last executing test programs: 7.318697005s ago: executing program 2 (id=3832): r0 = socket$netlink(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r0) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r2, 0x1, 0x70bd26, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) 4.118545965s ago: executing program 2 (id=3856): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000040000000500000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000c00009616009d000000000000000040000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) futex(&(0x7f000000cffc)=0x1, 0xd, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0xd, 0x0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11}, &(0x7f0000000000)=0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x800) lsm_get_self_attr(0x64, &(0x7f0000000040), &(0x7f0000000000)=0x101, 0x0) lsm_get_self_attr(0x64, 0x0, &(0x7f0000000180), 0x1) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$TOKEN_CREATE(0x24, &(0x7f0000000240)={0x0, r3}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="0b00000007000000010001004900000081000500", @ANYRES32, @ANYRESHEX=r0, @ANYRES32=0x0, @ANYRES16=r1, @ANYRESHEX, @ANYRES64=r2, @ANYBLOB="259e", @ANYRESDEC=r4, @ANYBLOB="6e816bbbe6b767cb37dbeb49c580f7eb17021baa420e663aabcaedcfa70ed46b6a4ff71d7b52c3281e24d17b4342116295983d954ae60c01921361e553ab9227c8c36c5d7afe46f5ea1f7c2e5d31bbc277e5f061b6a8cc030a3654fc24d6b6c58d4ed4314345209d776102fb9fafb65c4e2eadd3c551e88e04f8f6f2a296b7c2a6ffd34f40a453"], 0x50) r5 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r5, &(0x7f0000006500)=[{{&(0x7f0000000480)={0xa, 0x4e22, 0x1000, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1}, 0x1c, 0x0, 0x0, &(0x7f00000020c0)=ANY=[@ANYBLOB], 0x30}}], 0x1, 0x68004) getxattr(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="6f7332e7b9aca2229e32d1892e73656375726974793e73656c696e757800"], 0x0, 0x0) 3.449608886s ago: executing program 0 (id=3861): creat(&(0x7f0000000200)='./file0\x00', 0x2c) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000005000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x37, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8d, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) openat$selinux_relabel(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8041, 0x0) socket(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r5, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r7}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 3.420318106s ago: executing program 0 (id=3863): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_open_dev$loop(&(0x7f0000000100), 0x5, 0x80000) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x30, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) getpid() r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) socket$packet(0x11, 0x3, 0x300) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r3, 0x40505412, &(0x7f00000000c0)={0x7, 0x9dc5, 0x0, 0x0, 0xf}) read(r3, &(0x7f00000002c0)=""/113, 0x71) 3.218802899s ago: executing program 2 (id=3866): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) futex(&(0x7f0000000000), 0x5, 0x0, 0x0, 0x0, 0xc3000000) r2 = socket(0x10, 0x3, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x40800}, 0x400c0b0) r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) writev(r3, 0x0, 0x0) r4 = openat$random(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$RNDADDENTROPY(r4, 0x541b, 0x0) r5 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'bond0\x00'}) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, 0x0, 0x0) lseek(r5, 0x2b, 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) syz_emit_ethernet(0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'sit0\x00'}) bpf$MAP_CREATE(0x0, &(0x7f0000000b40)=@bloom_filter={0x1e, 0x10000, 0x0, 0xfffffff9, 0xe0, r3, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x0, 0xb, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018e878c78689a5e3a67dafbdfae7b2d7f1", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa2000000000000070200"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0xc08, 0x3, 0x468, 0x0, 0x5002004a, 0xb, 0x310, 0xea13, 0x3d0, 0x3c8, 0x3c8, 0x3d0, 0x3c8, 0x3, 0x0, {[{{@ip={@multicast2, @private=0xa010101, 0xff, 0xffffffff, 'bridge0\x00', 'vcan0\x00', {}, {0xff}, 0x5c, 0x2, 0x2}, 0x0, 0x2c8, 0x310, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x2, 0x0, [{}, {0x16}, {}, {}, {}, {0x0, 0x0, 0x5e}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x6}, {}, {}, {0x0, 0x8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x40}]}}, @common=@inet=@socket3={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x4c8) 3.21569507s ago: executing program 2 (id=3867): r0 = geteuid() r1 = syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8042, &(0x7f0000000ac0)={[{@grpjquota}, {@barrier}, {@dax_never}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0xdda}}], [{@permit_directio}, {@euid_eq={'euid', 0x3d, r0}}, {@fowner_eq={'fowner', 0x3d, r0}}, {@smackfstransmute={'smackfstransmute', 0x3d, '@/\\:^+^'}}, {@smackfsroot={'smackfsroot', 0x3d, '^@\x8e\xdb\x19('}}, {@smackfsfloor={'smackfsfloor', 0x3d, ',[[$}*:'}}, {@appraise_type}]}, 0x3, 0x4f3, &(0x7f00000012c0)="$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") connect$inet(0xffffffffffffffff, &(0x7f0000000380)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x3e}}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x1010040, &(0x7f00000003c0)={[{@noquota}, {@debug}, {@jqfmt_vfsv0}, {@noauto_da_alloc}, {@resgid}]}, 0x3, 0x4d7, &(0x7f0000001480)="$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") link(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='.\x02\x00') ioctl$SIOCPNENABLEPIPE(0xffffffffffffffff, 0x89ed, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000cc0)={&(0x7f0000000780)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000000340)=[{&(0x7f0000000a00)="b77831ba5991c21ae9214bc4bf82066a336c77587a2421f98c794dd7f4553a974218a0dc6f61165e7f086c730b688c82eaf04f18fb92751740bb2aa1514002ce8427d1b24fb57335e8a9949c9c97401b3c3b510fe9969f8adfc3cf572c1d131555041b984db2263c22e60e34f27a8c1bd6e660ce9b1ebe81c7283e", 0x7b}], 0x1, &(0x7f0000000c00)=[@rights={{0x10}}, @rights={{0x18, 0x1, 0x1, [r4, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r0}}}, @rights={{0x28, 0x1, 0x1, [r2, 0xffffffffffffffff, r4, r5, r1, 0xffffffffffffffff]}}], 0x70, 0x40801}, 0x20008980) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) timer_create(0xfffffffffffffffc, &(0x7f0000000140)={0x0, 0x7}, &(0x7f0000001400)=0x0) statx(r1, &(0x7f0000000100)='.\x02\x00', 0x1000, 0x10, &(0x7f0000000900)) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32=r6, @ANYRESOCT=0x0, @ANYRES32=r6], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000000000000000000001811000040be52918eee224d56fb21976bddc07f3b0965b556ab87d61926d77a851a9817e9af0349bec29ad84dd3f638efbba1d4b92caec5c2f9f740b8657154729b0d8d9d1d34200d6bd286142965f592248deeb5f5d3fbcf1f94b944244e3f2b0c38adcbf7083be2e547c7e931cea1a1c0e97387f755ae5894e77d538b96da2b6495b1360a94b6a3a4b1229131932987c39e9963641d8a97f6b67756cfb54ecbd49bb4c5d1caa6add97af9c890d33d", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010076657468305f746f5f687372000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c0003801400010076657468305f746f5f687372000000001400010076657468315f766c616e"], 0xfc}}, 0x20000004) ioprio_set$uid(0x3, 0x0, 0x0) sched_setattr(0x0, &(0x7f00000002c0)={0x38, 0x5, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffffc}, 0x0) ioprio_get$pid(0x2, 0x0) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, &(0x7f00000000c0)) dup2(0xffffffffffffffff, 0xffffffffffffffff) close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b4050000000000007112920000000000bf200000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0xa, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x2, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 2.979315273s ago: executing program 2 (id=3868): r0 = socket$netlink(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r0) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r2, 0x1, 0x70bd26, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) 2.778815406s ago: executing program 3 (id=3871): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8e7, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0xfffffffffffffe0f) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 2.774769727s ago: executing program 3 (id=3872): ioperm(0x4, 0x1, 0x4000000000000020) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$tty1(0xc, 0x4, 0x3) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='sched_switch\x00', r1}, 0x18) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f00000006c0), 0x1, 0x513, &(0x7f0000000c40)="$eJzs3W1rZFcdAPD/vcmk2d3UTFVkLdgWW9ktujNJY9so0lYQfVVQ6/s1JpMQMsmEzKRuQtEsfgBBRAU/gG8EP4Ag+xFEWND3oqKI7upL3St35kbzMJMMySSzTn4/OJlz7sP5n3PJ3LkPh3sDuLJeioh3ImIsIl6NiOlielqk2OukfLnHjz5YzFMSWfbe35JIimn7deXl8Yi4Uaw2GRFf/0rEt5LjcZs7u2sL9XptqyhXW+ub1ebO7p3V9YWV2kptY25u9o35N+dfn5/JCufqZzki3vrSn370/Z99+a1ffebbv7/7l9vfyZv1hY912h0Ri+cK0EOn7lJ7W+zLt9HWRQQbkrw/pbFhtwIAgH7kx/gfjohPto//p2OsfTQHAAAAjJLs7an4VxKRAQAAACMrjYipSNJKMRZgKtK0UumM4f1oXE/rjWbr08uN7Y2lfF5EOUrp8mq9NlOMFS5HKcnLs8UY2/3ya0fKcxHxXET8cPpau1xZbNSXhn3xAwAAAK6IGy8ePv//53TazgMAAAAjptyzAAAAAIwKp/wAAAAw+pz/AwAAwEj76rvv5inbf4/30vs722uN9+8s1ZprlfXtxcpiY2uzstJorLSf2bd+Wn31RmPzs7Gxfa/aqjVb1ebO7t31xvZG6+7qoVdgAwAAAJfouRcf/C6JiL3PX2unKJ4DCHDIH4fdAGCQxobdAGBoxofdAGBoSqcuYQ8Boy45Zf7xwTuda4Xx64tpDwAAMHi3Pn78/v9EMe/0awPA/zNjfQDg6nF3D66u0llHAN4cdEuAYflQ5+OZXvN7Pryjj/v/nWsMWXamhgEAAAMz1U5JWimO06ciTSuViGfbrwUoJcur9dpMcX7w2+nSM3l5tr1mcuqYYQAAAAAAAAAAAAAAAAAAAAAAAACgI8uSyAAAAICRFpH+OWk/zT/i1vQrU4evDhx569dP3/vxvYVWa2s2YiL5+3Q+aSIiWj8ppr+WeSUAAAAAPAU65+nF5+ywWwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAqHn86IPF/XSZcf/6xYgod4s/HpPtz8koRcT1fyQxfmC9JCLGBhB/735E3OwWP4knWZaVi1Z0i3/tguOX25ume/w0Im4MID5cZQ/y/c873b5/abzU/uz+/Rsv0nn13v+l/93/jfXY/zx7pNzL8w9/Ue0Z/37E8+Pd9z/78ZNO/EMh8sLLffbxm9/Y3e0640CV3eIfjFVtrW9Wmzu7d1bXF1ZqK7WNubnZN+bfnH99fqa6vFqvFX+7hvnBJ3755KT+X+8Rv3y4/8e2/yt99T6Lfz+89+gjnUKpW/zbL3f//b3ZI35a/PZ9qsjn82/t5/c6+YNe+PlvXjip/0s9+j95Sv9v99X/+NyrX/veH7rOObY1AIDL0NzZXVuo12tbJ2Qm+1jmkjNvPx3NGGAmno5mDCuTfbfz/3i+es65+rFMdp7Vx2MAzZg49j0di7NWmETs5XX1+Q8JAACMmP8d9J90BwkAAAAAAAAAAAAAAAAAAAC4SGd8LNlkRPS98NGYe8PpKgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAif4TAAD//4RX0Xo=") r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) ioctl$FITRIM(r3, 0x40086604, 0x0) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="44000000190a01", @ANYRES16=r1], 0x44}, 0x1, 0x0, 0x0, 0xc4000}, 0x40000040) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xc, 0xc, &(0x7f0000000280)=ANY=[@ANYRES64=r2], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x20880, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) r4 = open(&(0x7f0000000480)='.\x00', 0x0, 0x1c0) lsetxattr$security_selinux(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140), &(0x7f0000000180)='system_u:object_r:net_conf_t:s0\x00', 0x20, 0x2) ioctl$FS_IOC_GETFSMAP(r4, 0xc0c0583b, &(0x7f0000000840)=ANY=[@ANYBLOB="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"]) bpf$PROG_LOAD(0x5, 0x0, 0x0) close(0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) perf_event_open(&(0x7f0000000200)={0x5, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0xf, 0x48960, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x110081, 0x2000000000000000, 0x4}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180200000000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000640)='fib6_table_lookup\x00', r6}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd"], 0xfdef) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000800)='fib6_table_lookup\x00', r7}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) 2.56001744s ago: executing program 3 (id=3874): creat(&(0x7f0000000200)='./file0\x00', 0x2c) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000005000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0xd) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x37, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8d, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) openat$selinux_relabel(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8041, 0x0) socket(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r5, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r7}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 2.486833421s ago: executing program 3 (id=3875): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() syz_open_dev$usbfs(0x0, 0x76, 0x109301) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000200)=ANY=[], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) read(r4, &(0x7f0000000080)=""/1, 0x1) close(r4) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100), 0x34) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) socket$tipc(0x1e, 0x5, 0x0) 2.368073743s ago: executing program 0 (id=3876): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000040000000500000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000c00009616009d000000000000000040000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) futex(&(0x7f000000cffc)=0x1, 0xd, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0xd, 0x0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11}, &(0x7f0000000000)=0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x800) lsm_get_self_attr(0x64, &(0x7f0000000040), &(0x7f0000000000)=0x101, 0x0) lsm_get_self_attr(0x64, 0x0, &(0x7f0000000180), 0x1) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$TOKEN_CREATE(0x24, &(0x7f0000000240)={0x0, r3}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="0b00000007000000010001004900000081000500", @ANYRES32, @ANYRESHEX=r0, @ANYRES32=0x0, @ANYRES16=r1, @ANYRESHEX, @ANYRES64=r2, @ANYBLOB="259e", @ANYRESDEC=r4, @ANYBLOB="6e816bbbe6b767cb37dbeb49c580f7eb17021baa420e663aabcaedcfa70ed46b6a4ff71d7b52c3281e24d17b4342116295983d954ae60c01921361e553ab9227c8c36c5d7afe46f5ea1f7c2e5d31bbc277e5f061b6a8cc030a3654fc24d6b6c58d4ed4314345209d776102fb9fafb65c4e2eadd3c551e88e04f8f6f2a296b7c2a6ffd34f40a453"], 0x50) r5 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r5, &(0x7f0000006500)=[{{&(0x7f0000000480)={0xa, 0x4e22, 0x1000, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1}, 0x1c, 0x0, 0x0, &(0x7f00000020c0)=ANY=[@ANYBLOB], 0x30}}], 0x1, 0x68004) getxattr(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="6f7332e7b9aca2229e32d1892e73656375726974793e73656c696e757800"], 0x0, 0x0) 1.91140525s ago: executing program 4 (id=3880): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000080)='sched_switch\x00'}, 0x18) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000300)={0x3, &(0x7f00000001c0)=[{0x7, 0x26, 0x3f, 0x8}, {0xf20f, 0x4, 0x5, 0x9}, {0x5, 0xfc, 0x9, 0x6}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x2, @perf_config_ext={0x3, 0xffffffff}, 0x1100, 0x5dd8, 0x3a65, 0x5, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x1, 0xffffffffffffffff, 0x8) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) writev(r2, &(0x7f00000006c0)=[{&(0x7f0000000080)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e9001c2f8db0049d90491ceaebfd26d4eef23248000000f858dbb8a19052343f", 0x35}, {&(0x7f0000000100)="051a00000e8000", 0x7}], 0x2) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="440000001000090600"/20, @ANYRES32=0x0, @ANYBLOB="adffa888000000001c00128009000100626f6e64000000000c000280050001000600000008000a0079"], 0x44}}, 0x0) r5 = io_uring_setup(0x3eae, &(0x7f0000000080)={0x0, 0x6d33, 0x1000, 0x0, 0x4000000}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x201080, &(0x7f0000000300)={[{@minixdf}, {}, {@barrier_val={'barrier', 0x3d, 0x1ff}}, {@commit={'commit', 0x3d, 0x5}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@noblock_validity}, {@nomblk_io_submit}]}, 0x0, 0x566, &(0x7f00000015c0)="$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") lsetxattr$trusted_overlay_upper(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000180), &(0x7f00000001c0)=ANY=[], 0x361, 0x0) lsetxattr$security_ima(&(0x7f00000008c0)='./cgroup/../file0\x00', &(0x7f00000000c0), 0x0, 0x0, 0x1) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000980)=ANY=[@ANYRES8=r0, @ANYBLOB="01e2889df0c88fda451b737cd9c7a40ee63a8d9e71c872882fecd5c0741b66c85aa0fac055bb7e78b78e5a672c04893ae927b25815c6f32ff2565b428847957c23", @ANYBLOB="08000400", @ANYRES32=0x0, @ANYBLOB="087dee486077472a354d7c7e000200", @ANYRES64=r1, @ANYBLOB="7293f208", @ANYRES32=0x0, @ANYBLOB="10000000000000da8328b5d4b8611d761144e300582173d749284509b182d3d25a49a266064db0fad8f66c241bf200a9e8961349a0caccab202fab7b08b63ab34bcaee2a0be11f51a6779297996b6d62dbfdf737743e69355e006ddf368bb44d60b54e2f1bbc1cd3eec41913236b7d8bfebef4b35afba58f383dc427baaf675d055fad9fbc61b17d0eb49abbcd389200cbe6"], 0x44, 0x3) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a5c000000060a0b040000000000000000020000004b0004802c0001800b0001006e756d67656e00001c00028008000240000056af080003400000000008000140000000110900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000ac5b8b76cf4aae63cdaca69f8a69b562435fe"], 0x84}, 0x1, 0x0, 0x0, 0x40050}, 0x0) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)=ANY=[@ANYBLOB="4c000000030601010000000000000000020000050900020073797a300000000005000100010000000900020073797a3100000000050001000700000005000100070000000500010007000000"], 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x4880) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) r7 = mq_open(&(0x7f0000000740)='\x00', 0x2, 0x40, &(0x7f0000000780)={0x101, 0x7, 0x81, 0x8}) mq_timedreceive(r7, &(0x7f00000007c0)=""/21, 0x15, 0x25e, 0x0) 1.705179284s ago: executing program 4 (id=3884): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/anycast6\x00') connect$pppoe(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b040000000000000000020000000900010073797a30000000000900020073797a32000000"], 0x54}}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 1.685329964s ago: executing program 4 (id=3885): bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x12, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa40000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000100)='svcrdma_qp_error\x00', r0, 0x0, 0x6}, 0x18) openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x200, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="190000000400000008000000080000000000"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r4}, &(0x7f0000000000), &(0x7f0000000180)=r5}, 0x20) r6 = openat(0xffffffffffffff9c, 0x0, 0x441, 0x104) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x10, &(0x7f00000004c0)={[{@i_version}, {@nodiscard}, {@min_batch_time={'min_batch_time', 0x3d, 0x3ff}}]}, 0x1, 0x3f7, &(0x7f0000003080)="$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") 1.680390384s ago: executing program 3 (id=3886): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_open_dev$loop(&(0x7f0000000100), 0x5, 0x80000) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x30, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) getpid() r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) socket$packet(0x11, 0x3, 0x300) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r3, 0x40505412, &(0x7f00000000c0)={0x7, 0x9dc5, 