denied { ioctl } for pid=17046 comm="syz.4.2322" path="/dev/input/event2" dev="devtmpfs" ino=245 ioctlcmd=0x4593 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 140.945552][T17051] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2322'. [ 140.981490][T17057] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2321'. [ 141.278794][T17075] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2326'. [ 141.413500][ T29] audit: type=1400 audit(1751861972.526:9355): avc: denied { read } for pid=17041 comm="syz.3.2321" dev="nsfs" ino=4026532645 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 141.413573][ T29] audit: type=1400 audit(1751861972.526:9356): avc: denied { open } for pid=17041 comm="syz.3.2321" path="net:[4026532645]" dev="nsfs" ino=4026532645 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 141.413603][ T29] audit: type=1400 audit(1751861972.766:9357): avc: denied { write } for pid=17074 comm="syz.4.2326" name="rt_acct" dev="proc" ino=4026532895 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 141.413669][ T29] audit: type=1400 audit(1751861972.766:9358): avc: denied { create } for pid=17074 comm="syz.4.2326" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 141.413809][ T29] audit: type=1400 audit(1751861972.806:9359): avc: denied { write } for pid=17074 comm="syz.4.2326" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 141.436996][T17075] Cannot find add_set index 0 as target [ 141.585546][T17082] loop1: detected capacity change from 0 to 8192 [ 141.634071][ T3500] loop1: p1 p2[DM] p4 [ 141.634317][ T3500] loop1: p1 size 196608 extends beyond EOD, truncated [ 141.634788][ T3500] loop1: p2 start 4292936063 is beyond EOD, truncated [ 141.634839][ T3500] loop1: p4 size 50331648 extends beyond EOD, truncated [ 141.639947][T17082] loop1: p1 p2[DM] p4 [ 141.640065][T17082] loop1: p1 size 196608 extends beyond EOD, truncated [ 141.640463][T17082] loop1: p2 start 4292936063 is beyond EOD, truncated [ 141.640478][T17082] loop1: p4 size 50331648 extends beyond EOD, truncated [ 141.714152][ T3298] udevd[3298]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 141.729845][ T3298] udevd[3298]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 142.783527][T17242] loop1: detected capacity change from 0 to 512 [ 142.793789][T17235] netlink: 'syz.4.2348': attribute type 1 has an invalid length. [ 142.812348][T17242] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.2351: bg 0: block 5: invalid block bitmap [ 142.829314][T17235] 8021q: adding VLAN 0 to HW filter on device bond20 [ 142.838094][T17242] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 142.844556][T17243] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5123 sclass=netlink_route_socket pid=17243 comm=syz.4.2348 [ 142.848584][T17242] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.2351: invalid indirect mapped block 3 (level 2) [ 142.886972][T17235] vlan3: entered allmulticast mode [ 142.892234][T17235] bond20: entered allmulticast mode [ 142.902499][T17242] EXT4-fs (loop1): 2 truncates cleaned up [ 142.932453][T17242] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 142.991972][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.048320][T17296] loop1: detected capacity change from 0 to 2048 [ 143.096481][T17296] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 143.131866][T17306] netlink: 'syz.2.2355': attribute type 1 has an invalid length. [ 143.164655][T17306] 8021q: adding VLAN 0 to HW filter on device bond10 [ 143.198941][T17345] loop4: detected capacity change from 0 to 1024 [ 143.217240][T17346] vlan3: entered allmulticast mode [ 143.222412][T17346] bond10: entered allmulticast mode [ 143.248824][T17345] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 143.269150][T17326] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 143.291561][T17326] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 372 with max blocks 244 with error 28 [ 143.304133][T17326] EXT4-fs (loop1): This should not happen!! Data will be lost [ 143.304133][T17326] [ 143.313824][T17326] EXT4-fs (loop1): Total free blocks count 0 [ 143.319850][T17326] EXT4-fs (loop1): Free/Dirty block details [ 143.325865][T17326] EXT4-fs (loop1): free_blocks=2415919104 [ 143.331650][T17326] EXT4-fs (loop1): dirty_blocks=624 [ 143.336889][T17326] EXT4-fs (loop1): Block reservation details [ 143.342945][T17326] EXT4-fs (loop1): i_reserved_data_blocks=39 [ 143.404627][ T3456] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 24 with max blocks 2 with error 28 [ 143.446510][T17369] bridge0: port 3(macvlan2) entered blocking state [ 143.453214][T17369] bridge0: port 3(macvlan2) entered disabled state [ 143.459991][T17369] macvlan2: entered allmulticast mode [ 143.465514][T17369] bridge0: entered allmulticast mode [ 143.472711][T17369] macvlan2: left allmulticast mode [ 143.477995][T17369] bridge0: left allmulticast mode [ 143.617514][T17380] loop1: detected capacity change from 0 to 512 [ 143.642916][T17380] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 143.655787][T17380] ext4 filesystem being mounted at /507/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 143.667541][T17380] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #2: comm syz.1.2360: corrupted inode contents [ 143.679650][T17380] EXT4-fs error (device loop1): ext4_dirty_inode:6459: inode #2: comm syz.1.2360: mark_inode_dirty error [ 143.691237][T17380] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #2: comm syz.1.2360: corrupted inode contents [ 143.703729][T17380] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #2: comm syz.1.2360: mark_inode_dirty error [ 143.785214][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.819450][T17399] loop0: detected capacity change from 0 to 512 [ 143.828307][T17399] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.2363: bg 0: block 5: invalid block bitmap [ 143.841748][T17399] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 143.854971][T17399] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.2363: invalid indirect mapped block 3 (level 2) [ 143.868590][T17399] EXT4-fs (loop0): 2 truncates cleaned up [ 143.875219][T17399] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 143.901876][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.066845][T17417] cgroup: fork rejected by pids controller in /syz0 [ 144.068016][T17428] loop1: detected capacity change from 0 to 2048 [ 144.119186][T17428] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 144.133377][T17441] loop3: detected capacity change from 0 to 512 [ 144.136614][T17442] bridge0: port 3(macvlan2) entered blocking state [ 144.143926][T17441] EXT4-fs error (device loop3): ext4_orphan_get:1393: inode #15: comm syz.3.2370: casefold flag without casefold feature [ 144.146483][T17442] bridge0: port 3(macvlan2) entered disabled state [ 144.159899][T17441] EXT4-fs error (device loop3): ext4_orphan_get:1398: comm syz.3.2370: couldn't read orphan inode 15 (err -117) [ 144.178156][T17442] macvlan2: entered allmulticast mode [ 144.183615][T17442] bridge0: entered allmulticast mode [ 144.189183][T17441] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 144.209680][T17442] macvlan2: left allmulticast mode [ 144.214888][T17442] bridge0: left allmulticast mode [ 144.250695][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.314942][T17460] loop3: detected capacity change from 0 to 8192 [ 144.348835][T17465] netlink: 'syz.0.2374': attribute type 21 has an invalid length. [ 144.359202][ T3500] loop3: p1 p2[DM] p4 [ 144.359323][ T3500] loop3: p1 size 196608 extends beyond EOD, truncated [ 144.360263][ T3500] loop3: p2 start 4292936063 is beyond EOD, truncated [ 144.360283][ T3500] loop3: p4 size 50331648 extends beyond EOD, truncated [ 144.368947][T17460] loop3: p1 p2[DM] p4 [ 144.369048][T17460] loop3: p1 size 196608 extends beyond EOD, truncated [ 144.376392][T17460] loop3: p2 start 4292936063 is beyond EOD, truncated [ 144.376421][T17460] loop3: p4 size 50331648 extends beyond EOD, truncated [ 144.384697][T17460] blktrace: Concurrent blktraces are not allowed on loop3p1 [ 144.415070][T17484] loop0: detected capacity change from 0 to 512 [ 144.422040][T17484] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.2375: bg 0: block 5: invalid block bitmap [ 144.422636][T17484] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 144.422982][T17484] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.2375: invalid indirect mapped block 3 (level 2) [ 144.423400][T17484] EXT4-fs (loop0): 2 truncates cleaned up [ 144.425856][T17484] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 144.426893][T17481] bridge0: port 3(macvlan2) entered blocking state [ 144.426917][T17481] bridge0: port 3(macvlan2) entered disabled state [ 144.429107][T17481] macvlan2: entered allmulticast mode [ 144.429122][T17481] bridge0: entered allmulticast mode [ 144.432625][T17481] macvlan2: left allmulticast mode [ 144.432640][T17481] bridge0: left allmulticast mode [ 144.443970][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.455455][ T3298] udevd[3298]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 144.455537][ T3500] udevd[3500]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 144.486192][ T3298] udevd[3298]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 144.489568][ T3500] udevd[3500]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 144.609138][T17499] loop3: detected capacity change from 0 to 1024 [ 144.689503][T17449] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, [ 