last executing test programs: 4.44874227s ago: executing program 4 (id=1115): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000180)="1a", 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 4.296299537s ago: executing program 4 (id=1117): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r0}, 0x8) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000007c0)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000040)={'dummy0\x00', &(0x7f0000000000)=@ethtool_perm_addr={0x4b, 0x1d, "4375bc038782496c3594ecd4b2bac97972070000001000476fb2940acf"}}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xf802}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000000c0)=ANY=[], 0x4c}}, 0x40000) socket$netlink(0x10, 0x3, 0x0) preadv(r1, &(0x7f0000001300)=[{&(0x7f00000000c0)=""/122, 0x6}], 0x3e8, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x35, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48a}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r5) sendmsg$NLBL_MGMT_C_ADDDEF(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000000400000008000700000000000800020005000000050008"], 0x34}}, 0x0) 4.119043595s ago: executing program 2 (id=1120): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x40000, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) 4.078242057s ago: executing program 2 (id=1121): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10208}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x2000000b, 0xe0, &(0x7f0000000240)={0x3, 0x0, 0xfffa, 0x4360, 0x300}, 0x8, 0x6, 0x7d, 0x0, 0x3, 0x101, 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r2}, 0x10) ioctl$VT_GETMODE(0xffffffffffffffff, 0x5601, &(0x7f0000000300)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x100000001}, 0x18) getsockopt(0xffffffffffffffff, 0x200000000114, 0x2716, 0x0, &(0x7f0000000000)) socket$netlink(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f0000000100)={[{@init_itable_val={'init_itable', 0x3d, 0x1}}, {@errors_remount}, {@dioread_lock}, {@barrier}, {@bsdgroups}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}]}, 0x1, 0x783, &(0x7f0000001340)="$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") write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000000)={0xffffffffffffff23, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) 3.684259023s ago: executing program 2 (id=1126): bpf$MAP_CREATE(0x0, &(0x7f00000040c0)=ANY=[@ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000000c00)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r0 = creat(&(0x7f0000000040)='./file7\x00', 0x1a2) fallocate(r0, 0x0, 0x9, 0x2000406) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000200)={0x0, 0x1, 0x8, 0x5}) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00'}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000008000000000000005000100070000000900020073797a30000000001400078008001240000000000500150004000000050005000000000005000400000000000d000300686173683a6d6163"], 0x5c}}, 0x0) sendmsg$IPSET_CMD_ADD(r1, 0x0, 0x44000) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="28000000030605000000000000000000000000000500010007"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x20000010) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x60010000, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000000c0)='./file2\x00', 0x280880f, &(0x7f0000000040), 0x3a, 0x527, &(0x7f0000000100)="$eJzs3c9vHFcdAPDvjL1tNnFZt/RQKtFWtMiOIGu7Jq3VQ6ESglOlQrkHY2+M5bU3stdpbBXqiD8ACSFAQkJwgQsSB46VUP4EhBSJ3BEgEIIEDhwCg3Z3NjjOrn80u57E/nyk8bx5O7vf79NoZ+e9Gc8EcGq9FBGTEZGlWXY+Iip5fZpPsdOZWuvduf3+QmtKIsve/Xs5kryu+1lP5vNz+dvORMRXvxzxjeTBuBtb2yvz9XptPV+eaq4md7Ns+8Ly6vxSbam2Njs789rc63MX56YH0s7xiHjzi3/+wXd/8aU3f/PZ9/5w6a+T3+40sGN3OwYpifIDdaMRsT6MYAVptaeUly8etPL14ecDAEB/reP9ZyLiUxFxPiox0j6aAwAAAE6S7PNjcTeJyAAAAIATK42IsUjSakRcfbZVTtNqtXMN77NxNq03NpqfySr3xgvGo5ReXq7XpvNrB8ajlLSWZ/JrbLvLr+5Zno2IpyPi+5Vye7m60KgvFjryAQAAAKfHuV39/zQi/lXp9P8BAACAE2b8iOuPDCkPAAAAYHiO2v8HAAAAHj9H7f+/tfnr2SGlAgAAAAzeO2+/3X5Yd/f514tXtzZXGlcvLNY2VqqrmwvVhcb6lepSo7HUvmff6kGfV280rnwu1javTTVrG82pja3tS6uNzbXmpeX248ABAACAAjz94o1bSUTsvFFOu3VP5PNSRNb9V/8Pf/6T54rJEBiW9Cgr/2l4eQDHz6184PQaLToBoDClohMACvfgfuD+I4O+F+/89uDPTu5m2UdMCwAAGKCJT9y41T3U33mj3J53z/8nHxSXFzB8+fn/JCk6EeDYOf8Pp1dn3P+b5aLzAI5fab8jAJ0COPHSQ3zVH+b8f4drAAAAoGhj7SlJq3k/YOzFNK1WI55qPxaglFxertemI+JjEfH7SunJ1vJM+52J4QEAAAAAAAAAAAAAAAAAAAAAAAAAOKQsSyIDAAAATrSI9C9JexxgJCYqr4ztHR94Ivl3pT2PiPd+/O4Pr803m+szrfp/3Ktv/iivf7WIEQwAAABgr24/vduPBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBBunP7/YXudJxx//ZWRIz3ij8aZ9rzM1GKiLP/TGJ01/uSiBgZQPyd6xHxXK/4SSutGM+z2Bs/jYhywfHPDSA+nGY3WvufL/T6/qXxUnve+/s3mk8Pq//+L723/xvps/976pAxnr/5q6m+8a9HPD/ae//TjZ/0if/yIeN//Wvb2/1ey34WMdHz9ye5L9ZUc/XK1MbW9oXl1fml2lJtbXZ25rW51+cuzk1PXV6u1/K/PWN875Mf/ne/9p/tE3/8gPa/csj2/+fmtdsf7xRLe14qxU+zbPLlXvG/9U7WVsn2xu/+9n06/x1oLU90yzud8m4v/PJ3L+zX/sU+7T9o+08esv3nv/KdPx5yVQDgGGxsba/M1+u19cep8Ew8Emk80oU038A9Xiofez7lXmkMqzAfj8gm+KD/JngMCgXulAAAgKH4/0H/fdVpYQkBAAAAAAAAAAAAAAAAAADAKXTQbcBiALcT2xtzp5imAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADs638BAAD//2PM4P8=") 3.507043561s ago: executing program 3 (id=1129): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x1c917, &(0x7f00000007c0)={[{@delalloc}, {@noblock_validity}, {@grpquota}, {@barrier_val}, {@nogrpid}, {@resuid}, {@inlinecrypt}, {@block_validity}, {@journal_dev={'journal_dev', 0x3d, 0x7}, 0x32}]}, 0x0, 0x4f9, &(0x7f0000000f40)="$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") 3.393906475s ago: executing program 4 (id=1130): bpf$MAP_CREATE(0x0, &(0x7f00000040c0)=ANY=[@ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000000c00)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r0 = creat(&(0x7f0000000040)='./file7\x00', 0x1a2) fallocate(r0, 0x0, 0x9, 0x2000406) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000200)={0x0, 0x1, 0x8, 0x5}) 3.374668946s ago: executing program 3 (id=1131): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="640000000206010200000000000000000000000015000300686173683a69702c706f72742c6e6574000000000900020073797a32000000000500040000000000140007800800124000000000050015002200000005000500020000000500010006"], 0x64}}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000e8f70000000000ff000044850000000e00000065000000500000"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000640)={0x1c, 0x3, 0x6, 0x401, 0x0, 0x0, {0xa, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x10) 3.28221084s ago: executing program 1 (id=1132): bpf$MAP_CREATE(0x0, &(0x7f00000040c0)=ANY=[@ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000000c00)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r0 = creat(&(0x7f0000000040)='./file7\x00', 0x1a2) fallocate(r0, 0x0, 0x9, 0x2000406) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000200)={0x0, 0x1, 0x8, 0x5}) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00'}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000008000000000000005000100070000000900020073797a30000000001400078008001240000000000500150004000000050005000000000005000400000000000d000300686173683a6d6163"], 0x5c}}, 0x0) sendmsg$IPSET_CMD_ADD(r1, 0x0, 0x44000) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="28000000030605000000000000000000000000000500010007"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x20000010) truncate(0x0, 0x3000000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000000c0)='./file2\x00', 0x280880f, &(0x7f0000000040), 0x3a, 0x527, &(0x7f0000000100)="$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") 3.103887188s ago: executing program 4 (id=1133): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="61154c00000000006113860000000000bfa0000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) socket$inet_sctp(0x2, 0x1, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) syz_open_dev$usbmon(&(0x7f0000000340), 0x5, 0x4000) 2.411767877s ago: executing program 2 (id=1136): bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000003580)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000380)="a1", 0x1}], 0x1, &(0x7f0000000800)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r0, @ANYBLOB="0000000014"], 0x30, 0x40400d1}}], 0x1, 0x810) pipe(&(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd9b, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) splice(r0, 0x0, r2, 0x0, 0xa85, 0xf) 2.359220029s ago: executing program 3 (id=1138): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) write$binfmt_aout(r0, 0x0, 0xff2e) syz_open_pts(r0, 0x900) prlimit64(0x0, 0xe, 0x0, 0x0) io_getevents(0x0, 0x3, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000404000000002e"], 0x0, 0x37}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[], 0x50) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x80, 0x7fff0003}]}) close_range(r2, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, 0x0, 0x0) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f00000700"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="190000000400000008000000"], 0x48) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = dup(r6) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="640000000206030000000000fffff0000000000016000300686173683a6e65742c706f72742c6e6574000000050004000000000005000500020000000900020073797a3200000000050001000700000014000780080013400000000008"], 0x64}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) 2.166527378s ago: executing program 2 (id=1139): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) write$selinux_validatetrans(r0, &(0x7f0000001cc0)=ANY=[@ANYBLOB='system_h:object_r:semanage_t system_u:object_r:fixed_disk_device_t:s0 00000000000w'], 0x79) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="14"], 0xac}, 0x1, 0x0, 0x0, 0x4008805}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="440000001000ffff27bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="fda65f0500000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n'], 0x44}, 0x1, 0x0, 0x0, 0x308}, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r6}, 0x10) r7 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r7, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r7, 0x80045505, &(0x7f0000000040)=@usbdevfs_connect) r8 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r8}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r9 = mq_open(&(0x7f0000000080)='$@\x00', 0x40, 0xb4, 0x0) fcntl$setlease(r9, 0x400, 0x0) mq_open(&(0x7f0000000140)='$@\x00', 0x1, 0x0, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(r7, 0x80045505, &(0x7f0000000000)=0x1) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r10}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000940)=ANY=[@ANYRESDEC=r7], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) 2.147604609s ago: executing program 1 (id=1140): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800"/15, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) setresuid(0xee00, 0xee01, 0xee01) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000840)=ANY=[@ANYBLOB="b4000000800000001c10000000000000a500ffffff1dd6e69500000000000000e33ffe49fb92182c3b5b8c9db21f920abbda78cc57dea9dc8050492b3af1d6a2d083a0e6400dc2a94e32c310e9c0b3956f3cd3cbd5593df617314dcebc690d833f3007e7bac43d7319bfa8f7bbe408d291c5779802b0ffd32b4a9cec00bb8b9cd88cc9977c73fac7a050502464af257d3739ed9b1743775ab4cc1b6a628d3da7a75b3a5123565b2c15643dc19992b4a186ecdafd025d1bc148a732968f1f47831e2525646aff0a07317a1385bcb7afb9000000"], &(0x7f0000000080)='GPL\x00', 0x2, 0x3f7, &(0x7f000000cf3d)=""/195}, 0x48) 2.000049075s ago: executing program 4 (id=1141): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r0}, 0x8) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000007c0)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000040)={'dummy0\x00', &(0x7f0000000000)=@ethtool_perm_addr={0x4b, 0x1d, "4375bc038782496c3594ecd4b2bac97972070000001000476fb2940acf"}}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xf802}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000000c0)=ANY=[], 0x4c}}, 0x40000) socket$netlink(0x10, 0x3, 0x0) preadv(r1, &(0x7f0000001300)=[{&(0x7f00000000c0)=""/122, 0x6}], 0x3e8, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x35, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48a}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r5) sendmsg$NLBL_MGMT_C_ADDDEF(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000000400000008000700000000000800020005000000050008"], 0x34}}, 0x0) 1.8823984s ago: executing program 1 (id=1143): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000200), 0x4) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000080)='X', 0x1, 0x0, &(0x7f0000000140)={0xa, 0x0, 0x0, @private0}, 0x1c) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c000280"], 0x98}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)={0xac, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}]}]}, 0xac}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x0, &(0x7f0000000480)="00d0954942b108d5185389ebdd8a5036c2fa43f51c5afb9821984d", 0x0, 0x0, 0x0, 0x8}, 0x31) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f00000002c0)={[{@barrier}, {@nodioread_nolock}, {@noquota}, {@barrier}, {@auto_da_alloc}, {@nodioread_nolock}]}, 0x1, 0x59c, &(0x7f0000001840)="$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") r5 = open(&(0x7f0000000000)='./file1\x00', 0x143142, 0x80) sendfile(r5, r5, 0x0, 0x1000000201005) ftruncate(r5, 0x6) socket(0x2, 0x80805, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r6 = openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) write$selinux_access(r6, &(0x7f0000000740)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a6c645f736f5f7420704a122f7362696e2f6468636c69656e742030"], 0x41) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x3c, r7, 0x1, 0x0, 0xffffffff, {{}, {@void, @val={0xc, 0x99, {0x2001, 0x56}}}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x10d, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x11, 0x2, [{0x2, 0x6}, {0x1, 0x1}, {0x7, 0x7}, {0x3}, {0x1, 0x19}, {0x3, 0x2}, {0x5, 0x6}, {0x2, 0x6}, {0x2, 0x7}, {0x2, 0x4}, {0x3, 0x2}, {0x3, 0x2}, {0x1}]}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000065}, 0x0) 1.860955881s ago: executing program 3 (id=1144): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10208}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) ioctl$USBDEVFS_SUBMITURB(r5, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x2000000b, 0xe0, &(0x7f0000000240)={0x3, 0x0, 0xfffa, 0x4360, 0x300}, 0x8, 0x6, 0x7d, 0x0, 0x3, 0x101, 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) ioctl$VT_GETMODE(0xffffffffffffffff, 0x5601, &(0x7f0000000300)) getsockopt(0xffffffffffffffff, 0x200000000114, 0x2716, 0x0, &(0x7f0000000000)) socket$netlink(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) socket$kcm(0x1e, 0x1, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000080)=ANY=[], 0xfe37, 0x0) r6 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f00000002c0)={0x0, r5}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x5, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="d235e8215bf79465", @ANYRESDEC=r3, @ANYRES64=r6, @ANYRESHEX=r0, @ANYRES32=r2, @ANYBLOB="275ef439e1be0f555d425c2d6587d3190db488557a10e85fe32bee1903903fee78f4d4a9e0df07ca2f6cd4caba09ac4451d3b338aa2b2605e67d8d0d50", @ANYRESDEC], 0x0, 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x9e56d5db7aa47108, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7056}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) syz_clone3(&(0x7f0000000740)={0x8180080, 0x0, 0x0, 0x0, {0x39}, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff], 0x1}, 0x58) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f0000000100)={[{@init_itable_val={'init_itable', 0x3d, 0x1}}, {@errors_remount}, {@dioread_lock}, {@barrier}, {@bsdgroups}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}]}, 0x1, 0x783, &(0x7f0000001340)="$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") r7 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) write$P9_RREADLINK(r7, &(0x7f0000000000)={0xffffffffffffff23, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="ad1766918626d9eba21e92a9b4692887d7d8842a3b577f164a29c5facfb1d06c81cb979b6cec0859438965f408031b0e9d415ebbe27954e1ede06646b83c5239d3ef45108e1931acb4f643c13e3269e1db8d71475778060000006939492310202fa3a4c66af3708769bc0757e422e96623db3c175826752a133fde4e13c482ff2149e96f1b4e850527915402119e6a15f67f040d676f5bcd5778dea2255a584ffe9c7ff47fd3ae9a89d36b4313ae"], 0x50) 1.308991184s ago: executing program 2 (id=1147): bpf$MAP_CREATE(0x0, &(0x7f00000040c0)=ANY=[@ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000000c00)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r0 = creat(&(0x7f0000000040)='./file7\x00', 0x1a2) fallocate(r0, 0x0, 0x9, 0x2000406) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000200)={0x0, 0x1, 0x8, 0x5}) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00'}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000008000000000000005000100070000000900020073797a30000000001400078008001240000000000500150004000000050005000000000005000400000000000d000300686173683a6d6163"], 0x5c}}, 0x0) sendmsg$IPSET_CMD_ADD(r1, 0x0, 0x44000) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="28000000030605000000000000000000000000000500010007"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x20000010) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x60010000, 0x0) truncate(0x0, 0x3000000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000000c0)='./file2\x00', 0x280880f, &(0x7f0000000040), 0x3a, 0x527, &(0x7f0000000100)="$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") 1.241466897s ago: executing program 0 (id=1148): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2400, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000008600"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) close(r0) 1.117671232s ago: executing program 0 (id=1149): bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000003580)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000380)="a1", 0x1}], 0x1, &(0x7f0000000800)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r0, @ANYBLOB="0000000014"], 0x30, 0x40400d1}}], 0x1, 0x810) pipe(&(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd9b, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) splice(r0, 0x0, r2, 0x0, 0xa85, 0xf) 1.100708973s ago: executing program 0 (id=1150): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0x5, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000180)="1a", 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 1.049531545s ago: executing program 4 (id=1151): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="61154c00000000006113860000000000bfa0000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) socket$inet_sctp(0x2, 0x1, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) syz_open_dev$usbmon(&(0x7f0000000340), 0x5, 0x4000) 1.027898986s ago: executing program 1 (id=1152): bpf$MAP_CREATE(0x0, &(0x7f00000040c0)=ANY=[@ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000000c00)=ANY=[], &(0x7f0000000100)='GPL\x00'}, 0x94) r0 = creat(&(0x7f0000000040)='./file7\x00', 0x1a2) fallocate(r0, 0x0, 0x9, 0x2000406) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000200)={0x0, 0x1, 0x8, 0x5}) 1.017865576s ago: executing program 0 (id=1153): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10208}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x2000000b, 0xe0, &(0x7f0000000240)={0x3, 0x0, 0xfffa, 0x4360, 0x300}, 0x8, 0x6, 0x7d, 0x0, 0x3, 0x101, 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r2}, 0x10) ioctl$VT_GETMODE(0xffffffffffffffff, 0x5601, &(0x7f0000000300)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x100000001}, 0x18) getsockopt(0xffffffffffffffff, 0x200000000114, 0x2716, 0x0, &(0x7f0000000000)) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f0000000100)={[{@init_itable_val={'init_itable', 0x3d, 0x1}}, {@errors_remount}, {@dioread_lock}, {@barrier}, {@bsdgroups}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}]}, 0x1, 0x783, &(0x7f0000001340)="$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") write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000000)={0xffffffffffffff23, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) 922.99292ms ago: executing program 3 (id=1154): bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB='\v\x00\x00\x00\b\x00\x00\x00\f\x00\x00\x00'], 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0, 0x0, 0x3}, 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x5}, 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0xa) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000002c0)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000340)=0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000380), r4) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000003c0)=0x0) sendmsg$NFC_CMD_DEP_LINK_UP(r4, &(0x7f0000001780)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000400)={&(0x7f0000001700)={0x44, r5, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@NFC_ATTR_COMM_MODE={0x5, 0xa, 0x1}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_COMM_MODE={0x5, 0xa, 0x1}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x24044015}, 0x800) bind$nfc_llcp(0xffffffffffffffff, &(0x7f0000001000)={0x27, r6, 0x1, 0x1, 0x7, 0x2, "49ab3e80518dd74aea33506549a85eb8d4fc611e9ca3a46bfa0423da3c3185318190f9b4b39329f67302068f652860f8e436e5352f2112e9bb68e992a327ab", 0x32}, 0x60) sendmsg$NFC_CMD_LLC_SDREQ(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000001500)={0x2e4, 0x0, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@NFC_ATTR_LLC_SDP={0x5c, 0x13, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [{0x4}, {0xa, 0x1, 'kfree\x00'}, {0x14, 0x1, 'kmem_cache_free\x00'}]}, {0x30, 0x0, 0x0, 0x1, [{0xa, 0x1, 'kfree\x00'}, {0x5, 0x1, ','}, {0x8, 0x1, 'GPL\x00'}, {0x8, 0x1, 'GPL\x00'}, {0x6, 0x1, ',#'}]}]}, @NFC_ATTR_LLC_SDP={0x58, 0x13, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [{0x9, 0x1, 'ext4\x00'}]}, {0x24, 0x0, 0x0, 0x1, [{0x9, 0x1, 'ext4\x00'}, {0x14, 0x1, 'kmem_cache_free\x00'}]}, {0x20, 0x0, 0x0, 0x1, [{0x5, 0x1, '\x7f'}, {0x8, 0x1, '@$G$'}, {0xa, 0x1, 'kfree\x00'}]}]}, @NFC_ATTR_LLC_SDP={0x140, 0x13, 0x0, 0x1, [{0x50, 0x0, 0x0, 0x1, [{0x14, 0x1, 'kmem_cache_free\x00'}, {0xb, 0x1, ',^*+}+^'}, {0x14, 0x1, 'kmem_cache_free\x00'}, {0x9, 0x1, '-[\x06:\\'}, {0x4}, {0x5, 0x1, '}'}]}, {0x24, 0x0, 0x0, 0x1, [{0x14, 0x1, 'kmem_cache_free\x00'}, {0x5, 0x1, '^'}, {0x4}]}, {0x48, 0x0, 0x0, 0x1, [{0x6, 0x1, ':('}, {0x8, 0x1, 'GPL\x00'}, {0xa, 0x1, 'kfree\x00'}, {0x6, 0x1, '!-'}, {0x9, 0x1, 'ext4\x00'}, {0x6, 0x1, ')@'}, {0x5, 0x1, '\x00'}, {0x4}]}, {0x18, 0x0, 0x0, 0x1, [{0x14, 0x1, 'kmem_cache_free\x00'}]}, {0x2c, 0x0, 0x0, 0x1, [{0x9, 0x1, 'ext4\x00'}, {0x11, 0x1, ',\\#-\\\x1f$:}#%+{'}, {0x5, 0x1, '-'}]}, {0xc, 0x0, 0x0, 0x1, [{0x8, 0x1, 'GPL\x00'}]}, {0x30, 0x0, 0x0, 0x1, [{0xa, 0x1, ',.(.-/'}, {0x9, 0x1, 'ext4\x00'}, {0x5, 0x1, '\xb5'}, {0x9, 0x1, 'ext4\x00'}]}]}, @NFC_ATTR_LLC_SDP={0xac, 0x13, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [{0xb, 0x1, '+!:\\{*('}, {0x7, 0x1, '-+!'}, {0x7, 0x1, '@\'('}, {0x5, 0x1, '\x00'}, {0x8, 0x1, '/.*+'}, {0x14, 0x1, 'kmem_cache_free\x00'}, {0x7, 0x1, '}-}'}]}, {0x5c, 0x0, 0x0, 0x1, [{0x14, 0x1, 'kmem_cache_free\x00'}, {0x14, 0x1, 'kmem_cache_free\x00'}, {0x4}, {0x5, 0x1, '\x00'}, {0xc, 0x1, '@\x06+$(:@n'}, {0x4}, {0x9, 0x1, 'ext4\x00'}, {0x8, 0x1, 'GPL\x00'}]}]}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r2}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}]}, 0x2e4}, 0x1, 0x0, 0x0, 0x4000}, 0x20000014) r7 = socket$vsock_stream(0x28, 0x1, 0x0) lsm_get_self_attr(0x64, 0xffffffffffffffff, &(0x7f0000000040)=0xfffffffffffffdb1, 0x0) bind$vsock_stream(r7, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r7, 0x0) r8 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r8, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0xb) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x8, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$ext4(&(0x7f0000000640)='ext4\x00', &(0x7f0000000200)='./file2\x00', 0x200000, &(0x7f0000000300), 0xfc, 0x580, &(0x7f0000000f80)="$eJzs3UtrXFUcAPD/nUzS9KFJoRR1IYEurNROmsRHBRd1KVos6L4OyTSUTDolMylNLNgu7MaNFEHEgujOhXuXxS/gpyhooUgJunATuZM76bSZaV4zmdT5/eC259xzZ/7nzL3nzLmPIQH0rbH0n1zEyxHxdRIx0lSWj6xwbG27lUc3ptMlidXVT/5KIsnWNbZPsv8PZ5mXIuK3LyNO5TbGrS4tzxXL5dJClh+vzV8dry4tn748X5wtzZauTE5NnX1ravLdd97uWFtfv/DPdx/f++DsVydWvv3lwdE7SZyLI1lZczt24WZzZizGss9kMM49teFEB4LtJ0mvK8CODGT9fDDSMWAkBtZzLayO7HX1gC76Iu3WQJ9K9H/oU415QOPcvkPnwc+Nh++vnQBtbH9+7dpIDNfPhg6tJNn1kDXp+e5oB+KnMX798+6ddInOXYcA2NTNWxFxJp/fOP4l2fi3c2e2sM3TMbL4bS5AAZ10L53/vNFq/pNbn/9Ei/nP4RZ9dyfa9P8muQcdCNNWOv97r+X8d/2m1ehAlnuhPucbTC5dLpfSse3FiDgZgwfS/DPu53yWW7m/2q6wef6XLmn8xlwwq8eD/IEnXzNTrBV31egmD29FvNJy/pus7/+kxf5PP48LW4xxvHT31XZlm7d/XVduMa3+GPFay/2fPBH4Gfcnx+vHw3jjqNjo79vHf28Xfxvt74qHP2eJ9u0fTZrv11a3H+OH4X9L7cp2evwPJZ/W00PZuuvFWm1hImIo+Wjj+snHr23kG9unx//JE88e/1od/wfTjr3F9t8+drt50+Httb+70vbPtD/+Bzbu/+0n7n/4+fft4m9t/79ZT53M1mxl/NtqBXf7+QEAAAAAAMB+kouII5HkCuvpXK5QWHu+41gcypUr1dqpS5XFKzNR/63saAzmGne6R5qeh5jInodt5Cefyk9FxNGI+GbgYD1fmK6UZ3rdeAAAAAAAAAAAAAAAAAAAANgnDkcMt/r9f+qPgV7XDui6fK8rAPRM+/6flXTiLz0B+9KOv/+HO1sPYO+Z/0P/0v+hf+n/0L/0f+hf+j/0r+b+P9TDegB7bzvf/z+d72JFAAAAAAAAAAAAAAAAAAAAAAAAAAAA4P/hwvnz6bK68ujGdJqfuba0OFe5dnqmVJ0rzC9OF6YrC1cLs5XKbLlUmK7Mb/Z+5Url6sRkLF4fr5WqtfHq0vLF+crildrFy/PF2dLF0uCetAoAAAAAAAAAAAAAAAAAAACeL9Wl5bliuVxakJDYUSK/P6oh0ZwY2v379HpkAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDH/gsAAP//3Kw5xQ==") listxattr(&(0x7f0000000100)='./file1\x00', 0x0, 0x100000) 632.082783ms ago: executing program 1 (id=1155): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000004850000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x1c917, &(0x7f00000007c0)={[{@delalloc}, {@noblock_validity}, {@grpquota}, {@barrier_val}, {@nogrpid}, {@resuid}, {@inlinecrypt}, {@block_validity}, {@journal_dev={'journal_dev', 0x3d, 0x7}, 0x32}]}, 0x0, 0x4f9, &(0x7f0000000f40)="$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") 372.138424ms ago: executing program 0 (id=1156): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) write$binfmt_aout(r0, 0x0, 0xff2e) syz_open_pts(r0, 0x900) prlimit64(0x0, 0xe, 0x0, 0x0) io_getevents(0x0, 0x3, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000404000000002e"], 0x0, 0x37}, 0x28) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x80, 0x7fff0003}]}) close_range(r1, 0xffffffffffffffff, 0x0) 329.333686ms ago: executing program 3 (id=1157): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000500), 0xffffffffffffffff) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f0000000100)={[{@init_itable_val={'init_itable', 0x3d, 0x1}}, {@errors_remount}, {@dioread_lock}, {@barrier}, {@bsdgroups}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}]}, 0x1, 0x783, &(0x7f0000001340)="$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") r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {}, 0x0, 0x40, &(0x7f0000000000)={0x60, 0x14, 0x8, 0x2}, 0x8, 0x7, 0x200, 0x0, 0x0, 0x0, 0x0}) r4 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_load(r4, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757815"], 0x65) r5 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r5, 0xc0406618, 0x0) sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f0000001c40)={0x0, 0x0, &(0x7f0000001c00)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="010029bd7000fddbdf00000000000000008b0000a5ab6cfc05baba1eb64444e6e8f0cc2dac66284ed86f4b3b7527cf1908bc44b97f7d806b140adfb3e40ec3d429295d2b82fb027cd1bd5891d6047d4d06507f5145b31e96d1ba33ae71998dbbd4b67a1223a772f238c31281e4d41c2f9fca514665b001dfeaa8fe531a25ad42176355d131f7d7f1ad5a5e7f269cebf5dd747683c24e343f6fd03e8daf22ae250000"], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x4000010) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), r0) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r0, &(0x7f0000000a80)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000880)=ANY=[@ANYBLOB="b0410000", @ANYRES16=r6, @ANYBLOB="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"], 0x1b0}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000f40)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRESDEC=r1, @ANYRES64=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x32, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x18, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmmsg(r5, &(0x7f0000000f00)=[{{&(0x7f0000000d00)=@caif=@dbg={0x25, 0xe, 0x6}, 0x80, &(0x7f0000000bc0)=[{&(0x7f0000000d80)="980c868e52d631450c5e26398dae1cba9f9c91ad96b8a28d94edd2d5fefe682265ee97ca3690f0fcbdd6eeecdeeb15697465bd1115ae5ab543debb57b93f28ff3e343e04a3667e253425e24c17f47ba15a4885aab56fe62cc4c2a4823e289a0d8e5b23deeec339ee92a91e4ec947c36147b8f8b3281b8c2d6398a8f1f0e902f4ea5eba9dd9306552b8aed769ee65aec26eea171dcfd31d0ad0cc9597f88ff0537a40c511a7204faf2514f29fdec451e0e90962558e806d414de275f50b0276caa5d2dfc7c5ab0ba06c9f62962d6ba88e156b7f7fdf8d5034a204419f3c0eb66390da3a39f3839f53a3e88e21f4fa20e7880fb8eb899f38580f1742", 0xfb}], 0x1, &(0x7f0000000fc0)=ANY=[@ANYBLOB="60000000000000000f01000001040000355f844c8a55aaba9b7c8df26ce176c33207d4e882257893dc24275c721fb4c7972604eb6b0a5cecf6b5f4ff7fd76249cb0e5d78b39981515acb363398e5cbc05819f97aaabe21cca2880000000000006025f2e4b2236248de134d3eaa7bc206f2b6da89bb5ea1322b258d99ae0b194d8580dad20107920c8e8847881eaa91519ea349f2af17f3a7691b3e35706122d419f195e800f5e6ebd5d365c27542cba85bf55e6c745115f9d94c29db3f20c2e56be25742bc78536b7ff6e1ee382e507842d2fa90a5d6d831e847154de434045e88590379257b2646a267cc2e461dab67a7"], 0x60}}], 0x1, 0x4000) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000380)='/sys/kernel/notes', 0x800, 0x0) io_setup(0x3, &(0x7f0000000400)=0x0) io_submit(r8, 0x1, &(0x7f0000000340)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0xe11, r7, 0x0, 0xf, 0x4, 0x0, 0x0, r7}]) 200.798541ms ago: executing program 0 (id=1158): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/address_bits', 0x149a82, 0xd5) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002b2000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140)={r2}, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x6, 0x6, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018200000", @ANYRES32=r2, @ANYBLOB="0000000000000000c30100000001000095"], &(0x7f0000000180)='GPL\x00', 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r3}, 0x18) r4 = memfd_create(&(0x7f0000000080)='\b\x9dF\xd8\b\xb3~u\xa5\"\xdc\xfdq\xf6c\r;\xfcO\x8c=\x81\xb1\x8aWpA\xd4\x98\x85K\x89>N\x8ar\x17O\x0fKR\xe2{mn\xcc\xbf2\xc0\xa7\x14\xd0\xd4\xfe/m\xdf\xb6]\xc2\xaa\x86\xec(\xf7\xcd\xa6\xd9n^.\x13*\xd4\xb8\xe8\xc4\xefb\x14Vx\xc6\xfe\x9e\xee\xe7\xd7E\xe9\t\x83\xdeNX\xec\xe66\x1b\x97$\xee\x84\x14n,B\xd5?\xe5E:+Pm\x1d\xb4\xb8\xeb\xe8Op2\x82\xc7\x0e\x97\x03\xef\x1a\xa5\x00.\x89\b!m\f\xd9\x8b$}\x9f\fX\x81\xa8\xf6\x94\xbc\xed\x80|l]\xe9\xca\xd3\xc9\xa3\x9e\x9cJI\xf1\xa2\xa0\xc4:\x00\x00\x00\x00\x00\x00\b\x00\x00', 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$binfmt_misc(r6, &(0x7f0000000480)="dc", 0x1) splice(r5, 0x0, r4, 0x0, 0x4, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xb, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2e, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x330b9072}, 0x94) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r9}, 0x10) r10 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r8) sendmsg$IPVS_CMD_NEW_DAEMON(r8, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000004c0)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="01002abd7000ffdbdf25090000006400038008000100010000000800030004000000140002007665744e315f6d616376746170000000060004000200000008000500e0000000140002006970766c616e31"], 0x78}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00', r7}, 0x18) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x200008, &(0x7f0000000180)={[{@grpquota}, {@inode_readahead_blks}, {@quota}, {@oldalloc}]}, 0x1, 0x504, &(0x7f0000001000)="$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") quotactl$Q_QUOTAOFF(0xffffffff80000300, &(0x7f0000000140)=@loop={'/dev/loop', 0x0}, 0xee00, 0x8cffffff00000000) r11 = openat$cgroup_int(r0, &(0x7f0000000000)='net_cls.classid\x00', 0x2, 0x0) write$cgroup_int(r11, 0x0, 0x0) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000300)=ANY=[@ANYBLOB="020000000000000002004e237f000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000700000002004e207f00000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e22ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e22ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e24e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e20e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e20ac14143a00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e22e000000200"/1040], 0x410) 0s ago: executing program 1 (id=1159): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2400, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000008600"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) close(r0) kernel console output (not intermixed with test programs): 0000 [ 99.434228][ T29] audit: type=1326 audit(1763854900.947:4105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5638 comm="syz.3.690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc995bcf749 code=0x7ffc0000 [ 99.457594][ T29] audit: type=1326 audit(1763854900.947:4106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5638 comm="syz.3.690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc995bcf749 code=0x7ffc0000 [ 99.547303][ T29] audit: type=1400 audit(1763854901.077:4107): avc: denied { ioctl } for pid=5640 comm="syz.4.691" path="/177/file1/file1" dev="loop4" ino=12 ioctlcmd=0x743a scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 99.600045][ T29] audit: type=1326 audit(1763854901.087:4108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5640 comm="syz.4.691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb897fff749 code=0x7ffc0000 [ 99.625080][ T29] audit: type=1326 audit(1763854901.087:4109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5640 comm="syz.4.691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb897fff749 code=0x7ffc0000 [ 99.649326][ T29] audit: type=1326 audit(1763854901.087:4110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5640 comm="syz.4.691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7fb897fff749 code=0x7ffc0000 [ 99.672850][ T29] audit: type=1326 audit(1763854901.087:4111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5640 comm="syz.4.691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb897fff749 code=0x7ffc0000 [ 99.851712][ T5657] netlink: 4 bytes leftover after parsing attributes in process `syz.4.695'. [ 99.861356][ T5656] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 99.867918][ T5656] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 99.876097][ T5656] vhci_hcd vhci_hcd.0: Device attached [ 99.890143][ T5657] loop4: detected capacity change from 0 to 1024 [ 99.909192][ T5656] vhci_hcd vhci_hcd.0: port 0 already used [ 99.921320][ T5663] netlink: 12 bytes leftover after parsing attributes in process `syz.0.692'. [ 99.941246][ T5657] ext4 filesystem being mounted at /179/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 99.980802][ T5657] EXT4-fs error (device loop4): ext4_map_blocks:814: inode #15: comm syz.4.695: lblock 0 mapped to illegal pblock 0 (length 1) [ 100.022628][ T5657] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 100.034999][ T5657] EXT4-fs (loop4): This should not happen!! Data will be lost [ 100.034999][ T5657] [ 100.075710][ T5669] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #15: comm syz.4.695: lblock 0 mapped to illegal pblock 0 (length 1) [ 100.111111][ T5672] loop3: detected capacity change from 0 to 128 [ 100.118284][ T5666] loop0: detected capacity change from 0 to 512 [ 100.120099][ T5651] loop1: detected capacity change from 0 to 2048 [ 100.132598][ T5669] EXT4-fs error (device loop4): ext4_ext_remove_space:2955: inode #15: comm syz.4.695: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 100.151399][ T23] usb 6-1: SetAddress Request (42) to port 0 [ 100.157455][ T23] usb 6-1: new SuperSpeed USB device number 42 using vhci_hcd [ 100.187234][ T5669] EXT4-fs error (device loop4) in ext4_setattr:6050: Corrupt filesystem [ 100.212166][ T5666] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 100.227995][ T5666] EXT4-fs (loop0): orphan cleanup on readonly fs [ 100.244524][ T5651] ext4 filesystem being mounted at /157/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 100.334936][ T5678] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.694: bg 0: block 345: padding at end of block bitmap is not set [ 100.359768][ T5678] EXT4-fs (loop1): Remounting filesystem read-only [ 100.386528][ T5680] lo speed is unknown, defaulting to 1000 [ 100.403012][ T5666] EXT4-fs warning (device loop0): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 100.445743][ T5666] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 100.497886][ T5666] EXT4-fs error (device loop0): ext4_orphan_get:1392: inode #16: comm syz.0.692: inode has both inline data and