0x0, 0x0, 0xf}) read(r3, &(0x7f00000002c0)=""/113, 0x71) 1.512868466s ago: executing program 1 (id=3888): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400f400b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x2d) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x670, 0x2e0, 0xd0, 0x2e0, 0xd0, 0xd0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x11}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@unspec=@connmark={{0x30}}, @common=@inet=@socket1={{0x28}}]}, @common=@unspec=@MARK={0x28}}, {{@uncond, 0x0, 0x120, 0x148, 0x0, {}, [@common=@frag={{0x30}}, @common=@hbh={{0x48}}]}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0x138, 0x178, 0x0, {}, [@common=@dst={{0x48}}, @common=@dst={{0x48}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6d0) 1.512089127s ago: executing program 0 (id=3889): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) futex(&(0x7f0000000000), 0x5, 0x0, 0x0, 0x0, 0xc3000000) r2 = socket(0x10, 0x3, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x40800}, 0x400c0b0) r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) writev(r3, 0x0, 0x0) r4 = openat$random(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$RNDADDENTROPY(r4, 0x541b, 0x0) r5 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'bond0\x00'}) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, 0x0, 0x0) lseek(r5, 0x2b, 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) syz_emit_ethernet(0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'sit0\x00'}) bpf$MAP_CREATE(0x0, &(0x7f0000000b40)=@bloom_filter={0x1e, 0x10000, 0x0, 0xfffffff9, 0xe0, r3, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x0, 0xb, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018e878c78689a5e3a67dafbdfae7b2d7f1", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0xc08, 0x3, 0x468, 0x0, 0x5002004a, 0xb, 0x310, 0xea13, 0x3d0, 0x3c8, 0x3c8, 0x3d0, 0x3c8, 0x3, 0x0, {[{{@ip={@multicast2, @private=0xa010101, 0xff, 0xffffffff, 'bridge0\x00', 'vcan0\x00', {}, {0xff}, 0x5c, 0x2, 0x2}, 0x0, 0x2c8, 0x310, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x2, 0x0, [{}, {0x16}, {}, {}, {}, {0x0, 0x0, 0x5e}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x6}, {}, {}, {0x0, 0x8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x40}]}}, @common=@inet=@socket3={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x4c8) 1.511580207s ago: executing program 0 (id=3890): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file2\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x360, &(0x7f0000000b00)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x105042, 0x40) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x100000b, 0x13, r2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)) 1.32425813s ago: executing program 0 (id=3891): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000001700)=0x4) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x100, 0x0) r3 = getpid() r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r1) sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r4, 0x1, 0x70bd26, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r3}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) sendmmsg$inet(r0, &(0x7f0000002a40)=[{{&(0x7f0000000380)={0x2, 0x4e21, @local}, 0x10, 0x0}}], 0x1, 0x40) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r6}, 0x10) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a99985000000040000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r9, 0x0, 0xab1}, 0x18) getsockname$packet(r8, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) 799.440018ms ago: executing program 4 (id=3892): r0 = geteuid() r1 = syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8042, &(0x7f0000000ac0)={[{@grpjquota}, {@barrier}, {@dax_never}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0xdda}}], [{@permit_directio}, {@euid_eq={'euid', 0x3d, r0}}, {@fowner_eq={'fowner', 0x3d, r0}}, {@smackfstransmute={'smackfstransmute', 0x3d, '@/\\:^+^'}}, {@smackfsroot={'smackfsroot', 0x3d, '^@\x8e\xdb\x19('}}, {@smackfsfloor={'smackfsfloor', 0x3d, ',[[$}*:'}}, {@appraise_type}]}, 0x3, 0x4f3, &(0x7f00000012c0)="$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") connect$inet(0xffffffffffffffff, &(0x7f0000000380)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x3e}}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x1010040, &(0x7f00000003c0)={[{@noquota}, {@debug}, {@jqfmt_vfsv0}, {@noauto_da_alloc}, {@resgid}]}, 0x3, 0x4d7, &(0x7f0000001480)="$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") link(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='.\x02\x00') ioctl$SIOCPNENABLEPIPE(0xffffffffffffffff, 0x89ed, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000cc0)={&(0x7f0000000780)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000000340)=[{&(0x7f0000000a00)="b77831ba5991c21ae9214bc4bf82066a336c77587a2421f98c794dd7f4553a974218a0dc6f61165e7f086c730b688c82eaf04f18fb92751740bb2aa1514002ce8427d1b24fb57335e8a9949c9c97401b3c3b510fe9969f8adfc3cf572c1d131555041b984db2263c22e60e34f27a8c1bd6e660ce9b1ebe81c7283e", 0x7b}], 0x1, &(0x7f0000000c00)=[@rights={{0x10}}, @rights={{0x18, 0x1, 0x1, [r4, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r0}}}, @rights={{0x28, 0x1, 0x1, [r2, 0xffffffffffffffff, r4, r5, r1, 0xffffffffffffffff]}}], 0x70, 0x40801}, 0x20008980) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) timer_create(0xfffffffffffffffc, &(0x7f0000000140)={0x0, 0x7}, &(0x7f0000001400)=0x0) statx(r1, &(0x7f0000000100)='.\x02\x00', 0x1000, 0x10, &(0x7f0000000900)) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32=r6, @ANYRESOCT=0x0, @ANYRES32=r6], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000000000000000000001811000040be52918eee224d56fb21976bddc07f3b0965b556ab87d61926d77a851a9817e9af0349bec29ad84dd3f638efbba1d4b92caec5c2f9f740b8657154729b0d8d9d1d34200d6bd286142965f592248deeb5f5d3fbcf1f94b944244e3f2b0c38adcbf7083be2e547c7e931cea1a1c0e97387f755ae5894e77d538b96da2b6495b1360a94b6a3a4b1229131932987c39e9963641d8a97f6b67756cfb54ecbd49bb4c5d1caa6add97af9c890d33d", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010076657468305f746f5f687372000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c0003801400010076657468305f746f5f687372000000001400010076657468315f766c616e"], 0xfc}}, 0x20000004) ioprio_set$uid(0x3, 0x0, 0x0) sched_setattr(0x0, &(0x7f00000002c0)={0x38, 0x5, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffffc}, 0x0) ioprio_get$pid(0x2, 0x0) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, &(0x7f00000000c0)) dup2(0xffffffffffffffff, 0xffffffffffffffff) close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b4050000000000007112920000000000bf200000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0xa, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x2, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 676.159539ms ago: executing program 1 (id=3893): bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000a80)='kfree\x00', r0}, 0x18) syz_clone3(&(0x7f0000000280)={0x2104080, 0x0, 0x0, 0x0, {0x14}, 0x0, 0x0, 0x0, &(0x7f0000000240)=[0xffffffffffffffff], 0x1}, 0x58) 622.48234ms ago: executing program 4 (id=3894): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8e7, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0xfffffffffffffe0f) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 605.343961ms ago: executing program 1 (id=3895): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000080)='sched_switch\x00'}, 0x18) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000300)={0x3, &(0x7f00000001c0)=[{0x7, 0x26, 0x3f, 0x8}, {0xf20f, 0x4, 0x5, 0x9}, {0x5, 0xfc, 0x9, 0x6}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x2, @perf_config_ext={0x3, 0xffffffff}, 0x1100, 0x5dd8, 0x3a65, 0x5, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x1, 0xffffffffffffffff, 0x8) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) writev(r2, &(0x7f00000006c0)=[{&(0x7f0000000080)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e9001c2f8db0049d90491ceaebfd26d4eef23248000000f858dbb8a19052343f", 0x35}, {&(0x7f0000000100)="051a00000e8000", 0x7}], 0x2) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="440000001000090600"/20, @ANYRES32=0x0, @ANYBLOB="adffa888000000001c00128009000100626f6e64000000000c000280050001000600000008000a0079"], 0x44}}, 0x0) r5 = io_uring_setup(0x3eae, &(0x7f0000000080)={0x0, 0x6d33, 0x1000, 0x0, 0x4000000}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x201080, &(0x7f0000000300)={[{@minixdf}, {}, {@barrier_val={'barrier', 0x3d, 0x1ff}}, {@commit={'commit', 0x3d, 0x5}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@noblock_validity}, {@nomblk_io_submit}]}, 0x0, 0x566, &(0x7f00000015c0)="$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") lsetxattr$trusted_overlay_upper(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000180), &(0x7f00000001c0)=ANY=[], 0x361, 0x0) lsetxattr$security_ima(&(0x7f00000008c0)='./cgroup/../file0\x00', &(0x7f00000000c0), 0x0, 0x0, 0x1) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000980)=ANY=[@ANYRES8=r0, @ANYBLOB="01e2889df0c88fda451b737cd9c7a40ee63a8d9e71c872882fecd5c0741b66c85aa0fac055bb7e78b78e5a672c04893ae927b25815c6f32ff2565b428847957c23", @ANYBLOB="08000400", @ANYRES32=0x0, @ANYBLOB="087dee486077472a354d7c7e000200", @ANYRES64=r1, @ANYBLOB="7293f208", @ANYRES32=0x0, @ANYBLOB="10000000000000da8328b5d4b8611d761144e300582173d749284509b182d3d25a49a266064db0fad8f66c241bf200a9e8961349a0caccab202fab7b08b63ab34bcaee2a0be11f51a6779297996b6d62dbfdf737743e69355e006ddf368bb44d60b54e2f1bbc1cd3eec41913236b7d8bfebef4b35afba58f383dc427baaf675d055fad9fbc61b17d0eb49abbcd389200cbe6"], 0x44, 0x3) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a5c000000060a0b040000000000000000020000004b0004802c0001800b0001006e756d67656e00001c00028008000240000056af080003400000000008000140000000110900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000ac5b8b76cf4aae63cdaca69f8a69b562435fe"], 0x84}, 0x1, 0x0, 0x0, 0x40050}, 0x0) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)=ANY=[@ANYBLOB="4c000000030601010000000000000000020000050900020073797a300000000005000100010000000900020073797a3100000000050001000700000005000100070000000500010007000000"], 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x4880) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) r7 = mq_open(&(0x7f0000000740)='\x00', 0x2, 0x40, &(0x7f0000000780)={0x101, 0x7, 0x81, 0x8}) mq_timedreceive(r7, &(0x7f00000007c0)=""/21, 0x15, 0x25e, 0x0) 542.727282ms ago: executing program 4 (id=3896): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() syz_open_dev$usbfs(0x0, 0x76, 0x109301) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000200)=ANY=[], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) read(r4, &(0x7f0000000080)=""/1, 0x1) close(r4) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100), 0x34) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) socket$tipc(0x1e, 0x5, 0x0) 542.006562ms ago: executing program 3 (id=3897): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4, 0x0, 0x100}, 0x18) bind$inet(r2, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10) sendmmsg$inet(r2, &(0x7f0000003cc0)=[{{&(0x7f0000000140)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000d40)=[@ip_retopts={{0x10}}], 0x10}}], 0x1, 0x44008004) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001e80)=@newtaction={0x48, 0x31, 0x1, 0xfffffffd, 0x25dfdbfb, {0x0, 0x0, 0x11}, [{0x34, 0x1, [@m_police={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x3, {0x1}}, {0xc}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x8800}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x2, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_MSFILTER(r7, 0x29, 0x30, &(0x7f0000000600)=ANY=[@ANYBLOB="08000000000000000a00000000000000ff010000000000000000000000000001000000000000000000000000000000000000000000000000000000f03ea900"/126], 0x5000) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4000) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1810000000000020ae200000008a00000900000000000000"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000850000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r9}, 0x10) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r10, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r10, &(0x7f0000847fff)='X', 0x34000, 0x600, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000005f80)=@newtfilter={0x90, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r8, {0x0, 0x1}, {}, {0x8}}, [@filter_kind_options=@f_flow={{0x9}, {0x58, 0x2, [@TCA_FLOW_ACT={0x54, 0x9, 0x0, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x1ff, 0x0, 0x20000001, 0x4, 0x2}, 0x1, r8}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0xff}}]}, 0x90}}, 0x0) 177.522308ms ago: executing program 1 (id=3898): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000000)=""/81, 0x2b) getdents(r0, 0xfffffffffffffffd, 0x58) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x15, 0xf, &(0x7f00000003c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x5b, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='mm_page_alloc\x00', r3}, 0x10) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r4, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="97eb000015006bcd9e", 0xeb97}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000020000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]}) rt_tgsigqueueinfo(0x0, 0x0, 0x1c, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00"/13], 0x48) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x18) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r7, &(0x7f0000000200)={0xa, 0xffff, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r7, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r7, 0x11a, 0x2, &(0x7f0000000b80)=@gcm_256={{0x304}, "0000004a650600", "af193cff4810ba5ac120d096eb00000052095b4285514ca312c52e3a08756735", '8\x00', "bc3a20b10f4ad11e"}, 0x38) close(r7) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x18) syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8052, &(0x7f00000000c0)={[{@noauto_da_alloc}, {@init_itable_val={'init_itable', 0x3d, 0x6}}, {@dioread_nolock}, {@grpquota}]}, 0x5, 0x4dd, &(0x7f0000000c40)="$eJzs3E1oXNUeAPD/nSRN+vU6r6+v77VWTa1isJi0abVdCFJRcKEgVlCXIR8ldtpIk4ItVaYgdSkF9+LSrQu36qaIK8FtXQpSKNJNW0EcuTN3PjuTNMkkY8zvB5M5536dc+655+bcc2YmgE1rOP2TVMI3I2JXRORaNxiuvN27c2Xy/p0rk1EslU7/lpR3u5vGM9lhYnsWGclF5D5O6isazF+6fHaiUJi+kMXHFs69PzZ/6fKzs0PZkpMnjx87euL58eeWX6g26aXlurv/o7kD+1599/rrk/3V5dXUGsvRLcMx3C4rZU91O7Ee29kQTvp7mBGWJb3+0+oaKLf/XdEXi1VecR1zBqy1UqlUGuy8ulhqdfWBJcCGlUSvcwD0RvUfffr8W3216whsWZvuR8/dPlV5AErLfS97RTxeXlgdBxloeb7tpuGIeKf4++fpK9ZoHAIAoNG3p2rDP839v3xlZuSPizdeTN//lc2h5CPi3xGxOyL+ExF7IuK/EbE3Iv4XEf9vOX5fRJQWSX+4JV5LvzYJlbvVhWJ2lPb/Xsjmtur9v6YM5Puy2M6Iaod5+kh2TkZiYHBmtjB9dJE0vnv5p087rWvs/6WvNP1qXzDLx63+lgG6qYmFiRUXuMXtqxH7+1vLn/RHJLWZgCQi9kXE/mUcN98Qnn3mywO1yEDzdkuXv6zUdh6tC/NMpS8inq7UfzGa6r+eYtI0P3lu4sz0menz47X5ybGhKEwfGZvpmJsffrz2Rqd1S5b/619ad3nlxDens5a1emn9b2u4/qM6f1svfz6JSGrztfPLT+Paz590fKZZ6fW/JXmrHK4+l34wsbBw4WjEluS1B5eP1/etxtP3KFbKP3Koffvfne2TnolHIiK9iB+NiMei8oSY5v1gRDwREYcWKf/3Lz353srLv7bS8k+13P8qNd9U//X5+k6BJJsbbLOq7+zBm/c73Dwerv6Pl0Mj2ZL297+k6RbRKafVcY90yZ+rPnsAAACwMeQiYkfDWNKOyOVGRytjQHtiW64wN79weGbu4vmpdF1EPgZyM7OF8vhnZTx4IKmOf+Yb4uMt8WPZuPFnfVvL8dHJucJUT0sObC+3+SQ3GvF2X0P7T/3anSFm4O/M97Vg81qs/aed+L3X1zEzwLp6+P//Nz5c04wA666h/Xf6hn9xBZ/7AjYAz/9A3dI/9OOeARtfSVuGTW1Z7f+wHwGEf5L+eLMWzvU0J8B60/+HTWnJ7/WvKlAabL9qKB7cOIYWP2BfrCwbW9uk1ZNA2rPqSepbV7JX9dcUOm4TueUdcDC6U6czqzwbxQvzZ/Z2/eIvZZ+V73YNfrUu7bRdoCe3IwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgK77KwAA//8KhtfB") r8 = socket$inet6_udp(0xa, 0x2, 0x0) listen(r8, 0x9) 26.25122ms ago: executing program 1 (id=3899): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/anycast6\x00') connect$pppoe(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b040000000000000000020000000900010073797a30000000000900020073797a32000000"], 0x54}}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 9.965771ms ago: executing program 2 (id=3900): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000040000000500000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000c00009616009d000000000000000040000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) futex(&(0x7f000000cffc)=0x1, 0xd, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0xd, 0x0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11}, &(0x7f0000000000)=0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x800) lsm_get_self_attr(0x64, &(0x7f0000000040), &(0x7f0000000000)=0x101, 0x0) lsm_get_self_attr(0x64, 0x0, &(0x7f0000000180), 0x1) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$TOKEN_CREATE(0x24, &(0x7f0000000240)={0x0, r3}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="0b00000007000000010001004900000081000500", @ANYRES32, @ANYRESHEX=r0, @ANYRES32=0x0, @ANYRES16=r1, @ANYRESHEX, @ANYRES64=r2, @ANYBLOB="259e", @ANYRESDEC=r4, @ANYBLOB="6e816bbbe6b767cb37dbeb49c580f7eb17021baa420e663aabcaedcfa70ed46b6a4ff71d7b52c3281e24d17b4342116295983d954ae60c01921361e553ab9227c8c36c5d7afe46f5ea1f7c2e5d31bbc277e5f061b6a8cc030a3654fc24d6b6c58d4ed4314345209d776102fb9fafb65c4e2eadd3c551e88e04f8f6f2a296b7c2a6ffd34f40a453"], 0x50) r5 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r5, &(0x7f0000006500)=[{{&(0x7f0000000480)={0xa, 0x4e22, 0x1000, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1}, 0x1c, 0x0, 0x0, &(0x7f00000020c0)=ANY=[@ANYBLOB="120000000000000029000000040000000800000000000000180000000000000029000000040000005e00000000000000be6e47906bde5da88744f2da956546d82e433e27cb9d6fd23ecb63f38fd6107830bc015e11af02ab96f87946c0aa8c1d6f65ff76bf5ad7084920"], 0x30}}], 0x1, 0x68004) getxattr(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="6f7332e7b9aca2229e32d1892e73656375726974793e73656c696e757800"], 0x0, 0x0) 0s ago: executing program 1 (id=3901): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r0, 0xf507, 0x0) sendmsg$NFT_BATCH(r0, 0x0, 0x0) r1 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@generic={&(0x7f0000000000)='./bus\x00', 0x0, 0x18}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$nl_xfrm(0x10, 0x3, 0x6) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000240)='./bus\x00', 0x404, &(0x7f0000000200)={[{@data_err_ignore}, {@mb_optimize_scan}]}, 0x1, 0x5e6, &(0x7f0000001200)="$eJzs3c1vFVUbAPBnbj9oKe/bQt68igtpYgwkSksLGGJcwNaQBj/ixo2VFkQKNLRGiyaUBDcmxo0xJq5ciP+FEtmy0pULN64MCVHD0sRr5nam9LZzW3r7MZX5/ZJLZ+bc4TzT26fn3NNz5gZQWYPpP7WI/RExnUT0J/OLZZ2RFQ4uPO/Bnx+dTR9J1Ouv/Z5Ekh3Ln59kX/uyk3si4scfktjXsbLemblrF8enpiavZvvDs5emh2fmrh2+cGn8/OT5ycujL4yeOH7s+ImRI21d1/WCY6dvvvt+/ydjb37z1V/JyLe/jCVxMl7Onrj0OjbLYAw2vifJyqK+E5tdWUk6sp+TpS9x0lliQKxL/vp1RcQT0R8d8fDF64+PXyk1OGBL1ZOIOlBRifyHisr7Afl7++Xvg2ul9EqA7XD/1MIAwMr871wYG4yextjA7gdJLB3WSSKivZG5Znsi4u6dsZvn7ozdjC0ahwOKzd+IiCeL8j9p5P9A9MRAI/9rTfmf9gvOZF/T46+2Wf/yoWL5D9tnIf97Vs3/aJH/by3J/7fbrH/w4eY7vU3539vuJQEAAAAAAEBl3T4VEc8X/f2/tjj/Jwrm//RFxMlNqH9w2f7Kv//X7m1CNUCB+6ciXiqc/1vLZ/8OdGRb/2nMB+hKzl2YmjwSEf+NiEPRtSvdH1mljsOf7vuyVdlgNv8vf6T1383mAmZx3Ovc1XzOxPjs+EavG4i4fyPiqcL5v8li+58UtP/p74PpR6xj37O3zrQqWzv/ga1S/zriYGH7//CuFcnq9+cYbvQHhvNewUpPf/jZd63qbzf/3WICNi5t/3evnv8DydL79cysv46jc531VmXt9v+7k9cbt5zpzo59MD47e3Ukojs53ZEebTo+uv6Y4XGU50OeL2n+H3pm9fG/ov5/b0TML/u/kz+a1xTn/v9336+t4tH/h/Kk+T+xrvZ//Rujtwa+b1X/o7X/xxpt/aHsiPE/WPBFnqbdzccL0rGzqGi74wUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAx0EtIvZEUhta3K7VhoYi+iLif7G7NnVlZva5c1feuzyRljU+/7+Wf9Jv/8J+kn/+/8CS/dFl+0cjYm9EfN7R29gfOntlaqLsiwcAAAAAAAAAAAAAAAAAAIAdoq/F+v/Ubx1lRwdsuc6yAwBKU5D/P5URB7D9tP9QXfIfqkv+Q3XJf6gu+Q/VJf+huuQ/VNc68z/JHgAAAAAAwM6098Dtn5OImH+xt/FIdWdlXaVGBmy1WtkBAKVxix+oLlP/oLrW+x7/5BbFAZRnrfm8PS1P2shM4OmzGzgZAAAAAAAAAAAAACrn4H7r/6GqrP+H6rL+H6orX/9/oOQ4gO3nPT4Qa6zkL1z/v+ZZAAAAAAAAAAAAAMBmmpm7dnF8amryqo03dkYY27lRr9evpz8FOyWef/lGPhV+p8SzbCNf6/doZ5X3OwkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGj2TwAAAP//030lBw==") r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) write(r3, &(0x7f0000004200)='t', 