144.709494][T17499] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 144.711371][T17449] block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 144.712551][T17449] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 144.775319][T17449] EXT4-fs (loop1): This should not happen!! Data will be lost [ 144.775319][T17449] [ 144.775332][T17449] EXT4-fs (loop1): Total free blocks count 0 [ 144.775342][T17449] EXT4-fs (loop1): Free/Dirty block details [ 144.775352][T17449] EXT4-fs (loop1): free_blocks=2415919104 [ 144.775365][T17449] EXT4-fs (loop1): dirty_blocks=8208 [ 144.775378][T17449] EXT4-fs (loop1): Block reservation details [ 144.775449][T17449] EXT4-fs (loop1): i_reserved_data_blocks=513 [ 144.779506][T17503] __nla_validate_parse: 8 callbacks suppressed [ 144.779520][T17503] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2377'. [ 145.138397][ T3456] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 145.421961][T17546] loop0: detected capacity change from 0 to 2048 [ 145.439471][T17546] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 145.564926][T17563] netlink: 'syz.3.2386': attribute type 21 has an invalid length. [ 145.575101][T17554] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 145.593283][T17554] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 886 with error 28 [ 145.606082][T17554] EXT4-fs (loop0): This should not happen!! Data will be lost [ 145.606082][T17554] [ 145.615780][T17554] EXT4-fs (loop0): Total free blocks count 0 [ 145.621831][T17554] EXT4-fs (loop0): Free/Dirty block details [ 145.627765][T17554] EXT4-fs (loop0): free_blocks=2415919104 [ 145.633530][T17554] EXT4-fs (loop0): dirty_blocks=896 [ 145.638733][T17554] EXT4-fs (loop0): Block reservation details [ 145.644776][T17554] EXT4-fs (loop0): i_reserved_data_blocks=56 [ 145.702131][ T3456] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 24 with max blocks 2 with error 28 [ 145.725214][T17589] netlink: 'syz.3.2389': attribute type 1 has an invalid length. [ 145.752633][T17681] loop0: detected capacity change from 0 to 2048 [ 145.755555][T17589] 8021q: adding VLAN 0 to HW filter on device bond9 [ 145.780132][T17589] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5123 sclass=netlink_route_socket pid=17589 comm=syz.3.2389 [ 145.802207][T17589] vlan2: entered allmulticast mode [ 145.806336][T17681] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 145.807353][T17589] bond9: entered allmulticast mode [ 145.821171][ T29] kauditd_printk_skb: 351 callbacks suppressed [ 145.821232][ T29] audit: type=1326 audit(1751861977.376:9711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17679 comm="syz.0.2391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fdf85d1d290 code=0x7ffc0000 [ 145.854557][ T29] audit: type=1326 audit(1751861977.376:9712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17679 comm="syz.0.2391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7fdf85d1d677 code=0x7ffc0000 [ 145.878024][ T29] audit: type=1326 audit(1751861977.376:9713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17679 comm="syz.0.2391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fdf85d1d290 code=0x7ffc0000 [ 145.901600][ T29] audit: type=1326 audit(1751861977.376:9714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17679 comm="syz.0.2391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf85d1e929 code=0x7ffc0000 [ 145.925288][ T29] audit: type=1326 audit(1751861977.376:9715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17679 comm="syz.0.2391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf85d1e929 code=0x7ffc0000 [ 145.948817][ T29] audit: type=1326 audit(1751861977.386:9716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17679 comm="syz.0.2391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fdf85d1e929 code=0x7ffc0000 [ 145.972437][ T29] audit: type=1326 audit(1751861977.386:9717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17679 comm="syz.0.2391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf85d1e929 code=0x7ffc0000 [ 145.995971][ T29] audit: type=1326 audit(1751861977.386:9718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17679 comm="syz.0.2391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7fdf85d1e929 code=0x7ffc0000 [ 146.019525][ T29] audit: type=1326 audit(1751861977.386:9719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17679 comm="syz.0.2391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf85d1e929 code=0x7ffc0000 [ 146.043018][ T29] audit: type=1326 audit(1751861977.386:9720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17679 comm="syz.0.2391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf85d1e929 code=0x7ffc0000 [ 146.126827][T17730] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 146.142084][T17730] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 