extents flags [ 100.519019][ T5687] loop3: detected capacity change from 0 to 1024 [ 100.539398][ T5689] loop1: detected capacity change from 0 to 512 [ 100.546984][ T5687] EXT4-fs mount: 50 callbacks suppressed [ 100.547002][ T5687] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 100.565224][ T5666] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.692: couldn't read orphan inode 16 (err -117) [ 100.593457][ T5689] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.614171][ T5689] ext4 filesystem being mounted at /160/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 100.637761][ T5666] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 100.638892][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.669805][ T5658] vhci_hcd: connection reset by peer [ 100.675431][ T275] vhci_hcd: stop threads [ 100.679767][ T275] vhci_hcd: release socket [ 100.684188][ T275] vhci_hcd: disconnect device [ 100.691320][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.701387][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 100.739800][ T5695] serio: Serial port ptm0 [ 100.779213][ T5700] loop1: detected capacity change from 0 to 512 [ 100.789219][ T5700] EXT4-fs: inline encryption not supported [ 100.796172][ T5700] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 100.806751][ T5700] EXT4-fs (loop1): failed to initialize system zone (-117) [ 100.815636][ T5700] EXT4-fs (loop1): mount failed [ 100.877951][ T5706] netlink: 36 bytes leftover after parsing attributes in process `syz.4.708'. [ 100.942756][ T5708] lo speed is unknown, defaulting to 1000 [ 100.989545][ T5710] hub 1-0:1.0: USB hub found [ 100.997982][ T5710] hub 1-0:1.0: 8 ports detected [ 101.202910][ T5722] netlink: 4 bytes leftover after parsing attributes in process `syz.1.715'. [ 101.240434][ T5722] loop1: detected capacity change from 0 to 1024 [ 101.249701][ T5720] loop2: detected capacity change from 0 to 2048 [ 101.270962][ T5722] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 101.284226][ T5720] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.296738][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.310285][ T5722] ext4 filesystem being mounted at /166/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 101.338580][ T5720] ext4 filesystem being mounted at /107/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 101.350068][ T5722] EXT4-fs error (device loop1): ext4_map_blocks:814: inode #15: comm syz.1.715: lblock 0 mapped to illegal pblock 0 (length 1) [ 101.353268][ T5729] loop3: detected capacity change from 0 to 2048 [ 101.377454][ T5722] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 101.389835][ T5722] EXT4-fs (loop1): This should not happen!! Data will be lost [ 101.389835][ T5722] [ 101.402970][ T5732] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #15: comm syz.1.715: lblock 0 mapped to illegal pblock 0 (length 1) [ 101.403799][ T5731] netlink: 4 bytes leftover after parsing attributes in process `syz.0.717'. [ 101.425523][ T5732] EXT4-fs error (device loop1): ext4_ext_remove_space:2955: inode #15: comm syz.1.715: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 101.449082][ T5732] EXT4-fs error (device loop1) in ext4_setattr:6050: Corrupt filesystem [ 101.457662][ T5734] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.714: bg 0: block 345: padding at end of block bitmap is not set [ 101.472484][ T5734] EXT4-fs (loop2): Remounting filesystem read-only [ 101.478577][ T5729] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.497040][ T5729] ext4 filesystem being mounted at /134/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 101.509293][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 101.526462][ T5737] lo speed is unknown, defaulting to 1000 [ 101.553040][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.564896][ T5739] loop1: detected capacity change from 0 to 1024 [ 101.613706][ T5739] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.652366][ T5745] loop2: detected capacity change from 0 to 512 [ 101.691624][ T5745] EXT4-fs: inline encryption not supported [ 101.701532][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.736652][ T5745] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 101.792992][ T5745] EXT4-fs (loop2): failed to initialize system zone (-117) [ 101.812249][ T5745] EXT4-fs (loop2): mount failed [ 101.896217][ T5754] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 101.902844][ T5754] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 101.911016][ T5754] vhci_hcd vhci_hcd.0: Device attached [ 101.958043][ T5762] vhci_hcd vhci_hcd.0: port 0 already used [ 101.975381][ T5766] loop2: detected capacity change from 0 to 128 [ 101.988691][ T5766] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 102.021319][ T5766] ext4 filesystem being mounted at /110/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 102.059585][ T5747] loop0: detected capacity change from 0 to 2048 [ 102.063823][ T5759] vhci_hcd: connection closed [ 102.066740][ T12] vhci_hcd: stop threads [ 102.075744][ T12] vhci_hcd: release socket [ 102.080196][ T12] vhci_hcd: disconnect device [ 102.146010][ T5747] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 102.177561][ T3320] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 102.191808][ T5747] ext4 filesystem being mounted at /127/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 102.213728][ T5772] netlink: 4 bytes leftover after parsing attributes in process `syz.2.730'. [ 102.262704][ T5774] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 102.269367][ T5774] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 102.277244][ T5774] vhci_hcd vhci_hcd.0: Device attached [ 102.286200][ T5778] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.722: bg 0: block 345: padding at end of block bitmap is not set [ 102.300831][ T5778] EXT4-fs (loop0): Remounting filesystem read-only [ 102.321696][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.345681][ T5776] vhci_hcd: connection closed [ 102.345903][ T37] vhci_hcd: stop threads [ 102.355022][ T37] vhci_hcd: release socket [ 102.359515][ T37] vhci_hcd: disconnect device [ 102.371766][ T5784] loop0: detected capacity change from 0 to 512 [ 102.385627][ T5784] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 102.411995][ T5784] EXT4-fs (loop0): 1 truncate cleaned up [ 102.418483][ T5784] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 102.621920][ T5791] serio: Serial port ptm0 [ 102.704095][ T5795] loop1: detected capacity change from 0 to 2048 [ 102.735437][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.749572][ T5795] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 102.780816][ T5795] ext4 filesystem being mounted at /170/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 102.804829][ T5805] loop2: detected capacity change from 0 to 512 [ 102.834023][ T5803] loop0: detected capacity change from 0 to 8192 [ 102.849758][ T5805] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.875565][ T5805] ext4 filesystem being mounted at /117/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 102.887166][ T5808] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.735: bg 0: block 345: padding at end of block bitmap is not set [ 102.905050][ T5808] EXT4-fs (loop1): Remounting filesystem read-only [ 102.952945][ T5810] loop4: detected capacity change from 0 to 2048 [ 102.962578][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.983151][ T5810] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.018132][ T5810] ext4 filesystem being mounted at /185/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 103.053647][ T5815] serio: Serial port ptm0 [ 103.109079][ T5817] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.741: bg 0: block 345: padding at end of block bitmap is not set [ 103.123725][ T5817] EXT4-fs (loop4): Remounting filesystem read-only [ 103.158091][ T5820] netlink: 4 bytes leftover after parsing attributes in process `syz.2.743'. [ 103.183033][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.259913][ T5824] lo speed is unknown, defaulting to 1000 [ 103.265374][ T5826] loop2: detected capacity change from 0 to 512 [ 103.274826][ T5826] EXT4-fs: inline encryption not supported [ 103.284092][ T5826] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 103.312829][ T5826] EXT4-fs (loop2): failed to initialize system zone (-117) [ 103.322927][ T5826] EXT4-fs (loop2): mount failed [ 103.750364][ T5836] loop2: detected capacity change from 0 to 512 [ 103.775398][ T5836] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 103.794420][ T5836] EXT4-fs (loop2): orphan cleanup on readonly fs [ 103.799099][ T5846] macvtap10: entered allmulticast mode [ 103.808006][ T5836] EXT4-fs warning (device loop2): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 103.811635][ T5846] batman_adv: batadv0: Adding interface: macvtap10 [ 103.829159][ T5846] batman_adv: batadv0: The MTU of interface macvtap10 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.838359][ T5836] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 103.861627][ T5846] batman_adv: batadv0: Interface activated: macvtap10 [ 103.868517][ T5836] EXT4-fs error (device loop2): ext4_orphan_get:1392: inode #16: comm syz.2.750: inode has both inline data and extents flags [ 103.882265][ T5836] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.750: couldn't read orphan inode 16 (err -117) [ 103.894821][ T5836] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 103.943659][ T5847] hub 1-0:1.0: USB hub found [ 103.949004][ T5847] hub 1-0:1.0: 8 ports detected [ 104.186901][ T37] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm kworker/u8:2: bg 0: block 345: padding at end of block bitmap is not set [ 104.205352][ T37] EXT4-fs (loop3): Remounting filesystem read-only [ 104.364005][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.457129][ T5849] lo speed is unknown, defaulting to 1000 [ 104.510223][ T5852] __nla_validate_parse: 2 callbacks suppressed [ 104.510241][ T5852] netlink: 36 bytes leftover after parsing attributes in process `syz.0.754'. [ 104.539663][ T5854] loop2: detected capacity change from 0 to 2048 [ 104.559279][ T5854] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 104.571733][ T5854] ext4 filesystem being mounted at /126/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 104.588316][ T5857] hub 1-0:1.0: USB hub found [ 104.594940][ T5857] hub 1-0:1.0: 8 ports detected [ 104.607980][ T29] kauditd_printk_skb: 206 callbacks suppressed [ 104.607995][ T29] audit: type=1326 audit(1763854906.147:4318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5851 comm="syz.0.754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efddc6df749 code=0x7ffc0000 [ 104.655670][ T29] audit: type=1326 audit(1763854906.147:4319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5851 comm="syz.0.754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efddc6df749 code=0x7ffc0000 [ 104.682222][ T29] audit: type=1326 audit(1763854906.147:4320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5851 comm="syz.0.754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efddc6df749 code=0x7ffc0000 [ 104.705703][ T29] audit: type=1326 audit(1763854906.147:4321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5851 comm="syz.0.754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efddc6df749 code=0x7ffc0000 [ 104.729805][ T29] audit: type=1326 audit(1763854906.147:4322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5851 comm="syz.0.754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efddc6df749 code=0x7ffc0000 [ 104.731903][ T5858] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.755: bg 0: block 345: padding at end of block bitmap is not set [ 104.768595][ T5858] EXT4-fs (loop2): Remounting filesystem read-only [ 104.823659][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.850605][ T5862] macvtap2: entered allmulticast mode [ 104.857585][ T5862] batman_adv: batadv0: Adding interface: macvtap2 [ 104.864122][ T5862] batman_adv: batadv0: The MTU of interface macvtap2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 104.889917][ T5862] batman_adv: batadv0: Interface activated: macvtap2 [ 104.933054][ T5865] loop4: detected capacity change from 0 to 1024 [ 104.949511][ T5865] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 104.962698][ T5863] hub 1-0:1.0: USB hub found [ 104.967443][ T5863] hub 1-0:1.0: 8 ports detected [ 104.979446][ T29] audit: type=1326 audit(1763854906.517:4323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5861 comm="syz.2.756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff92000f749 code=0x7ffc0000 [ 105.002967][ T29] audit: type=1326 audit(1763854906.517:4324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5861 comm="syz.2.756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff92000f749 code=0x7ffc0000 [ 105.026292][ T29] audit: type=1326 audit(1763854906.517:4325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5861 comm="syz.2.756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff92000f749 code=0x7ffc0000 [ 105.049650][ T29] audit: type=1326 audit(1763854906.517:4326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5861 comm="syz.2.756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff92000f749 code=0x7ffc0000 [ 105.073314][ T29] audit: type=1326 audit(1763854906.517:4327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5861 comm="syz.2.756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff92000f749 code=0x7ffc0000 [ 105.097421][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.155330][ T5873] loop4: detected capacity change from 0 to 128 [ 105.167252][ T5873] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 105.180456][ T5873] ext4 filesystem being mounted at /193/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 105.208027][ T23] usb 6-1: device descriptor read/8, error -110 [ 105.243700][ T3311] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 105.327895][ T23] usb 6-1: new SuperSpeed USB device number 42 using vhci_hcd [ 105.349727][ T23] usb 6-1: enqueue for inactive port 0 [ 105.353273][ T5878] serio: Serial port ptm0 [ 105.355237][ T23] usb 6-1: enqueue for inactive port 0 [ 105.369257][ T23] usb 6-1: enqueue for inactive port 0 [ 105.387477][ T5880] loop0: detected capacity change from 0 to 1024 [ 105.409292][ T5880] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.432327][ T5885] loop4: detected capacity change from 0 to 128 [ 105.446044][ T5885] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 105.462388][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.464061][ T5885] ext4 filesystem being mounted at /196/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 105.503702][ T5888] loop0: detected capacity change from 0 to 1024 [ 105.530998][ T5888] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.569089][ T3311] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 105.569103][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.612430][ T5894] loop4: detected capacity change from 0 to 2048 [ 105.629705][ T5894] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.642496][ T5894] ext4 filesystem being mounted at /197/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 105.699508][ T5898] loop0: detected capacity change from 0 to 512 [ 105.716420][ T5899] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.767: bg 0: block 345: padding at end of block bitmap is not set [ 105.720691][ T5898] EXT4-fs: inline encryption not supported [ 105.738947][ T5899] EXT4-fs (loop4): Remounting filesystem read-only [ 105.746271][ T5898] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 105.773470][ T5898] EXT4-fs (loop0): failed to initialize system zone (-117) [ 105.781111][ T5898] EXT4-fs (loop0): mount failed [ 105.795160][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.848721][ T5909] netlink: 4 bytes leftover after parsing attributes in process `syz.4.772'. [ 105.897551][ T5911] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 105.904112][ T5911] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 105.911923][ T5911] vhci_hcd vhci_hcd.0: Device attached [ 105.939294][ T5915] netlink: 12 bytes leftover after parsing attributes in process `syz.2.771'. [ 105.974910][ T5913] vhci_hcd: connection closed [ 105.975162][ T52] vhci_hcd: stop threads [ 105.984340][ T52] vhci_hcd: release socket [ 105.988835][ T52] vhci_hcd: disconnect device [ 106.007532][ T5906] loop2: detected capacity change from 0 to 512 [ 106.030499][ T5906] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 106.038687][ T5906] EXT4-fs (loop2): orphan cleanup on readonly fs [ 106.045683][ T5906] EXT4-fs warning (device loop2): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 106.061312][ T5906] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 106.068338][ T5906] EXT4-fs error (device loop2): ext4_orphan_get:1392: inode #16: comm syz.2.771: inode has both inline data and extents flags [ 106.081731][ T5906] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.771: couldn't read orphan inode 16 (err -117) [ 106.096126][ T5906] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 106.408112][ T23] usb usb6-port1: attempt power cycle [ 106.523617][ T5920] netlink: 36 bytes leftover after parsing attributes in process `syz.4.775'. [ 106.592874][ T5922] hub 1-0:1.0: USB hub found [ 106.597857][ T5922] hub 1-0:1.0: 8 ports detected [ 106.688218][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.688892][ T5923] netlink: 'syz.0.785': attribute type 3 has an invalid length. [ 106.782103][ T5925] serio: Serial port ptm0 [ 106.853581][ T5928] macvtap3: entered allmulticast mode [ 106.860694][ T5928] batman_adv: batadv0: Adding interface: macvtap3 [ 106.867121][ T5928] batman_adv: batadv0: The MTU of interface macvtap3 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 106.892783][ T5928] batman_adv: batadv0: Interface activated: macvtap3 [ 106.960575][ T5929] hub 1-0:1.0: USB hub found [ 106.965332][ T5929] hub 1-0:1.0: 8 ports detected [ 107.457444][ T5933] loop0: detected capacity change from 0 to 128 [ 107.463222][ T5931] loop4: detected capacity change from 0 to 1024 [ 107.473070][ T5933] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 107.487010][ T5933] ext4 filesystem being mounted at /139/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 107.488615][ T5931] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.548708][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.574034][ T3316] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 107.627527][ T5941] netlink: 36 bytes leftover after parsing attributes in process `syz.0.781'. [ 107.675470][ T5943] netlink: 4 bytes leftover after parsing attributes in process `syz.4.782'. [ 107.693498][ T5944] hub 1-0:1.0: USB hub found [ 107.699058][ T5943] loop4: detected capacity change from 0 to 1024 [ 107.705650][ T5944] hub 1-0:1.0: 8 ports detected [ 107.721619][ T5943] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 107.735661][ T5943] ext4 filesystem being mounted at /203/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 107.744804][ T5949] loop2: detected capacity change from 0 to 2048 [ 107.750290][ T5943] EXT4-fs error (device loop4): ext4_map_blocks:814: inode #15: comm syz.4.782: lblock 0 mapped to illegal pblock 0 (length 1) [ 107.766792][ T5943] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 107.779364][ T5943] EXT4-fs (loop4): This should not happen!! Data will be lost [ 107.779364][ T5943] [ 107.784628][ T5949] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.791613][ T5943] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #15: comm syz.4.782: lblock 0 mapped to illegal pblock 0 (length 1) [ 107.801482][ T5949] ext4 filesystem being mounted at /132/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 107.821552][ T5943] EXT4-fs error (device loop4): ext4_ext_remove_space:2955: inode #15: comm syz.4.782: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 107.844038][ T5943] EXT4-fs error (device loop4) in ext4_setattr:6050: Corrupt filesystem [ 107.874816][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 107.891734][ T5953] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.783: bg 0: block 345: padding at end of block bitmap is not set [ 107.906346][ T5953] EXT4-fs (loop2): Remounting filesystem read-only [ 107.944674][ T5955] lo speed is unknown, defaulting to 1000 [ 107.963208][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.005128][ T5958] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 108.011822][ T5958] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 108.019646][ T5958] vhci_hcd vhci_hcd.0: Device attached [ 108.062099][ T5963] netlink: 8 bytes leftover after parsing attributes in process `syz.4.787'. [ 108.082986][ T5961] vhci_hcd: connection closed [ 108.083233][ T12] vhci_hcd: stop threads [ 108.092373][ T12] vhci_hcd: release socket [ 108.096817][ T12] vhci_hcd: disconnect device [ 108.101598][ T23] usb 6-1: enqueue for inactive port 0 [ 108.307899][ T23] usb 6-1: enqueue for inactive port 0 [ 108.478646][ T5966] loop0: detected capacity change from 0 to 512 [ 108.487468][ T5966] EXT4-fs: inline encryption not supported [ 108.494102][ T5966] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 108.505360][ T5966] EXT4-fs (loop0): failed to initialize system zone (-117) [ 108.512923][ T5966] EXT4-fs (loop0): mount failed [ 108.559397][ T5969] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 108.566384][ T5969] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 108.574609][ T5969] vhci_hcd vhci_hcd.0: Device attached [ 108.582344][ T5969] vhci_hcd vhci_hcd.0: port 0 already used [ 108.620823][ T5975] loop2: detected capacity change from 0 to 2048 [ 108.651730][ T5975] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 108.657699][ T5970] vhci_hcd: connection closed [ 108.664480][ T5975] ext4 filesystem being mounted at /134/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 108.668629][ T31] vhci_hcd: stop threads [ 108.684077][ T31] vhci_hcd: release socket [ 108.688582][ T31] vhci_hcd: disconnect device [ 108.696760][ T5975] SELinux: failed to load policy [ 108.710208][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.761911][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.797723][ T5982] macvtap7: entered allmulticast mode [ 108.804944][ T5982] batman_adv: batadv0: Adding interface: macvtap7 [ 108.808300][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.811460][ T5982] batman_adv: batadv0: The MTU of interface macvtap7 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 108.847478][ T5982] batman_adv: batadv0: Interface activated: macvtap7 [ 108.938236][ T5984] hub 1-0:1.0: USB hub found [ 108.942986][ T5984] hub 1-0:1.0: 8 ports detected [ 109.032521][ T5990] loop4: detected capacity change from 0 to 8192 [ 109.080696][ T5994] loop2: detected capacity change from 0 to 512 [ 109.113957][ T5994] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.131981][ T5994] ext4 filesystem being mounted at /137/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 109.184939][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.248821][ T6004] netlink: 36 bytes leftover after parsing attributes in process `syz.1.800'. [ 109.319555][ T6011] hub 1-0:1.0: USB hub found [ 109.324973][ T6011] hub 1-0:1.0: 8 ports detected [ 109.348872][ T6013] loop2: detected capacity change from 0 to 2048 [ 109.370249][ T6013] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 109.384568][ T6013] ext4 filesystem being mounted at /140/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 109.460526][ T6016] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.813: bg 0: block 345: padding at end of block bitmap is not set [ 109.475302][ T6016] EXT4-fs (loop2): Remounting filesystem read-only [ 109.524090][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.653930][ T6018] serio: Serial port ptm0 [ 109.854913][ T6020] loop3: detected capacity change from 0 to 2048 [ 109.903640][ T6020] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 109.997317][ T6020] ext4 filesystem being mounted at /136/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 110.096728][ T6028] loop4: detected capacity change from 0 to 1024 [ 110.110674][ T6029] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.802: bg 0: block 345: padding at end of block bitmap is not set [ 110.135509][ T6029] EXT4-fs (loop3): Remounting filesystem read-only [ 110.143181][ T6028] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 110.156927][ T6031] macvtap4: entered allmulticast mode [ 110.171950][ T6031] batman_adv: batadv0: Adding interface: macvtap4 [ 110.178453][ T6031] batman_adv: batadv0: The MTU of interface macvtap4 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 110.211459][ T6031] batman_adv: batadv0: Interface activated: macvtap4 [ 110.251563][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.272091][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.300794][ T6041] hub 1-0:1.0: USB hub found [ 110.337996][ T6041] hub 1-0:1.0: 8 ports detected [ 110.353469][ T29] kauditd_printk_skb: 332 callbacks suppressed [ 110.353486][ T29] audit: type=1326 audit(1763854911.887:4660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6044 comm="syz.3.811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc995bcf749 code=0x7ffc0000 [ 110.361656][ T6045] loop3: detected capacity change from 0 to 512 [ 110.386146][ T6046] netlink: 8 bytes leftover after parsing attributes in process `syz.4.810'. [ 110.405799][ T6040] loop1: detected capacity change from 0 to 8192 [ 110.424982][ T29] audit: type=1326 audit(1763854911.887:4661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6044 comm="syz.3.811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fc995bcf749 code=0x7ffc0000 [ 110.448442][ T29] audit: type=1326 audit(1763854911.887:4662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6044 comm="syz.3.811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fc995bcf783 code=0x7ffc0000 [ 110.471761][ T29] audit: type=1326 audit(1763854911.897:4663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6044 comm="syz.3.811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fc995bce1ff code=0x7ffc0000 [ 110.494994][ T29] audit: type=1326 audit(1763854911.897:4664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6044 comm="syz.3.811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fc995bcf7d7 code=0x7ffc0000 [ 110.518285][ T29] audit: type=1326 audit(1763854911.897:4665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6044 comm="syz.3.811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc995bcdf90 code=0x7ffc0000 [ 110.529109][ T6045] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.541640][ T29] audit: type=1326 audit(1763854911.897:4666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6044 comm="syz.3.811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc995bcf34b code=0x7ffc0000 [ 110.577459][ T29] audit: type=1326 audit(1763854911.937:4667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6030 comm="syz.2.804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff92000f749 code=0x7ffc0000 [ 110.600737][ T6045] ext4 filesystem being mounted at /137/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 110.600900][ T29] audit: type=1326 audit(1763854911.937:4668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6030 comm="syz.2.804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff92000f749 code=0x7ffc0000 [ 110.634410][ T29] audit: type=1326 audit(1763854911.937:4669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6030 comm="syz.2.804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff92000f749 code=0x7ffc0000 [ 110.733470][ T6054] macvtap8: entered allmulticast mode [ 110.745872][ T6054] batman_adv: batadv0: Adding interface: macvtap8 [ 110.752415][ T6054] batman_adv: batadv0: The MTU of interface macvtap8 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 110.788699][ T6054] batman_adv: batadv0: Interface activated: macvtap8 [ 110.873648][ T6058] loop0: detected capacity change from 0 to 1024 [ 110.881131][ T6054] hub 1-0:1.0: USB hub found [ 110.886589][ T6054] hub 1-0:1.0: 8 ports detected [ 110.910793][ T6058] ext4 filesystem being mounted at /147/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 110.924918][ T6058] EXT4-fs error (device loop0): ext4_map_blocks:814: inode #15: comm syz.0.817: lblock 0 mapped to illegal pblock 0 (length 1) [ 110.939033][ T6058] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 110.951511][ T6058] EXT4-fs (loop0): This should not happen!! Data will be lost [ 110.951511][ T6058] [ 110.988475][ T6061] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #15: comm syz.0.817: lblock 0 mapped to illegal pblock 0 (length 1) [ 111.004087][ T6061] EXT4-fs error (device loop0): ext4_ext_remove_space:2955: inode #15: comm syz.0.817: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 111.060552][ T6061] EXT4-fs error (device loop0) in ext4_setattr:6050: Corrupt filesystem [ 111.235660][ T6070] loop1: detected capacity change from 0 to 128 [ 111.258898][ T6070] ext4 filesystem being mounted at /177/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 111.422052][ T6078] loop2: detected capacity change from 0 to 128 [ 111.443576][ T6078] ext4 filesystem being mounted at /147/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 111.580153][ T6087] serio: Serial port ptm0 [ 111.636152][ T6091] netlink: 8 bytes leftover after parsing attributes in process `syz.1.828'. [ 111.721234][ T6094] loop2: detected capacity change from 0 to 8192 [ 112.165021][ T6111] loop3: detected capacity change from 0 to 8192 [ 112.270840][ T6113] macvtap3: entered allmulticast mode [ 112.285008][ T6113] batman_adv: batadv0: Adding interface: macvtap3 [ 112.291532][ T6113] batman_adv: batadv0: The MTU of interface macvtap3 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 112.319126][ T6116] loop4: detected capacity change from 0 to 128 [ 112.348064][ T6116] ext4 filesystem being mounted at /211/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 112.380429][ T6113] batman_adv: batadv0: Interface activated: macvtap3 [ 112.486712][ T6113] hub 1-0:1.0: USB hub found [ 112.491762][ T6113] hub 1-0:1.0: 8 ports detected [ 112.622372][ T6126] serio: Serial port ptm0 [ 112.730112][ T6129] serio: Serial port ptm0 [ 112.745637][ T6121] loop1: detected capacity change from 0 to 2048 [ 112.755341][ T6131] serio: Serial port ptm1 [ 112.813773][ T6121] ext4 filesystem being mounted at /181/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 112.845040][ T6139] serio: Serial port ptm0 [ 112.916145][ T6145] macvtap8: entered allmulticast mode [ 112.933501][ T6145] batman_adv: batadv0: Adding interface: macvtap8 [ 112.940098][ T6145] batman_adv: batadv0: The MTU of interface macvtap8 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 112.967720][ T6145] batman_adv: batadv0: Interface activated: macvtap8 [ 113.075171][ T6147] hub 1-0:1.0: USB hub found [ 113.087992][ T6147] hub 1-0:1.0: 8 ports detected [ 113.152810][ T6161] netlink: 12 bytes leftover after parsing attributes in process `syz.4.851'. [ 113.243508][ T6163] loop4: detected capacity change from 0 to 512 [ 113.340253][ T6165] loop3: detected capacity change from 0 to 2048 [ 113.358416][ T6163] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 113.366864][ T6163] EXT4-fs (loop4): orphan cleanup on readonly fs [ 113.391566][ T6163] EXT4-fs warning (device loop4): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 113.639804][ T6163] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 113.654707][ T6163] EXT4-fs error (device loop4): ext4_orphan_get:1392: inode #16: comm syz.4.851: inode has both inline data and extents flags [ 113.683961][ T6163] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.851: couldn't read orphan inode 16 (err -117) [ 113.858534][ T6165] ext4 filesystem being mounted at /147/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 113.922908][ T6174] loop1: detected capacity change from 0 to 512 [ 114.011062][ T52] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm kworker/u8:3: bg 0: block 345: padding at end of block bitmap is not set [ 114.028666][ T52] EXT4-fs (loop3): Remounting filesystem read-only [ 114.071488][ T6174] ext4 filesystem being mounted at /183/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 114.101321][ T6180] loop2: detected capacity change from 0 to 128 [ 114.125000][ T6180] ext4 filesystem being mounted at /155/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 114.273228][ T6169] netlink: 'syz.0.853': attribute type 3 has an invalid length. [ 114.384557][ T6192] loop3: detected capacity change from 0 to 2048 [ 114.404588][ T6192] ext4 filesystem being mounted at /150/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 114.443032][ T6200] netlink: 4 bytes leftover after parsing attributes in process `syz.0.864'. [ 114.485349][ T6203] loop2: detected capacity change from 0 to 1024 [ 114.494904][ T6200] loop0: detected capacity change from 0 to 1024 [ 114.516536][ T6203] ext4 filesystem being mounted at /157/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 114.550738][ T6200] ext4 filesystem being mounted at /151/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 114.551196][ T6203] EXT4-fs error (device loop2): ext4_map_blocks:814: inode #15: comm syz.2.865: lblock 0 mapped to illegal pblock 0 (length 1) [ 114.579128][ T6200] EXT4-fs error (device loop0): ext4_map_blocks:814: inode #15: comm syz.0.864: lblock 0 mapped to illegal pblock 0 (length 1) [ 114.585918][ T6203] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 114.604703][ T6203] EXT4-fs (loop2): This should not happen!! Data will be lost [ 114.604703][ T6203] [ 114.615187][ T6200] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 114.627551][ T6200] EXT4-fs (loop0): This should not happen!! Data will be lost [ 114.627551][ T6200] [ 114.628308][ T6209] serio: Serial port ptm0 [ 114.640714][ T6203] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #15: comm syz.2.865: lblock 0 mapped to illegal pblock 0 (length 1) [ 114.658835][ T6203] EXT4-fs error (device loop2): ext4_ext_remove_space:2955: inode #15: comm syz.2.865: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 114.679034][ T6200] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #15: comm syz.0.864: lblock 0 mapped to illegal pblock 0 (length 1) [ 114.692504][ T6200] EXT4-fs error (device loop0): ext4_ext_remove_space:2955: inode #15: comm syz.0.864: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 114.711548][ T6203] EXT4-fs error (device loop2) in ext4_setattr:6050: Corrupt filesystem [ 114.731850][ T6200] EXT4-fs error (device loop0) in ext4_setattr:6050: Corrupt filesystem [ 115.027580][ T6217] serio: Serial port ptm0 [ 115.068648][ T6220] serio: Serial port ptm1 [ 115.159461][ T12] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm kworker/u8:0: bg 0: block 345: padding at end of block bitmap is not set [ 115.174236][ T6227] loop4: detected capacity change from 0 to 2048 [ 115.181056][ T6228] loop1: detected capacity change from 0 to 128 [ 115.186971][ T12] EXT4-fs (loop3): Remounting filesystem read-only [ 115.194900][ T6228] ext4 filesystem being mounted at /187/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 115.222633][ T6227] ext4 filesystem being mounted at /223/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 115.291163][ T6234] loop3: detected capacity change from 0 to 512 [ 115.319660][ T6234] EXT4-fs: inline encryption not supported [ 115.328279][ T6234] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 115.343673][ T6237] FAULT_INJECTION: forcing a failure. [ 115.343673][ T6237] name failslab, interval 1, probability 0, space 0, times 0 [ 115.356393][ T6237] CPU: 1 UID: 0 PID: 6237 Comm: syz.2.876 Not tainted syzkaller #0 PREEMPT(voluntary) [ 115.356424][ T6237] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 115.356461][ T6237] Call Trace: [ 115.356531][ T6237] [ 115.356541][ T6237] __dump_stack+0x1d/0x30 [ 115.356564][ T6237] dump_stack_lvl+0xe8/0x140 [ 115.356588][ T6237] dump_stack+0x15/0x1b [ 115.356608][ T6237] should_fail_ex+0x265/0x280 [ 115.356795][ T6237] should_failslab+0x8c/0xb0 [ 115.356828][ T6237] kmem_cache_alloc_noprof+0x50/0x480 [ 115.356908][ T6237] ? alloc_empty_file+0x76/0x200 [ 115.356942][ T6237] ? mntput+0x4b/0x80 [ 115.356961][ T6237] alloc_empty_file+0x76/0x200 [ 115.357052][ T6237] path_openat+0x68/0x2170 [ 115.357089][ T6237] ? __rcu_read_unlock+0x4f/0x70 [ 115.357116][ T6237] ? avc_has_extended_perms+0x73d/0x940 [ 115.357216][ T6237] do_filp_open+0x109/0x230 [ 115.357254][ T6237] do_sys_openat2+0xa6/0x110 [ 115.357282][ T6237] __x64_sys_openat+0xf2/0x120 [ 115.357310][ T6237] x64_sys_call+0x2eab/0x3000 [ 115.357338][ T6237] do_syscall_64+0xd2/0x200 [ 115.357373][ T6237] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 115.357409][ T6237] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 