0x1) sendfile(r3, r2, 0x0, 0x3ffff) write$binfmt_aout(r3, &(0x7f0000000600)=ANY=[@ANYBLOB="000006b191000000910000a485dd0040000000aa020000080000000000000000"], 0x20) sendfile(r3, r2, 0x0, 0x7ffff000) kernel console output (not intermixed with test programs): p=0x7fc338a3e52b code=0x7ffc0000 [ 420.216888][T21350] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 420.227778][T21122] team0: Port device team_slave_1 added [ 420.260312][T21350] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a843c018, mo2=0002] [ 420.260610][T14084] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 420.270130][T21350] System zones: 0-2, 18-18, 34-34 [ 420.294933][T13214] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 420.304698][T21350] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 420.330887][T21350] ext4 filesystem being mounted at /116/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 420.362624][T21122] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 420.369873][T21122] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 420.395967][T21122] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 420.409114][T21392] loop1: detected capacity change from 0 to 128 [ 420.450630][T21122] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 420.457701][T21122] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 420.483849][T21122] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 420.488763][T21392] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 420.502275][T21392] FAT-fs (loop1): Filesystem has been set read-only [ 420.509595][T21392] syz.1.3480: attempt to access beyond end of device [ 420.509595][T21392] loop1: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 420.539547][T21122] hsr_slave_0: entered promiscuous mode [ 420.549816][T21392] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 420.554153][T14893] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 420.557760][T21392] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 420.585767][T21122] hsr_slave_1: entered promiscuous mode [ 420.605871][T21122] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 420.627011][T21122] Cannot create hsr debugfs directory [ 420.670769][ T51] bridge_slave_1: left allmulticast mode [ 420.676565][ T51] bridge_slave_1: left promiscuous mode [ 420.682364][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 420.696070][ T51] bridge_slave_0: left allmulticast mode [ 420.701800][ T51] bridge_slave_0: left promiscuous mode [ 420.707796][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 420.744554][T21461] loop3: detected capacity change from 0 to 512 [ 420.751129][T21461] EXT4-fs: Ignoring removed mblk_io_submit option [ 420.757778][T21461] EXT4-fs: Ignoring removed bh option [ 420.783733][T21467] loop4: detected capacity change from 0 to 512 [ 420.790424][T21467] EXT4-fs: Ignoring removed i_version option [ 420.839415][T21461] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 420.908137][T21461] EXT4-fs (loop3): 1 truncate cleaned up [ 420.914496][T21467] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 420.916180][T21461] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 420.954408][T21479] loop0: detected capacity change from 0 to 512 [ 420.965042][T21479] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.3487: bg 0: block 5: invalid block bitmap [ 421.004221][T21479] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 421.030093][T21479] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.3487: invalid indirect mapped block 3 (level 2) [ 421.044987][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 421.077549][ T51] bond_slave_0: left promiscuous mode [ 421.085912][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 421.115760][T21479] EXT4-fs (loop0): 2 truncates cleaned up [ 421.115931][ T51] bond_slave_1: left promiscuous mode [ 421.122092][T21479] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 421.127905][ T51] bond0 (unregistering): Released all slaves [ 421.174058][ T51] bond1 (unregistering): Released all slaves [ 421.192600][ T51] bond2 (unregistering): Released all slaves [ 421.242648][ T51] hsr_slave_0: left promiscuous mode [ 421.249745][ T51] hsr_slave_1: left promiscuous mode [ 421.255312][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 421.262895][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 421.275330][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 421.282790][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 421.298608][T14893] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 421.310453][ T51] veth1_macvtap: left promiscuous mode [ 421.322634][ T51] veth0_macvtap: left promiscuous mode [ 421.336438][ T51] veth1_vlan: left promiscuous mode [ 421.341963][T21507] loop0: detected capacity change from 0 to 1024 [ 421.349464][ T51] veth0_vlan: left promiscuous mode [ 421.361855][T21507] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 421.528380][T14084] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 421.728351][ T51] team0 (unregistering): Port device team_slave_1 removed [ 421.782710][ T51] team0 (unregistering): Port device team_slave_0 removed [ 421.791936][T21519] loop1: detected capacity change from 0 to 512 [ 421.799089][T21519] EXT4-fs: dax option not supported [ 421.817904][T21519] loop1: detected capacity change from 0 to 512 [ 421.827940][T21519] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 421.879808][T21519] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a843c018, mo2=0002] [ 422.039980][T21519] System zones: 0-2, 18-18, 34-34 [ 422.046067][T21519] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 422.061311][T13214] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 422.072170][T21519] ext4 filesystem being mounted at /101/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 422.217676][T14893] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 422.302101][T15608] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 422.347353][ T51] IPVS: stop unused estimator thread 0... [ 422.422282][T21606] netlink: 'syz.1.3497': attribute type 3 has an invalid length. [ 422.522557][T21621] loop0: detected capacity change from 0 to 512 [ 422.532785][T21621] EXT4-fs: dax option not supported [ 422.544127][T21621] loop0: detected capacity change from 0 to 512 [ 422.551581][T21621] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 422.593460][T21621] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a843c018, mo2=0002] [ 422.603053][T21621] System zones: 0-2, 18-18, 34-34 [ 422.612342][T21621] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 422.627250][T21621] ext4 filesystem being mounted at /128/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 422.654996][T14893] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 422.700597][T21122] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 422.702264][T21647] loop0: detected capacity change from 0 to 512 [ 422.727561][T21647] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.3503: bg 0: block 5: invalid block bitmap [ 422.742290][T21122] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 422.753305][T21122] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 422.763850][T21647] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 422.777473][T21122] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 422.782506][T21647] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.3503: invalid indirect mapped block 3 (level 2) [ 422.859849][T21647] EXT4-fs (loop0): 2 truncates cleaned up [ 422.866105][T21647] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 422.893551][T21681] loop3: detected capacity change from 0 to 512 [ 422.923555][T21672] bond1: entered promiscuous mode [ 422.928778][T21672] bond1: entered allmulticast mode [ 422.937197][T21681] EXT4-fs: Ignoring removed mblk_io_submit option [ 422.943745][T21681] EXT4-fs: Ignoring removed bh option [ 422.952388][T21672] 8021q: adding VLAN 0 to HW filter on device bond1 [ 422.961397][T21681] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 422.973968][T21681] EXT4-fs (loop3): 1 truncate cleaned up [ 422.983304][T21672] bond1 (unregistering): Released all slaves [ 423.014340][T21681] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 423.027625][T14893] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 423.040207][T21726] loop1: detected capacity change from 0 to 1024 [ 423.119391][T21122] 8021q: adding VLAN 0 to HW filter on device bond0 [ 423.195115][T21807] loop0: detected capacity change from 0 to 512 [ 423.207453][T21122] 8021q: adding VLAN 0 to HW filter on device team0 [ 423.216755][T21807] EXT4-fs: dax option not supported [ 423.226361][ T3448] bridge0: port 1(bridge_slave_0) entered blocking state [ 423.233484][ T3448] bridge0: port 1(bridge_slave_0) entered forwarding state [ 423.245419][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 423.252621][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 423.253018][T21807] loop0: detected capacity change from 0 to 512 [ 423.267580][T21807] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 423.298265][T21807] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a843c018, mo2=0002] [ 423.308116][T21807] System zones: 0-2, 18-18, 34-34 [ 423.314372][T21807] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 423.331466][T21807] ext4 filesystem being mounted at /131/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 423.465686][T14893] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 423.500940][T21122] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 423.510665][T21824] netlink: 'syz.0.3515': attribute type 3 has an invalid length. [ 423.755705][T21122] veth0_vlan: entered promiscuous mode [ 423.764330][T21122] veth1_vlan: entered promiscuous mode [ 423.780728][T21122] veth0_macvtap: entered promiscuous mode [ 423.788111][T21122] veth1_macvtap: entered promiscuous mode [ 423.804934][T21122] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 423.822110][T21122] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 423.839447][T13214] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 423.854479][T21122] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.863439][T21122] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.872191][T21122] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.881053][T21122] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.910821][T21843] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3517'. [ 423.931588][T21843] loop3: detected capacity change from 0 to 1024 [ 424.014921][T21843] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 424.415908][T21880] bond1: entered promiscuous mode [ 424.421225][T21880] bond1: entered allmulticast mode [ 424.428303][T21880] 8021q: adding VLAN 0 to HW filter on device bond1 [ 424.449213][T21880] bond1 (unregistering): Released all slaves [ 424.518788][T21953] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3521'. [ 424.531510][T21951] loop2: detected capacity change from 0 to 1024 [ 424.543385][T21955] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.555733][T21953] loop0: detected capacity change from 0 to 256 [ 424.562504][ T29] kauditd_printk_skb: 368 callbacks suppressed [ 424.562518][ T29] audit: type=1326 audit(1750092309.558:17328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21879 comm="syz.2.3471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa00d21e929 code=0x7ffc0000 [ 424.593114][ T29] audit: type=1326 audit(1750092309.558:17329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21879 comm="syz.2.3471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa00d21e929 code=0x7ffc0000 [ 424.616761][ T29] audit: type=1326 audit(1750092309.558:17330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21879 comm="syz.2.3471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=189 compat=0 ip=0x7fa00d21e929 code=0x7ffc0000 [ 424.640440][ T29] audit: type=1326 audit(1750092309.558:17331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21879 comm="syz.2.3471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa00d21e929 code=0x7ffc0000 [ 424.664096][ T29] audit: type=1326 audit(1750092309.558:17332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21879 comm="syz.2.3471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa00d21e929 code=0x7ffc0000 [ 424.687711][ T29] audit: type=1326 audit(1750092309.558:17333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21879 comm="syz.2.3471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=189 compat=0 ip=0x7fa00d21e929 code=0x7ffc0000 [ 424.711331][ T29] audit: type=1326 audit(1750092309.558:17334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21879 comm="syz.2.3471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa00d21e929 code=0x7ffc0000 [ 424.735145][ T29] audit: type=1326 audit(1750092309.558:17335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21879 comm="syz.2.3471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa00d21e929 code=0x7ffc0000 [ 424.758738][ T29] audit: type=1326 audit(1750092309.558:17336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21879 comm="syz.2.3471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=189 compat=0 ip=0x7fa00d21e929 code=0x7ffc0000 [ 424.782361][ T29] audit: type=1326 audit(1750092309.569:17337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21879 comm="syz.2.3471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa00d21e929 code=0x7ffc0000 [ 424.831699][T13214] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 424.842300][T21955] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.917836][T21975] bond1: entered promiscuous mode [ 424.922928][T21975] bond1: entered allmulticast mode [ 424.955726][T21975] 8021q: adding VLAN 0 to HW filter on device bond1 [ 424.995219][T22013] loop3: detected capacity change from 0 to 1024 [ 425.018754][T22016] loop1: detected capacity change from 0 to 512 [ 425.030575][T21975] bond1 (unregistering): Released all slaves [ 425.049466][T21955] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 425.059764][T22014] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 425.075682][T22016] EXT4-fs (loop1): 1 orphan inode deleted [ 425.082343][T22016] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 425.103040][ T12] EXT4-fs error (device loop1): ext4_release_dquot:6969: comm kworker/u8:0: Failed to release dquot type 1 [ 425.116089][T22016] ext4 filesystem being mounted at /108/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 425.135537][T21955] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 425.143363][T22016] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 425.164164][T22016] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3526'. [ 425.191297][T15608] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 425.207329][T21955] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.222174][T21955] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.235031][T21955] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.242000][T22084] loop2: detected capacity change from 0 to 512 [ 425.249151][T21955] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.257878][T22084] EXT4-fs: Ignoring removed i_version option [ 425.330424][T22103] loop4: detected capacity change from 0 to 1024 [ 425.337437][T22084] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 425.372900][T22103] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 426.076239][T21122] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 426.140104][T22127] loop0: detected capacity change from 0 to 512 [ 426.181938][T14084] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 426.262288][T22127] EXT4-fs (loop0): 1 orphan inode deleted [ 426.269973][T22127] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 426.282640][ T31] EXT4-fs error (device loop0): ext4_release_dquot:6969: comm kworker/u8:1: Failed to release dquot type 1 [ 426.296474][T22137] loop4: detected capacity change from 0 to 128 [ 426.298767][T22127] ext4 filesystem being mounted at /136/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 426.305324][T22137] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 426.321190][T22137] FAT-fs (loop4): Filesystem has been set read-only [ 426.341456][T22137] syz.4.3538: attempt to access beyond end of device [ 426.341456][T22137] loop4: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 426.355601][T22127] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 426.379081][T22138] bond1: entered promiscuous mode [ 426.384205][T22138] bond1: entered allmulticast mode [ 426.399604][T22127] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3537'. [ 426.418879][T22138] 8021q: adding VLAN 0 to HW filter on device bond1 [ 426.426685][T22137] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 426.434655][T22137] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 426.474039][T22138] bond1 (unregistering): Released all slaves [ 426.490942][T14893] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 426.527041][T22140] loop3: detected capacity change from 0 to 1024 [ 426.582443][T22221] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.659827][T22221] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.706197][T22221] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.801493][T22221] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.889669][T22221] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.942502][T22221] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.973243][T22221] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.005314][T22221] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.082791][T22278] loop0: detected capacity change from 0 to 512 [ 427.092697][T22278] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.3548: bg 0: block 5: invalid block bitmap [ 427.115032][T22278] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 427.154125][T22278] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.3548: invalid indirect mapped block 3 (level 2) [ 427.182033][T22278] EXT4-fs (loop0): 2 truncates cleaned up [ 427.190517][T22278] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 427.310324][T22286] loop1: detected capacity change from 0 to 512 [ 427.331597][T14893] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 427.343232][T22286] EXT4-fs: Ignoring removed i_version option [ 427.639020][T22286] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 427.667931][T22295] loop0: detected capacity change from 0 to 512 [ 427.681946][T22294] loop2: detected capacity change from 0 to 