146.154617][T17730] EXT4-fs (loop0): This should not happen!! Data will be lost [ 146.154617][T17730] [ 146.164289][T17730] EXT4-fs (loop0): Total free blocks count 0 [ 146.170413][T17730] EXT4-fs (loop0): Free/Dirty block details [ 146.176462][T17730] EXT4-fs (loop0): free_blocks=2415919104 [ 146.182338][T17730] EXT4-fs (loop0): dirty_blocks=8208 [ 146.187715][T17730] EXT4-fs (loop0): Block reservation details [ 146.193804][T17730] EXT4-fs (loop0): i_reserved_data_blocks=513 [ 146.277959][T17752] netlink: 'syz.3.2394': attribute type 1 has an invalid length. [ 146.297194][T17752] 8021q: adding VLAN 0 to HW filter on device bond10 [ 146.316322][T17752] vlan2: entered allmulticast mode [ 146.318103][T17787] loop4: detected capacity change from 0 to 2048 [ 146.321535][T17752] bond10: entered allmulticast mode [ 146.353549][T17787] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 146.480591][T17800] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 146.497095][T17800] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1826 with error 28 [ 146.509646][T17800] EXT4-fs (loop4): This should not happen!! Data will be lost [ 146.509646][T17800] [ 146.519427][T17800] EXT4-fs (loop4): Total free blocks count 0 [ 146.525477][T17800] EXT4-fs (loop4): Free/Dirty block details [ 146.531373][T17800] EXT4-fs (loop4): free_blocks=2415919104 [ 146.537135][T17800] EXT4-fs (loop4): dirty_blocks=1840 [ 146.542468][T17800] EXT4-fs (loop4): Block reservation details [ 146.548595][T17800] EXT4-fs (loop4): i_reserved_data_blocks=115 [ 146.563952][T17808] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2398'. [ 146.581500][T17808] chnl_net:caif_netlink_parms(): no params data found [ 146.595654][ T51] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 146.657953][T11520] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 24 with max blocks 2 with error 28 [ 146.794744][T17817] netlink: 'syz.2.2400': attribute type 1 has an invalid length. [ 146.808734][T17817] 8021q: adding VLAN 0 to HW filter on device bond11 [ 146.818263][T17817] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5123 sclass=netlink_route_socket pid=17817 comm=syz.2.2400 [ 146.832770][T17817] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2400'. [ 146.841924][T17817] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2400'. [ 146.888999][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 147.012850][T17933] loop0: detected capacity change from 0 to 1024 [ 147.033479][T17933] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 147.058173][T17933] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 49 with max blocks 1 with error 28 [ 147.070501][T17933] EXT4-fs (loop0): This should not happen!! Data will be lost [ 147.070501][T17933] [ 147.080218][T17933] EXT4-fs (loop0): Total free blocks count 0 [ 147.086252][T17933] EXT4-fs (loop0): Free/Dirty block details [ 147.092223][T17933] EXT4-fs (loop0): free_blocks=0 [ 147.092237][T17933] EXT4-fs (loop0): dirty_blocks=0 [ 147.102379][T17943] FAULT_INJECTION: forcing a failure. [ 147.102379][T17943] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 147.102407][T17943] CPU: 0 UID: 0 PID: 17943 Comm: syz.1.2411 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT(voluntary) [ 147.102435][T17943] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 147.102449][T17943] Call Trace: [ 147.102456][T17943] [ 147.102463][T17943] __dump_stack+0x1d/0x30 [ 147.102541][T17943] dump_stack_lvl+0xe8/0x140 [ 147.102568][T17943] dump_stack+0x15/0x1b [ 147.102589][T17943] should_fail_ex+0x265/0x280 [ 147.102628][T17943] should_fail+0xb/0x20 [ 147.102714][T17943] should_fail_usercopy+0x1a/0x20 [ 147.102754][T17943] _copy_to_user+0x20/0xa0 [ 147.102778][T17943] simple_read_from_buffer+0xb5/0x130 [ 147.102818][T17943] proc_fail_nth_read+0x100/0x140 [ 147.102907][T17943] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 147.102948][T17943] vfs_read+0x19d/0x6f0 [ 147.102983][T17943] ? __rcu_read_unlock+0x4f/0x70 [ 147.103044][T17943] ? __fget_files+0x184/0x1c0 [ 147.103073][T17943] ksys_read+0xda/0x1a0 [ 147.103114][T17943] __x64_sys_read+0x40/0x50 [ 147.103224][T17943] x64_sys_call+0x2d77/0x2fb0 [ 147.103252][T17943] do_syscall_64+0xd2/0x200 [ 147.103368][T17943] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 147.103401][T17943] ? clear_bhb_loop+0x40/0x90 [ 147.103447][T17943] ? clear_bhb_loop+0x40/0x90 [ 147.103474][T17943] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.103576][T17943] RIP: 0033:0x7fd52812d33c [ 147.103596][T17943] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 147.103617][T17943] RSP: 002b:00007fd526797030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 147.103640][T17943] RAX: ffffffffffffffda RBX: 00007fd528355fa0 