115.357448][ T6237] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.357503][ T6237] RIP: 0033:0x7ff92000df90 [ 115.357523][ T6237] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 69 95 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 bc 95 02 00 8b 44 [ 115.357546][ T6237] RSP: 002b:00007ff91ea6ef00 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 115.357624][ T6237] RAX: ffffffffffffffda RBX: 0000000000000900 RCX: 00007ff92000df90 [ 115.357640][ T6237] RDX: 0000000000000900 RSI: 00007ff91ea6efa0 RDI: 00000000ffffff9c [ 115.357656][ T6237] RBP: 00007ff91ea6efa0 R08: 0000000000000000 R09: 00007ff91ea6ed17 [ 115.357672][ T6237] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 115.357687][ T6237] R13: 00007ff920266038 R14: 00007ff920265fa0 R15: 00007ffc1730e068 [ 115.357710][ T6237] [ 115.362007][ T6234] EXT4-fs (loop3): failed to initialize system zone (-117) [ 115.367601][ T6238] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.872: bg 0: block 345: padding at end of block bitmap is not set [ 115.379888][ T6234] EXT4-fs (loop3): mount failed [ 115.395122][ T29] kauditd_printk_skb: 401 callbacks suppressed [ 115.395142][ T29] audit: type=1326 audit(1763854916.917:5071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6225 comm="syz.1.873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7791d2f749 code=0x7ffc0000 [ 115.405863][ T6238] EXT4-fs (loop4): Remounting filesystem read-only [ 115.406405][ T29] audit: type=1326 audit(1763854916.917:5072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6225 comm="syz.1.873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7791d2f749 code=0x7ffc0000 [ 115.487088][ T6240] netlink: 'syz.0.875': attribute type 3 has an invalid length. [ 115.508623][ T29] audit: type=1326 audit(1763854916.987:5073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6232 comm="syz.0.875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efddc6df749 code=0x7fc00000 [ 115.675196][ T29] audit: type=1326 audit(1763854917.047:5074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6225 comm="syz.1.873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7791d2f749 code=0x7ffc0000 [ 115.698576][ T29] audit: type=1326 audit(1763854917.047:5075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6225 comm="syz.1.873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7791d2f749 code=0x7ffc0000 [ 115.701286][ T6246] loop2: detected capacity change from 0 to 1024 [ 115.721967][ T29] audit: type=1326 audit(1763854917.047:5076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6225 comm="syz.1.873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7791d2f749 code=0x7ffc0000 [ 115.723033][ T29] audit: type=1326 audit(1763854917.047:5077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6225 comm="syz.1.873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7791d2f749 code=0x7ffc0000 [ 115.775258][ T29] audit: type=1326 audit(1763854917.077:5078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6225 comm="syz.1.873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7791d2f749 code=0x7ffc0000 [ 115.798648][ T29] audit: type=1326 audit(1763854917.077:5079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6225 comm="syz.1.873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7791d2f749 code=0x7ffc0000 [ 115.834155][ T6252] loop3: detected capacity change from 0 to 128 [ 115.846784][ T6252] ext4 filesystem being mounted at /152/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 115.927420][ T6259] FAULT_INJECTION: forcing a failure. [ 115.927420][ T6259] name failslab, interval 1, probability 0, space 0, times 0 [ 115.940219][ T6259] CPU: 0 UID: 0 PID: 6259 Comm: syz.4.882 Not tainted syzkaller #0 PREEMPT(voluntary) [ 115.940253][ T6259] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 115.940265][ T6259] Call Trace: [ 115.940272][ T6259] [ 115.940279][ T6259] __dump_stack+0x1d/0x30 [ 115.940371][ T6259] dump_stack_lvl+0xe8/0x140 [ 115.940397][ T6259] dump_stack+0x15/0x1b [ 115.940420][ T6259] should_fail_ex+0x265/0x280 [ 115.940569][ T6259] should_failslab+0x8c/0xb0 [ 115.940607][ T6259] kmem_cache_alloc_noprof+0x50/0x480 [ 115.940644][ T6259] ? getname_flags+0x80/0x3b0 [ 115.940709][ T6259] getname_flags+0x80/0x3b0 [ 115.940821][ T6259] user_path_at+0x28/0x130 [ 115.940847][ T6259] __se_sys_mount+0x25b/0x2e0 [ 115.940873][ T6259] ? fput+0x8f/0xc0 [ 115.940896][ T6259] __x64_sys_mount+0x67/0x80 [ 115.940941][ T6259] x64_sys_call+0x2b51/0x3000 [ 115.940962][ T6259] do_syscall_64+0xd2/0x200 [ 115.940982][ T6259] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 115.941086][ T6259] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 115.941206][ T6259] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.941234][ T6259] RIP: 0033:0x7fb897fff749 [ 115.941318][ T6259] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 115.941342][ T6259] RSP: 002b:00007fb896a5f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 115.941366][ T6259] RAX: ffffffffffffffda RBX: 00007fb898255fa0 RCX: 00007fb897fff749 [ 115.941382][ T6259] RDX: 0000200000000080 RSI: 0000200000000000 RDI: 0000000000000000 [ 115.941461][ T6259] RBP: 00007fb896a5f090 R08: 0000200000000300 R09: 0000000000000000 [ 115.941477][ T6259] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 115.941492][ T6259] R13: 00007fb898256038 R14: 00007fb898255fa0 R15: 00007ffe9e750e08 [ 115.941515][ T6259] [ 116.159670][ T29] audit: type=1326 audit(1763854917.677:5080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6251 comm="syz.3.880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc995bcf749 code=0x7ffc0000 [ 116.206853][ T6263] tipc: Started in network mode [ 116.212049][ T6263] tipc: Node identity ac14140f, cluster identity 4711 [ 116.219326][ T6263] tipc: New replicast peer: 255.255.255.255 [ 116.225412][ T6263] tipc: Enabled bearer , priority 10 [ 116.251213][ T6269] macvtap5: entered allmulticast mode [ 116.271778][ T6272] netlink: 4 bytes leftover after parsing attributes in process `syz.4.888'. [ 116.273299][ T6269] batman_adv: batadv0: Adding interface: macvtap5 [ 116.287166][ T6269] batman_adv: batadv0: The MTU of interface macvtap5 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 116.307175][ T6274] netlink: 4 bytes leftover after parsing attributes in process `syz.3.885'. [ 116.313244][ T6269] batman_adv: batadv0: Interface activated: macvtap5 [ 116.341184][ T6274] loop3: detected capacity change from 0 to 1024 [ 116.359628][ T6274] ext4 filesystem being mounted at /153/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 116.371392][ T6274] EXT4-fs error (device loop3): ext4_map_blocks:814: inode #15: comm syz.3.885: lblock 0 mapped to illegal pblock 0 (length 1) [ 116.396327][ T6269] hub 1-0:1.0: USB hub found [ 116.413647][ T6269] hub 1-0:1.0: 8 ports detected [ 116.426280][ T6274] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 116.438700][ T6274] EXT4-fs (loop3): This should not happen!! Data will be lost [ 116.438700][ T6274] [ 116.454495][ T6278] loop0: detected capacity change from 0 to 2048 [ 116.467053][ T6279] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #15: comm syz.3.885: lblock 0 mapped to illegal pblock 0 (length 1) [ 116.491661][ T6279] EXT4-fs error (device loop3): ext4_ext_remove_space:2955: inode #15: comm syz.3.885: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 116.510117][ T6279] EXT4-fs error (device loop3) in ext4_setattr:6050: Corrupt filesystem [ 116.556279][ T6278] ext4 filesystem being mounted at /153/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 116.612015][ T6288] loop4: detected capacity change from 0 to 128 [ 116.624664][ T6288] ext4 filesystem being mounted at /228/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 116.664503][ T6291] serio: Serial port ptm0 [ 116.751626][ T6294] loop1: detected capacity change from 0 to 512 [ 116.758434][ T6294] EXT4-fs: inline encryption not supported [ 116.768645][ T6294] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 116.786674][ T6294] EXT4-fs (loop1): failed to initialize system zone (-117) [ 116.796056][ T6294] EXT4-fs (loop1): mount failed [ 116.849293][ T6297] netlink: 12 bytes leftover after parsing attributes in process `syz.4.892'. [ 116.893741][ T6297] netlink: 4 bytes leftover after parsing attributes in process `syz.4.892'. [ 116.956244][ T37] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm kworker/u8:2: bg 0: block 345: padding at end of block bitmap is not set [ 116.971171][ T37] EXT4-fs (loop0): Remounting filesystem read-only [ 117.057562][ T6309] loop0: detected capacity change from 0 to 128 [ 117.084562][ T6309] ext4 filesystem being mounted at /154/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 117.136989][ T6316] loop3: detected capacity change from 0 to 512 [ 117.169520][ T6316] EXT4-fs error (device loop3): ext4_orphan_get:1392: inode #15: comm syz.3.899: inode has both inline data and extents flags [ 117.212914][ T6316] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.899: couldn't read orphan inode 15 (err -117) [ 117.294963][ T6325] loop2: detected capacity change from 0 to 1024 [ 117.310948][ T6325] ext4 filesystem being mounted at /165/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 117.323290][ T6328] loop0: detected capacity change from 0 to 2048 [ 117.325135][ T6325] EXT4-fs error (device loop2): ext4_map_blocks:814: inode #15: comm syz.2.902: lblock 0 mapped to illegal pblock 0 (length 1) [ 117.338139][ T6326] support for cryptoloop has been removed. Use dm-crypt instead. [ 117.353183][ T6325] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 117.357947][ T6281] tipc: Node number set to 2886997007 [ 117.365621][ T6325] EXT4-fs (loop2): This should not happen!! Data will be lost [ 117.365621][ T6325] [ 117.384686][ T6328] ext4 filesystem being mounted at /155/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 117.385965][ T6325] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #15: comm syz.2.902: lblock 0 mapped to illegal pblock 0 (length 1) [ 117.408991][ T6325] EXT4-fs error (device loop2): ext4_ext_remove_space:2955: inode #15: comm syz.2.902: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 117.427370][ T6325] EXT4-fs error (device loop2) in ext4_setattr:6050: Corrupt filesystem [ 117.455932][ T6333] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.903: bg 0: block 345: padding at end of block bitmap is not set [ 117.470607][ T6333] EXT4-fs (loop0): Remounting filesystem read-only [ 117.527871][ T6335] loop0: detected capacity change from 0 to 2048 [ 117.549436][ T6335] ext4 filesystem being mounted at /156/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 117.621318][ T6338] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.904: bg 0: block 345: padding at end of block bitmap is not set [ 117.635883][ T6338] EXT4-fs (loop0): Remounting filesystem read-only [ 117.742859][ T6342] FAULT_INJECTION: forcing a failure. [ 117.742859][ T6342] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 117.755978][ T6342] CPU: 0 UID: 0 PID: 6342 Comm: syz.0.906 Not tainted syzkaller #0 PREEMPT(voluntary) [ 117.756006][ T6342] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 117.756019][ T6342] Call Trace: [ 117.756026][ T6342] [ 117.756035][ T6342] __dump_stack+0x1d/0x30 [ 117.756062][ T6342] dump_stack_lvl+0xe8/0x140 [ 117.756166][ T6342] dump_stack+0x15/0x1b [ 117.756195][ T6342] should_fail_ex+0x265/0x280 [ 117.756225][ T6342] should_fail+0xb/0x20 [ 117.756238][ T6342] should_fail_usercopy+0x1a/0x20 [ 117.756256][ T6342] _copy_to_user+0x20/0xa0 [ 117.756278][ T6342] simple_read_from_buffer+0xb5/0x130 [ 117.756315][ T6342] proc_fail_nth_read+0x10e/0x150 [ 117.756344][ T6342] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 117.756429][ T6342] vfs_read+0x1a8/0x770 [ 117.756450][ T6342] ? __rcu_read_unlock+0x4f/0x70 [ 117.756473][ T6342] ? __fget_files+0x184/0x1c0 [ 117.756524][ T6342] ksys_read+0xda/0x1a0 [ 117.756602][ T6342] __x64_sys_read+0x40/0x50 [ 117.756624][ T6342] x64_sys_call+0x27c0/0x3000 [ 117.756712][ T6342] do_syscall_64+0xd2/0x200 [ 117.756739][ T6342] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 117.756818][ T6342] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 117.756849][ T6342] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.756868][ T6342] RIP: 0033:0x7efddc6de15c [ 117.756898][ T6342] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 117.756976][ T6342] RSP: 002b:00007efddb13f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 117.756992][ T6342] RAX: ffffffffffffffda RBX: 00007efddc935fa0 RCX: 00007efddc6de15c [ 117.757086][ T6342] RDX: 000000000000000f RSI: 00007efddb13f0a0 RDI: 0000000000000008 [ 117.757098][ T6342] RBP: 00007efddb13f090 R08: 0000000000000000 R09: 0000000000000000 [ 117.757108][ T6342] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 117.757119][ T6342] R13: 00007efddc936038 R14: 00007efddc935fa0 R15: 00007ffcbf351a98 [ 117.757138][ T6342] [ 117.956178][ T6172] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 117.994844][ T6344] loop0: detected capacity change from 0 to 1024 [ 118.036849][ T6350] macvtap9: entered allmulticast mode [ 118.061555][ T6353] loop4: detected capacity change from 0 to 1024 [ 118.070615][ T6350] batman_adv: batadv0: Adding interface: macvtap9 [ 118.077153][ T6350] batman_adv: batadv0: The MTU of interface macvtap9 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 118.111160][ T6350] batman_adv: batadv0: Interface activated: macvtap9 [ 118.177415][ T6355] hub 1-0:1.0: USB hub found [ 118.182271][ T6355] hub 1-0:1.0: 8 ports detected [ 118.354187][ T6378] netlink: 12 bytes leftover after parsing attributes in process `syz.0.914'. [ 118.397593][ T6380] netlink: 'syz.2.918': attribute type 6 has an invalid length. [ 118.403793][ T6378] loop0: detected capacity change from 0 to 512 [ 118.444877][ T6378] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 118.464996][ T6378] EXT4-fs (loop0): orphan cleanup on readonly fs [ 118.499398][ T6378] EXT4-fs warning (device loop0): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 118.566961][ T6378] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 118.569285][ T6365] loop4: detected capacity change from 0 to 2048 [ 118.583303][ T6378] EXT4-fs error (device loop0): ext4_orphan_get:1392: inode #16: comm syz.0.914: inode has both inline data and extents flags [ 118.612518][ T6378] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.914: couldn't read orphan inode 16 (err -117) [ 118.656391][ T6365] ext4 filesystem being mounted at /234/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 119.024330][ T6406] serio: Serial port ptm1 [ 119.031601][ T6402] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 119.038159][ T6402] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 119.046012][ T6402] vhci_hcd vhci_hcd.0: Device attached [ 119.119167][ T6407] vhci_hcd: connection closed [ 119.119752][ T275] vhci_hcd: stop threads [ 119.121966][ T12] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm kworker/u8:0: bg 0: block 345: padding at end of block bitmap is not set [ 119.124644][ T275] vhci_hcd: release socket [ 119.133951][ T12] EXT4-fs (loop4): Remounting filesystem read-only [ 119.143268][ T275] vhci_hcd: disconnect device [ 119.252815][ T6424] netlink: 4 bytes leftover after parsing attributes in process `syz.3.933'. [ 119.281394][ T6424] loop3: detected capacity change from 0 to 1024 [ 119.324935][ T6424] ext4 filesystem being mounted at /159/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 119.333703][ T6434] loop4: detected capacity change from 0 to 128 [ 119.345365][ T6424] EXT4-fs error (device loop3): ext4_map_blocks:814: inode #15: comm syz.3.933: lblock 0 mapped to illegal pblock 0 (length 1) [ 119.371923][ T6424] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 119.384488][ T6424] EXT4-fs (loop3): This should not happen!! Data will be lost [ 119.384488][ T6424] [ 119.398747][ T6424] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #15: comm syz.3.933: lblock 0 mapped to illegal pblock 0 (length 1) [ 119.441821][ T6442] loop0: detected capacity change from 0 to 512 [ 119.444906][ T6424] EXT4-fs error (device loop3): ext4_ext_remove_space:2955: inode #15: comm syz.3.933: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 119.448419][ T6442] EXT4-fs: quotafile must be on filesystem root [ 119.474324][ T6427] bio_check_eod: 101 callbacks suppressed [ 119.474339][ T6427] syz.4.935: attempt to access beyond end of device [ 119.474339][ T6427] loop4: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 119.497616][ T6424] EXT4-fs error (device loop3) in ext4_setattr:6050: Corrupt filesystem [ 119.513464][ T6427] syz.4.935: attempt to access beyond end of device [ 119.513464][ T6427] loop4: rw=524288, sector=145, nr_sectors = 224 limit=128 [ 119.527720][ T6427] syz.4.935: attempt to access beyond end of device [ 119.527720][ T6427] loop4: rw=0, sector=145, nr_sectors = 8 limit=128 [ 119.541160][ T6427] syz.4.935: attempt to access beyond end of device [ 119.541160][ T6427] loop4: rw=0, sector=145, nr_sectors = 8 limit=128 [ 119.555206][ T6427] syz.4.935: attempt to access beyond end of device [ 119.555206][ T6427] loop4: rw=0, sector=145, nr_sectors = 8 limit=128 [ 119.568877][ T6427] syz.4.935: attempt to access beyond end of device [ 119.568877][ T6427] loop4: rw=0, sector=145, nr_sectors = 8 limit=128 [ 119.582858][ T6427] syz.4.935: attempt to access beyond end of device [ 119.582858][ T6427] loop4: rw=0, sector=145, nr_sectors = 8 limit=128 [ 119.596461][ T6427] syz.4.935: attempt to access beyond end of device [ 119.596461][ T6427] loop4: rw=0, sector=145, nr_sectors = 8 limit=128 [ 119.610094][ T6427] syz.4.935: attempt to access beyond end of device [ 119.610094][ T6427] loop4: rw=0, sector=145, nr_sectors = 8 limit=128 [ 119.624114][ T6427] syz.4.935: attempt to access beyond end of device [ 119.624114][ T6427] loop4: rw=0, sector=145, nr_sectors = 8 limit=128 [ 119.678728][ T6450] loop0: detected capacity change from 0 to 1024 [ 119.763442][ T6445] loop2: detected capacity change from 0 to 2048 [ 119.819427][ T6445] ext4 filesystem being mounted at /173/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 120.062895][ T6470] loop0: detected capacity change from 0 to 512 [ 120.134838][ T6470] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 120.148196][ T6470] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.950: invalid indirect mapped block 2683928664 (level 1) [ 