512 [ 427.719824][T22295] EXT4-fs: dax option not supported [ 427.757503][T22294] EXT4-fs (loop2): 1 orphan inode deleted [ 427.784266][ T12] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:0: Failed to release dquot type 1 [ 427.791397][T22294] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 427.809067][T22294] ext4 filesystem being mounted at /3/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 427.823271][T22294] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 427.833879][T22294] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3551'. [ 427.850161][T22295] loop0: detected capacity change from 0 to 512 [ 427.862090][T22295] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 427.865819][T22306] loop3: detected capacity change from 0 to 128 [ 427.915196][T22295] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a843c018, mo2=0002] [ 427.923442][T22295] System zones: 0-2, 18-18, 34-34 [ 427.930848][T21122] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 427.942311][T22306] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 427.950455][T22306] FAT-fs (loop3): Filesystem has been set read-only [ 427.961122][T22295] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 427.974868][T22306] syz.3.3553: attempt to access beyond end of device [ 427.974868][T22306] loop3: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 428.032511][T22295] ext4 filesystem being mounted at /139/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 428.043215][T22306] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 428.051142][T22306] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 428.115657][T14893] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 428.141329][T22322] loop3: detected capacity change from 0 to 512 [ 428.150212][T22322] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.3560: bg 0: block 5: invalid block bitmap [ 428.164158][T22322] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 428.173754][T22322] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.3560: invalid indirect mapped block 3 (level 2) [ 428.188007][T22322] EXT4-fs (loop3): 2 truncates cleaned up [ 428.198226][T22325] loop2: detected capacity change from 0 to 512 [ 428.241377][T22325] EXT4-fs (loop2): 1 orphan inode deleted [ 428.257995][T22325] ext4 filesystem being mounted at /5/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 428.268915][ T3448] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:7: Failed to release dquot type 1 [ 428.289181][T22325] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 428.301916][T22331] bond1: entered promiscuous mode [ 428.307050][T22331] bond1: entered allmulticast mode [ 428.312959][T22325] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3559'. [ 428.322224][T22331] 8021q: adding VLAN 0 to HW filter on device bond1 [ 428.342045][T22341] loop0: detected capacity change from 0 to 1024 [ 428.348239][T22379] loop3: detected capacity change from 0 to 1024 [ 428.376162][T22331] bond1 (unregistering): Released all slaves [ 428.450353][T22336] bond1: entered promiscuous mode [ 428.451893][T22457] loop2: detected capacity change from 0 to 512 [ 428.455440][T22336] bond1: entered allmulticast mode [ 428.469367][T22336] 8021q: adding VLAN 0 to HW filter on device bond1 [ 428.483082][T22336] bond1 (unregistering): Released all slaves [ 428.526409][T22457] EXT4-fs (loop2): 1 orphan inode deleted [ 428.535703][T22457] ext4 filesystem being mounted at /7/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 428.595967][ T31] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:1: Failed to release dquot type 1 [ 428.619159][T22457] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 428.632653][T22457] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3565'. [ 428.852106][T22536] loop2: detected capacity change from 0 to 512 [ 428.860057][T22532] loop0: detected capacity change from 0 to 128 [ 429.044184][T22536] EXT4-fs: dax option not supported [ 429.057460][T22532] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 429.065473][T22532] FAT-fs (loop0): Filesystem has been set read-only [ 429.094874][T22532] syz.0.3567: attempt to access beyond end of device [ 429.094874][T22532] loop0: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 429.102193][T22536] loop2: detected capacity change from 0 to 512 [ 429.108864][T22532] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 429.122913][T22532] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 429.132188][T22536] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 429.165228][T22536] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a843c018, mo2=0002] [ 429.185777][T22536] System zones: 0-2, 18-18, 34-34 [ 429.193557][T22536] ext4 filesystem being mounted at /8/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 429.232001][T22553] loop3: detected capacity change from 0 to 512 [ 429.247962][T22553] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.3572: bg 0: block 5: invalid block bitmap [ 429.268053][T22553] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 429.278227][T22553] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.3572: invalid indirect mapped block 3 (level 2) [ 429.342960][T22553] EXT4-fs (loop3): 2 truncates cleaned up [ 429.398503][T22563] loop2: detected capacity change from 0 to 512 [ 429.460483][T22563] EXT4-fs (loop2): 1 orphan inode deleted [ 429.469777][ T29] kauditd_printk_skb: 276 callbacks suppressed [ 429.469793][ T29] audit: type=1326 audit(1750092314.713:17609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22574 comm="syz.3.3578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0161b1e929 code=0x7ffc0000 [ 429.499750][ T29] audit: type=1326 audit(1750092314.713:17610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22574 comm="syz.3.3578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0161b1e929 code=0x7ffc0000 [ 429.501732][T22563] ext4 filesystem being mounted at /9/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 429.523468][ T29] audit: type=1326 audit(1750092314.713:17611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22574 comm="syz.3.3578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f0161b1e929 code=0x7ffc0000 [ 429.557538][ T29] audit: type=1326 audit(1750092314.713:17612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22574 comm="syz.3.3578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0161b1e929 code=0x7ffc0000 [ 429.564210][T22577] bond1: entered promiscuous mode [ 429.581197][ T29] audit: type=1326 audit(1750092314.713:17613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22574 comm="syz.3.3578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0161b1e929 code=0x7ffc0000 [ 429.586235][T22577] bond1: entered allmulticast mode [ 429.587277][T22577] 8021q: adding VLAN 0 to HW filter on device bond1 [ 429.609856][ T29] audit: type=1326 audit(1750092314.713:17614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22574 comm="syz.3.3578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0161b1e929 code=0x7ffc0000 [ 429.619848][ T37] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 429.621665][ T29] audit: type=1326 audit(1750092314.713:17615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22574 comm="syz.3.3578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0161b1e929 code=0x7ffc0000 [ 429.645182][ T37] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:2: Failed to release dquot type 1 [ 429.693859][T22585] loop0: detected capacity change from 0 to 512 [ 429.703351][T22586] loop4: detected capacity change from 0 to 1024 [ 429.705781][T22582] loop1: detected capacity change from 0 to 512 [ 429.710211][T22585] EXT4-fs: Ignoring removed i_version option [ 429.722762][ T29] audit: type=1326 audit(1750092314.713:17616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22576 comm="syz.4.3580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22b4d5e929 code=0x7ffc0000 [ 429.746471][ T29] audit: type=1326 audit(1750092314.713:17617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22576 comm="syz.4.3580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f22b4d5e929 code=0x7ffc0000 [ 429.772482][T22588] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3574'. [ 429.787184][T22577] bond1 (unregistering): Released all slaves [ 429.808894][T22563] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 429.854391][T22575] loop3: detected capacity change from 0 to 1024 [ 429.863022][T22582] EXT4-fs (loop1): 1 orphan inode deleted [ 429.869810][T22582] ext4 filesystem being mounted at /120/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 429.904457][T22700] loop2: detected capacity change from 0 to 128 [ 429.912812][T22625] bond1: entered promiscuous mode [ 429.917958][T22625] bond1: entered allmulticast mode [ 429.928914][T22700] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 429.936902][T22700] FAT-fs (loop2): Filesystem has been set read-only [ 429.948081][ T3448] EXT4-fs error (device loop1): ext4_release_dquot:6969: comm kworker/u8:7: Failed to release dquot type 1 [ 429.970766][T22700] syz.2.3581: attempt to access beyond end of device [ 429.970766][T22700] loop2: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 429.992320][T22582] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3579'. [ 430.006372][T22625] 8021q: adding VLAN 0 to HW filter on device bond1 [ 430.026974][T22580] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 430.048405][T22700] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 430.056315][T22700] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 430.075344][T22625] bond1 (unregistering): Released all slaves [ 430.261234][T22777] loop2: detected capacity change from 0 to 512 [ 430.281932][T22778] loop4: detected capacity change from 0 to 512 [ 430.296720][T22777] EXT4-fs: dax option not supported [ 430.319664][T22778] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.3587: bg 0: block 5: invalid block bitmap [ 430.341763][T22777] loop2: detected capacity change from 0 to 512 [ 430.349905][T22777] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 430.361360][T22778] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 430.371762][T22778] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.3587: invalid indirect mapped block 3 (level 2) [ 430.393642][T22778] EXT4-fs (loop4): 2 truncates cleaned up [ 430.423018][T22777] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a843c018, mo2=0002] [ 430.470043][T22777] System zones: 0-2, 18-18, 34-34 [ 430.523410][T22777] ext4 filesystem being mounted at /13/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 430.659290][T22802] loop0: detected capacity change from 0 to 512 [ 430.722054][T22802] EXT4-fs (loop0): 1 orphan inode deleted [ 430.734242][ T37] EXT4-fs error (device loop0): ext4_release_dquot:6969: comm kworker/u8:2: Failed to release dquot type 1 [ 430.747813][T22802] ext4 filesystem being mounted at /146/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 430.774622][T22802] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 430.788422][T22815] loop2: detected capacity change from 0 to 128 [ 430.799306][T22813] loop4: detected capacity change from 0 to 512 [ 430.806438][T22802] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3592'. [ 430.819155][T22815] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 430.827132][T22815] FAT-fs (loop2): Filesystem has been set read-only [ 430.840784][T22815] syz.2.3593: attempt to access beyond end of device [ 430.840784][T22815] loop2: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 430.851081][T22813] EXT4-fs (loop4): 1 orphan inode deleted [ 430.854866][T22815] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 430.865642][T22813] ext4 filesystem being mounted at /143/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 430.868211][T22815] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 430.887084][ T379] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:6: Failed to release dquot type 1 [ 430.905667][T22813] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 430.920844][T22813] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3594'. [ 431.019081][T22833] bond1: entered promiscuous mode [ 431.024218][T22833] bond1: entered allmulticast mode [ 431.086444][T22833] 8021q: adding VLAN 0 to HW filter on device bond1 [ 431.116243][T22872] loop2: detected capacity change from 0 to 1024 [ 431.137704][T22833] bond1 (unregistering): Released all slaves [ 431.199959][T22878] bond1: entered promiscuous mode [ 431.205271][T22878] bond1: entered allmulticast mode [ 431.219724][T22878] 8021q: adding VLAN 0 to HW filter on device bond1 [ 431.235433][T22878] bond1 (unregistering): Released all slaves [ 431.243433][T22949] loop0: detected capacity change from 0 to 512 [ 431.262552][T22949] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.3602: bg 0: block 5: invalid block bitmap [ 431.277922][T22950] loop4: detected capacity change from 0 to 1024 [ 431.287225][T22949] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 431.319790][T22949] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.3602: invalid indirect mapped block 3 (level 2) [ 431.357964][T22949] EXT4-fs (loop0): 2 truncates cleaned up [ 431.425366][T23010] loop1: detected capacity change from 0 to 512 [ 431.493784][T23015] loop2: detected capacity change from 0 to 512 [ 431.508365][T23010] EXT4-fs: Ignoring removed i_version option [ 431.517916][T23015] EXT4-fs: dax option not supported [ 431.548348][T23015] loop2: detected capacity change from 0 to 512 [ 431.565736][T23015] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 431.602319][T23015] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a843c018, mo2=0002] [ 431.621906][T23015] System zones: 0-2, 18-18, 34-34 [ 431.663901][T23015] ext4 filesystem being mounted at /17/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 431.687045][T23031] loop4: detected capacity change from 0 to 512 [ 431.727108][T23031] EXT4-fs (loop4): 1 orphan inode deleted [ 431.743931][ T51] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:3: Failed to release dquot type 1 [ 431.783293][T23031] ext4 filesystem being mounted at /145/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 431.800141][T23039] loop3: detected capacity change from 0 to 128 [ 431.810835][T23039] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 431.818869][T23039] FAT-fs (loop3): Filesystem has been set read-only [ 431.828413][T23031] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 431.839148][T23039] syz.3.3607: attempt to access beyond end of device [ 431.839148][T23039] loop3: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 431.845228][T23031] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3605'. [ 431.863042][T23039] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 431.870981][T23039] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 431.970840][T23056] loop3: detected capacity change from 0 to 512 [ 431.997590][T23056] EXT4-fs (loop3): 1 orphan inode deleted [ 432.012854][ T314] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u8:5: Failed to release dquot type 1 [ 432.029462][T23061] loop2: detected capacity change from 0 to 512 [ 432.030695][T23056] ext4 filesystem being mounted at /156/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 432.052016][T23061] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.3614: bg 0: block 5: invalid block bitmap [ 432.066607][T23061] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 432.104633][T23061] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.3614: invalid indirect mapped block 3 (level 2) [ 432.124108][T23077] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3612'. [ 432.154681][T23061] EXT4-fs (loop2): 2 truncates cleaned up [ 432.166628][T23072] bond1: entered promiscuous mode [ 432.171842][T23072] bond1: entered allmulticast mode [ 432.179600][T23056] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 432.212672][T23072] 8021q: adding VLAN 0 to HW filter on device bond1 [ 432.263328][T23107] loop4: detected capacity change from 0 to 1024 [ 432.279675][T23113] loop1: detected capacity change from 0 to 1024 [ 432.317386][T23072] bond1 (unregistering): Released all slaves [ 432.429769][T23112] bond1: entered promiscuous mode [ 432.434900][T23112] bond1: entered allmulticast mode [ 432.441744][T23112] 8021q: adding VLAN 0 to HW filter on device bond1 [ 432.459874][T23112] bond1 (unregistering): Released all slaves [ 432.499188][T23240] loop3: detected capacity change from 0 to 512 [ 432.506792][T23240] EXT4-fs: dax option not supported [ 432.519640][T23240] loop3: detected capacity change from 0 to 512 [ 432.530308][T23240] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 432.563577][T23240] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a843c018, mo2=0002] [ 432.571765][T23240] System zones: 0-2, 18-18, 34-34 [ 432.580545][T23240] ext4 filesystem being mounted at /157/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 432.758440][T23275] loop1: detected capacity change from 0 to 128 [ 432.783044][T23275] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 432.791050][T23275] FAT-fs (loop1): Filesystem has been set read-only [ 432.805000][T23279] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3625'. [ 432.819728][T23275] syz.1.3624: attempt to access beyond end of device [ 432.819728][T23275] loop1: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 432.848361][T23275] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 432.856307][T23275] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 432.881012][T23281] loop0: detected capacity change from 0 to 512 [ 432.907399][T23281] EXT4-fs (loop0): 1 orphan inode deleted [ 432.917831][T23281] ext4 filesystem being mounted at /156/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 432.934043][ T379] EXT4-fs error (device loop0): ext4_release_dquot:6969: comm kworker/u8:6: Failed to release dquot type 1 [ 432.999141][T23290] loop3: detected capacity change from 0 to 512 [ 433.007938][T23290] EXT4-fs: Ignoring removed i_version option [ 433.068357][T23294] loop1: detected capacity change from 0 to 512 [ 433.124918][T23281] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 433.135455][T23294] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.3628: bg 0: block 5: invalid block bitmap [ 433.149833][T23281] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3626'. [ 433.159793][T23294] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 433.190125][T23294] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.3628: invalid indirect mapped block 3 (level 2) [ 433.261814][T23294] EXT4-fs (loop1): 2 truncates cleaned up [ 433.291762][T23300] loop0: detected capacity change from 0 to 512 [ 433.317834][T23300] EXT4-fs (loop0): 1 orphan inode deleted [ 433.330045][T23300] ext4 filesystem being mounted at /157/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 433.330515][ T37] EXT4-fs error (device loop0): ext4_release_dquot:6969: comm kworker/u8:2: Failed to release dquot type 1 [ 433.390430][T23304] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3629'. [ 433.404968][T23300] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 