RCX: 00007fd52812d33c [ 147.103656][T17943] RDX: 000000000000000f RSI: 00007fd5267970a0 RDI: 0000000000000003 [ 147.103671][T17943] RBP: 00007fd526797090 R08: 0000000000000000 R09: 0000000000000000 [ 147.103685][T17943] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 147.103748][T17943] R13: 0000000000000000 R14: 00007fd528355fa0 R15: 00007fff97f2c5e8 [ 147.103773][T17943] [ 147.165398][T17953] loop1: detected capacity change from 0 to 512 [ 147.169981][T17933] EXT4-fs (loop0): Block reservation details [ 147.169997][T17933] EXT4-fs (loop0): i_reserved_data_blocks=0 [ 147.198529][T17953] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.2413: bg 0: block 5: invalid block bitmap [ 147.352131][T17953] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 147.362051][T17953] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.2413: invalid indirect mapped block 3 (level 2) [ 147.376549][T17953] EXT4-fs (loop1): 2 truncates cleaned up [ 147.391525][T17953] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 147.406608][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.430512][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.471667][T17959] netlink: 'syz.3.2414': attribute type 1 has an invalid length. [ 147.479773][T17970] loop1: detected capacity change from 0 to 512 [ 147.489504][T17959] 8021q: adding VLAN 0 to HW filter on device bond11 [ 147.503110][T17970] EXT4-fs error (device loop1): ext4_read_inode_bitmap:139: comm syz.1.2416: Invalid inode bitmap blk 4 in block_group 0 [ 147.518731][T17959] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5123 sclass=netlink_route_socket pid=17959 comm=syz.3.2414 [ 147.537341][T17959] vlan2: entered allmulticast mode [ 147.542562][T17959] bond11: entered allmulticast mode [ 147.546296][T17970] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 147.564402][T17970] netlink: 108 bytes leftover after parsing attributes in process `syz.1.2416'. [ 147.582002][T17970] netlink: 'syz.1.2416': attribute type 4 has an invalid length. [ 147.595529][T17970] netlink: 'syz.1.2416': attribute type 4 has an invalid length. [ 147.605148][T17970] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 147.790293][T18059] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2422'. [ 147.830010][T18059] bridge0: port 3(macvlan2) entered blocking state [ 147.836781][T18059] bridge0: port 3(macvlan2) entered disabled state [ 147.845289][T18059] macvlan2: entered allmulticast mode [ 147.850697][T18059] bridge0: entered allmulticast mode [ 147.860168][T18059] macvlan2: left allmulticast mode [ 147.865473][T18059] bridge0: left allmulticast mode [ 147.932048][T18190] loop0: detected capacity change from 0 to 1024 [ 147.948614][T18190] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 147.963047][T18193] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2428'. [ 147.974909][T18182] loop2: detected capacity change from 0 to 8192 [ 148.015002][T18213] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2430'. [ 148.025449][T18193] loop1: detected capacity change from 0 to 512 [ 148.037111][T18182] loop2: p1 p2[DM] p4 [ 148.041315][T18182] loop2: p1 size 196608 extends beyond EOD, truncated [ 148.055150][T18182] loop2: p2 start 4292936063 is beyond EOD, truncated [ 148.061990][T18182] loop2: p4 size 50331648 extends beyond EOD, truncated [ 148.083389][T18193] ext4 filesystem being mounted at /520/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 148.104268][T18182] blktrace: Concurrent blktraces are not allowed on loop2p1 [ 148.158714][T18193] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #2: comm syz.1.2428: corrupted inode contents [ 148.243627][T18325] loop4: detected capacity change from 0 to 512 [ 148.252542][T18334] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2428'. [ 148.272091][T18193] EXT4-fs error (device loop1): ext4_dirty_inode:6459: inode #2: comm syz.1.2428: mark_inode_dirty error [ 148.281557][T18325] EXT4-fs error (device loop4): ext4_read_inode_bitmap:139: comm syz.4.2434: Invalid inode bitmap blk 4 in block_group 0 [ 148.301548][T18193] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #2: comm syz.1.2428: corrupted inode contents [ 148.313697][ T3500] udevd[3500]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 148.337775][T18325] netlink: 108 bytes leftover after parsing attributes in process `syz.4.2434'. [ 148.342042][T18339] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 148.347399][T18193] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #2: comm syz.1.2428: mark_inode_dirty error [ 148.376867][T18342] loop2: detected capacity change from 0 to 512 [ 148.403231][ T3400] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 148.417809][T18350] loop4: detected capacity change from 0 to 512 [ 