120.190859][ T6470] EXT4-fs (loop0): Remounting filesystem read-only [ 120.197657][ T6470] EXT4-fs (loop0): 1 truncate cleaned up [ 120.210752][ T6481] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 120.217337][ T6481] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 120.225153][ T6481] vhci_hcd vhci_hcd.0: Device attached [ 120.254837][ T6487] loop4: detected capacity change from 0 to 1024 [ 120.293100][ T6484] vhci_hcd: connection closed [ 120.293271][ T52] vhci_hcd: stop threads [ 120.302477][ T52] vhci_hcd: release socket [ 120.307040][ T52] vhci_hcd: disconnect device [ 120.313820][ T6491] macvtap9: entered allmulticast mode [ 120.322026][ T6491] batman_adv: batadv0: Adding interface: macvtap9 [ 120.328523][ T6491] batman_adv: batadv0: The MTU of interface macvtap9 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 120.355700][ T6491] batman_adv: batadv0: Interface activated: macvtap9 [ 120.435604][ T6506] netlink: 4 bytes leftover after parsing attributes in process `syz.0.963'. [ 120.449682][ T6491] hub 1-0:1.0: USB hub found [ 120.454463][ T6491] hub 1-0:1.0: 8 ports detected [ 120.461137][ T6507] loop2: detected capacity change from 0 to 2048 [ 120.467590][ T29] kauditd_printk_skb: 308 callbacks suppressed [ 120.467602][ T29] audit: type=1326 audit(1763854921.997:5389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6490 comm="syz.1.960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7791d2f749 code=0x7ffc0000 [ 120.497257][ T29] audit: type=1326 audit(1763854921.997:5390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6490 comm="syz.1.960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7791d2f749 code=0x7ffc0000 [ 120.520650][ T29] audit: type=1326 audit(1763854921.997:5391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6490 comm="syz.1.960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7791d2f749 code=0x7ffc0000 [ 120.520929][ T6510] loop0: detected capacity change from 0 to 1024 [ 120.544078][ T29] audit: type=1326 audit(1763854921.997:5392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6490 comm="syz.1.960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7791d2f749 code=0x7ffc0000 [ 120.573762][ T29] audit: type=1326 audit(1763854921.997:5393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6490 comm="syz.1.960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7791d2f749 code=0x7ffc0000 [ 120.616487][ T6507] ext4 filesystem being mounted at /175/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 120.629068][ T6510] ext4 filesystem being mounted at /177/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 120.641017][ T6506] EXT4-fs error (device loop0): ext4_map_blocks:814: inode #15: comm syz.0.963: lblock 0 mapped to illegal pblock 0 (length 1) [ 120.678181][ T6506] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 120.690529][ T6506] EXT4-fs (loop0): This should not happen!! Data will be lost [ 120.690529][ T6506] [ 120.718593][ T6506] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #15: comm syz.0.963: lblock 0 mapped to illegal pblock 0 (length 1) [ 120.738048][ T6506] EXT4-fs error (device loop0): ext4_ext_remove_space:2955: inode #15: comm syz.0.963: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 120.768079][ T6506] EXT4-fs error (device loop0) in ext4_setattr:6050: Corrupt filesystem [ 120.822956][ T6509] loop4: detected capacity change from 0 to 2048 [ 120.873553][ T6509] ext4 filesystem being mounted at /241/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 121.004610][ T6281] IPVS: starting estimator thread 0... [ 121.031311][ T6524] netlink: 28 bytes leftover after parsing attributes in process `syz.3.969'. [ 121.065993][ T29] audit: type=1400 audit(1763854922.597:5394): avc: denied { ioctl } for pid=6523 comm="syz.3.969" path="socket:[14590]" dev="sockfs" ino=14590 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 121.098121][ T6526] IPVS: using max 2352 ests per chain, 117600 per kthread [ 121.144094][ T275] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm kworker/u8:5: bg 0: block 345: padding at end of block bitmap is not set [ 121.178959][ T275] EXT4-fs (loop2): Remounting filesystem read-only [ 121.190491][ T6531] loop1: detected capacity change from 0 to 1024 [ 121.270307][ T6541] macvtap10: entered allmulticast mode [ 121.277564][ T6541] batman_adv: batadv0: Adding interface: macvtap10 [ 121.284215][ T6541] batman_adv: batadv0: The MTU of interface macvtap10 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 121.310484][ T6541] batman_adv: batadv0: Interface activated: macvtap10 [ 121.345037][ T6544] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 121.351693][ T6544] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 121.359485][ T6544] vhci_hcd vhci_hcd.0: Device attached [ 121.385972][ T29] audit: type=1326 audit(1763854922.917:5395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6550 comm="syz.0.980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efddc6df749 code=0x7ffc0000 [ 121.409525][ T29] audit: type=1326 audit(1763854922.917:5396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6550 comm="syz.0.980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efddc6df749 code=0x7ffc0000 [ 121.432937][ T29] audit: type=1326 audit(1763854922.917:5397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6550 comm="syz.0.980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efddc6df749 code=0x7ffc0000 [ 121.445648][ T6552] hub 1-0:1.0: USB hub found [ 121.456662][ T29] audit: type=1326 audit(1763854922.917:5398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6550 comm="syz.0.980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efddc6df749 code=0x7ffc0000 [ 121.484952][ T6552] hub 1-0:1.0: 8 ports detected [ 121.518976][ T6548] vhci_hcd: connection closed [ 121.539402][ T52] vhci_hcd: stop threads [ 121.548676][ T52] vhci_hcd: release socket [ 121.553110][ T52] vhci_hcd: disconnect device [ 121.583344][ T6560] lo speed is unknown, defaulting to 1000 [ 121.644717][ T6561] loop1: detected capacity change from 0 to 2048 [ 121.714533][ T6561] ext4 filesystem being mounted at /209/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 121.772721][ T6569] loop0: detected capacity change from 0 to 1024 [ 121.798276][ T6569] EXT4-fs: Ignoring removed orlov option [ 121.895084][ T6574] FAULT_INJECTION: forcing a failure. [ 121.895084][ T6574] name failslab, interval 1, probability 0, space 0, times 0 [ 121.907825][ T6574] CPU: 0 UID: 0 PID: 6574 Comm: syz.2.986 Not tainted syzkaller #0 PREEMPT(voluntary) [ 121.907860][ T6574] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 121.907876][ T6574] Call Trace: [ 121.907885][ T6574] [ 121.907894][ T6574] __dump_stack+0x1d/0x30 [ 121.907922][ T6574] dump_stack_lvl+0xe8/0x140 [ 121.907952][ T6574] dump_stack+0x15/0x1b [ 121.908043][ T6574] should_fail_ex+0x265/0x280 [ 121.908096][ T6574] should_failslab+0x8c/0xb0 [ 121.908133][ T6574] __kmalloc_node_track_caller_noprof+0xa5/0x580 [ 121.908193][ T6574] ? sidtab_sid2str_get+0xa0/0x130 [ 121.908294][ T6574] kmemdup_noprof+0x2b/0x70 [ 121.908405][ T6574] sidtab_sid2str_get+0xa0/0x130 [ 121.908522][ T6574] security_sid_to_context_core+0x1eb/0x2e0 [ 121.908564][ T6574] security_sid_to_context+0x27/0x40 [ 121.908625][ T6574] selinux_lsmprop_to_secctx+0x67/0xf0 [ 121.908667][ T6574] security_lsmprop_to_secctx+0x1a3/0x1c0 [ 121.908704][ T6574] audit_log_subj_ctx+0xa4/0x3e0 [ 121.908754][ T6574] ? skb_put+0xa9/0xf0 [ 121.908794][ T6574] audit_log_task_context+0x48/0x70 [ 121.908824][ T6574] audit_log_task+0xf4/0x250 [ 121.908870][ T6574] ? kstrtouint+0x76/0xc0 [ 121.908912][ T6574] audit_seccomp+0x61/0x100 [ 121.909034][ T6574] ? __seccomp_filter+0x82d/0x1250 [ 121.909071][ T6574] __seccomp_filter+0x83e/0x1250 [ 121.909109][ T6574] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 121.909212][ T6574] ? vfs_write+0x7e8/0x960 [ 121.909250][ T6574] ? __rcu_read_unlock+0x4f/0x70 [ 121.909283][ T6574] ? __fget_files+0x184/0x1c0 [ 121.909399][ T6574] __secure_computing+0x82/0x150 [ 121.909436][ T6574] syscall_trace_enter+0xcf/0x1e0 [ 121.909473][ T6574] do_syscall_64+0xac/0x200 [ 121.909496][ T6574] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 121.909560][ T6574] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 121.909604][ T6574] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.909626][ T6574] RIP: 0033:0x7ff92000f749 [ 121.909654][ T6574] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 121.909674][ T6574] RSP: 002b:00007ff91ea6ee18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 121.909699][ T6574] RAX: ffffffffffffffda RBX: 0000000000000519 RCX: 00007ff92000f749 [ 121.909715][ T6574] RDX: 00007ff91ea6eef0 RSI: 0000000000000000 RDI: 00007ff920094960 [ 121.909771][ T6574] RBP: 00002000000009c0 R08: 00007ff91ea6ebb7 R09: 00007ff91ea6ee40 [ 121.909787][ T6574] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000980 [ 121.909804][ T6574] R13: 00007ff91ea6eef0 R14: 00007ff91ea6eeb0 R15: 0000200000000100 [ 121.909825][ T6574] [ 122.176539][ T6574] loop2: detected capacity change from 0 to 512 [ 122.187678][ T6574] EXT4-fs: Ignoring removed nobh option [ 122.218578][ T6574] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #3: comm syz.2.986: corrupted inode contents [ 122.230612][ T6574] EXT4-fs (loop2): Remounting filesystem read-only [ 122.241383][ T6581] netlink: 4 bytes leftover after parsing attributes in process `syz.0.987'. [ 122.255399][ T6581] loop0: detected capacity change from 0 to 1024 [ 122.282280][ T6581] ext4 filesystem being mounted at /182/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 122.308547][ T6574] EXT4-fs (loop2): 1 truncate cleaned up [ 122.326686][ T6574] ext4 filesystem being mounted at /179/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 122.358924][ T6581] EXT4-fs error (device loop0): ext4_map_blocks:814: inode #15: comm syz.0.987: lblock 0 mapped to illegal pblock 0 (length 1) [ 122.378419][ T6581] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 122.390854][ T6581] EXT4-fs (loop0): This should not happen!! Data will be lost [ 122.390854][ T6581] [ 122.413725][ T6589] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #15: comm syz.0.987: lblock 0 mapped to illegal pblock 0 (length 1) [ 122.439288][ T6589] EXT4-fs error (device loop0): ext4_ext_remove_space:2955: inode #15: comm syz.0.987: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 122.473883][ T6589] EXT4-fs error (device loop0) in ext4_setattr:6050: Corrupt filesystem [ 122.492074][ T12] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm kworker/u8:0: bg 0: block 345: padding at end of block bitmap is not set [ 122.531391][ T12] EXT4-fs (loop1): Remounting filesystem read-only [ 122.571658][ T6597] macvtap11: entered allmulticast mode [ 122.581660][ T6597] batman_adv: batadv0: Adding interface: macvtap11 [ 122.588280][ T6597] batman_adv: batadv0: The MTU of interface macvtap11 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 122.614302][ T6597] batman_adv: batadv0: Interface activated: macvtap11 [ 122.664229][ T6601] lo speed is unknown, defaulting to 1000 [ 122.680223][ T6598] hub 1-0:1.0: USB hub found [ 122.685046][ T6598] hub 1-0:1.0: 8 ports detected [ 122.756668][ T6605] FAULT_INJECTION: forcing a failure. [ 122.756668][ T6605] name failslab, interval 1, probability 0, space 0, times 0 [ 122.769605][ T6605] CPU: 0 UID: 0 PID: 6605 Comm: syz.2.996 Not tainted syzkaller #0 PREEMPT(voluntary) [ 122.769639][ T6605] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 122.769662][ T6605] Call Trace: [ 122.769669][ T6605] [ 122.769678][ T6605] __dump_stack+0x1d/0x30 [ 122.769702][ T6605] dump_stack_lvl+0xe8/0x140 [ 122.769775][ T6605] dump_stack+0x15/0x1b [ 122.769795][ T6605] should_fail_ex+0x265/0x280 [ 122.769839][ T6605] should_failslab+0x8c/0xb0 [ 122.769944][ T6605] __kmalloc_node_track_caller_noprof+0xa5/0x580 [ 122.769995][ T6605] ? register_pidns_sysctls+0x4a/0x140 [ 122.770029][ T6605] kmemdup_noprof+0x2b/0x70 [ 122.770103][ T6605] register_pidns_sysctls+0x4a/0x140 [ 122.770133][ T6605] copy_pid_ns+0x345/0x540 [ 122.770205][ T6605] ? copy_mnt_ns+0x83/0x610 [ 122.770234][ T6605] ? kmem_cache_alloc_noprof+0x2b8/0x480 [ 122.770265][ T6605] ? create_new_namespaces+0x3c/0x3d0 [ 122.770298][ T6605] ? copy_utsname+0x87/0x310 [ 122.770397][ T6605] create_new_namespaces+0x176/0x3d0 [ 122.770432][ T6605] unshare_nsproxy_namespaces+0xe8/0x120 [ 122.770457][ T6605] ksys_unshare+0x3d0/0x6d0 [ 122.770569][ T6605] ? ksys_write+0x192/0x1a0 [ 122.770621][ T6605] __x64_sys_unshare+0x1f/0x30 [ 122.770654][ T6605] x64_sys_call+0x2915/0x3000 [ 122.770680][ T6605] do_syscall_64+0xd2/0x200 [ 122.770750][ T6605] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 122.770780][ T6605] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 122.770812][ T6605] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.770889][ T6605] RIP: 0033:0x7ff92000f749 [ 122.770908][ T6605] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 122.770931][ T6605] RSP: 002b:00007ff91ea6f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 122.770949][ T6605] RAX: ffffffffffffffda RBX: 00007ff920265fa0 RCX: 00007ff92000f749 [ 122.770964][ T6605] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000062040200 [ 122.771035][ T6605] RBP: 00007ff91ea6f090 R08: 0000000000000000 R09: 0000000000000000 [ 122.771051][ T6605] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 122.771062][ T6605] R13: 00007ff920266038 R14: 00007ff920265fa0 R15: 00007ffc1730e068 [ 122.771086][ T6605] [ 123.033701][ T6609] macvtap10: entered allmulticast mode [ 123.043694][ T6609] batman_adv: batadv0: Adding interface: macvtap10 [ 123.050307][ T6609] batman_adv: batadv0: The MTU of interface macvtap10 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 123.076963][ T6609] batman_adv: batadv0: Interface activated: macvtap10 [ 123.091792][ T6611] macvtap4: entered allmulticast mode [ 123.099345][ T6611] batman_adv: batadv0: Adding interface: macvtap4 [ 123.105811][ T6611] batman_adv: batadv0: The MTU of interface macvtap4 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 123.134399][ T6611] batman_adv: batadv0: Interface activated: macvtap4 [ 123.142328][ T6612] hub 1-0:1.0: USB hub found [ 123.147197][ T6612] hub 1-0:1.0: 8 ports detected [ 123.218427][ T6613] hub 1-0:1.0: USB hub found [ 123.223506][ T6613] hub 1-0:1.0: 8 ports detected [ 123.261470][ T6618] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 123.268035][ T6618] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 123.275831][ T6618] vhci_hcd vhci_hcd.0: Device attached [ 123.339198][ T6619] vhci_hcd: connection closed [ 123.339407][ T52] vhci_hcd: stop threads [ 123.348494][ T52] vhci_hcd: release socket [ 123.353039][ T52] vhci_hcd: disconnect device [ 123.434733][ T6628] loop2: detected capacity change from 0 to 2048 [ 123.456714][ T6628] ext4 filesystem being mounted at /185/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 123.731173][ T275] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm kworker/u8:5: bg 0: block 345: padding at end of block bitmap is not set [ 123.746065][ T275] EXT4-fs (loop2): Remounting filesystem read-only [ 123.919178][ T6645] FAULT_INJECTION: forcing a failure. [ 123.919178][ T6645] name failslab, interval 1, probability 0, space 0, times 0 [ 123.932390][ T6645] CPU: 0 UID: 0 PID: 6645 Comm: syz.0.1008 Not tainted syzkaller #0 PREEMPT(voluntary) [ 123.932491][ T6645] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 123.932507][ T6645] Call Trace: [ 123.932515][ T6645] [ 123.932523][ T6645] __dump_stack+0x1d/0x30 [ 123.932597][ T6645] dump_stack_lvl+0xe8/0x140 [ 123.932701][ T6645] dump_stack+0x15/0x1b [ 123.932719][ T6645] should_fail_ex+0x265/0x280 [ 123.932751][ T6645] should_failslab+0x8c/0xb0 [ 123.932840][ T6645] kmem_cache_alloc_noprof+0x50/0x480 [ 123.932895][ T6645] ? alloc_empty_file+0x76/0x200 [ 123.932934][ T6645] ? mntput+0x4b/0x80 [ 123.932953][ T6645] alloc_empty_file+0x76/0x200 [ 123.933067][ T6645] path_openat+0x68/0x2170 [ 123.933146][ T6645] ? _parse_integer_limit+0x170/0x190 [ 123.933182][ T6645] ? kstrtoull+0x111/0x140 [ 123.933212][ T6645] ? kstrtouint+0x76/0xc0 [ 123.933319][ T6645] do_filp_open+0x109/0x230 [ 123.933358][ T6645] do_sys_openat2+0xa6/0x110 [ 123.933386][ T6645] __x64_sys_openat+0xf2/0x120 [ 123.933408][ T6645] x64_sys_call+0x2eab/0x3000 [ 123.933429][ T6645] do_syscall_64+0xd2/0x200 [ 123.933485][ T6645] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 123.933521][ T6645] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 123.933564][ T6645] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.933635][ T6645] RIP: 0033:0x7efddc6df749 [ 123.933695][ T6645] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 123.933712][ T6645] RSP: 002b:00007efddb13f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 123.933730][ T6645] RAX: ffffffffffffffda RBX: 00007efddc935fa0 RCX: 00007efddc6df749 [ 123.933743][ T6645] RDX: 0000000000000900 RSI: 0000200000000300 RDI: ffffffffffffff9c [ 123.933758][ T6645] RBP: 00007efddb13f090 R08: 0000000000000000 R09: 0000000000000000 [ 123.933774][ T6645] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 123.933828][ T6645] R13: 00007efddc936038 R14: 00007efddc935fa0 R15: 00007ffcbf351a98 [ 123.933846][ T6645] [ 123.935974][ T6645] loop0: detected capacity change from 0 to 128 [ 123.993074][ T6637] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1005'. [ 124.039603][ T6645] FAT-fs (loop0): Directory bread(block 32) failed [ 124.058182][ T6640] loop2: detected capacity change from 0 to 512 [ 124.072046][ T6645] FAT-fs (loop0): Directory bread(block 33) failed [ 124.115077][ T6640] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 124.124031][ T6645] FAT-fs (loop0): Directory bread(block 34) failed [ 124.139444][ T6640] EXT4-fs (loop2): orphan cleanup on readonly fs [ 124.143704][ T6645] FAT-fs (loop0): Directory bread(block 35) failed [ 124.148979][ T6640] EXT4-fs warning (device loop2): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 124.157550][ T6645] FAT-fs (loop0): Directory bread(block 36) failed [ 124.164590][ T6640] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 124.170812][ T6645] FAT-fs (loop0): Directory bread(block 37) failed [ 124.177420][ T6640] EXT4-fs error (device loop2): ext4_orphan_get:1392: inode #16: comm syz.2.1005: inode has both inline data and extents flags [ 124.185208][ T6645] FAT-fs (loop0): Directory bread(block 38) failed [ 124.192247][ T6640] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.1005: couldn't read orphan inode 16 (err -117) [ 124.256810][ T6645] FAT-fs (loop0): Directory bread(block 39) failed [ 124.299239][ T6645] FAT-fs (loop0): Directory bread(block 40) failed [ 124.306739][ T6645] FAT-fs (loop0): Directory bread(block 41) failed [ 124.351019][ T6658] loop1: detected capacity change from 0 to 2048 [ 124.370018][ T6658] ext4 filesystem being mounted at /215/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 124.480360][ T6661] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1013: bg 0: block 345: padding at end of block bitmap is not set [ 124.511259][ T6661] EXT4-fs (loop1): Remounting filesystem read-only [ 124.520388][ T6666] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1014'. [ 124.774511][ T6672] loop2: detected capacity change from 0 to 1024 [ 124.884738][ T6680] macvtap11: entered allmulticast mode [ 124.892313][ T6680] batman_adv: batadv0: Adding interface: macvtap11 [ 124.898973][ T6680] batman_adv: batadv0: The MTU of interface macvtap11 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 124.928146][ T6680] batman_adv: batadv0: Interface activated: macvtap11 [ 124.941297][ T6684] loop2: detected capacity change from 0 to 1024 [ 124.961087][ T6684] ext4 filesystem being mounted at /191/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 124.972369][ T6682] loop1: detected capacity change from 0 to 2048 [ 124.973370][ T6684] EXT4-fs error (device loop2): ext4_map_blocks:814: inode #15: comm syz.2.1019: lblock 0 mapped to illegal pblock 0 (length 1) [ 124.997116][ T6684] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 124.998430][ T6680] hub 1-0:1.0: USB hub found [ 125.009468][ T6684] EXT4-fs (loop2): This should not happen!! Data will be lost [ 125.009468][ T6684] [ 125.015986][ T6680] hub 1-0:1.0: 8 ports detected [ 125.039898][ T6682] ext4 filesystem being mounted at /217/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 125.047497][ T6689] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #15: comm syz.2.1019: lblock 0 mapped to illegal pblock 0 (length 1) [ 125.066165][ T6682] SELinux: failed to load policy [ 125.067674][ T6689] EXT4-fs error (device loop2): ext4_ext_remove_space:2955: inode #15: comm syz.2.1019: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 125.089797][ T6689] EXT4-fs error (device loop2) in ext4_setattr:6050: Corrupt filesystem [ 125.285000][ T6697] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1024'. [ 125.354688][ T6698] loop1: detected capacity change from 0 to 512 [ 125.373325][ T6698] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 125.396387][ T6698] EXT4-fs (loop1): orphan cleanup on readonly fs [ 125.403206][ T6698] EXT4-fs warning (device loop1): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 125.417992][ T6698] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 125.424749][ T6698] EXT4-fs error (device loop1): ext4_orphan_get:1392: inode #16: comm syz.1.1024: inode has both inline data and extents flags [ 125.438137][ T6698] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.1024: couldn't read orphan inode 16 (err -117) [ 125.767731][ T6714] loop3: detected capacity change from 0 to 128 [ 125.792164][ T6714] ext4 filesystem being mounted at /175/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 125.821346][ T6712] loop2: detected capacity change from 0 to 1024 [ 125.904400][ T29] kauditd_printk_skb: 365 callbacks suppressed [ 125.904418][ T29] audit: type=1326 audit(1763854927.437:5761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6713 comm="syz.3.1030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc995bcf749 code=0x7ffc0000 [ 125.934121][ T29] audit: type=1326 audit(1763854927.437:5762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6713 comm="syz.3.1030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc995bcf749 code=0x7ffc0000 [ 125.957839][ T29] audit: type=1326 audit(1763854927.437:5763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6713 comm="syz.3.1030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7fc995bcf749 code=0x7ffc0000 [ 125.982316][ T29] audit: type=1326 audit(1763854927.437:5764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6713 comm="syz.3.1030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc995bcf749 code=0x7ffc0000 [ 126.005978][ T29] audit: type=1326 audit(1763854927.437:5765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6713 comm="syz.3.1030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc995bcf749 code=0x7ffc0000 [ 126.029441][ T29] audit: type=1326 audit(1763854927.437:5766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6713 comm="syz.3.1030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc995bcf749 code=0x7ffc0000 [ 126.053136][ T29] audit: type=1326 audit(1763854927.437:5767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6713 comm="syz.3.1030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc995bcf749 code=0x7ffc0000 [ 126.057537][ T6721] loop2: detected capacity change from 0 to 2048 [ 126.076553][ T29] audit: type=1326 audit(1763854927.437:5768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6713 comm="syz.3.1030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc995bcf749 code=0x7ffc0000 [ 126.106949][ T29] audit: type=1326 audit(1763854927.497:5769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6713 comm="syz.3.1030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=179 compat=0 ip=0x7fc995bcf749 code=0x7ffc0000 [ 126.130429][ T29] audit: type=1326 audit(1763854927.497:5770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6713 comm="syz.3.1030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc995bcf749 code=0x7ffc0000 [ 126.172152][ T6724] loop0: detected capacity change from 0 to 512 [ 126.190118][ T6721] ext4 filesystem being mounted at /194/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 126.191526][ T6724] EXT4-fs: inline encryption not supported [ 126.213616][ T6721] SELinux: failed to load policy [ 126.294989][ T6724] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 126.305994][ T6697] syz.1.1024 (6697) used greatest stack depth: 7048 bytes left [ 126.314848][ T6724] EXT4-fs (loop0): failed to initialize system zone (-117) [ 126.322475][ T6724] EXT4-fs (loop0): mount failed [ 126.347150][ T6734] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1036'. [ 126.392967][ T6736] macvtap5: entered allmulticast mode [ 126.400214][ T6736] batman_adv: batadv0: Adding interface: macvtap5 [ 126.406662][ T6736] batman_adv: batadv0: The MTU of interface macvtap5 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 126.460245][ T6736] batman_adv: batadv0: Interface activated: macvtap5 [ 126.529559][ T6746] hub 1-0:1.0: USB hub found [ 126.534448][ T6746] hub 1-0:1.0: 8 ports detected [ 126.551988][ T6748] macvtap11: entered allmulticast mode [ 126.567153][ T6750] loop2: detected capacity change from 0 to 1024 [ 126.578133][ T6748] batman_adv: batadv0: Adding interface: macvtap11 [ 126.584708][ T6748] batman_adv: batadv0: The MTU of interface macvtap11 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 126.615903][ T6748] batman_adv: batadv0: Interface activated: macvtap11 [ 126.625584][ T6750] ext4 filesystem being mounted at /197/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 126.641075][ T6750] EXT4-fs error (device loop2): ext4_map_blocks:814: inode #15: comm syz.2.1040: lblock 0 mapped to illegal pblock 0 (length 1) [ 126.657426][ T6750] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 126.669793][ T6750] EXT4-fs (loop2): This should not happen!! Data will be lost [ 126.669793][ T6750] [ 126.687597][ T6750] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #15: comm syz.2.1040: lblock 0 mapped to illegal pblock 0 (length 1) [ 126.702157][ T6752] hub 1-0:1.0: USB hub found [ 126.707859][ T6752] hub 1-0:1.0: 8 ports detected [ 126.723766][ T6750] EXT4-fs error (device loop2): ext4_ext_remove_space:2955: inode #15: comm syz.2.1040: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 126.743444][ T6750] EXT4-fs error (device loop2) in ext4_setattr:6050: Corrupt filesystem [ 126.768603][ T6757] loop4: detected capacity change from 0 to 1024 [ 126.812688][ T6761] loop4: detected capacity change from 0 to 2048 [ 126.831169][ T6761] ext4 filesystem being mounted at /253/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 126.933460][ T6768] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1047'. [ 126.947309][ T6768] loop4: detected capacity change from 0 to 1024 [ 126.963854][ T6768] ext4 filesystem being mounted at /255/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 126.975591][ T6768] EXT4-fs error (device loop4): ext4_map_blocks:814: inode #15: comm syz.4.1047: lblock 0 mapped to illegal pblock 0 (length 1) [ 126.989396][ T6768] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 127.001785][ T6768] EXT4-fs (loop4): This should not happen!! Data will be lost [ 127.001785][ T6768] [ 127.012181][ T6768] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #15: comm syz.4.1047: lblock 0 mapped to illegal pblock 0 (length 1) [ 127.026052][ T6768] EXT4-fs error (device loop4): ext4_ext_remove_space:2955: inode #15: comm syz.4.1047: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 127.044506][ T6768] EXT4-fs error (device loop4) in ext4_setattr:6050: Corrupt filesystem [ 127.213334][ T6776] loop3: detected capacity change from 0 to 512 [ 127.222527][ T6776] EXT4-fs: inline encryption not supported [ 127.230422][ T6776] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 127.251367][ T6776] EXT4-fs (loop3): failed to initialize system zone (-117) [ 127.258803][ T6776] EXT4-fs (loop3): mount failed [ 127.357791][ T6786] loop0: detected capacity change from 0 to 1024 [ 127.391048][ T6788] loop2: detected capacity change from 0 to 512 [ 127.398709][ T6786] ext4 filesystem being mounted at /193/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 127.427195][ T6788] ext4 filesystem being mounted at /198/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 127.455725][ T6792] loop1: detected capacity change from 0 to 2048 [ 127.463277][ T6786] EXT4-fs error (device loop0): ext4_map_blocks:814: inode #15: comm syz.0.1053: lblock 0 mapped to illegal pblock 0 (length 1) [ 127.494219][ T6786] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 127.505887][ T6792] ext4 filesystem being mounted at /224/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 127.506564][ T6786] EXT4-fs (loop0): This should not happen!! Data will be lost [ 127.506564][ T6786] [ 127.535226][ T6799] loop3: detected capacity change from 0 to 1024 [ 127.540745][ T6800] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #15: comm syz.0.1053: lblock 0 mapped to illegal pblock 0 (length 1) [ 127.555529][ T6800] EXT4-fs error (device loop0): ext4_ext_remove_space:2955: inode #15: comm syz.0.1053: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 127.576357][ T6800] EXT4-fs error (device loop0) in ext4_setattr:6050: Corrupt filesystem [ 127.667185][ T6812] macvtap12: entered allmulticast mode [ 127.674471][ T6812] batman_adv: batadv0: Adding interface: macvtap12 [ 127.681041][ T6812] batman_adv: batadv0: The MTU of interface macvtap12 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 127.708396][ T6812] batman_adv: batadv0: Interface activated: macvtap12 [ 127.710698][ T6813] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1059'. [ 127.780392][ T6817] loop4: detected capacity change from 0 to 8192 [ 127.800823][ T6814] hub 1-0:1.0: USB hub found [ 127.812121][ T6815] netlink: 'syz.1.1060': attribute type 3 has an invalid length. [ 127.820116][ T6814] hub 1-0:1.0: 8 ports detected [ 128.253376][ T6826] loop0: detected capacity change from 0 to 1024 [ 128.271314][ T6826] ext4 filesystem being mounted at /195/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 128.283404][ T6826] EXT4-fs error (device loop0): ext4_map_blocks:814: inode #15: comm syz.0.1065: lblock 0 mapped to illegal pblock 0 (length 1) [ 128.297241][ T6826] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 128.309627][ T6826] EXT4-fs (loop0): This should not happen!! Data will be lost [ 128.309627][ T6826] [ 128.320162][ T6826] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #15: comm syz.0.1065: lblock 0 mapped to illegal pblock 0 (length 1) [ 128.333996][ T6826] EXT4-fs error (device loop0): ext4_ext_remove_space:2955: inode #15: comm syz.0.1065: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 128.352245][ T6826] EXT4-fs error (device loop0) in ext4_setattr:6050: Corrupt filesystem [ 128.542889][ T6832] loop2: detected capacity change from 0 to 1024 [ 128.577487][ T6836] loop3: detected capacity change from 0 to 128 [ 128.609728][ T6836] ext4 filesystem being mounted at /186/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 128.771890][ T6847] loop4: detected capacity change from 0 to 1024 [ 128.841717][ T6855] loop2: detected capacity change from 0 to 128 [ 128.885925][ T6855] ext4 filesystem being mounted at /202/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 128.960165][ T6864] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1077'. [ 129.104735][ T6868] loop3: detected capacity change from 0 to 2048 [ 129.149898][ T6868] ext4 filesystem being mounted at /188/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 129.168432][ T6871] loop0: detected capacity change from 0 to 1024 [ 129.222705][ T6872] netlink: 'syz.2.1079': attribute type 3 has an invalid length. [ 129.306566][ T6884] loop0: detected capacity change from 0 to 2048 [ 129.346798][ T6884] ext4 filesystem being mounted at /198/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 129.371640][ T6882] loop1: detected capacity change from 0 to 8192 [ 129.444714][ T6888] loop0: detected capacity change from 0 to 128 [ 129.460634][ T6888] ext4 filesystem being mounted at /199/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 129.531978][ T52] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm kworker/u8:3: bg 0: block 345: padding at end of block bitmap is not set [ 129.560217][ T52] EXT4-fs (loop3): Remounting filesystem read-only [ 129.759383][ T6902] loop0: detected capacity change from 0 to 1024 [ 129.801743][ T6902] ext4 filesystem being mounted at /203/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 129.818965][ T6902] EXT4-fs error (device loop0): ext4_map_blocks:814: inode #15: comm syz.0.1090: lblock 0 mapped to illegal pblock 0 (length 1) [ 129.865059][ T6902] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 129.877781][ T6902] EXT4-fs (loop0): This should not happen!! Data will be lost [ 129.877781][ T6902] [ 130.014601][ T6898] loop3: detected capacity change from 0 to 2048 [ 130.026709][ T6909] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #15: comm syz.0.1090: lblock 0 mapped to illegal pblock 0 (length 1) [ 130.048576][ T6909] EXT4-fs error (device loop0): ext4_ext_remove_space:2955: inode #15: comm syz.0.1090: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 130.093344][ T6898] ext4 filesystem being mounted at /189/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 130.159588][ T6909] EXT4-fs error (device loop0) in ext4_setattr:6050: Corrupt filesystem [ 130.217129][ T6917] loop1: detected capacity change from 0 to 1024 [ 130.218425][ T6916] loop3: detected capacity change from 0 to 1024 [ 130.241801][ T6919] loop2: detected capacity change from 0 to 2048 [ 130.303724][ T6919] ext4 filesystem being mounted at /205/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 130.357685][ T6931] loop3: detected capacity change from 0 to 128 [ 130.396024][ T6931] ext4 filesystem being mounted at /191/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 130.526184][ T6938] loop1: detected capacity change from 0 to 2048 [ 130.580329][ T3318] EXT4-fs unmount: 148 callbacks suppressed [ 130.580347][ T3318] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 130.597065][ T6938] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 130.611799][ T6938] ext4 filesystem being mounted at /232/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 130.879734][ T6954] loop0: detected capacity change from 0 to 1024 [ 130.955028][ T6954] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 130.975347][ T6958] macvtap13: entered allmulticast mode [ 130.984295][ T6958] batman_adv: batadv0: Adding interface: macvtap13 [ 130.990977][ T6958] batman_adv: batadv0: The MTU of interface macvtap13 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 131.087912][ T6954] ext4 filesystem being mounted at /204/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 131.101238][ T6948] EXT4-fs error (device loop0): ext4_map_blocks:814: inode #15: comm syz.0.1102: lblock 0 mapped to illegal pblock 0 (length 1) [ 131.118157][ T6958] batman_adv: batadv0: Interface activated: macvtap13 [ 131.141929][ T6948] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 131.154415][ T6948] EXT4-fs (loop0): This should not happen!! Data will be lost [ 131.154415][ T6948] [ 131.193440][ T6958] hub 1-0:1.0: USB hub found [ 131.201401][ T6958] hub 1-0:1.0: 8 ports detected [ 131.230745][ T29] kauditd_printk_skb: 358 callbacks suppressed [ 131.230758][ T29] audit: type=1326 audit(1763854932.767:6129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6956 comm="syz.3.1103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc995bcf749 code=0x7ffc0000 [ 131.265343][ T12] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm kworker/u8:0: bg 0: block 345: padding at end of block bitmap is not set [ 131.291550][ T29] audit: type=1326 audit(1763854932.807:6130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6956 comm="syz.3.1103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc995bcf749 code=0x7ffc0000 [ 131.293811][ T12] EXT4-fs (loop1): Remounting filesystem read-only [ 131.315104][ T29] audit: type=1326 audit(1763854932.807:6131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6956 comm="syz.3.1103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc995bcf749 code=0x7ffc0000 [ 131.345074][ T29] audit: type=1326 audit(1763854932.807:6132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6956 comm="syz.3.1103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc995bcf749 code=0x7ffc0000 [ 131.375345][ T6961] loop2: detected capacity change from 0 to 8192 [ 131.386547][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.456496][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 131.523969][ T6963] loop4: detected capacity change from 0 to 8192 [ 131.761319][ T6967] loop1: detected capacity change from 0 to 2048 [ 132.214532][ T6967] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 132.234554][ T6983] loop3: detected capacity change from 0 to 512 [ 132.248771][ T6967] ext4 filesystem being mounted at /234/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 132.348557][ T6983] EXT4-fs: inline encryption not supported [ 132.408552][ T6983] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 132.428015][ T29] audit: type=1326 audit(1763854933.937:6133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6985 comm="syz.2.1113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff92000f749 code=0x7ffc0000 [ 132.451534][ T29] audit: type=1326 audit(1763854933.937:6134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6985 comm="syz.2.1113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff92000f749 code=0x7ffc0000 [ 132.475065][ T29] audit: type=1326 audit(1763854933.947:6135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6985 comm="syz.2.1113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff92000f749 code=0x7ffc0000 [ 132.498530][ T29] audit: type=1326 audit(1763854933.947:6136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6985 comm="syz.2.1113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff92000f749 code=0x7ffc0000 [ 132.522012][ T29] audit: type=1326 audit(1763854933.957:6137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6985 comm="syz.2.1113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff92000f749 code=0x7ffc0000 [ 132.545464][ T29] audit: type=1326 audit(1763854933.957:6138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6985 comm="syz.2.1113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff92000f749 code=0x7ffc0000 [ 132.545891][ T6986] loop2: detected capacity change from 0 to 2048 [ 132.577882][ T6983] EXT4-fs (loop3): failed to initialize system zone (-117) [ 132.585122][ T6983] EXT4-fs (loop3): mount failed [ 132.590434][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.652754][ T6990] loop1: detected capacity change from 0 to 128 [ 132.660057][ T6986] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 132.701525][ T6986] ext4 filesystem being mounted at /212/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 132.720083][ T6990] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 132.722671][ T6996] macvtap14: entered allmulticast mode [ 132.738784][ T6990] ext4 filesystem being mounted at /235/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 132.751012][ T6996] batman_adv: batadv0: Adding interface: macvtap14 [ 132.757554][ T6996] batman_adv: batadv0: The MTU of interface macvtap14 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 132.759438][ T6986] SELinux: failed to load policy [ 132.797171][ T6996] batman_adv: batadv0: Interface activated: macvtap14 [ 132.868568][ T6999] hub 1-0:1.0: USB hub found [ 132.874552][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.886986][ T7000] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1117'. [ 132.899485][ T3312] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 132.908773][ T6999] hub 1-0:1.0: 8 ports detected [ 133.019884][ T7010] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1119'. [ 133.038138][ T7010] loop1: detected capacity change from 0 to 1024 [ 133.075541][ T7016] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1124'. [ 133.092416][ T7010] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 133.105241][ T7010] ext4 filesystem being mounted at /236/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 133.116926][ T7010] EXT4-fs error (device loop1): ext4_map_blocks:814: inode #15: comm syz.1.1119: lblock 0 mapped to illegal pblock 0 (length 1) [ 133.131010][ T7010] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 133.143562][ T7010] EXT4-fs (loop1): This should not happen!! Data will be lost [ 133.143562][ T7010] [ 133.296965][ T7009] loop2: detected capacity change from 0 to 2048 [ 133.314817][ T7020] loop0: detected capacity change from 0 to 2048 [ 133.363371][ T7009] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 133.378821][ T7009] ext4 filesystem being mounted at /215/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 133.378841][ T7020] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 133.403214][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.406454][ T7020] ext4 filesystem being mounted at /209/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 133.453593][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.488054][ T7028] macvtap6: entered allmulticast mode [ 133.495624][ T7028] batman_adv: batadv0: Adding interface: macvtap6 [ 133.502140][ T7028] batman_adv: batadv0: The MTU of interface macvtap6 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 133.527848][ T7028] batman_adv: batadv0: Interface activated: macvtap6 [ 133.593899][ T7035] loop3: detected capacity change from 0 to 512 [ 133.601201][ T7035] EXT4-fs: inline encryption not supported [ 133.601162][ T7030] hub 1-0:1.0: USB hub found [ 133.616669][ T7030] hub 1-0:1.0: 8 ports detected [ 133.617564][ T7035] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 133.650754][ T7035] EXT4-fs (loop3): failed to initialize system zone (-117) [ 133.658183][ T7035] EXT4-fs (loop3): mount failed [ 133.672282][ T7026] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1126'. [ 133.757699][ T7029] loop2: detected capacity change from 0 to 512 [ 133.808516][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 133.823423][ T7029] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 133.833597][ T7029] EXT4-fs (loop2): orphan cleanup on readonly fs [ 133.843316][ T7029] EXT4-fs warning (device loop2): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 133.875005][ T7029] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 133.893502][ T7029] EXT4-fs error (device loop2): ext4_orphan_get:1392: inode #16: comm syz.2.1126: inode has both inline data and extents flags [ 133.907856][ T7029] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.1126: couldn't read orphan inode 16 (err -117) [ 133.931833][ T7029] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 134.102155][ T7046] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1132'. [ 134.209510][ T7050] loop1: detected capacity change from 0 to 512 [ 134.231165][ T7050] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 134.241641][ T7050] EXT4-fs (loop1): orphan cleanup on readonly fs [ 134.255141][ T7050] EXT4-fs warning (device loop1): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 134.272228][ T7050] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 134.280927][ T7050] EXT4-fs error (device loop1): ext4_orphan_get:1392: inode #16: comm syz.1.1132: inode has both inline data and extents flags [ 134.294565][ T7050] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.1132: couldn't read orphan inode 16 (err -117) [ 134.553425][ T7050] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 134.690257][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.943044][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.943498][ T7066] macvtap6: entered allmulticast mode [ 135.011235][ T7066] batman_adv: batadv0: Adding interface: macvtap6 [ 135.017709][ T7066] batman_adv: batadv0: The MTU of interface macvtap6 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 135.068167][ T7066] batman_adv: batadv0: Interface activated: macvtap6 [ 135.104172][ T7061] loop0: detected capacity change from 0 to 2048 [ 135.136474][ T7061] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 135.150055][ T7061] ext4 filesystem being mounted at /213/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 135.150328][ T7067] hub 1-0:1.0: USB hub found [ 135.176676][ T7067] hub 1-0:1.0: 8 ports detected [ 135.197398][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.220132][ T7076] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1141'. [ 135.256874][ T7081] loop0: detected capacity change from 0 to 512 [ 135.263906][ T7081] EXT4-fs: inline encryption not supported [ 135.281153][ T7081] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 135.291386][ T7081] EXT4-fs (loop0): failed to initialize system zone (-117) [ 135.301559][ T7083] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1143'. [ 135.311026][ T7081] EXT4-fs (loop0): mount failed [ 135.315970][ T7083] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1143'. [ 135.357168][ T7083] loop1: detected capacity change from 0 to 1024 [ 135.372087][ T7084] loop3: detected capacity change from 0 to 2048 [ 135.391307][ T7083] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 135.443735][ T7083] ext4 filesystem being mounted at /239/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 135.462960][ T7084] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 135.476240][ T7083] EXT4-fs error (device loop1): ext4_map_blocks:814: inode #15: comm syz.1.1143: lblock 0 mapped to illegal pblock 0 (length 1) [ 135.490194][ T7083] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 135.502553][ T7083] EXT4-fs (loop1): This should not happen!! Data will be lost [ 135.502553][ T7083] [ 135.504383][ T7084] ext4 filesystem being mounted at /200/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 135.525150][ T7083] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #15: comm syz.1.1143: lblock 0 mapped to illegal pblock 0 (length 1) [ 135.553840][ T7083] EXT4-fs error (device loop1): ext4_ext_remove_space:2955: inode #15: comm syz.1.1143: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 135.576498][ T7083] EXT4-fs error (device loop1) in ext4_setattr:6050: Corrupt filesystem [ 135.627187][ T7086] loop0: detected capacity change from 0 to 2048 [ 135.688357][ T7086] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 135.702843][ T7086] ext4 filesystem being mounted at /215/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 135.728028][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.759917][ T7094] loop0: detected capacity change from 0 to 1024 [ 135.812930][ T7094] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 135.850250][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.000095][ T7107] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1147'. [ 136.062303][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 136.185165][ T7114] loop2: detected capacity change from 0 to 512 [ 136.191598][ T31] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm kworker/u8:1: bg 0: block 345: padding at end of block bitmap is not set [ 136.250370][ T31] EXT4-fs (loop3): Remounting filesystem read-only [ 136.330344][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.378711][ T7111] loop0: detected capacity change from 0 to 2048 [ 136.473220][ T7120] loop3: detected capacity change from 0 to 1024 [ 136.480017][ T7114] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 136.498037][ T7114] EXT4-fs (loop2): orphan cleanup on readonly fs [ 136.519389][ T7111] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 136.533568][ T7120] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 136.547794][ T7111] ext4 filesystem being mounted at /220/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 136.579068][ T7114] EXT4-fs warning (device loop2): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 136.655045][ T7127] loop1: detected capacity change from 0 to 512 [ 136.666539][ T7127] EXT4-fs: inline encryption not supported [ 136.673202][ T7127] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 136.750216][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.761230][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.774124][ T7114] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 136.787721][ T7127] EXT4-fs (loop1): failed to initialize system zone (-117) [ 136.818016][ T7127] EXT4-fs (loop1): mount failed [ 136.879019][ T29] kauditd_printk_skb: 138 callbacks suppressed [ 136.879037][ T29] audit: type=1326 audit(1763854938.417:6277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7133 comm="syz.3.1157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc995bcf749 code=0x7ffc0000 [ 136.917038][ T7134] loop3: detected capacity change from 0 to 2048 [ 136.949192][ T29] audit: type=1326 audit(1763854938.417:6278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7133 comm="syz.3.1157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc995bcf749 code=0x7ffc0000 [ 136.972710][ T29] audit: type=1326 audit(1763854938.417:6279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7133 comm="syz.3.1157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc995bcf749 code=0x7ffc0000 [ 136.996211][ T29] audit: type=1326 audit(1763854938.417:6280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7133 comm="syz.3.1157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc995bcf749 code=0x7ffc0000 [ 136.997248][ T7136] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1158'. [ 137.019672][ T29] audit: type=1326 audit(1763854938.417:6281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7133 comm="syz.3.1157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc995bcf749 code=0x7ffc0000 [ 137.029179][ T7114] EXT4-fs error (device loop2): ext4_orphan_get:1392: inode #16: comm syz.2.1147: inode has both inline data and extents flags [ 137.052103][ T29] audit: type=1326 audit(1763854938.417:6282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7133 comm="syz.3.1157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc995bcf749 code=0x7ffc0000 [ 137.088664][ T29] audit: type=1326 audit(1763854938.417:6283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7133 comm="syz.3.1157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc995bcf749 code=0x7ffc0000 [ 137.112088][ T29] audit: type=1326 audit(1763854938.417:6284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7133 comm="syz.3.1157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc995bd1667 code=0x7ffc0000 [ 137.135598][ T29] audit: type=1326 audit(1763854938.417:6285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7133 comm="syz.3.1157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fc995bd15dc code=0x7ffc0000 [ 137.159022][ T29] audit: type=1326 audit(1763854938.417:6286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7133 comm="syz.3.1157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fc995bd1514 code=0x7ffc0000 [ 137.193046][ T7139] loop0: detected capacity change from 0 to 512 [ 137.199946][ T7139] EXT4-fs: Ignoring removed oldalloc option [ 137.217321][ T7114] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.1147: couldn't read orphan inode 16 (err -117) [ 137.233997][ T7107] ================================================================== [ 137.242099][ T7107] BUG: KCSAN: data-race in __filemap_remove_folio / folio_mapping [ 137.249928][ T7107] [ 137.252248][ T7107] write to 0xffffea000484eb98 of 8 bytes by task 7096 on cpu 0: [ 137.259872][ T7107] __filemap_remove_folio+0x1a5/0x2a0 [ 137.265251][ T7107] filemap_remove_folio+0x6d/0x1d0 [ 137.270365][ T7107] truncate_inode_folio+0x42/0x50 [ 137.275477][ T7107] shmem_undo_range+0x244/0xa80 [ 137.280337][ T7107] shmem_fallocate+0x799/0x840 [ 137.285186][ T7107] vfs_fallocate+0x3b6/0x400 [ 137.289798][ T7107] __x64_sys_fallocate+0x7a/0xd0 [ 137.294790][ T7107] x64_sys_call+0x2518/0x3000 [ 137.299522][ T7107] do_syscall_64+0xd2/0x200 [ 137.304025][ T7107] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.309921][ T7107] [ 137.312238][ T7107] read to 0xffffea000484eb98 of 8 bytes by task 7107 on cpu 1: [ 137.319775][ T7107] folio_mapping+0xa1/0xe0 [ 137.324198][ T7107] move_folios_to_lru+0x128/0x6c0 [ 137.329228][ T7107] evict_folios+0x31d0/0x3590 [ 137.333915][ T7107] try_to_shrink_lruvec+0x5b5/0x950 [ 137.339122][ T7107] shrink_lruvec+0x22e/0x1b50 [ 137.343799][ T7107] shrink_node+0x686/0x2120 [ 137.348306][ T7107] do_try_to_free_pages+0x3f6/0xcd0 [ 137.353504][ T7107] try_to_free_mem_cgroup_pages+0x1ab/0x410 [ 137.359398][ T7107] try_charge_memcg+0x383/0xa10 [ 137.364249][ T7107] obj_cgroup_charge_pages+0xa6/0x150 [ 137.369619][ T7107] __memcg_kmem_charge_page+0x9f/0x170 [ 137.375075][ T7107] __alloc_frozen_pages_noprof+0x188/0x360 [ 137.380981][ T7107] alloc_pages_mpol+0xb3/0x260 [ 137.385747][ T7107] alloc_pages_noprof+0x90/0x130 [ 137.390684][ T7107] __vmalloc_node_range_noprof+0x7a5/0xed0 [ 137.396500][ T7107] __kvmalloc_node_noprof+0x483/0x670 [ 137.401883][ T7107] ip_set_alloc+0x24/0x30 [ 137.406226][ T7107] hash_netiface_create+0x282/0x740 [ 137.411432][ T7107] ip_set_create+0x3cc/0x970 [ 137.416022][ T7107] nfnetlink_rcv_msg+0x4c6/0x590 [ 137.420983][ T7107] netlink_rcv_skb+0x123/0x220 [ 137.425774][ T7107] nfnetlink_rcv+0x167/0x16c0 [ 137.430452][ T7107] netlink_unicast+0x5c0/0x690 [ 137.435223][ T7107] netlink_sendmsg+0x58b/0x6b0 [ 137.439982][ T7107] __sock_sendmsg+0x145/0x180 [ 137.444659][ T7107] ____sys_sendmsg+0x31e/0x4e0 [ 137.449416][ T7107] ___sys_sendmsg+0x17b/0x1d0 [ 137.454086][ T7107] __x64_sys_sendmsg+0xd4/0x160 [ 137.458941][ T7107] x64_sys_call+0x191e/0x3000 [ 137.463675][ T7107] do_syscall_64+0xd2/0x200 [ 137.468183][ T7107] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.474162][ T7107] [ 137.476480][ T7107] value changed: 0xffff8881313764d0 -> 0x0000000000000000 [ 137.483577][ T7107] [ 137.485896][ T7107] Reported by Kernel Concurrency Sanitizer on: [ 137.492045][ T7107] CPU: 1 UID: 0 PID: 7107 Comm: syz.2.1147 Not tainted syzkaller #0 PREEMPT(voluntary) [ 137.501762][ T7107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 137.511988][ T7107] ================================================================== [ 137.529130][ T7136] IPVS: Error connecting to the multicast addr [ 137.560366][ T7139] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 137.577974][ T7114] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 137.602419][ T7134] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 137.625336][ T7139] ext4 filesystem being mounted at /222/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 137.635997][ T7134] ext4 filesystem being mounted at /202/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 137.688156][ T7134] SELinux: failed to load policy [ 137.696441][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.808348][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.004775][ T7107] syz.2.1147 (7107) used greatest stack depth: 6008 bytes left [ 138.014359][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.