433.433641][T23306] loop2: detected capacity change from 0 to 512 [ 433.440546][T23306] EXT4-fs: dax option not supported [ 433.452074][T23306] loop2: detected capacity change from 0 to 512 [ 433.463947][T23306] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 433.510254][T23306] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a843c018, mo2=0002] [ 433.520485][T23315] bond1: entered promiscuous mode [ 433.525699][T23315] bond1: entered allmulticast mode [ 433.531670][T23315] 8021q: adding VLAN 0 to HW filter on device bond1 [ 433.543569][T23306] System zones: 0-2, 18-18, 34-34 [ 433.566790][T23362] loop1: detected capacity change from 0 to 1024 [ 433.578969][T23363] loop0: detected capacity change from 0 to 1024 [ 433.595230][T23315] bond1 (unregistering): Released all slaves [ 433.617015][T23320] bond1: entered promiscuous mode [ 433.622134][T23320] bond1: entered allmulticast mode [ 433.646449][T23306] ext4 filesystem being mounted at /22/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 433.653299][T23320] 8021q: adding VLAN 0 to HW filter on device bond1 [ 433.716620][T23320] bond1 (unregistering): Released all slaves [ 433.982415][T23504] loop3: detected capacity change from 0 to 128 [ 434.017067][T23504] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 434.025092][T23504] FAT-fs (loop3): Filesystem has been set read-only [ 434.062064][T23508] loop1: detected capacity change from 0 to 512 [ 434.070700][T23504] syz.3.3638: attempt to access beyond end of device [ 434.070700][T23504] loop3: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 434.088383][T23504] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 434.096410][T23504] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 434.110345][T23508] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.3640: bg 0: block 5: invalid block bitmap [ 434.133749][T23508] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 434.152432][T23508] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.3640: invalid indirect mapped block 3 (level 2) [ 434.167087][T23508] EXT4-fs (loop1): 2 truncates cleaned up [ 434.178463][T23514] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3637'. [ 434.199538][T23518] loop3: detected capacity change from 0 to 512 [ 434.224449][T23518] EXT4-fs (loop3): 1 orphan inode deleted [ 434.238067][ T379] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u8:6: Failed to release dquot type 1 [ 434.249708][T23526] loop0: detected capacity change from 0 to 512 [ 434.261120][T23526] EXT4-fs (loop0): 1 orphan inode deleted [ 434.267704][T23526] ext4 filesystem being mounted at /159/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 434.279128][T23518] ext4 filesystem being mounted at /163/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 434.279708][ T379] __quota_error: 475 callbacks suppressed [ 434.279762][ T379] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 434.305602][ T379] EXT4-fs error (device loop0): ext4_release_dquot:6969: comm kworker/u8:6: Failed to release dquot type 1 [ 434.369752][T23534] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3644'. [ 434.379854][T23526] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 434.423351][T23518] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 434.441773][T23542] loop4: detected capacity change from 0 to 512 [ 434.448526][T23542] EXT4-fs: dax option not supported [ 434.470203][ T29] audit: type=1326 audit(1750092319.963:18085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23537 comm="syz.4.3648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22b4d5e929 code=0x7ffc0000 [ 434.498931][T23552] loop0: detected capacity change from 0 to 128 [ 434.509108][T23552] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 434.517147][T23552] FAT-fs (loop0): Filesystem has been set read-only [ 434.523845][T23552] syz.0.3651: attempt to access beyond end of device [ 434.523845][T23552] loop0: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 434.538963][T23552] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 434.546872][T23552] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 434.559427][T23542] loop4: detected capacity change from 0 to 512 [ 434.570563][T23554] loop2: detected capacity change from 0 to 512 [ 434.578351][T23554] EXT4-fs: Ignoring removed i_version option [ 434.584652][ T29] audit: type=1326 audit(1750092320.047:18086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23537 comm="syz.4.3648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f22b4d5e929 code=0x7ffc0000 [ 434.608341][ T29] audit: type=1326 audit(1750092320.047:18087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23537 comm="syz.4.3648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22b4d5e929 code=0x7ffc0000 [ 434.632072][ T29] audit: type=1326 audit(1750092320.047:18088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23537 comm="syz.4.3648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f22b4d5e929 code=0x7ffc0000 [ 434.655675][ T29] audit: type=1326 audit(1750092320.047:18089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23537 comm="syz.4.3648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f22b4d5e963 code=0x7ffc0000 [ 434.679126][ T29] audit: type=1326 audit(1750092320.047:18090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23537 comm="syz.4.3648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f22b4d5d3df code=0x7ffc0000 [ 434.702636][ T29] audit: type=1326 audit(1750092320.047:18091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23537 comm="syz.4.3648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f22b4d5e9b7 code=0x7ffc0000 [ 434.726264][ T29] audit: type=1326 audit(1750092320.047:18092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23537 comm="syz.4.3648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f22b4d5d290 code=0x7ffc0000 [ 434.749898][ T29] audit: type=1326 audit(1750092320.047:18093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23537 comm="syz.4.3648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f22b4d5e52b code=0x7ffc0000 [ 434.782368][T23542] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 434.883404][T23561] bond1: entered promiscuous mode [ 434.888583][T23561] bond1: entered allmulticast mode [ 434.894153][T23561] 8021q: adding VLAN 0 to HW filter on device bond1 [ 434.930921][T23599] loop3: detected capacity change from 0 to 1024 [ 434.938220][T23542] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a843c018, mo2=0002] [ 434.947448][T23542] System zones: 0-2, 18-18, 34-34 [ 434.956787][T23542] ext4 filesystem being mounted at /151/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 434.996997][T23561] bond1 (unregistering): Released all slaves [ 435.049627][T23633] loop0: detected capacity change from 0 to 512 [ 435.060202][T23633] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.3653: bg 0: block 5: invalid block bitmap [ 435.073342][T23633] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 435.083524][T23633] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.3653: invalid indirect mapped block 3 (level 2) [ 435.116953][T23633] EXT4-fs (loop0): 2 truncates cleaned up [ 435.124402][T23649] __nla_validate_parse: 1 callbacks suppressed [ 435.124420][T23649] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3654'. [ 435.194178][T23653] bond1: entered promiscuous mode [ 435.199305][T23653] bond1: entered allmulticast mode [ 435.205043][T23653] 8021q: adding VLAN 0 to HW filter on device bond1 [ 435.223197][T23653] bond1 (unregistering): Released all slaves [ 435.292841][T23694] loop2: detected capacity change from 0 to 1024 [ 435.523150][T23763] loop4: detected capacity change from 0 to 512 [ 435.621344][T23763] EXT4-fs (loop4): 1 orphan inode deleted [ 435.656491][T23763] ext4 filesystem being mounted at /155/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 435.722721][T23769] loop3: detected capacity change from 0 to 512 [ 435.789120][T23769] EXT4-fs (loop3): 1 orphan inode deleted [ 435.804370][T23776] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3660'. [ 435.826723][T23769] ext4 filesystem being mounted at /165/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 435.863487][ T3647] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:8: Failed to release dquot type 1 [ 435.877724][ T3647] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u8:8: Failed to release dquot type 1 [ 435.886039][T23780] loop1: detected capacity change from 0 to 128 [ 435.898020][T23780] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 435.899397][T23763] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 435.905977][T23780] FAT-fs (loop1): Filesystem has been set read-only [ 435.922113][T23769] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 435.922156][T23780] syz.1.3663: attempt to access beyond end of device [ 435.922156][T23780] loop1: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 435.922198][T23780] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 435.922217][T23780] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 435.931840][T23782] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3661'. [ 436.004557][T23790] loop4: detected capacity change from 0 to 512 [ 436.011867][T23790] EXT4-fs: dax option not supported [ 436.026997][T23790] loop4: detected capacity change from 0 to 512 [ 436.035475][T23790] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 436.050602][T23797] loop1: detected capacity change from 0 to 512 [ 436.067342][T23790] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a843c018, mo2=0002] [ 436.079732][T23797] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.3667: bg 0: block 5: invalid block bitmap [ 436.083592][T23790] System zones: 0-2, 18-18, 34-34 [ 436.100680][T23790] ext4 filesystem being mounted at /156/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 436.116861][T23797] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 436.179996][T23797] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.3667: invalid indirect mapped block 3 (level 2) [ 436.214171][T23797] EXT4-fs (loop1): 2 truncates cleaned up [ 436.282742][T23818] bond1: entered promiscuous mode [ 436.288074][T23818] bond1: entered allmulticast mode [ 436.309646][T23860] loop1: detected capacity change from 0 to 128 [ 436.317085][T23818] 8021q: adding VLAN 0 to HW filter on device bond1 [ 436.332113][T23863] loop0: detected capacity change from 0 to 512 [ 436.369019][T23864] loop3: detected capacity change from 0 to 512 [ 436.392512][T23864] EXT4-fs: Ignoring removed i_version option [ 436.403820][T23865] loop4: detected capacity change from 0 to 1024 [ 436.414843][T23860] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 436.422817][T23860] FAT-fs (loop1): Filesystem has been set read-only [ 436.431339][T23860] syz.1.3675: attempt to access beyond end of device [ 436.431339][T23860] loop1: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 436.449655][T23860] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 436.457660][T23860] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 436.508276][T23818] bond1 (unregistering): Released all slaves [ 436.555030][T23878] loop1: detected capacity change from 0 to 512 [ 436.602585][T23863] EXT4-fs (loop0): 1 orphan inode deleted [ 436.609664][T23878] EXT4-fs (loop1): 1 orphan inode deleted [ 436.617192][T23863] ext4 filesystem being mounted at /168/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 436.635943][T23878] ext4 filesystem being mounted at /140/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 436.678509][ T3448] EXT4-fs error (device loop0): ext4_release_dquot:6969: comm kworker/u8:7: Failed to release dquot type 1 [ 436.691000][ T3448] EXT4-fs error (device loop1): ext4_release_dquot:6969: comm kworker/u8:7: Failed to release dquot type 1 [ 436.703240][T23921] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3676'. [ 436.715554][T23922] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3677'. [ 436.716870][T23878] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 436.743083][T23863] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 436.757108][T23918] bond1: entered promiscuous mode [ 436.762181][T23918] bond1: entered allmulticast mode [ 436.796214][T23918] 8021q: adding VLAN 0 to HW filter on device bond1 [ 436.823097][T23959] loop2: detected capacity change from 0 to 1024 [ 436.851583][T23918] bond1 (unregistering): Released all slaves [ 436.957124][T24014] loop1: detected capacity change from 0 to 512 [ 436.964910][T24014] EXT4-fs: dax option not supported [ 436.995982][T24014] loop1: detected capacity change from 0 to 512 [ 437.007627][T24014] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 437.183228][T24014] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a843c018, mo2=0002] [ 437.192097][T24014] System zones: 0-2, 18-18, 34-34 [ 437.198910][T24014] ext4 filesystem being mounted at /143/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 437.431937][T24047] loop1: detected capacity change from 0 to 512 [ 437.442295][T24047] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.3686: bg 0: block 5: invalid block bitmap [ 437.456988][T24047] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 437.466979][T24047] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.3686: invalid indirect mapped block 3 (level 2) [ 437.481775][T24047] EXT4-fs (loop1): 2 truncates cleaned up [ 437.492974][T24055] loop2: detected capacity change from 0 to 128 [ 437.504971][T24055] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 437.512908][T24055] FAT-fs (loop2): Filesystem has been set read-only [ 437.519918][T24055] syz.2.3688: attempt to access beyond end of device [ 437.519918][T24055] loop2: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 437.533805][T24055] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 437.541831][T24055] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 437.573066][T24068] loop2: detected capacity change from 0 to 512 [ 437.586302][T24067] bond1: entered promiscuous mode [ 437.591612][T24067] bond1: entered allmulticast mode [ 437.597293][T24067] 8021q: adding VLAN 0 to HW filter on device bond1 [ 437.599428][T24068] EXT4-fs (loop2): 1 orphan inode deleted [ 437.620708][ T379] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:6: Failed to release dquot type 1 [ 437.622020][T24067] bond1 (unregistering): Released all slaves [ 437.643638][T24068] ext4 filesystem being mounted at /35/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 437.715019][T24108] loop3: detected capacity change from 0 to 1024 [ 437.730285][T24143] loop4: detected capacity change from 0 to 512 [ 437.756052][T24143] EXT4-fs (loop4): 1 orphan inode deleted [ 437.766007][T24143] ext4 filesystem being mounted at /159/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 437.776855][ T379] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:6: Failed to release dquot type 1 [ 437.792625][T24143] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 437.802943][T24068] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 437.814714][T24157] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3692'. [ 437.829926][T24143] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3693'. [ 437.879869][T24162] loop2: detected capacity change from 0 to 512 [ 437.906449][T24162] EXT4-fs: dax option not supported [ 437.938911][T24162] loop2: detected capacity change from 0 to 512 [ 437.960015][T24171] bond1: entered promiscuous mode [ 437.965257][T24171] bond1: entered allmulticast mode [ 437.971009][T24171] 8021q: adding VLAN 0 to HW filter on device bond1 [ 437.981592][T24162] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 437.992658][T24171] bond1 (unregistering): Released all slaves [ 438.024055][T24233] loop3: detected capacity change from 0 to 512 [ 438.043932][T24162] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a843c018, mo2=0002] [ 438.056588][T24162] System zones: 0-2, 18-18, 34-34 [ 438.059415][T24233] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.3700: bg 0: block 5: invalid block bitmap [ 438.079586][T24225] loop4: detected capacity change from 0 to 1024 [ 438.089920][T24162] ext4 filesystem being mounted at /36/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 438.126485][T24233] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 438.172678][T24233] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.3700: invalid indirect mapped block 3 (level 2) [ 438.198804][T24233] EXT4-fs (loop3): 2 truncates cleaned up [ 438.292850][T24282] loop0: detected capacity change from 0 to 512 [ 438.309925][T24282] EXT4-fs: Ignoring removed i_version option [ 438.580898][T24299] loop4: detected capacity change from 0 to 128 [ 438.613635][T24299] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 438.621577][T24299] FAT-fs (loop4): Filesystem has been set read-only [ 438.629125][T24299] syz.4.3706: attempt to access beyond end of device [ 438.629125][T24299] loop4: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 438.706576][T24299] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 438.714500][T24299] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 438.900640][T24304] loop4: detected capacity change from 0 to 1024 [ 439.357320][T24331] xt_CT: No such helper "pptp" [ 439.562467][T24337] loop1: detected capacity change from 0 to 512 [ 439.569074][T24337] EXT4-fs: Ignoring removed mblk_io_submit option [ 439.575580][T24337] EXT4-fs: Ignoring removed bh option [ 439.580762][T24336] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 439.582925][T24337] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 439.626770][T24337] EXT4-fs (loop1): 1 truncate cleaned up [ 439.987372][T24372] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.045874][T24372] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.118236][T24372] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.166219][T24372] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.255233][T24372] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 440.266752][T24372] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 440.278278][T24372] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 440.290048][T24372] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 440.323813][T24394] netlink: 'syz.2.3720': attribute type 3 has an invalid length. [ 440.339908][ T29] kauditd_printk_skb: 629 callbacks suppressed [ 440.339921][ T29] audit: type=1326 audit(1750092326.115:18717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24395 comm="syz.3.3719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0161b1e929 code=0x7ffc0000 [ 440.392494][T24402] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.402549][ T29] audit: type=1326 audit(1750092326.157:18718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24395 comm="syz.3.3719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=68 compat=0 ip=0x7f0161b1e929 code=0x7ffc0000 [ 440.426086][ T29] audit: type=1326 audit(1750092326.157:18719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24395 comm="syz.3.3719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0161b1e929 code=0x7ffc0000 [ 440.449728][ T29] audit: type=1326 audit(1750092326.157:18720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24395 