148.425917][T18342] EXT4-fs error (device loop2): ext4_read_inode_bitmap:139: comm syz.2.2436: Invalid inode bitmap blk 4 in block_group 0 [ 148.448283][T18350] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.2437: bg 0: block 5: invalid block bitmap [ 148.469148][T18342] netlink: 'syz.2.2436': attribute type 4 has an invalid length. [ 148.479910][T18342] netlink: 'syz.2.2436': attribute type 4 has an invalid length. [ 148.559207][T18350] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 148.575215][T18350] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.2437: invalid indirect mapped block 3 (level 2) [ 148.591278][T18350] EXT4-fs (loop4): 2 truncates cleaned up [ 148.698878][T18378] wireguard0: entered promiscuous mode [ 148.704499][T18378] wireguard0: entered allmulticast mode [ 149.373596][T18507] FAULT_INJECTION: forcing a failure. [ 149.373596][T18507] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 149.386758][T18507] CPU: 0 UID: 0 PID: 18507 Comm: syz.3.2448 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT(voluntary) [ 149.386812][T18507] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 149.386825][T18507] Call Trace: [ 149.386831][T18507] [ 149.386839][T18507] __dump_stack+0x1d/0x30 [ 149.386941][T18507] dump_stack_lvl+0xe8/0x140 [ 149.386964][T18507] dump_stack+0x15/0x1b [ 149.386979][T18507] should_fail_ex+0x265/0x280 [ 149.387054][T18507] should_fail+0xb/0x20 [ 149.387086][T18507] should_fail_usercopy+0x1a/0x20 [ 149.387142][T18507] _copy_from_user+0x1c/0xb0 [ 149.387162][T18507] memdup_user+0x5e/0xd0 [ 149.387188][T18507] strndup_user+0x68/0xb0 [ 149.387206][T18507] __se_sys_mount+0x4d/0x2e0 [ 149.387236][T18507] ? restore_fpregs_from_fpstate+0x61/0x120 [ 149.387264][T18507] __x64_sys_mount+0x67/0x80 [ 149.387325][T18507] x64_sys_call+0xd36/0x2fb0 [ 149.387340][T18507] do_syscall_64+0xd2/0x200 [ 149.387363][T18507] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 149.387432][T18507] ? clear_bhb_loop+0x40/0x90 [ 149.387447][T18507] ? clear_bhb_loop+0x40/0x90 [ 149.387463][T18507] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.387478][T18507] RIP: 0033:0x7f58aac3e929 [ 149.387489][T18507] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 149.387518][T18507] RSP: 002b:00007f58a92a7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 149.387600][T18507] RAX: ffffffffffffffda RBX: 00007f58aae65fa0 RCX: 00007f58aac3e929 [ 149.387609][T18507] RDX: 0000200000000280 RSI: 0000200000000300 RDI: 0000000000000000 [ 149.387662][T18507] RBP: 00007f58a92a7090 R08: 0000200000000180 R09: 0000000000000000 [ 149.387671][T18507] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 149.387680][T18507] R13: 0000000000000000 R14: 00007f58aae65fa0 R15: 00007ffee806b858 [ 149.387697][T18507] [ 149.649819][T18586] loop3: detected capacity change from 0 to 512 [ 149.784501][T18626] bridge0: port 3(macvlan2) entered blocking state [ 149.791153][T18626] bridge0: port 3(macvlan2) entered disabled state [ 149.884871][T18586] ext4 filesystem being mounted at /441/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 149.922724][T18626] macvlan2: entered allmulticast mode [ 149.928217][T18626] bridge0: entered allmulticast mode [ 149.947200][T18632] loop1: detected capacity change from 0 to 1024 [ 150.035426][T18632] EXT4-fs: Ignoring removed nobh option [ 150.041027][T18632] EXT4-fs: Ignoring removed bh option [ 150.060802][T18586] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #2: comm syz.3.2449: corrupted inode contents [ 150.086211][T18626] macvlan2: left allmulticast mode [ 150.091375][T18626] bridge0: left allmulticast mode [ 150.154835][T18642] __nla_validate_parse: 4 callbacks suppressed [ 150.154857][T18642] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2449'. [ 150.171483][T18586] EXT4-fs error (device loop3): ext4_dirty_inode:6459: inode #2: comm syz.3.2449: mark_inode_dirty error [ 150.183852][T18586] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #2: comm syz.3.2449: corrupted inode contents [ 150.197020][T18632] EXT4-fs (loop1): shut down requested (0) [ 150.202923][T18586] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #2: comm syz.3.2449: mark_inode_dirty error [ 150.307785][T18657] loop2: detected capacity change from 0 to 1024 [ 150.315407][T18657] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 150.349706][T18655] loop0: detected capacity change from 0 to 1024 [ 150.371288][T18655] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 150.377675][T18678] loop1: detected capacity change from 0 to 512 [ 150.481385][T18678] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.2459: bg 0: block 5: invalid block bitmap [ 150.494513][T18678] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 150.503532][T18678] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.2459: invalid indirect mapped block 3 (level 2) [ 150.516917][T18678] EXT4-fs (loop1): 2 truncates cleaned up [ 150.697039][T18815] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 150.714989][T18815] FAULT_INJECTION: forcing a failure. [ 150.714989][T18815] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 150.728148][T18815] CPU: 1 UID: 0 PID: 18815 Comm: syz.2.2466 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT(voluntary) [ 150.728221][T18815] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 150.728251][T18815] Call Trace: [ 150.728258][T18815] [ 150.728266][T18815] __dump_stack+0x1d/0x30 [ 150.728351][T18815] dump_stack_lvl+0xe8/0x140 [ 150.728380][T18815] dump_stack+0x15/0x1b [ 150.728396][T18815] should_fail_ex+0x265/0x280 [ 150.728483][T18815] should_fail+0xb/0x20 [ 150.728504][T18815] should_fail_usercopy+0x1a/0x20 [ 150.728602][T18815] _copy_to_user+0x20/0xa0 [ 150.728624][T18815] simple_read_from_buffer+0xb5/0x130 [ 150.728674][T18815] proc_fail_nth_read+0x100/0x140 [ 150.728713][T18815] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 150.728747][T18815] vfs_read+0x19d/0x6f0 [ 150.728778][T18815] ? __rcu_read_unlock+0x4f/0x70 [ 150.728797][T18815] ? __fget_files+0x184/0x1c0 [ 150.728869][T18815] ksys_read+0xda/0x1a0 [ 150.728896][T18815] __x64_sys_read+0x40/0x50 [ 150.728972][T18815] x64_sys_call+0x2d77/0x2fb0 [ 150.728992][T18815] do_syscall_64+0xd2/0x200 [ 150.729019][T18815] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 150.729125][T18815] ? clear_bhb_loop+0x40/0x90 [ 150.729148][T18815] ? clear_bhb_loop+0x40/0x90 [ 150.729188][T18815] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.729257][T18815] RIP: 0033:0x7f78b3c1d33c [ 150.729299][T18815] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 150.729319][T18815] RSP: 002b:00007f78b2287030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 150.729340][T18815] RAX: ffffffffffffffda RBX: 00007f78b3e45fa0 RCX: 00007f78b3c1d33c [ 150.729426][T18815] RDX: 000000000000000f RSI: 00007f78b22870a0 RDI: 000000000000000c [ 150.729437][T18815] RBP: 00007f78b2287090 R08: 0000000000000000 R09: 0000000000000010 [ 150.729451][T18815] R10: 0000000020000fad R11: 0000000000000246 R12: 0000000000000001 [ 150.729465][T18815] R13: 0000000000000000 R14: 00007f78b3e45fa0 R15: 00007fff80fcae08 [ 150.729490][T18815] [ 150.993040][T18819] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2467'. [ 151.047785][T18828] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.052675][ T29] kauditd_printk_skb: 413 callbacks suppressed [ 151.052735][ T29] audit: type=1400 audit(1751861982.596:10134): avc: denied { create } for pid=18827 comm="syz.2.2469" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 151.083777][ T29] audit: type=1400 audit(1751861982.596:10135): avc: denied { bind } for pid=18827 comm="syz.2.2469" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 151.098173][T18834] netlink: 'syz.2.2469': attribute type 10 has an invalid length. [ 151.104208][ T29] audit: type=1326 audit(1751861982.596:10136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18827 comm="syz.2.2469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78b3c1e929 code=0x7ffc0000 [ 151.104242][ T29] audit: type=1326 audit(1751861982.596:10137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18827 comm="syz.2.2469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f78b3c1e929 code=0x7ffc0000 [ 151.112210][T18834] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2469'. [ 151.135590][ T29] audit: type=1400 audit(1751861982.596:10138): avc: denied { setopt } for pid=18827 comm="syz.2.2469" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 151.160796][T18835] netlink: 'syz.0.2470': attribute type 1 has an invalid length. [ 151.168047][ T29] audit: type=1326 audit(1751861982.596:10139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18827 comm="syz.2.2469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78b3c1e929 code=0x7ffc0000 [ 151.220009][ T29] audit: type=1326 audit(1751861982.596:10140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18827 comm="syz.2.2469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78b3c1e929 code=0x7ffc0000 [ 151.243664][ T29] audit: type=1326 audit(1751861982.596:10141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18827 comm="syz.2.2469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f78b3c1e929 code=0x7ffc0000 [ 151.267181][ T29] audit: type=1326 audit(1751861982.596:10142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18827 comm="syz.2.2469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78b3c1e929 code=0x7ffc0000 [ 151.290789][ T29] audit: type=1326 audit(1751861982.596:10143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18827 