comm="syz.3.3719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0161b1e929 code=0x7ffc0000 [ 440.534109][ T29] audit: type=1326 audit(1750092326.304:18721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24406 comm="syz.2.3722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa00d21e929 code=0x7ffc0000 [ 440.540501][T24407] bond1: entered promiscuous mode [ 440.557990][ T29] audit: type=1326 audit(1750092326.304:18722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24406 comm="syz.2.3722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7fa00d21e929 code=0x7ffc0000 [ 440.562904][T24407] bond1: entered allmulticast mode [ 440.586412][ T29] audit: type=1326 audit(1750092326.304:18723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24406 comm="syz.2.3722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa00d21e929 code=0x7ffc0000 [ 440.615269][ T29] audit: type=1326 audit(1750092326.304:18724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24406 comm="syz.2.3722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa00d21e929 code=0x7ffc0000 [ 440.632866][T24443] loop2: detected capacity change from 0 to 1024 [ 440.638946][ T29] audit: type=1326 audit(1750092326.304:18725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24406 comm="syz.2.3722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa00d21e929 code=0x7ffc0000 [ 440.668877][ T29] audit: type=1326 audit(1750092326.304:18726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24406 comm="syz.2.3722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa00d21e929 code=0x7ffc0000 [ 440.669129][T24407] 8021q: adding VLAN 0 to HW filter on device bond1 [ 440.710050][T24445] loop0: detected capacity change from 0 to 512 [ 440.722371][T24407] bond1 (unregistering): Released all slaves [ 440.740520][T24402] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.751702][T24452] loop1: detected capacity change from 0 to 512 [ 440.763112][T24445] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.3724: bg 0: block 5: invalid block bitmap [ 440.776780][T24445] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 440.784370][T24493] loop4: detected capacity change from 0 to 512 [ 440.792937][T24452] EXT4-fs (loop1): 1 orphan inode deleted [ 440.800265][T24445] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.3724: invalid indirect mapped block 3 (level 2) [ 440.808473][T24452] ext4 filesystem being mounted at /148/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 440.827535][ T379] EXT4-fs error (device loop1): ext4_release_dquot:6969: comm kworker/u8:6: Failed to release dquot type 1 [ 440.827796][T24445] EXT4-fs (loop0): 2 truncates cleaned up [ 440.846518][T24402] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.859190][T24493] EXT4-fs (loop4): 1 orphan inode deleted [ 440.866332][ T3448] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:7: Failed to release dquot type 1 [ 440.869247][T24493] ext4 filesystem being mounted at /165/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 440.888612][T24452] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 440.901066][T24522] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3723'. [ 440.916164][T24493] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 440.930226][T24402] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.940671][T24493] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3725'. [ 441.102838][T24402] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.115061][T24402] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.126794][T24402] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.242478][T24402] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.705800][T24559] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 441.756613][T24562] loop2: detected capacity change from 0 to 512 [ 441.764534][T24562] EXT4-fs: dax option not supported [ 441.843436][T24562] loop2: detected capacity change from 0 to 512 [ 441.864824][T24566] bond1: entered promiscuous mode [ 441.870063][T24566] bond1: entered allmulticast mode [ 441.881120][T24562] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 441.894013][T24566] 8021q: adding VLAN 0 to HW filter on device bond1 [ 441.908242][T24562] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a843c018, mo2=0002] [ 441.920781][T24562] System zones: 0-2, 18-18, 34-34 [ 441.929663][T24609] loop1: detected capacity change from 0 to 1024 [ 441.941432][T24562] ext4 filesystem being mounted at /44/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 441.961970][T24566] bond1 (unregistering): Released all slaves [ 441.989446][T24607] netlink: 'syz.4.3733': attribute type 3 has an invalid length. [ 442.184356][T24662] xt_CT: No such helper "pptp" [ 442.237646][T24665] loop1: detected capacity change from 0 to 512 [ 442.247864][T24665] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.3737: bg 0: block 5: invalid block bitmap [ 442.264772][T24665] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 442.303955][T24669] loop3: detected capacity change from 0 to 512 [ 442.313709][T24665] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.3737: invalid indirect mapped block 3 (level 2) [ 442.329718][T24665] EXT4-fs (loop1): 2 truncates cleaned up [ 442.347714][T24669] EXT4-fs (loop3): 1 orphan inode deleted [ 442.355011][T24669] ext4 filesystem being mounted at /182/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 442.366799][ T314] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u8:5: Failed to release dquot type 1 [ 442.397229][T24669] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 442.416297][T24669] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3738'. [ 442.436098][T24676] loop1: detected capacity change from 0 to 512 [ 442.466275][T24676] EXT4-fs (loop1): 1 orphan inode deleted [ 442.475757][T24676] ext4 filesystem being mounted at /153/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 442.489494][ T314] EXT4-fs error (device loop1): ext4_release_dquot:6969: comm kworker/u8:5: Failed to release dquot type 1 [ 442.520926][T24683] bond1: entered promiscuous mode [ 442.526111][T24683] bond1: entered allmulticast mode [ 442.531734][T24683] 8021q: adding VLAN 0 to HW filter on device bond1 [ 442.534923][T24676] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 442.548435][T24719] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3739'. [ 442.561806][T24683] bond1 (unregistering): Released all slaves [ 442.595678][T24720] loop3: detected capacity change from 0 to 1024 [ 442.804273][T24782] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 442.860643][T24782] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 442.984728][T24782] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 443.079664][T24808] loop0: detected capacity change from 0 to 512 [ 443.086937][T24808] EXT4-fs: dax option not supported [ 443.131698][T24808] loop0: detected capacity change from 0 to 512 [ 443.164311][T24808] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 443.289218][T24808] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a843c018, mo2=0002] [ 443.308414][T24808] System zones: 0-2, 18-18, 34-34 [ 443.321693][T24808] ext4 filesystem being mounted at /178/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 443.366305][T24782] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 443.436962][T24782] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.456224][T24782] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.484563][T24825] bond1: entered promiscuous mode [ 443.489702][T24825] bond1: entered allmulticast mode [ 443.495052][T24825] 8021q: adding VLAN 0 to HW filter on device bond1 [ 443.506836][T24825] bond1 (unregistering): Released all slaves [ 443.527286][T24782] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.541629][T24782] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.553529][T24891] loop0: detected capacity change from 0 to 1024 [ 443.624132][T24906] xt_CT: No such helper "pptp" [ 443.743008][T24913] loop0: detected capacity change from 0 to 512 [ 443.761586][T24911] loop2: detected capacity change from 0 to 512 [ 443.772954][T24915] loop1: detected capacity change from 0 to 512 [ 443.793176][T24911] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.3751: bg 0: block 5: invalid block bitmap [ 443.823120][T24911] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 443.839110][T24915] EXT4-fs (loop1): 1 orphan inode deleted [ 443.846548][T24913] EXT4-fs (loop0): 1 orphan inode deleted [ 443.853608][ T37] EXT4-fs error (device loop1): ext4_release_dquot:6969: comm kworker/u8:2: Failed to release dquot type 1 [ 443.876360][T24915] ext4 filesystem being mounted at /156/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 443.892600][T24913] ext4 filesystem being mounted at /180/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 443.892780][T24911] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.3751: invalid indirect mapped block 3 (level 2) [ 443.909008][ T37] EXT4-fs error (device loop0): ext4_release_dquot:6969: comm kworker/u8:2: Failed to release dquot type 1 [ 443.923371][T24911] EXT4-fs (loop2): 2 truncates cleaned up [ 443.938142][T24915] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 443.948611][T24913] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 443.948980][T24915] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3750'. [ 443.958032][T24913] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3752'. [ 443.985722][T24926] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 444.007806][T24935] netlink: 'syz.1.3754': attribute type 3 has an invalid length. [ 444.064615][T24943] bond1: entered promiscuous mode [ 444.069781][T24943] bond1: entered allmulticast mode [ 444.075270][T24943] 8021q: adding VLAN 0 to HW filter on device bond1 [ 444.094048][T24943] bond1 (unregistering): Released all slaves [ 444.122676][T24982] loop0: detected capacity change from 0 to 1024 [ 444.300463][T25045] loop2: detected capacity change from 0 to 512 [ 444.310451][T25045] EXT4-fs: dax option not supported [ 444.321131][T25051] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 444.324888][T25045] loop2: detected capacity change from 0 to 512 [ 444.341314][T25045] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 444.364912][T25045] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a843c018, mo2=0002] [ 444.375428][T25045] System zones: 0-2, 18-18, 34-34 [ 444.384538][T25051] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 444.397664][T25045] ext4 filesystem being mounted at /49/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 444.455189][T25051] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 444.519074][T25051] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 444.558863][T21122] EXT4-fs unmount: 116 callbacks suppressed [ 444.558883][T21122] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 444.593705][T25051] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.606955][T25051] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.621771][T25051] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.633760][T25051] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.650962][T25068] xt_CT: No such helper "pptp" [ 444.781383][T25086] loop3: detected capacity change from 0 to 512 [ 444.822529][T25086] EXT4-fs (loop3): 1 orphan inode deleted [ 444.828809][T25086] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 444.924574][ T12] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u8:0: Failed to release dquot type 1 [ 444.956870][T25086] ext4 filesystem being mounted at /186/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 445.037502][T25086] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 445.142578][T25086] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3764'. [ 445.299822][T13214] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 445.332705][ T29] kauditd_printk_skb: 491 callbacks suppressed [ 445.332725][ T29] audit: type=1326 audit(1750092331.365:19211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25098 comm="syz.1.3766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f930eafe929 code=0x7ffc0000 [ 445.363075][ T29] audit: type=1326 audit(1750092331.365:19212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25098 comm="syz.1.3766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f930eafe929 code=0x7ffc0000 [ 445.380007][T25099] bond1: entered promiscuous mode [ 445.386664][ T29] audit: type=1326 audit(1750092331.365:19213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25098 comm="syz.1.3766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f930eafe929 code=0x7ffc0000 [ 445.391723][T25099] bond1: entered allmulticast mode [ 445.420576][ T29] audit: type=1326 audit(1750092331.365:19214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25098 comm="syz.1.3766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f930eafe929 code=0x7ffc0000 [ 445.444387][ T29] audit: type=1326 audit(1750092331.365:19215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25098 comm="syz.1.3766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f930eafe929 code=0x7ffc0000 [ 445.468070][ T29] audit: type=1326 audit(1750092331.365:19216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25098 comm="syz.1.3766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f930eafe929 code=0x7ffc0000 [ 445.491579][ T29] audit: type=1326 audit(1750092331.365:19217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25098 comm="syz.1.3766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f930eafe929 code=0x7ffc0000 [ 445.515230][ T29] audit: type=1326 audit(1750092331.375:19218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25098 comm="syz.1.3766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f930eafe929 code=0x7ffc0000 [ 445.539016][ T29] audit: type=1326 audit(1750092331.375:19219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25098 comm="syz.1.3766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f930eafe929 code=0x7ffc0000 [ 445.562701][ T29] audit: type=1326 audit(1750092331.375:19220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25098 comm="syz.1.3766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f930eafe929 code=0x7ffc0000 [ 445.590846][T25099] 8021q: adding VLAN 0 to HW filter on device bond1 [ 445.604391][T25138] loop1: detected capacity change from 0 to 1024 [ 445.638452][T25101] loop3: detected capacity change from 0 to 512 [ 445.654778][T25141] loop4: detected capacity change from 0 to 512 [ 445.655931][T25099] bond1 (unregistering): Released all slaves [ 445.678817][T25101] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.3765: bg 0: block 5: invalid block bitmap [ 445.680702][T25141] EXT4-fs (loop4): 1 orphan inode deleted [ 445.704651][ T12] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:0: Failed to release dquot type 1 [ 445.719332][T25143] netlink: 'syz.2.3768': attribute type 3 has an invalid length. [ 445.731911][T25101] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 445.751588][T25141] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 445.765657][T25101] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.3765: invalid indirect mapped block 3 (level 2) [ 445.766165][T25141] ext4 filesystem being mounted at /172/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 445.792847][T25101] EXT4-fs (loop3): 2 truncates cleaned up [ 445.807779][T25141] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 445.810057][T25101] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 445.831769][T25141] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3767'. [ 445.857371][T13214] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 445.869025][T14084] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 445.896259][T25191] loop2: detected capacity change from 0 to 512 [ 445.907325][T25191] EXT4-fs: dax option not supported [ 445.918834][T25191] loop2: detected capacity change from 0 to 512 [ 445.929655][T25191] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 445.971561][T25191] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a843c018, mo2=0002] [ 446.014262][T25198] bond1: entered promiscuous mode [ 446.019405][T25198] bond1: entered allmulticast mode [ 446.019719][T25191] System zones: 0-2, 18-18, 34-34 [ 446.024807][T25198] 8021q: adding VLAN 0 to HW filter on device bond1 [ 446.045213][T25244] loop4: detected capacity change from 0 to 1024 [ 446.054736][T25198] bond1 (unregistering): Released all slaves [ 446.071335][T25191] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 446.091895][T25245] xt_CT: No such helper "pptp" [ 446.115048][T25191] ext4 filesystem being mounted at /53/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 446.185845][T21122] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 446.239697][T25314] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 446.320193][T25314] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 446.330852][T25315] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 446.393549][T25314] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 446.442442][T25314] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 446.512220][T25314] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 446.527906][T25314] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 446.541976][T25314] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 446.556658][T25314] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 446.623790][T25343] loop2: detected capacity change from 0 to 512 [ 446.644094][T25343] EXT4-fs (loop2): 1 orphan inode deleted [ 446.651746][T25343] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 446.664462][ T12] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:0: Failed to release dquot type 1 [ 446.664684][T25343] ext4 filesystem being mounted at /55/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 446.691837][T25343] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 446.702622][T25343] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3778'. [ 446.751007][T21122] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 446.946400][T25354] loop1: detected capacity change from 0 to 512 [ 447.010135][T25359] loop0: detected capacity change from 0 to 512 [ 447.023768][T25354] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.3780: bg 0: block 5: invalid block bitmap [ 447.039262][T25354] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 447.048903][T25354] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.3780: invalid indirect mapped block 3 (level 2) [ 447.064321][T25354] EXT4-fs (loop1): 2 truncates cleaned up [ 447.070944][T25354] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 447.131782][T25359] EXT4-fs (loop0): 1 orphan inode deleted [ 447.154272][ T12] EXT4-fs error (device loop0): ext4_release_dquot:6969: comm kworker/u8:0: Failed to release dquot type 1 [ 447.188578][T25359] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 447.228878][T25364] netlink: 'syz.4.3782': attribute type 3 has an invalid length. [ 447.261625][T15608] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 447.301036][T25359] ext4 filesystem being mounted at /186/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 447.370315][T25359] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 447.414243][T25369] bond1: entered promiscuous mode [ 447.419459][T25369] bond1: entered allmulticast mode [ 447.426908][T25405] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3781'. [ 447.437333][T25369] 8021q: adding VLAN 0 to HW filter on device bond1 [ 447.462964][T25406] loop3: detected capacity change from 0 to 1024 [ 447.483031][T25369] bond1 (unregistering): Released all slaves [ 447.501018][T14893] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 447.544993][T25449] xt_CT: No such helper "pptp" [ 447.570644][T25454] loop0: detected capacity change from 0 to 512 [ 447.579219][T25454] EXT4-fs: dax option not supported [ 447.639280][T25454] loop0: detected capacity change from 0 to 512 [ 447.651211][T25454] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 447.679594][T25454] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a843c018, mo2=0002] [ 447.694761][T25454] System zones: 0-2, 18-18, 34-34 [ 447.702988][T25454] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 447.715827][T25454] ext4 filesystem being mounted at /188/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 447.766231][T25465] bond1: entered promiscuous mode [ 447.771325][T25465] bond1: entered allmulticast mode [ 447.777091][T25465] 8021q: adding VLAN 0 to HW filter on device bond1 [ 447.777887][T14893] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 447.813244][T25465] bond1 (unregistering): Released all slaves [ 447.829115][T25503] loop3: detected capacity change from 0 to 1024 [ 447.872077][T25542] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.966406][T25563] loop2: detected capacity change from 0 to 512 [ 447.974458][T25542] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.997571][T25563] EXT4-fs (loop2): 1 orphan inode deleted [ 448.006572][T25563] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 448.019379][ T12] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:0: Failed to release dquot type 1 [ 448.019437][T25563] ext4 filesystem being mounted at /58/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 448.048149][T25563] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 448.058492][T25542] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.070274][T25563] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3790'. [ 448.095791][T21122] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 448.161726][T25542] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.332698][T25597] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 448.947354][T25603] loop2: detected capacity change from 0 to 512 [ 448.949860][T25605] loop4: detected capacity change from 0 to 512 [ 448.957196][T25603] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.3795: bg 0: block 5: invalid block bitmap [ 448.975371][T25603] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 448.985140][T25603] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.3795: invalid indirect mapped block 3 (level 2) [ 448.999382][T25603] EXT4-fs (loop2): 2 truncates cleaned up [ 449.003190][T25605] EXT4-fs (loop4): 1 orphan inode deleted [ 449.005747][T25603] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 449.023937][T25605] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 449.036756][ T3448] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:7: Failed to release dquot type 1 [ 449.037095][T25605] ext4 filesystem being mounted at /177/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 449.073559][T21122] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 449.075927][T25605] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 449.092898][T25605] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3796'. [ 449.119127][T14084] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 449.137949][T25615] xt_CT: No such helper "pptp" [ 449.244762][T25623] bond1: entered promiscuous mode [ 449.250226][T25623] bond1: entered allmulticast mode [ 449.307975][T25623] 8021q: adding VLAN 0 to HW filter on device bond1 [ 449.338546][T25661] loop4: detected capacity change from 0 to 1024 [ 449.360407][T25623] bond1 (unregistering): Released all slaves [ 449.513687][T25684] loop1: detected capacity change from 0 to 512 [ 449.596084][T25684] EXT4-fs (loop1): 1 orphan inode deleted [ 449.616470][T25684] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 449.631037][ T3448] EXT4-fs error (device loop1): ext4_release_dquot:6969: comm kworker/u8:7: Failed to release dquot type 1 [ 449.655479][T25542] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 449.663903][T25684] ext4 filesystem being mounted at /164/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 449.677845][T25542] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 449.681028][T25711] loop3: detected capacity change from 0 to 512 [ 449.690958][T25542] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 449.693850][T25711] EXT4-fs: dax option not supported [ 449.709467][T25542] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 449.720906][T25711] loop3: detected capacity change from 0 to 512 [ 449.731590][T25684] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 449.741702][T25684] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3801'. [ 449.743273][T25711] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 449.777974][T15608] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 449.790843][T25723] bond1: entered promiscuous mode [ 449.793027][T25711] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a843c018, mo2=0002] [ 449.796009][T25723] bond1: entered allmulticast mode [ 449.805545][T25711] System zones: 0-2, 18-18, 34-34 [ 449.810143][T25723] 8021q: adding VLAN 0 to HW filter on device bond1 [ 449.822258][T25711] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 449.841928][T25723] bond1 (unregistering): Released all slaves [ 449.848184][T25711] ext4 filesystem being mounted at /195/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 449.863849][T25761] loop4: detected capacity change from 0 to 1024 [ 449.876719][T25721] netlink: 'syz.0.3803': attribute type 3 has an invalid length. [ 449.964682][T13214] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 450.019937][T25841] loop0: detected capacity change from 0 to 512 [ 450.029223][T25841] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.3808: bg 0: block 5: invalid block bitmap [ 450.043666][T25841] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 450.052799][T25841] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.3808: invalid indirect mapped block 3 (level 2) [ 450.067759][T25841] EXT4-fs (loop0): 2 truncates cleaned up [ 450.074423][T25841] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 450.119352][T14893] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 450.141510][T25848] loop4: detected capacity change from 0 to 512 [ 450.157896][T25848] EXT4-fs (loop4): 1 orphan inode deleted [ 450.164279][T25848] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 450.178135][ T3448] __quota_error: 548 callbacks suppressed [ 450.178153][ T3448] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 450.193775][ T3448] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:7: Failed to release dquot type 1 [ 450.206622][T25848] ext4 filesystem being mounted at /180/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 450.232634][T25848] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 450.248401][T25848] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3810'. [ 450.286017][T14084] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 450.326562][T25858] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 450.774334][T25870] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.842199][T25870] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.904014][ T29] audit: type=1326 audit(1750092337.213:19763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25876 comm="syz.3.3814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0161b1e929 code=0x7ffc0000 [ 450.928926][T25870] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.928915][ T29] audit: type=1326 audit(1750092337.213:19764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25876 comm="syz.3.3814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f0161b1e929 code=0x7ffc0000 [ 450.950521][T25879] xt_CT: No such helper "pptp" [ 450.962340][ T29] audit: type=1326 audit(1750092337.213:19765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25876 comm="syz.3.3814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0161b1e929 code=0x7ffc0000 [ 450.990944][ T29] audit: type=1326 audit(1750092337.213:19766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25876 comm="syz.3.3814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0161b1e929 code=0x7ffc0000 [ 451.014747][ T29] audit: type=1326 audit(1750092337.213:19767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25876 comm="syz.3.3814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0161b1e929 code=0x7ffc0000 [ 451.038958][ T29] audit: type=1326 audit(1750092337.213:19768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25876 comm="syz.3.3814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0161b1e929 code=0x7ffc0000 [ 451.062641][ T29] audit: type=1326 audit(1750092337.213:19769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25876 comm="syz.3.3814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0161b1e929 code=0x7ffc0000 [ 451.086680][ T29] audit: type=1326 audit(1750092337.213:19770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25876 comm="syz.3.3814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0161b1e929 code=0x7ffc0000 [ 451.110309][ T29] audit: type=1326 audit(1750092337.213:19771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25876 comm="syz.3.3814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0161b1e929 code=0x7ffc0000 [ 451.177254][T25891] loop1: detected capacity change from 0 to 512 [ 451.195646][T25887] loop3: detected capacity change from 0 to 1024 [ 451.216352][T25891] EXT4-fs (loop1): 1 orphan inode deleted [ 451.223512][T25891] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 451.236385][ T3448] EXT4-fs error (device loop1): ext4_release_dquot:6969: comm kworker/u8:7: Failed to release dquot type 1 [ 451.250825][T25885] bond1: entered promiscuous mode [ 451.256096][T25885] bond1: entered allmulticast mode [ 451.261680][T25891] ext4 filesystem being mounted at /168/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 451.261911][T25885] 8021q: adding VLAN 0 to HW filter on device bond1 [ 451.286180][T25885] bond1 (unregistering): Released all slaves [ 451.302579][T25891] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 451.314214][T25870] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 451.315771][T25891] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3816'. [ 451.357334][T15608] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 451.389862][T25972] netlink: 'syz.1.3818': attribute type 3 has an invalid length. [ 451.505350][T25870] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.516762][T25870] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.528357][T25870] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.540481][T25870] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.645795][T25989] loop0: detected capacity change from 0 to 512 [ 451.833055][T25991] loop1: detected capacity change from 0 to 512 [ 451.866850][T25989] EXT4-fs: Ignoring removed i_version option [ 451.929332][T25991] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.3820: bg 0: block 5: invalid block bitmap [ 451.962612][T25989] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 451.974882][T26005] loop2: detected capacity change from 0 to 1024 [ 451.993439][T25991] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 452.004725][T25991] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.3820: invalid indirect mapped block 3 (level 2) [ 452.020727][T25993] bond1: entered promiscuous mode [ 452.022179][T25991] EXT4-fs (loop1): 2 truncates cleaned up [ 452.026332][T25993] bond1: entered allmulticast mode [ 452.037392][T25993] 8021q: adding VLAN 0 to HW filter on device bond1 [ 452.048168][T25993] bond1 (unregistering): Released all slaves [ 452.070452][T25991] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 452.137419][T15608] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 452.242146][T26102] loop4: detected capacity change from 0 to 512 [ 452.261862][T26102] EXT4-fs (loop4): 1 orphan inode deleted [ 452.268248][T26102] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 452.280986][ T51] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:3: Failed to release dquot type 1 [ 452.288973][T26102] ext4 filesystem being mounted at /183/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 452.309934][T26102] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 452.320224][T26102] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3824'. [ 452.342677][T14084] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 452.417850][T14893] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 452.452528][T26120] loop0: detected capacity change from 0 to 512 [ 452.478936][T26120] EXT4-fs: dax option not supported [ 452.510841][T26120] loop0: detected capacity change from 0 to 512 [ 452.527701][T26120] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 452.556241][T26120] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a843c018, mo2=0002] [ 452.564888][T26120] System zones: 0-2, 18-18, 34-34 [ 452.572997][T26120] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 452.586695][T26120] ext4 filesystem being mounted at /194/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 452.616524][T26130] loop2: detected capacity change from 0 to 512 [ 452.646898][T14893] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 452.677072][T26130] EXT4-fs (loop2): 1 orphan inode deleted [ 452.684195][T26130] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 452.707053][ T51] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:3: Failed to release dquot type 1 [ 452.827064][T26130] ext4 filesystem being mounted at /66/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 452.843722][T26130] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 452.856431][T26130] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3828'. [ 453.021565][T21122] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 453.031192][T26144] netlink: 'syz.1.3831': attribute type 3 has an invalid length. [ 453.088623][T26153] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 453.121205][T26145] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 453.188222][T26158] bond1: entered promiscuous mode [ 453.193378][T26158] bond1: entered allmulticast mode [ 453.203084][T26158] 8021q: adding VLAN 0 to HW filter on device bond1 [ 453.218479][T26158] bond1 (unregistering): Released all slaves [ 453.236276][T26194] loop1: detected capacity change from 0 to 1024 [ 453.304883][T26153] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 453.336264][T26229] loop4: detected capacity change from 0 to 512 [ 453.365461][T26229] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.3834: bg 0: block 5: invalid block bitmap [ 453.379540][T26153] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 453.389364][T26229] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 453.399734][T26229] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.3834: invalid indirect mapped block 3 (level 2) [ 453.419417][T26229] EXT4-fs (loop4): 2 truncates cleaned up [ 453.427647][T26229] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 453.479884][T26153] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 453.545923][T14084] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 453.590834][T26243] loop1: detected capacity change from 0 to 512 [ 453.613945][T26248] bond1: entered promiscuous mode [ 453.619130][T26248] bond1: entered allmulticast mode [ 453.660923][T26248] 8021q: adding VLAN 0 to HW filter on device bond1 [ 453.686992][T26289] loop0: detected capacity change from 0 to 1024 [ 453.708990][T26243] EXT4-fs (loop1): 1 orphan inode deleted [ 453.715381][T26248] bond1 (unregistering): Released all slaves [ 453.723144][T26243] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 453.735788][ T3448] EXT4-fs error (device loop1): ext4_release_dquot:6969: comm kworker/u8:7: Failed to release dquot type 1 [ 453.755543][T26243] ext4 filesystem being mounted at /174/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 453.954118][T26243] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 454.003951][T26243] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3836'. [ 454.117609][T15608] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 454.159544][T26362] loop3: detected capacity change from 0 to 512 [ 454.167986][T26362] EXT4-fs: dax option not supported [ 454.168329][T26357] xt_CT: No such helper "pptp" [ 454.191986][T26362] loop3: detected capacity change from 0 to 512 [ 454.199997][T26362] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 454.222357][T26362] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a843c018, mo2=0002] [ 454.230471][T26362] System zones: 0-2, 18-18, 34-34 [ 454.236574][T26362] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 454.249241][T26362] ext4 filesystem being mounted at /201/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 454.276842][T13214] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 454.296945][T26379] netlink: 'syz.3.3843': attribute type 3 has an invalid length. [ 454.436075][T26385] loop4: detected capacity change from 0 to 512 [ 454.453869][T26385] EXT4-fs (loop4): 1 orphan inode deleted [ 454.460056][T26385] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 454.472872][T26385] ext4 filesystem being mounted at /187/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 454.473912][ T314] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:5: Failed to release dquot type 1 [ 454.496234][T26385] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 454.505235][T26385] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3844'. [ 454.529134][T14084] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 455.019458][ T29] kauditd_printk_skb: 344 callbacks suppressed [ 455.019478][ T29] audit: type=1326 audit(1750092341.528:20111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26395 comm="syz.0.3846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc338a3e929 code=0x7ffc0000 [ 455.049537][ T29] audit: type=1326 audit(1750092341.528:20112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26395 comm="syz.0.3846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc338a3e929 code=0x7ffc0000 [ 455.080396][T26396] loop0: detected capacity change from 0 to 512 [ 455.133367][ T29] audit: type=1326 audit(1750092341.549:20113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26395 comm="syz.0.3846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=297 compat=0 ip=0x7fc338a3e929 code=0x7ffc0000 [ 455.157187][ T29] audit: type=1326 audit(1750092341.549:20114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26395 comm="syz.0.3846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc338a3e929 code=0x7ffc0000 [ 455.181130][ T29] audit: type=1326 audit(1750092341.549:20115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26395 comm="syz.0.3846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc338a3e929 code=0x7ffc0000 [ 455.204890][ T29] audit: type=1326 audit(1750092341.591:20116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26395 comm="syz.0.3846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc338a3e929 code=0x7ffc0000 [ 455.228738][ T29] audit: type=1326 audit(1750092341.591:20117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26395 comm="syz.0.3846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc338a3e929 code=0x7ffc0000 [ 455.252415][ T29] audit: type=1326 audit(1750092341.591:20118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26395 comm="syz.0.3846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc338a3e929 code=0x7ffc0000 [ 455.276019][ T29] audit: type=1326 audit(1750092341.591:20119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26395 comm="syz.0.3846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc338a3e929 code=0x7ffc0000 [ 455.299699][ T29] audit: type=1326 audit(1750092341.591:20120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26395 comm="syz.0.3846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc338a3e929 code=0x7ffc0000 [ 455.321675][T26396] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.3846: bg 0: block 5: invalid block bitmap [ 455.336982][T26396] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 455.345935][T26396] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.3846: invalid indirect mapped block 3 (level 2) [ 455.360731][T26396] EXT4-fs (loop0): 2 truncates cleaned up [ 455.367527][T26396] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 455.517707][T14893] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 455.587957][T26406] bond1: entered promiscuous mode [ 455.593076][T26406] bond1: entered allmulticast mode [ 455.599087][T26406] 8021q: adding VLAN 0 to HW filter on device bond1 [ 455.617615][T26406] bond1 (unregistering): Released all slaves [ 455.671846][T26446] loop0: detected capacity change from 0 to 1024 [ 455.784185][T26484] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 455.909720][T26489] loop3: detected capacity change from 0 to 512 [ 455.929343][T26489] EXT4-fs (loop3): 1 orphan inode deleted [ 455.935691][T26489] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 455.957131][T26491] bond1: entered promiscuous mode [ 455.962352][T26491] bond1: entered allmulticast mode [ 455.967722][ T3448] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u8:7: Failed to release dquot type 1 [ 455.982865][T26491] 8021q: adding VLAN 0 to HW filter on device bond1 [ 455.984287][T26489] ext4 filesystem being mounted at /204/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 456.005919][T26491] bond1 (unregistering): Released all slaves [ 456.012168][T26531] loop0: detected capacity change from 0 to 1024 [ 456.028357][T26489] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 456.038179][T26153] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 456.044130][T26489] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3851'. [ 456.058276][T26566] xt_CT: No such helper "pptp" [ 456.073119][T26153] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 456.082304][T13214] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 456.096981][T26153] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 456.109896][T26153] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 456.122574][T26582] loop1: detected capacity change from 0 to 512 [ 456.129541][T26582] EXT4-fs: dax option not supported [ 456.140947][T26582] loop1: detected capacity change from 0 to 512 [ 456.186018][T26582] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 456.204672][T26582] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a843c018, mo2=0002] [ 456.218039][T26582] System zones: 0-2, 18-18, 34-34 [ 456.232391][T26582] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 456.245260][T26582] ext4 filesystem being mounted at /179/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 456.277639][T15608] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 456.560392][T26624] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.580883][T26622] loop4: detected capacity change from 0 to 512 [ 456.606145][T26624] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.626400][T26622] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.3858: bg 0: block 5: invalid block bitmap [ 456.639772][T26622] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 456.650543][T26622] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.3858: invalid indirect mapped block 3 (level 2) [ 456.668600][T26622] EXT4-fs (loop4): 2 truncates cleaned up [ 456.676212][T26624] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.690491][T26622] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 456.718914][T26624] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.719048][T14084] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 456.744587][T26639] loop1: detected capacity change from 0 to 512 [ 456.753547][T26643] netlink: 'syz.4.3860': attribute type 3 has an invalid length. [ 456.763839][T26639] EXT4-fs (loop1): 1 orphan inode deleted [ 456.771689][T26639] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 456.784571][ T3647] EXT4-fs error (device loop1): ext4_release_dquot:6969: comm kworker/u8:8: Failed to release dquot type 1 [ 456.786250][T26639] ext4 filesystem being mounted at /180/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 456.812683][T26639] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 456.812710][T26624] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 456.816354][T26624] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 456.841397][T26624] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 456.853105][T26624] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 456.858204][T26658] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3857'. [ 456.887516][T15608] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 456.978824][T26671] loop3: detected capacity change from 0 to 128 [ 456.988448][T26671] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 456.996510][T26671] FAT-fs (loop3): Filesystem has been set read-only [ 457.004789][T26671] syz.3.3864: attempt to access beyond end of device [ 457.004789][T26671] loop3: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 457.019640][T26671] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 457.027529][T26671] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 457.055607][T26673] loop1: detected capacity change from 0 to 1024 [ 457.060606][T26664] bond1: entered promiscuous mode [ 457.067048][T26664] bond1: entered allmulticast mode [ 457.072544][T26664] 8021q: adding VLAN 0 to HW filter on device bond1 [ 457.089342][T26664] bond1 (unregistering): Released all slaves [ 457.095807][T26708] xt_CT: No such helper "pptp" [ 457.131541][T26719] loop3: detected capacity change from 0 to 512 [ 457.143907][T26750] loop2: detected capacity change from 0 to 512 [ 457.151033][T26750] EXT4-fs: dax option not supported [ 457.168605][T26750] loop2: detected capacity change from 0 to 512 [ 457.181769][T26750] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 457.214075][T26719] EXT4-fs (loop3): 1 orphan inode deleted [ 457.223072][T26719] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 457.237543][T26719] ext4 filesystem being mounted at /207/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 457.250348][T26750] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a843c018, mo2=0002] [ 457.258903][T26750] System zones: 0-2, 18-18, 34-34 [ 457.268567][T26750] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 457.282536][T26750] ext4 filesystem being mounted at /70/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 457.328499][ T3647] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u8:8: Failed to release dquot type 1 [ 457.359615][T21122] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 457.370241][T26719] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 457.380120][T26719] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3865'. [ 457.441292][T26771] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.500306][T26771] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.549308][T26771] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.613728][T26786] loop3: detected capacity change from 0 to 512 [ 457.635652][T26786] EXT4-fs (loop3): 1 orphan inode deleted [ 457.642904][T26771] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.643204][T26786] ext4 filesystem being mounted at /210/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 457.653212][ T3647] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u8:8: Failed to release dquot type 1 [ 457.664356][T26787] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 457.710185][T26794] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.722240][T26786] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 457.742836][T26786] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3872'. [ 457.766480][T26794] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.813832][T26794] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.918896][T26794] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.992730][T26794] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.007151][T26794] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.024396][T26794] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.038446][T26794] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.308152][T26828] xt_CT: No such helper "pptp" [ 458.356472][T26831] loop1: detected capacity change from 0 to 128 [ 458.366831][T26831] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 458.374815][T26831] FAT-fs (loop1): Filesystem has been set read-only [ 458.381480][T26831] syz.1.3878: attempt to access beyond end of device [ 458.381480][T26831] loop1: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 458.395442][T26831] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 458.403461][T26831] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 458.435828][T26838] loop1: detected capacity change from 0 to 512 [ 458.442852][T26838] EXT4-fs: dax option not supported [ 458.454367][T26836] bond1: entered promiscuous mode [ 458.459454][T26836] bond1: entered allmulticast mode [ 458.460789][T26838] loop1: detected capacity change from 0 to 512 [ 458.465126][T26836] 8021q: adding VLAN 0 to HW filter on device bond1 [ 458.477703][T26838] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 458.488254][T26836] bond1 (unregistering): Released all slaves [ 458.500325][T26838] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a843c018, mo2=0002] [ 458.508685][T26878] loop4: detected capacity change from 0 to 1024 [ 458.513124][T26838] System zones: 0-2, 18-18, 34-34 [ 458.521657][T26838] ext4 filesystem being mounted at /185/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 458.591438][T26925] netlink: 'syz.1.3883': attribute type 3 has an invalid length. [ 458.808870][T26943] xt_CT: No such helper "pptp" [ 458.834232][T26947] loop0: detected capacity change from 0 to 128 [ 458.844255][T26947] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 458.852216][T26947] FAT-fs (loop0): Filesystem has been set read-only [ 458.859364][T26947] syz.0.3890: attempt to access beyond end of device [ 458.859364][T26947] loop0: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 458.877391][T26947] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 458.885359][T26947] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 458.930538][T26950] loop4: detected capacity change from 0 to 512 [ 458.937924][T26950] EXT4-fs: Ignoring removed i_version option [ 459.305501][T26955] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.355910][T26942] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 459.462436][T26955] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.519009][T26955] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.551007][T26969] loop4: detected capacity change from 0 to 512 [ 459.559211][T26969] EXT4-fs: dax option not supported [ 459.559488][T26955] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.572665][T26969] loop4: detected capacity change from 0 to 512 [ 459.583146][T26969] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 459.624912][T26969] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a843c018, mo2=0002] [ 459.647561][T26969] System zones: 0-2, 18-18, 34-34 [ 459.663949][T26969] ext4 filesystem being mounted at /196/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 459.773551][T26985] bond1: entered promiscuous mode [ 459.778859][T26985] bond1: entered allmulticast mode [ 459.785895][T26985] 8021q: adding VLAN 0 to HW filter on device bond1 [ 459.796313][T26985] bond1 (unregistering): Released all slaves [ 459.819067][T27024] netlink: 'syz.3.3897': attribute type 3 has an invalid length. [ 459.837367][T27059] loop1: detected capacity change from 0 to 1024 [ 459.882119][ T29] kauditd_printk_skb: 497 callbacks suppressed [ 459.882139][ T29] audit: type=1326 audit(1750092346.620:20614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26984 comm="syz.1.3895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f930eafe929 code=0x7ffc0000 [ 459.912046][ T29] audit: type=1326 audit(1750092346.620:20615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26984 comm="syz.1.3895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f930eafe929 code=0x7ffc0000 [ 459.936406][ T29] audit: type=1326 audit(1750092346.652:20616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26984 comm="syz.1.3895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f930eafe929 code=0x7ffc0000 [ 459.960094][ T29] audit: type=1326 audit(1750092346.652:20617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26984 comm="syz.1.3895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f930eafe929 code=0x7ffc0000 [ 459.983894][ T29] audit: type=1326 audit(1750092346.652:20618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26984 comm="syz.1.3895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f930eafe929 code=0x7ffc0000 [ 460.007617][ T29] audit: type=1326 audit(1750092346.652:20619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26984 comm="syz.1.3895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=243 compat=0 ip=0x7f930eafe929 code=0x7ffc0000 [ 460.031256][ T29] audit: type=1326 audit(1750092346.652:20620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26984 comm="syz.1.3895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f930eafe929 code=0x7ffc0000 [ 460.054919][ T29] audit: type=1326 audit(1750092346.652:20621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26984 comm="syz.1.3895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f930eafe929 code=0x7ffc0000 [ 460.170400][ T29] audit: type=1326 audit(1750092346.935:20622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27068 comm="syz.1.3898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f930eafe929 code=0x7ffc0000 [ 460.195446][ T29] audit: type=1326 audit(1750092346.935:20623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27068 comm="syz.1.3898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f930eafe929 code=0x7ffc0000 [ 460.219463][T27069] loop1: detected capacity change from 0 to 512 [ 460.228602][T27069] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.3898: bg 0: block 5: invalid block bitmap [ 460.242201][T27069] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 460.250001][T26771] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.251124][T27069] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.3898: invalid indirect mapped block 3 (level 2) [ 460.265830][T26771] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.273307][T27069] EXT4-fs (loop1): 2 truncates cleaned up [ 460.288392][T26771] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.302150][T26771] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.348430][T27087] loop1: detected capacity change from 0 to 1024 [ 460.473011][T27091] ================================================================== [ 460.481165][T27091] BUG: KCSAN: data-race in file_write_and_wait_range / xas_set_mark [ 460.489211][T27091] [ 460.491572][T27091] write to 0xffff8881074329a4 of 4 bytes by task 27087 on cpu 0: [ 460.499308][T27091] xas_set_mark+0x12b/0x140 [ 460.503858][T27091] tag_pages_for_writeback+0xc2/0x290 [ 460.509252][T27091] ext4_do_writepages+0x697/0x21c0 [ 460.514393][T27091] ext4_writepages+0x176/0x300 [ 460.519195][T27091] do_writepages+0x1c6/0x310 [ 460.523824][T27091] filemap_write_and_wait_range+0x144/0x340 [ 460.529764][T27091] filemap_invalidate_pages+0xa4/0x1a0 [ 460.535273][T27091] kiocb_invalidate_pages+0x6e/0x80 [ 460.540524][T27091] __iomap_dio_rw+0x5d4/0x1250 [ 460.545321][T27091] iomap_dio_rw+0x40/0x90 [ 460.549694][T27091] ext4_file_write_iter+0xad9/0xf00 [ 460.554918][T27091] iter_file_splice_write+0x5ef/0x970 [ 460.560344][T27091] direct_splice_actor+0x153/0x2a0 [ 460.565494][T27091] splice_direct_to_actor+0x30f/0x680 [ 460.570902][T27091] do_splice_direct+0xda/0x150 [ 460.575709][T27091] do_sendfile+0x380/0x650 [ 460.580151][T27091] __x64_sys_sendfile64+0x105/0x150 [ 460.585384][T27091] x64_sys_call+0xb39/0x2fb0 [ 460.590011][T27091] do_syscall_64+0xd2/0x200 [ 460.594539][T27091] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 460.600464][T27091] [ 460.602810][T27091] read to 0xffff8881074329a4 of 4 bytes by task 27091 on cpu 1: [ 460.610468][T27091] file_write_and_wait_range+0x10e/0x2c0 [ 460.616154][T27091] generic_buffers_fsync_noflush+0x45/0x120 [ 460.622090][T27091] ext4_sync_file+0x1ab/0x690 [ 460.626821][T27091] vfs_fsync_range+0x10a/0x130 [ 460.631620][T27091] ext4_buffered_write_iter+0x34f/0x3c0 [ 460.637194][T27091] ext4_file_write_iter+0xdbf/0xf00 [ 460.642426][T27091] iter_file_splice_write+0x5ef/0x970 [ 460.647848][T27091] direct_splice_actor+0x153/0x2a0 [ 460.653010][T27091] splice_direct_to_actor+0x30f/0x680 [ 460.658412][T27091] do_splice_direct+0xda/0x150 [ 460.663218][T27091] do_sendfile+0x380/0x650 [ 460.667667][T27091] __x64_sys_sendfile64+0x105/0x150 [ 460.672901][T27091] x64_sys_call+0xb39/0x2fb0 [ 460.677531][T27091] do_syscall_64+0xd2/0x200 [ 460.682072][T27091] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 460.688001][T27091] [ 460.690344][T27091] value changed: 0x02000021 -> 0x04000021 [ 460.696081][T27091] [ 460.698425][T27091] Reported by Kernel Concurrency Sanitizer on: [ 460.704607][T27091] CPU: 1 UID: 0 PID: 27091 Comm: syz.1.3901 Not tainted 6.16.0-rc2-syzkaller #0 PREEMPT(voluntary) [ 460.715410][T27091] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 460.725506][T27091] ================================================================== [ 461.884414][T26955] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.896175][T26955] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.907500][T26955] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.919091][T26955] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0