comm="syz.2.2469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f78b3c207bc code=0x7ffc0000 [ 151.317259][T18835] workqueue: Failed to create a rescuer kthread for wq "bond15": -EINTR [ 151.318963][T18834] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 151.354702][T18941] loop0: detected capacity change from 0 to 2048 [ 151.376734][T18828] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.439316][T18958] loop4: detected capacity change from 0 to 512 [ 151.450691][T18958] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.2474: bg 0: block 5: invalid block bitmap [ 151.451251][T18954] netlink: 'syz.1.2473': attribute type 1 has an invalid length. [ 151.472535][T18958] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 151.472668][ T3400] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 151.490919][T18828] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.500961][T18958] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.2474: invalid indirect mapped block 3 (level 2) [ 151.501659][T18961] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5123 sclass=netlink_route_socket pid=18961 comm=syz.1.2473 [ 151.531603][T18958] EXT4-fs (loop4): 2 truncates cleaned up [ 151.559974][T18954] 8021q: adding VLAN 0 to HW filter on device bond11 [ 151.575755][ T409] ================================================================== [ 151.583883][ T409] BUG: KCSAN: data-race in copy_process / free_pid [ 151.590396][ T409] [ 151.592739][ T409] read-write to 0xffffffff86860860 of 4 bytes by task 19073 on cpu 1: [ 151.600894][ T409] free_pid+0x77/0x180 [ 151.604962][ T409] free_pids+0x7a/0xb0 [ 151.609028][ T409] release_task+0x9a9/0xb60 [ 151.613644][ T409] do_exit+0xd81/0x1590 [ 151.617809][ T409] call_usermodehelper_exec_async+0x247/0x250 [ 151.623887][ T409] ret_from_fork+0xda/0x150 [ 151.628394][ T409] ret_from_fork_asm+0x1a/0x30 [ 151.633218][ T409] [ 151.635587][ T409] read to 0xffffffff86860860 of 4 bytes by task 409 on cpu 0: [ 151.643042][ T409] copy_process+0x1790/0x1f90 [ 151.647727][ T409] kernel_clone+0x16c/0x5b0 [ 151.652239][ T409] user_mode_thread+0x7d/0xb0 [ 151.656922][ T409] call_usermodehelper_exec_work+0x41/0x160 [ 151.662828][ T409] process_scheduled_works+0x4ce/0x9d0 [ 151.668334][ T409] worker_thread+0x582/0x770 [ 151.672942][ T409] kthread+0x486/0x510 [ 151.677021][ T409] ret_from_fork+0xda/0x150 [ 151.681610][ T409] ret_from_fork_asm+0x1a/0x30 [ 151.686376][ T409] [ 151.688696][ T409] value changed: 0x80000212 -> 0x80000211 [ 151.694409][ T409] [ 151.696732][ T409] Reported by Kernel Concurrency Sanitizer on: [ 151.702879][ T409] CPU: 0 UID: 0 PID: 409 Comm: kworker/u8:5 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT(voluntary) [ 151.713640][ T409] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 151.723699][ T409] Workqueue: events_unbound call_usermodehelper_exec_work [ 151.730923][ T409] ================================================================== [ 151.740261][T19076] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2473'. [ 151.759710][T18828] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.791645][T19086] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2475'. [ 151.818891][T18956] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 151.833787][T18956] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 151.846384][T18956] EXT4-fs (loop0): This should not happen!! Data will be lost [ 151.846384][T18956] [ 151.856120][T18956] EXT4-fs (loop0): Total free blocks count 0 [ 151.862147][T18956] EXT4-fs (loop0): Free/Dirty block details [ 151.868098][T18956] EXT4-fs (loop0): free_blocks=2415919104 [ 151.873853][T18956] EXT4-fs (loop0): dirty_blocks=5424 [ 151.879151][T18956] EXT4-fs (loop0): Block reservation details [ 151.885244][T18956] EXT4-fs (loop0): i_reserved_data_blocks=339 [ 151.898067][T18828] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.909760][T18828] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.922058][T18828] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.922724][ T51] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 151.934529][T18828] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.943045][ T51] EXT4-fs (loop0): This should not happen!! Data will be lost [ 151.943045][ T51] [ 152.641642][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 152.650014][ T409] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 154.481524][ T3400] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 157.533257][ T3400] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 157.761958][ T3456] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 158.411692][ T409] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 160.801602][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog