last executing test programs: 3.712233075s ago: executing program 3 (id=3546): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000280)={'syztnl2\x00', &(0x7f0000000200)={'ip6_vti0\x00', r1, 0x29, 0x5, 0x6, 0x8, 0x4, @mcast1, @private1, 0x8, 0x1, 0x4, 0xfffffffe}}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0x1ffffffffffffeb2, &(0x7f0000000180)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x8, '\x00', r2, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x18) io_setup(0x5, &(0x7f0000000e80)=0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) io_submit(r4, 0x0, &(0x7f0000001580)) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$key(0xf, 0x3, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) sendmsg$key(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000007c0)=ANY=[@ANYBLOB="0209000002"], 0x10}}, 0x44040) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1, 0x7, 0x2261, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r6, &(0x7f0000000000), &(0x7f0000000080)=@udp}, 0x20) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x2, @perf_config_ext={0xf60, 0xffffffff}, 0x1100, 0x5dd8, 0x3a65, 0x5, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r8, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) 3.620273676s ago: executing program 1 (id=3549): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x30dd3000) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000240)={[{@grpquota}, {@auto_da_alloc}, {@minixdf}]}, 0x1, 0x50c, &(0x7f0000000ac0)="$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") r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, 0x0, &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r0, 0x0, 0x7}, 0x18) r1 = open(&(0x7f0000000080)='./file1\x00', 0x64842, 0x86) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x140000}], 0x1, 0x7800, 0x0, 0x3) 2.807409808s ago: executing program 3 (id=3553): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000020000000c"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000001c0)='qrtr_ns_service_announce_del\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x30dd3000) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000240)={[{@grpquota}, {@auto_da_alloc}, {@minixdf}]}, 0x1, 0x50c, &(0x7f0000000ac0)="$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") truncate(0x0, 0xf0ffff) r2 = openat(0xffffffffffffffff, &(0x7f0000000080)='./bus\x00', 0x441, 0x14a) fallocate(r2, 0x10, 0x3, 0x7c27) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3, 0x0, 0x7}, 0x18) r4 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x2) write$binfmt_script(r4, &(0x7f0000000300)={'#! ', './file0'}, 0xb) execveat(r4, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r5 = open(&(0x7f0000000080)='./file1\x00', 0x64842, 0x86) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) fsopen(&(0x7f0000000300)='nsfs\x00', 0x1) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000003c0)='kmem_cache_free\x00', r6}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x7, 0xfc, 0xff, 0x6}]}) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000) openat$cgroup_procs(r2, &(0x7f0000000480)='cgroup.threads\x00', 0x2, 0x0) r7 = syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x0) ioctl$EVIOCGRAB(r7, 0x40044590, &(0x7f0000000200)) ioctl$EVIOCGABS20(r7, 0x40044591, 0x0) pwritev2(r5, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x140000}], 0x1, 0x7800, 0x0, 0x3) 2.736926699s ago: executing program 4 (id=3555): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000020000000c"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000001c0)='qrtr_ns_service_announce_del\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x30dd3000) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000240)={[{@grpquota}, {@auto_da_alloc}, {@minixdf}]}, 0x1, 0x50c, &(0x7f0000000ac0)="$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") r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2, 0x0, 0x7}, 0x18) r3 = open(&(0x7f0000000080)='./file1\x00', 0x64842, 0x86) pwritev2(r3, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x140000}], 0x1, 0x7800, 0x0, 0x3) 2.69472559s ago: executing program 1 (id=3557): r0 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='kfree\x00', r1, 0x0, 0x8}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x3000046, &(0x7f0000000300)={[{@delalloc}, {@nojournal_checksum}, {@barrier_val={'barrier', 0x3d, 0x404}}, {@dioread_lock}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x6522}}]}, 0x1, 0x553, &(0x7f0000001080)="$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") r2 = open(&(0x7f0000000140)='./file1\x00', 0x141242, 0x40) pwrite64(r2, &(0x7f0000000940)='2', 0x1, 0x8000c61) fallocate(r2, 0x8, 0x40000, 0x10000) 2.466437383s ago: executing program 2 (id=3560): connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001868000000000000000000080000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000001800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r0}, 0x10) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000b00)=@base={0x6, 0x4, 0x70be, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x110}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x78}}, 0x20050800) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50) r2 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x42, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000c00)={{}, &(0x7f0000000b80), &(0x7f0000000bc0)=r3}, 0x20) write$selinux_load(r2, &(0x7f0000000340)={0xf97cff8c, 0x8}, 0x2000) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) 2.401967145s ago: executing program 1 (id=3561): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYRES64=r0, @ANYRES8=r1, @ANYRES32=r0], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x10}, {0xffff, 0xffff}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x1000}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20040054) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="01002cbd7000fbdbdf250400000014000200fe8000000000000000000000000000bb14000300fc0000000000000000000000000000011400060076657468315f766c616e000000000000"], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8410) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) mq_timedreceive(r3, 0x0, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) link(&(0x7f0000001240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0xae682, 0x0) r4 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[], 0x5c}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r6, &(0x7f0000000240)={0x0, 0xffac, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="28000000030605000000000000000000000000000500010007"], 0x28}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7ffc0002}]}) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r7}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) creat(&(0x7f0000000280)='./file0\x00', 0x1) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x800008, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r10}}) dup2(r9, r11) 2.168738898s ago: executing program 3 (id=3563): bpf$MAP_CREATE(0x0, 0x0, 0x0) openat2(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x1, 0x0) preadv(r0, &(0x7f0000000480)=[{&(0x7f00000000c0)=""/148, 0x94}], 0x1, 0x1, 0x0) ioctl$MON_IOCX_GETX(r0, 0x80089203, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r1, 0x11b, 0x6, &(0x7f0000000000)=0x40000000, 0x4) unshare(0x42000000) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000000)='./file0\x00', 0x1018000, &(0x7f00000000c0)=ANY=[@ANYRES8=0x0, @ANYRES64, @ANYRESDEC, @ANYRESOCT, @ANYRESHEX, @ANYRESDEC], 0x1, 0x2ee, &(0x7f00000003c0)="$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") bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0xffffff77) mount$9p_tcp(0x0, 0x0, 0x0, 0x2e00, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) socket$inet6_sctp(0xa, 0x801, 0x84) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 2.166944068s ago: executing program 4 (id=3564): socket$netlink(0x10, 0x3, 0x8000000004) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x10, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000", @ANYBLOB, @ANYBLOB], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000180)='./file0\x00', 0x1000802, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x4, 0x24e, &(0x7f0000000a00)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r4, 0xc0185879, &(0x7f0000000080)={@id={0x2, 0x0, @d}}) 1.949376241s ago: executing program 0 (id=3565): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) listen(r0, 0x0) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000080), 0x10) r2 = syz_io_uring_setup(0x4172, &(0x7f0000000780)={0x0, 0x4f5e, 0x10100}, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/4, 0x4}], 0x27}) io_uring_enter(r2, 0x567, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0x5}, 0x8) sendmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094) r4 = accept4$unix(r0, 0x0, 0x0, 0x0) recvfrom$unix(r4, &(0x7f0000000140)=""/263, 0x107, 0x0, 0x0, 0x0) 1.927604401s ago: executing program 0 (id=3566): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x6, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x2, 0x800000000003}, 0x1320, 0xffffffff, 0x3, 0x5, 0x4, 0x1088f109, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x3, &(0x7f0000000280)=ANY=[@ANYRESHEX=r1, @ANYRES8=r0, @ANYRESOCT=r0, @ANYRES16=r1], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006, 0x0, 0x0, 0xfffffffa}]}, 0x10) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES32=r1], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1100}, 0x48) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000500), 0xff, 0x485, &(0x7f0000001040)="$eJzs3M9rHFUcAPDvTJL+bhNrrba2Gq1i8UfSpFV78KCi4EFB0EM9xiSttdtGmgi2BI0i9SgF7+JR8C/w5kXUgwheFTxKoWgQmnqKzK9mu9mkSZpkbfbzgc2+t/Nm3/vOzNt9My+zAbSt3uxPErEjIn6LiO4ie3OB3uJpZnpy+Pr05HASs7Nv/JXk5a5NTw5XRav1tpeZw2lE+mkSzyfz6x2/cPHMUK02er7M90+cfa9//MLFp06fHTo1emr03ODx48eODjz7zODTqxJnFte1/R+OHdj3yluXXxs+cfntH7/JmrX3YLG8Po5but4koCZ6s63292yucdmjy2j7nWBnXTrpbGFDWJaOiMh2V1fe/7ujI+Z2Xne8/ElLGwesqey7afPCi6dmgQ0siVa3AGiN6os+O/+tHus09PhfuPpCxKYyPTM9OTxzI/7OSMvXu9aw/t6IODH175fZI5Z7HQIAYAXysc2TzcZ/aezNn4u5jl3lHEpPRNwVEbsj4u6I2BMR90TkZe+NiPuKlWe7l1h/b0N+/vgnvdK0zaskG/89Vzf2m6mLv3zq6ShzO/P4u5KTp2ujR8ptcji6Nmf5gUXq+O6lXz9faFn9+C97ZPVXY8GyAVc6Gy7QjQxNDK3WRrj6ccT+zmbxJzdmArIjYF9E7F/eW++qEqcf//rAQoVuHf8iVmGeafariMeK/T8VDfFXksXnJ/u3RG30SH91VMz30y+XXl+o/tuKfxVk+3/bzcd/Q4nuf5JivrYrarXR8+PLr+PS758teE6z0uN/U/JmPmf98zvFax8MTUycH4jYlLya56tzuvz1wbl1q3xVPov/8KHm/X93uU4W//0RkR3EByPigYh4sGz7QxHxcEQcWiT+H1585N1F4k8iiZbu/5Gmn383jv+epH6+fgWJjjPff7vQjPnS9v+xmMo/awv5598tLLWBt7n5AAAA4I6QRsSOSNK+It27I9K0r6/4H/49sS2tjY1PPHFy7P1zI8U9Aj3RlVZXurrrrocOJFPlOxb5wfJacbX8aHnd+IuOrXm+b3isNtLi2KHdbb+5/0fV/zN/drS6dcCac78WtK/G/p+2qB3A+lvK979zAdiYmvT/ra1oB7D+nP9D+2rW/z9qyBv/w8Y0v///0eQn64CNyPgf2pf+D+1L/4e2dDv39a88Ud0ssPL32bLkO/zbJVH94sVa1rU15l6JtOUht1Ei6zHrW+ncb6gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADcyf4LAAD///ss5ts=") r3 = syz_io_uring_setup(0x44f, &(0x7f0000000140)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000100)=@IORING_OP_RENAMEAT={0x23, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000240)='./cgroup/pids.max/../file0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) io_uring_enter(r3, 0x2dbe, 0x0, 0x0, 0x0, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001980)={0x1, 0x3, &(0x7f00000013c0)=ANY=[@ANYBLOB="180000000000000000000000000000fd95"], &(0x7f0000001400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={r6, 0xffffffffffffffff, 0x2, 0x0, @void}, 0x10) pwrite64(0xffffffffffffffff, &(0x7f0000000140)='2', 0x1, 0x8000c61) r7 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x44) sendfile(r7, r7, 0x0, 0x800000009) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0x40305829, &(0x7f00000002c0)={0x17c04, 0xffffffffffffffff, 0x8006, 0x100000001, 0x0, 0x8001}) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000040)=0x2) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_pts(r8, 0x4800) sendmsg$IPSET_CMD_GET_BYNAME(r7, &(0x7f0000000a80)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x26311cf79b5c0eb7}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x20, 0xe, 0x6, 0x101, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x4004) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) preadv2(r9, &(0x7f0000000940)=[{&(0x7f0000000400)=""/18, 0x12}, {&(0x7f0000000440)=""/205, 0xcd}, {&(0x7f0000000540)=""/209, 0xd1}, {&(0x7f0000000640)=""/242, 0xf2}, {&(0x7f0000000740)=""/227, 0xe3}, {&(0x7f0000000840)=""/223, 0xdf}, {&(0x7f0000000d80)=""/163, 0x18}, {&(0x7f0000000380)=""/23}], 0x7, 0x1, 0xf, 0x5) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000d00)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=r10, @ANYBLOB, @ANYRES32=r11, @ANYBLOB="28000e0080000000ffffffffffff0802110000000802110000000000000000000000000064000100080026006c09000008000c006400000008000d00000000000a0034000202020202020000080035000000000004000501"], 0x74}}, 0x0) 1.816654283s ago: executing program 0 (id=3567): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file2\x00', 0x300c056, &(0x7f0000000d80)={[{@noload}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@errors_remount}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x55a, &(0x7f0000000480)="$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") creat(&(0x7f0000000240)='./bus\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r1, &(0x7f0000000280)="42930b2026bb6648", 0x8) sendfile(r1, r0, 0x0, 0x3ffff) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.numa_stat\x00', 0x275a, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r2, 0x8004587d, &(0x7f00000003c0)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4}) 1.560270327s ago: executing program 2 (id=3568): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)={0x50, 0x2, 0x6, 0x101, 0x0, 0x0, {0x1}, [@IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x7}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x81ba}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r0 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x22c01) setreuid(0x0, 0xee00) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f00000000c0)=ANY=[@ANYRES64=r0]) 1.256742801s ago: executing program 2 (id=3569): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000007940)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x33f}, 0x1, 0x0, 0x0, 0xc0d0}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fd, 0xfffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x60}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="180200000000000000000000000000008500000028000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000009500"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x2, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020003f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r3}, 0x10) write$cgroup_subtree(r1, 0x0, 0xfdef) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x801, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x15, 0x0, 0x0, &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) socketpair(0x0, 0x0, 0x0, &(0x7f0000000000)) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4b) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_virt_wifi\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8946, &(0x7f0000000080)) 1.203647682s ago: executing program 1 (id=3570): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000003200)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) pivot_root(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)='./file0\x00') 1.136499343s ago: executing program 1 (id=3571): creat(&(0x7f0000000240)='./bus\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r1, &(0x7f0000000280)="42930b2026bb664813a75f299a1b2b79", 0x10) sendfile(r1, r0, 0x0, 0x3ffff) 1.058561344s ago: executing program 3 (id=3572): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000340)=ANY=[@ANYBLOB='\t\x00\x00\x00\x00\x00\x00\x00']) 942.033806ms ago: executing program 2 (id=3573): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x20, 0x3, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x94}, 0x1, 0x0, 0x0, 0x8040}, 0x0) 941.155046ms ago: executing program 2 (id=3574): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000020000000c"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000001c0)='qrtr_ns_service_announce_del\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x30dd3000) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000240)={[{@grpquota}, {@auto_da_alloc}, {@minixdf}]}, 0x1, 0x50c, &(0x7f0000000ac0)="$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") truncate(0x0, 0xf0ffff) r2 = openat(0xffffffffffffffff, &(0x7f0000000080)='./bus\x00', 0x441, 0x14a) fallocate(r2, 0x10, 0x3, 0x7c27) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3, 0x0, 0x7}, 0x18) r4 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x2) write$binfmt_script(r4, &(0x7f0000000300)={'#! ', './file0'}, 0xb) execveat(r4, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000400b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) fsopen(&(0x7f0000000300)='nsfs\x00', 0x1) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000003c0)='kmem_cache_free\x00', r6}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x7, 0xfc, 0xff, 0x6}]}) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000) openat$cgroup_procs(r2, &(0x7f0000000480)='cgroup.threads\x00', 0x2, 0x0) r7 = syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x0) ioctl$EVIOCGRAB(r7, 0x40044590, &(0x7f0000000200)) ioctl$EVIOCGABS20(r7, 0x40044591, 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x140000}], 0x1, 0x7800, 0x0, 0x3) 910.049446ms ago: executing program 0 (id=3575): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}], {0x14}}, 0x74}, 0x1, 0x0, 0x0, 0x8040}, 0x0) 808.758538ms ago: executing program 3 (id=3576): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r2) sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x28}}, 0x0) 769.629869ms ago: executing program 0 (id=3577): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000020000000c"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000001c0)='qrtr_ns_service_announce_del\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x30dd3000) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000240)={[{@grpquota}, {@auto_da_alloc}, {@minixdf}]}, 0x1, 0x50c, &(0x7f0000000ac0)="$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") truncate(0x0, 0xf0ffff) r2 = openat(0xffffffffffffffff, &(0x7f0000000080)='./bus\x00', 0x441, 0x14a) fallocate(r2, 0x10, 0x3, 0x7c27) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x7}, 0x18) pwritev2(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x140000}], 0x1, 0x7800, 0x0, 0x3) 642.263331ms ago: executing program 3 (id=3578): bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000d8d60b007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000140)={'#! ', '', [], 0xa, "ddc42f1725c4a4"}, 0xb) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x481, 0x0) ioctl$SNAPSHOT_FREE(r6, 0x3314) 506.420732ms ago: executing program 4 (id=3579): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)={0x50, 0x2, 0x6, 0x101, 0x0, 0x0, {0x1}, [@IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x7}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x81ba}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r0 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x22c01) setreuid(0x0, 0xee00) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f00000000c0)=ANY=[@ANYRES64=r0]) 469.808383ms ago: executing program 1 (id=3580): bpf$MAP_CREATE(0x0, 0x0, 0x0) openat2(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x1, 0x0) preadv(r0, &(0x7f0000000480)=[{&(0x7f00000000c0)=""/148, 0x94}], 0x1, 0x1, 0x0) ioctl$MON_IOCX_GETX(r0, 0x80089203, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r1, 0x11b, 0x6, &(0x7f0000000000)=0x40000000, 0x4) unshare(0x42000000) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000000)='./file0\x00', 0x1018000, &(0x7f00000000c0)=ANY=[@ANYRES8=0x0, @ANYRES64, @ANYRESDEC, @ANYRESOCT, @ANYRESHEX, @ANYRESDEC], 0x1, 0x2ee, &(0x7f00000003c0)="$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") bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0xffffff77) mount$9p_tcp(0x0, 0x0, 0x0, 0x2e00, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) socket$inet6_sctp(0xa, 0x801, 0x84) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 225.889827ms ago: executing program 2 (id=3581): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) listen(r0, 0x0) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000080), 0x10) r2 = syz_io_uring_setup(0x4172, &(0x7f0000000780)={0x0, 0x4f5e, 0x10100}, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/4, 0x4}], 0x27}) io_uring_enter(r2, 0x567, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0x5}, 0x8) sendmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094) r4 = accept4$unix(r0, 0x0, 0x0, 0x0) recvfrom$unix(r4, &(0x7f0000000140)=""/263, 0x107, 0x0, 0x0, 0x0) 201.037217ms ago: executing program 4 (id=3582): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(0x0, r0) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)={0x3c, r1, 0x821, 0x70bd2c, 0x25dfdbff, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x80}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4040004) 149.619928ms ago: executing program 4 (id=3583): write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f0000000040)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0x1}}, 0x10) prlimit64(0x0, 0xe, &(0x7f000001f940)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000000)=ANY=[@ANYBLOB="700000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="000000000d2e5bf308000300", @ANYRES32=0x0, @ANYBLOB="4800128009000100626f6e6400000000380002800400088008000700"], 0x70}}, 0x0) r1 = socket(0xa, 0x80000, 0xf8c) setsockopt$inet6_int(r1, 0x29, 0xcf, &(0x7f0000000240)=0x1, 0x4) 1.13923ms ago: executing program 4 (id=3584): syz_open_procfs(0x0, 0x0) mlockall(0x3) mlockall(0x5) 0s ago: executing program 0 (id=3585): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x20, 0x3, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x94}, 0x1, 0x0, 0x0, 0x8040}, 0x0) kernel console output (not intermixed with test programs): roblem. [ 260.774726][ T29] audit: type=1326 audit(1743401182.277:3966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12036 comm="syz.0.2934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac55bcd169 code=0x7ffc0000 [ 260.792849][T12000] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 260.816711][ T29] audit: type=1326 audit(1743401182.277:3967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12036 comm="syz.0.2934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fac55bcd169 code=0x7ffc0000 [ 260.851081][ T29] audit: type=1326 audit(1743401182.277:3968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12036 comm="syz.0.2934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac55bcd169 code=0x7ffc0000 [ 260.862611][T12044] loop3: detected capacity change from 0 to 1024 [ 260.874956][ T29] audit: type=1326 audit(1743401182.277:3969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12036 comm="syz.0.2934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fac55bcd169 code=0x7ffc0000 [ 260.874996][ T29] audit: type=1326 audit(1743401182.277:3970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12036 comm="syz.0.2934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac55bcd169 code=0x7ffc0000 [ 260.928645][ T29] audit: type=1326 audit(1743401182.287:3971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12036 comm="syz.0.2934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fac55bcd169 code=0x7ffc0000 [ 260.928912][T12044] EXT4-fs: Ignoring removed orlov option [ 260.952270][ T29] audit: type=1326 audit(1743401182.287:3972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12036 comm="syz.0.2934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac55bcd169 code=0x7ffc0000 [ 260.958615][T12044] EXT4-fs: Ignoring removed nomblk_io_submit option [ 260.982088][ T29] audit: type=1326 audit(1743401182.287:3973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12036 comm="syz.0.2934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7fac55bcd169 code=0x7ffc0000 [ 261.013217][ T29] audit: type=1326 audit(1743401182.287:3974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12036 comm="syz.0.2934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac55bcd169 code=0x7ffc0000 [ 261.036924][ T29] audit: type=1326 audit(1743401182.287:3975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12036 comm="syz.0.2934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7fac55bcd169 code=0x7ffc0000 [ 261.067334][T12044] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 261.084317][T12000] hsr_slave_0: entered promiscuous mode [ 261.100108][T12000] hsr_slave_1: entered promiscuous mode [ 261.108642][T12000] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 261.117126][T12000] Cannot create hsr debugfs directory [ 261.118445][T11785] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 261.190523][T12000] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.210517][T12059] sit0: entered allmulticast mode [ 261.243603][T12000] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.293485][T12000] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.322780][T12077] program syz.3.2950 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 261.343499][T12000] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.412340][T12000] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 261.422783][T12000] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 261.436776][T12000] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 261.447515][T12000] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 261.514140][T12000] 8021q: adding VLAN 0 to HW filter on device bond0 [ 261.539640][T12000] 8021q: adding VLAN 0 to HW filter on device team0 [ 261.555691][ T373] bridge0: port 1(bridge_slave_0) entered blocking state [ 261.562888][ T373] bridge0: port 1(bridge_slave_0) entered forwarding state [ 261.579648][ T373] bridge0: port 2(bridge_slave_1) entered blocking state [ 261.586794][ T373] bridge0: port 2(bridge_slave_1) entered forwarding state [ 261.609183][T12000] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 261.619763][T12000] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 261.680067][T12096] loop3: detected capacity change from 0 to 1024 [ 261.695353][T12096] EXT4-fs: Ignoring removed nobh option [ 261.701103][T12096] EXT4-fs: Ignoring removed bh option [ 261.708719][T12000] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 261.724801][T12096] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 261.790217][T11785] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 261.848403][T12113] program syz.3.2960 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 261.860426][T12000] veth0_vlan: entered promiscuous mode [ 261.882912][T12000] veth1_vlan: entered promiscuous mode [ 261.959073][T12000] veth0_macvtap: entered promiscuous mode [ 261.983497][T12000] veth1_macvtap: entered promiscuous mode [ 262.012326][T12000] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 262.022955][T12000] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.033034][T12000] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 262.043536][T12000] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.059768][T12000] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 262.069015][T12000] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 262.072142][ T8524] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 262.079563][T12000] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.100181][T12000] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 262.110891][T12000] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.122584][T12000] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 262.131351][T12000] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.140405][T12000] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.149288][T12000] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.158367][T12000] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.222502][ T373] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 262.239680][ T3316] block device autoloading is deprecated and will be removed. [ 262.390524][T12135] loop4: detected capacity change from 0 to 1024 [ 262.403739][T12135] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 262.415124][T12135] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 262.427163][T12138] program syz.1.2970 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 262.441860][T12135] JBD2: no valid journal superblock found [ 262.447648][T12135] EXT4-fs (loop4): Could not load journal inode [ 262.465778][T12135] netlink: 48 bytes leftover after parsing attributes in process `+}[@'. [ 262.524469][T12151] loop4: detected capacity change from 0 to 128 [ 262.535437][T12151] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 262.553693][T12156] loop3: detected capacity change from 0 to 1024 [ 262.560280][T12151] ext4 filesystem being mounted at /576/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 262.560643][T12156] EXT4-fs: Ignoring removed nobh option [ 262.577671][T12156] EXT4-fs: Ignoring removed bh option [ 262.590097][T12159] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 32 [ 262.615209][T12156] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 262.641501][ T3309] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 262.708072][T11785] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 262.725768][T12163] SELinux: policydb version 0 does not match my version range 15-34 [ 262.736588][T12163] SELinux: failed to load policy [ 262.872752][ T8524] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 262.976602][T12190] loop3: detected capacity change from 0 to 128 [ 263.009550][T12190] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 263.045093][T12190] ext4 filesystem being mounted at /27/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 263.098941][T11785] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 263.186104][T12199] loop0: detected capacity change from 0 to 1024 [ 263.195024][T12199] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 263.206083][T12199] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 263.218700][T12199] JBD2: no valid journal superblock found [ 263.224625][T12199] EXT4-fs (loop0): Could not load journal inode [ 263.237598][T12199] netlink: 48 bytes leftover after parsing attributes in process `+}[@'. [ 263.246945][T12205] warn_alloc: 5 callbacks suppressed [ 263.247036][T12205] syz.3.2992: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 263.268440][T12205] CPU: 1 UID: 0 PID: 12205 Comm: syz.3.2992 Not tainted 6.14.0-syzkaller-10764-gaa918db707fb #0 PREEMPT(voluntary) [ 263.268472][T12205] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 263.268488][T12205] Call Trace: [ 263.268497][T12205] [ 263.268507][T12205] dump_stack_lvl+0xf6/0x150 [ 263.268542][T12205] dump_stack+0x15/0x1a [ 263.268564][T12205] warn_alloc+0x145/0x1b0 [ 263.268585][T12205] ? __vmalloc_node_range_noprof+0x8a/0xe80 [ 263.268616][T12205] __vmalloc_node_range_noprof+0xac/0xe80 [ 263.268674][T12205] ? __pfx_futex_wake_mark+0x10/0x10 [ 263.268695][T12205] ? __rcu_read_unlock+0x4e/0x70 [ 263.268744][T12205] ? avc_has_perm_noaudit+0x1cc/0x210 [ 263.268774][T12205] ? should_fail_ex+0x31/0x270 [ 263.268795][T12205] ? should_failslab+0x8f/0xb0 [ 263.268823][T12205] vmalloc_user_noprof+0x59/0x70 [ 263.268848][T12205] ? xskq_create+0x79/0xd0 [ 263.268927][T12205] xskq_create+0x79/0xd0 [ 263.268950][T12205] xsk_init_queue+0x82/0xd0 [ 263.268974][T12205] xsk_setsockopt+0x37d/0x550 [ 263.269007][T12205] ? __pfx_xsk_setsockopt+0x10/0x10 [ 263.269102][T12205] __sys_setsockopt+0x187/0x200 [ 263.269142][T12205] __x64_sys_setsockopt+0x66/0x80 [ 263.269213][T12205] x64_sys_call+0x2a09/0x2e10 [ 263.269279][T12205] do_syscall_64+0xc9/0x1c0 [ 263.269303][T12205] ? clear_bhb_loop+0x25/0x80 [ 263.269355][T12205] ? clear_bhb_loop+0x25/0x80 [ 263.269377][T12205] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.269410][T12205] RIP: 0033:0x7fe04dabd169 [ 263.269499][T12205] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 263.269536][T12205] RSP: 002b:00007fe04c0e5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 263.269570][T12205] RAX: ffffffffffffffda RBX: 00007fe04dcd6160 RCX: 00007fe04dabd169 [ 263.269586][T12205] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004 [ 263.269601][T12205] RBP: 00007fe04db3e2a0 R08: 0000000000000004 R09: 0000000000000000 [ 263.269617][T12205] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 263.269629][T12205] R13: 0000000000000000 R14: 00007fe04dcd6160 R15: 00007fffa31492a8 [ 263.269647][T12205] [ 263.269653][T12205] Mem-Info: [ 263.422251][T12199] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 263.440849][T12205] active_anon:3483 inactive_anon:1 isolated_anon:0 [ 263.440849][T12205] active_file:8752 inactive_file:10860 isolated_file:0 [ 263.440849][T12205] unevictable:0 dirty:190 writeback:0 [ 263.440849][T12205] slab_reclaimable:2907 slab_unreclaimable:16142 [ 263.440849][T12205] mapped:30815 shmem:257 pagetables:999 [ 263.440849][T12205] sec_pagetables:0 bounce:0 [ 263.440849][T12205] kernel_misc_reclaimable:0 [ 263.440849][T12205] free:1856893 free_pcp:12732 free_cma:0 [ 263.458550][T12212] loop3: detected capacity change from 0 to 128 [ 263.466823][T12205] Node 0 active_anon:14048kB inactive_anon:4kB active_file:35008kB inactive_file:43440kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:123260kB dirty:760kB writeback:0kB shmem:1028kB writeback_tmp:0kB kernel_stack:3168kB pagetables:3996kB sec_pagetables:0kB all_unreclaimable? no [ 263.532609][T12215] loop4: detected capacity change from 0 to 256 [ 263.554200][T12205] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 263.623089][T12205] lowmem_reserve[]: 0 2884 7862 7862 [ 263.628439][T12205] Node 0 DMA32 free:2949876kB boost:0kB min:4132kB low:7064kB high:9996kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2953408kB mlocked:0kB bounce:0kB free_pcp:3532kB local_pcp:0kB free_cma:0kB [ 263.657851][T12205] lowmem_reserve[]: 0 0 4978 4978 [ 263.663110][T12205] Node 0 Normal free:4462080kB boost:0kB min:7184kB low:12280kB high:17376kB reserved_highatomic:0KB active_anon:15556kB inactive_anon:4kB active_file:35008kB inactive_file:43440kB unevictable:0kB writepending:760kB present:5242880kB managed:5098248kB mlocked:0kB bounce:0kB free_pcp:45240kB local_pcp:9156kB free_cma:0kB [ 263.693489][T12205] lowmem_reserve[]: 0 0 0 0 [ 263.698069][T12205] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 263.710903][T12205] Node 0 DMA32: 3*4kB (M) 3*8kB (M) 3*16kB (M) 3*32kB (M) 5*64kB (M) 4*128kB (M) 3*256kB (M) 4*512kB (M) 3*1024kB (M) 3*2048kB (M) 717*4096kB (M) = 2949876kB [ 263.727829][T12205] Node 0 Normal: 321*4kB (UME) 176*8kB (UE) 72*16kB (UME) 252*32kB (UME) 360*64kB (UME) 82*128kB (UME) 29*256kB (UM) 135*512kB (UME) 56*1024kB (UME) 19*2048kB (UME) 1036*4096kB (UME) = 4461700kB [ 263.748145][T12205] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 263.757517][T12205] 21216 total pagecache pages [ 263.762255][T12205] 2 pages in swap cache [ 263.766476][T12205] Free swap = 124516kB [ 263.770846][T12205] Total swap = 124996kB [ 263.775559][T12205] 2097051 pages RAM [ 263.779543][T12205] 0 pages HighMem/MovableOnly [ 263.784894][T12205] 80297 pages reserved [ 263.930892][T12232] loop0: detected capacity change from 0 to 512 [ 263.939682][T12232] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 263.952966][T12232] EXT4-fs (loop0): 1 truncate cleaned up [ 263.960510][T12232] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 264.000101][T12240] netlink: 'syz.2.3007': attribute type 10 has an invalid length. [ 264.011034][T12240] syz_tun: entered promiscuous mode [ 264.021212][T12240] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 264.043630][T12243] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.3005'. [ 264.054213][T12232] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.3005'. [ 264.087500][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 264.111170][T12246] random: crng reseeded on system resumption [ 264.175078][T12242] loop1: detected capacity change from 0 to 512 [ 264.189696][T12242] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 264.204511][T12242] ext4 filesystem being mounted at /574/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 264.253369][T12256] sit0: entered allmulticast mode [ 264.315755][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 264.340019][T12268] loop1: detected capacity change from 0 to 512 [ 264.359777][T12268] EXT4-fs error (device loop1): ext4_orphan_get:1390: inode #15: comm syz.1.3016: casefold flag without casefold feature [ 264.379194][T12268] EXT4-fs error (device loop1): ext4_orphan_get:1395: comm syz.1.3016: couldn't read orphan inode 15 (err -117) [ 264.412796][T12268] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 264.444449][T12276] loop2: detected capacity change from 0 to 1024 [ 264.456153][T12276] EXT4-fs: Ignoring removed nobh option [ 264.461934][T12276] EXT4-fs: Ignoring removed bh option [ 264.474726][T12281] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 264.484795][T12281] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.500149][T12276] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 264.525060][ T3649] bond0: (slave syz_tun): Releasing backup interface [ 264.546397][T12281] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 264.548275][T12276] EXT4-fs error (device loop2): mb_free_blocks:1948: group 0, [ 264.556345][T12281] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.574066][T12276] inode 18: block 241:freeing already freed block (bit 15); block bitmap corrupt. [ 264.585017][T12276] EXT4-fs (loop2): Remounting filesystem read-only [ 264.628765][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 264.641487][T12000] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 264.652123][T12281] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 264.662277][T12281] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.715378][T12281] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 264.726251][T12281] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.745834][T12296] SELinux: policydb version 0 does not match my version range 15-34 [ 264.756397][T12296] SELinux: failed to load policy [ 264.804878][T12279] chnl_net:caif_netlink_parms(): no params data found [ 264.858309][T12316] loop3: detected capacity change from 0 to 1024 [ 264.865580][T12316] EXT4-fs: Ignoring removed nobh option [ 264.871198][T12316] EXT4-fs: Ignoring removed bh option [ 264.895313][T12281] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 264.903650][T12281] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.915045][T12279] bridge0: port 1(bridge_slave_0) entered blocking state [ 264.922670][T12279] bridge0: port 1(bridge_slave_0) entered disabled state [ 264.931137][T12316] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 264.948585][T12279] bridge_slave_0: entered allmulticast mode [ 264.959924][T12279] bridge_slave_0: entered promiscuous mode [ 264.966190][T12312] loop2: detected capacity change from 0 to 512 [ 264.971681][T12281] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 264.980899][T12281] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.990988][T12279] bridge0: port 2(bridge_slave_1) entered blocking state [ 264.998310][T12279] bridge0: port 2(bridge_slave_1) entered disabled state [ 265.006040][T12279] bridge_slave_1: entered allmulticast mode [ 265.007070][T12312] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 265.013275][T12279] bridge_slave_1: entered promiscuous mode [ 265.030666][T12312] ext4 filesystem being mounted at /14/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 265.036691][T12281] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 265.051520][T12281] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.060881][T11785] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 265.066144][T12281] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 265.078285][T12281] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.103009][T12279] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 265.114814][T12279] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 265.139092][T12279] team0: Port device team_slave_0 added [ 265.161387][T12279] team0: Port device team_slave_1 added [ 265.179591][T12279] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 265.186717][T12279] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 265.213086][T12279] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 265.216367][T12325] loop3: detected capacity change from 0 to 1024 [ 265.224719][T12279] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 265.231567][T12000] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 265.237839][T12279] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 265.253073][T12325] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 265.278043][T12279] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 265.300066][T12325] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 265.319785][T12325] JBD2: no valid journal superblock found [ 265.325685][T12325] EXT4-fs (loop3): Could not load journal inode [ 265.340825][T12279] hsr_slave_0: entered promiscuous mode [ 265.364217][T12279] hsr_slave_1: entered promiscuous mode [ 265.370171][T12279] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 265.396329][T12279] Cannot create hsr debugfs directory [ 265.403630][T12325] netlink: 48 bytes leftover after parsing attributes in process `+}[@'. [ 265.403704][T12335] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 265.416006][T12334] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 32 [ 265.432100][ T31] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 265.450710][T12338] program syz.1.3036 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 265.571165][T12279] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.643121][T12279] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.682366][T12348] loop1: detected capacity change from 0 to 512 [ 265.695035][T12279] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.698940][T12348] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 265.739263][T12348] ext4 filesystem being mounted at /579/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 265.753338][T12279] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.856878][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 265.903692][T12279] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 265.915352][T12279] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 265.934353][T12279] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 265.944481][T12279] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 266.084772][T12279] 8021q: adding VLAN 0 to HW filter on device bond0 [ 266.509592][T12371] loop2: detected capacity change from 0 to 256 [ 266.518912][T12371] FAT-fs (loop2): Directory bread(block 1285) failed [ 266.529101][T12371] FAT-fs (loop2): FAT read failed (blocknr 1281) [ 266.544301][T12374] loop1: detected capacity change from 0 to 128 [ 266.652741][T12378] program syz.3.3051 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 266.677931][T12374] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 266.714080][T12374] ext4 filesystem being mounted at /581/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 266.815845][T12279] 8021q: adding VLAN 0 to HW filter on device team0 [ 266.834126][T12279] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 266.844837][T12279] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 266.854636][T12380] loop3: detected capacity change from 0 to 1024 [ 266.884078][T12380] EXT4-fs: Ignoring removed bh option [ 266.911260][ T8524] bridge0: port 1(bridge_slave_0) entered blocking state [ 266.912729][T12380] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 266.918649][ T8524] bridge0: port 1(bridge_slave_0) entered forwarding state [ 266.961136][T12374] EXT4-fs (loop1): shut down requested (1) [ 266.961354][T11785] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 266.977432][ T8524] bridge0: port 2(bridge_slave_1) entered blocking state [ 266.984835][ T8524] bridge0: port 2(bridge_slave_1) entered forwarding state [ 267.003966][ T3305] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 267.072964][T12279] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 267.166874][T12407] random: crng reseeded on system resumption [ 267.194838][T12279] veth0_vlan: entered promiscuous mode [ 267.203432][T12279] veth1_vlan: entered promiscuous mode [ 267.269033][T12279] veth0_macvtap: entered promiscuous mode [ 267.281456][T12412] loop2: detected capacity change from 0 to 1024 [ 267.288146][T12279] veth1_macvtap: entered promiscuous mode [ 267.317425][T12279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 267.328232][T12279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.331493][T12412] EXT4-fs: Ignoring removed nobh option [ 267.338201][T12279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 267.338221][T12279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.338304][T12279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 267.343984][T12412] EXT4-fs: Ignoring removed bh option [ 267.354314][T12279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.390203][T12395] loop4: detected capacity change from 0 to 512 [ 267.392883][ T8533] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 267.410688][T12279] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 267.421110][T12279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 267.421452][T12415] loop1: detected capacity change from 0 to 1024 [ 267.431724][T12279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.448053][T12279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 267.458552][T12279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.468449][T12279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 267.478937][T12279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.481833][T12395] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 267.489891][T12279] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 267.509695][T12415] EXT4-fs: Ignoring removed nobh option [ 267.509710][T12412] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 267.515475][T12415] EXT4-fs: Ignoring removed bh option [ 267.543707][T12395] ext4 filesystem being mounted at /592/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 267.553301][T12279] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.562961][T12279] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.571947][T12279] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.580736][T12279] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.596855][T12412] EXT4-fs error (device loop2): mb_free_blocks:1948: group 0, inode 18: block 241:freeing already freed block (bit 15); block bitmap corrupt. [ 267.613120][T12412] EXT4-fs (loop2): Remounting filesystem read-only [ 267.617424][T12415] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 267.672604][T12000] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 267.710631][T12415] EXT4-fs error (device loop1): mb_free_blocks:1948: group 0, inode 18: block 241:freeing already freed block (bit 15); block bitmap corrupt. [ 267.852090][T12415] EXT4-fs (loop1): Remounting filesystem read-only [ 267.866002][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 267.892682][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 267.902348][ T373] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 267.984429][ T8524] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 268.110562][T12446] loop1: detected capacity change from 0 to 1024 [ 268.150560][T12447] loop3: detected capacity change from 0 to 128 [ 268.168427][T12446] EXT4-fs: Ignoring removed nobh option [ 268.174270][T12446] EXT4-fs: Ignoring removed bh option [ 268.343951][T12446] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 268.385471][T12460] loop0: detected capacity change from 0 to 1024 [ 268.400904][T12460] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 268.412300][T12460] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 268.422593][T12464] program syz.4.3079 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 268.436384][T12460] JBD2: no valid journal superblock found [ 268.437231][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 268.442168][T12460] EXT4-fs (loop0): Could not load journal inode [ 268.476049][T12460] netlink: 48 bytes leftover after parsing attributes in process `+}[@'. [ 268.643245][T12473] SELinux: policydb version 0 does not match my version range 15-34 [ 268.646391][T12483] loop3: detected capacity change from 0 to 1024 [ 268.651806][T12473] SELinux: failed to load policy [ 268.663344][T12483] EXT4-fs: Ignoring removed nobh option [ 268.669059][T12483] EXT4-fs: Ignoring removed bh option [ 268.678238][ T9031] : (slave syz_tun): Releasing backup interface [ 268.689612][T12483] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 268.704131][ T9031] smc: removing net device syz_tun with user defined pnetid SYZ1 [ 268.838844][T12499] loop2: detected capacity change from 0 to 512 [ 268.860834][T12499] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 268.902297][T12499] EXT4-fs (loop2): 1 truncate cleaned up [ 268.911674][T12499] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 268.924740][T12479] chnl_net:caif_netlink_parms(): no params data found [ 268.988981][T12479] bridge0: port 1(bridge_slave_0) entered blocking state [ 268.996421][T12479] bridge0: port 1(bridge_slave_0) entered disabled state [ 269.004767][T12479] bridge_slave_0: entered allmulticast mode [ 269.011496][T12479] bridge_slave_0: entered promiscuous mode [ 269.020793][T12506] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.3090'. [ 269.036752][T12479] bridge0: port 2(bridge_slave_1) entered blocking state [ 269.043931][T12479] bridge0: port 2(bridge_slave_1) entered disabled state [ 269.051876][T12479] bridge_slave_1: entered allmulticast mode [ 269.065776][T12479] bridge_slave_1: entered promiscuous mode [ 269.079501][T12499] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.3090'. [ 269.107804][T12000] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 269.119747][T12479] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 269.130915][T12479] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 269.149175][T12508] program syz.2.3091 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 269.175604][T12479] team0: Port device team_slave_0 added [ 269.187818][T12479] team0: Port device team_slave_1 added [ 269.320500][T12479] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 269.328260][T12479] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 269.354510][T12479] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 269.368051][T12513] loop0: detected capacity change from 0 to 256 [ 269.375187][T12479] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 269.382241][T12479] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 269.408650][T12479] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 269.409336][T12513] FAT-fs (loop0): Directory bread(block 1285) failed [ 269.432725][T12513] FAT-fs (loop0): FAT read failed (blocknr 1281) [ 269.508465][T12479] hsr_slave_0: entered promiscuous mode [ 269.516248][T12479] hsr_slave_1: entered promiscuous mode [ 269.522333][T12479] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 269.529976][T12479] Cannot create hsr debugfs directory [ 269.595332][T12526] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 32 [ 269.666088][T12529] loop2: detected capacity change from 0 to 256 [ 269.709584][T12531] netlink: 'syz.1.3101': attribute type 10 has an invalid length. [ 269.746265][T12479] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 269.756919][T12479] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.841725][T12479] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 269.851699][T12479] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.891092][T12537] SELinux: policydb version 0 does not match my version range 15-34 [ 269.899379][T12537] SELinux: failed to load policy [ 269.913303][T12479] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 269.923382][T12479] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.993117][T12479] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 270.003083][T12479] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.005857][T12536] loop2: detected capacity change from 0 to 512 [ 270.066414][T12536] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 270.079502][T12536] ext4 filesystem being mounted at /38/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 270.171034][T12544] loop0: detected capacity change from 0 to 128 [ 270.199975][T12479] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 270.224484][T12479] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 270.244493][T12479] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 270.260247][T12000] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 270.288419][T12479] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 270.311609][T12546] loop0: detected capacity change from 0 to 1024 [ 270.332072][T12546] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 270.343074][T12546] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 270.355045][T12479] 8021q: adding VLAN 0 to HW filter on device bond0 [ 270.363419][T12546] JBD2: no valid journal superblock found [ 270.369184][T12546] EXT4-fs (loop0): Could not load journal inode [ 270.381426][T12479] 8021q: adding VLAN 0 to HW filter on device team0 [ 270.408508][T12546] netlink: 48 bytes leftover after parsing attributes in process `+}[@'. [ 270.421235][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 270.428380][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 270.448868][ T8524] bridge0: port 2(bridge_slave_1) entered blocking state [ 270.456151][ T8524] bridge0: port 2(bridge_slave_1) entered forwarding state [ 270.485334][T11785] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 270.563565][T12567] loop2: detected capacity change from 0 to 1024 [ 270.567973][T12479] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 270.577549][T12567] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 270.588747][T12567] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 270.633545][T12567] JBD2: no valid journal superblock found [ 270.639494][T12567] EXT4-fs (loop2): Could not load journal inode [ 270.706380][T12567] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3114'. [ 270.737742][T12567] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 270.752437][T12580] loop1: detected capacity change from 0 to 256 [ 270.762265][T12580] FAT-fs (loop1): Directory bread(block 1285) failed [ 270.769810][T12580] FAT-fs (loop1): FAT read failed (blocknr 1281) [ 270.830770][T12592] loop2: detected capacity change from 0 to 1024 [ 270.840383][T12592] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 270.851708][T12592] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 270.869617][T12479] veth0_vlan: entered promiscuous mode [ 270.876389][T12578] loop3: detected capacity change from 0 to 512 [ 270.880844][T12592] JBD2: no valid journal superblock found [ 270.888594][T12592] EXT4-fs (loop2): Could not load journal inode [ 270.900974][T12479] veth1_vlan: entered promiscuous mode [ 270.915210][T12592] netlink: 48 bytes leftover after parsing attributes in process `+}[@'. [ 270.926121][T12578] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 270.943809][T12578] ext4 filesystem being mounted at /49/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 270.957186][T12479] veth0_macvtap: entered promiscuous mode [ 270.968820][T12479] veth1_macvtap: entered promiscuous mode [ 270.982796][T12479] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 270.992604][T12603] loop2: detected capacity change from 0 to 128 [ 270.993360][T12479] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.009586][T12479] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 271.020064][T12479] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.029987][T12479] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 271.038079][T12603] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 271.040520][T12479] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.053888][T12603] ext4 filesystem being mounted at /45/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 271.063032][T12479] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 271.083787][T12479] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.086753][T12604] SELinux: policydb version 0 does not match my version range 15-34 [ 271.095034][T12479] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 271.105749][T12604] SELinux: failed to load policy [ 271.127862][T12479] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 271.138495][T12479] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.148578][T12479] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 271.159040][T12479] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.170483][T12479] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 271.180993][T12479] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.191474][T12479] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 271.192385][ T8515] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 271.202330][T12479] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.224486][T12479] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 271.234435][T12479] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.243680][T12479] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.244422][T12000] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 271.252930][T12479] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.270625][T12479] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.323496][T11785] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 271.480659][T12627] loop1: detected capacity change from 0 to 1024 [ 271.524021][T12630] program syz.3.3132 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 271.537829][T12627] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 271.548989][T12627] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 271.567727][T12625] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=12625 comm=syz.4.3129 [ 271.585052][T12627] JBD2: no valid journal superblock found [ 271.590834][T12627] EXT4-fs (loop1): Could not load journal inode [ 271.616030][T12627] netlink: 48 bytes leftover after parsing attributes in process `+}[@'. [ 271.723075][T12635] random: crng reseeded on system resumption [ 271.882985][T12655] program syz.4.3143 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 271.932157][T12660] program syz.4.3145 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 271.941344][T12661] loop1: detected capacity change from 0 to 128 [ 271.955181][T12637] loop2: detected capacity change from 0 to 512 [ 271.972313][T12665] loop3: detected capacity change from 0 to 1024 [ 271.979789][T12661] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 271.992674][T12665] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 272.003683][T12665] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 272.010242][T12637] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 272.027073][T12661] ext4 filesystem being mounted at /596/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 272.029685][T12665] JBD2: no valid journal superblock found [ 272.043337][T12665] EXT4-fs (loop3): Could not load journal inode [ 272.052269][T12637] ext4 filesystem being mounted at /51/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 272.068316][T12665] netlink: 48 bytes leftover after parsing attributes in process `+}[@'. [ 272.084875][ T3305] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 272.157839][T12681] netlink: 'syz.0.3153': attribute type 10 has an invalid length. [ 272.166141][T12681] syz_tun: entered promiscuous mode [ 272.209300][T12676] random: crng reseeded on system resumption [ 272.210167][T12681] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 272.349194][T12000] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 272.363180][T12685] loop1: detected capacity change from 0 to 128 [ 272.576682][ T8515] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 272.719865][T12707] random: crng reseeded on system resumption [ 272.830771][T12709] syz.0.3162: attempt to access beyond end of device [ 272.830771][T12709] md2: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 272.987787][T12712] loop1: detected capacity change from 0 to 256 [ 272.996428][T12712] FAT-fs (loop1): Directory bread(block 1285) failed [ 273.010995][T12711] FAT-fs (loop1): FAT read failed (blocknr 1281) [ 273.112361][ T8524] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 273.127271][ T8515] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 273.523747][T12735] loop4: detected capacity change from 0 to 1024 [ 273.538484][T12735] EXT4-fs: Ignoring removed nobh option [ 273.544207][T12735] EXT4-fs: Ignoring removed bh option [ 273.567402][T12740] warn_alloc: 3 callbacks suppressed [ 273.567423][T12740] syz.3.3168: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 273.587581][T12740] CPU: 1 UID: 0 PID: 12740 Comm: syz.3.3168 Not tainted 6.14.0-syzkaller-10764-gaa918db707fb #0 PREEMPT(voluntary) [ 273.587610][T12740] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 273.587624][T12740] Call Trace: [ 273.587633][T12740] [ 273.587642][T12740] dump_stack_lvl+0xf6/0x150 [ 273.587668][T12740] dump_stack+0x15/0x1a [ 273.587684][T12740] warn_alloc+0x145/0x1b0 [ 273.587720][T12740] ? __vmalloc_node_range_noprof+0x8a/0xe80 [ 273.587752][T12740] __vmalloc_node_range_noprof+0xac/0xe80 [ 273.587780][T12740] ? probe_sched_wakeup+0x81/0xa0 [ 273.587817][T12740] ? ttwu_do_activate+0x1ce/0x210 [ 273.587878][T12740] ? _raw_spin_unlock_irqrestore+0x2b/0x60 [ 273.587910][T12740] ? ___slab_alloc+0x2b9/0x980 [ 273.587934][T12740] ? avc_has_perm_noaudit+0x1cc/0x210 [ 273.587959][T12740] ? xskq_create+0x36/0xd0 [ 273.587996][T12740] ? should_fail_ex+0x31/0x270 [ 273.588022][T12740] vmalloc_user_noprof+0x59/0x70 [ 273.588127][T12740] ? xskq_create+0x79/0xd0 [ 273.588156][T12740] xskq_create+0x79/0xd0 [ 273.588179][T12740] xsk_init_queue+0x82/0xd0 [ 273.588202][T12740] xsk_setsockopt+0x37d/0x550 [ 273.588244][T12740] ? __pfx_xsk_setsockopt+0x10/0x10 [ 273.588364][T12740] __sys_setsockopt+0x187/0x200 [ 273.588444][T12740] __x64_sys_setsockopt+0x66/0x80 [ 273.588529][T12740] x64_sys_call+0x2a09/0x2e10 [ 273.588558][T12740] do_syscall_64+0xc9/0x1c0 [ 273.588583][T12740] ? clear_bhb_loop+0x25/0x80 [ 273.588610][T12740] ? clear_bhb_loop+0x25/0x80 [ 273.588637][T12740] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.588784][T12740] RIP: 0033:0x7fe04dabd169 [ 273.588804][T12740] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 273.588828][T12740] RSP: 002b:00007fe04c0e5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 273.588859][T12740] RAX: ffffffffffffffda RBX: 00007fe04dcd6160 RCX: 00007fe04dabd169 [ 273.588875][T12740] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004 [ 273.588890][T12740] RBP: 00007fe04db3e2a0 R08: 0000000000000004 R09: 0000000000000000 [ 273.588904][T12740] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 273.588949][T12740] R13: 0000000000000000 R14: 00007fe04dcd6160 R15: 00007fffa31492a8 [ 273.588970][T12740] [ 273.588979][T12740] Mem-Info: [ 273.645138][T12743] loop0: detected capacity change from 0 to 1024 [ 273.648407][T12740] active_anon:3555 inactive_anon:2 isolated_anon:0 [ 273.648407][T12740] active_file:8752 inactive_file:10863 isolated_file:0 [ 273.648407][T12740] unevictable:0 dirty:236 writeback:0 [ 273.648407][T12740] slab_reclaimable:2993 slab_unreclaimable:19353 [ 273.648407][T12740] mapped:23620 shmem:467 pagetables:795 [ 273.648407][T12740] sec_pagetables:0 bounce:0 [ 273.648407][T12740] kernel_misc_reclaimable:0 [ 273.648407][T12740] free:1837954 free_pcp:23644 free_cma:0 [ 273.669748][T12735] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 273.670030][T12740] Node 0 active_anon:14220kB inactive_anon:8kB active_file:35008kB inactive_file:43452kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:98540kB dirty:944kB writeback:0kB shmem:1868kB writeback_tmp:0kB kernel_stack:3264kB pagetables:3180kB sec_pagetables:0kB all_unreclaimable? no [ 273.688662][T12743] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 273.688745][T12740] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 273.693126][T12743] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 273.697561][T12740] lowmem_reserve[]: 0 [ 273.745459][T12743] JBD2: no valid journal superblock found [ 273.747494][T12740] 2884 7862 [ 273.767562][T12743] EXT4-fs (loop0): Could not load journal inode [ 273.775761][T12740] 7862 [ 273.775781][T12740] Node 0 DMA32 free:2949876kB boost:0kB min:4132kB low:7064kB high:9996kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2953408kB mlocked:0kB bounce:0kB free_pcp:3532kB local_pcp:0kB free_cma:0kB [ 273.775851][T12740] lowmem_reserve[]: 0 0 4978 4978 [ 273.775901][T12740] Node 0 Normal free:4386580kB boost:0kB min:7184kB low:12280kB high:17376kB reserved_highatomic:0KB active_anon:14452kB inactive_anon:8kB active_file:35008kB inactive_file:43452kB unevictable:0kB writepending:924kB present:5242880kB managed:5098248kB mlocked:0kB bounce:0kB free_pcp:90428kB local_pcp:35188kB free_cma:0kB [ 273.800734][T12746] loop3: detected capacity change from 0 to 128 [ 273.808160][T12740] lowmem_reserve[]: 0 0 0 0 [ 274.059788][T12740] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 274.072581][T12740] Node 0 DMA32: 3*4kB (M) 3*8kB (M) 3*16kB (M) 3*32kB (M) 5*64kB (M) 4*128kB (M) 3*256kB (M) 4*512kB (M) 3*1024kB (M) 3*2048kB (M) 717*4096kB (M) = 2949876kB [ 274.088916][T12740] Node 0 Normal: 6*4kB (UE) 1*8kB (U) 2*16kB (ME) 1*32kB (M) 70*64kB (M) 76*128kB (ME) 69*256kB (UM) 54*512kB (UME) 61*1024kB (UME) 16*2048kB (UME) 1027*4096kB (UME) = 4361440kB [ 274.089203][T12752] chnl_net:caif_netlink_parms(): no params data found [ 274.113606][T12740] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 274.123042][T12740] 20111 total pagecache pages [ 274.127753][T12740] 5 pages in swap cache [ 274.132066][T12740] Free swap = 124720kB [ 274.136670][T12740] Total swap = 124996kB [ 274.140996][T12740] 2097051 pages RAM [ 274.144989][T12740] 0 pages HighMem/MovableOnly [ 274.149686][T12740] 80297 pages reserved [ 274.178759][ T3630] bond0: (slave syz_tun): Releasing backup interface [ 274.190434][T12769] random: crng reseeded on system resumption [ 274.198088][T12743] netlink: 48 bytes leftover after parsing attributes in process `+}[@'. [ 274.275359][T12479] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 274.320891][T12752] bridge0: port 1(bridge_slave_0) entered blocking state [ 274.328324][T12752] bridge0: port 1(bridge_slave_0) entered disabled state [ 274.338214][T12752] bridge_slave_0: entered allmulticast mode [ 274.345399][T12752] bridge_slave_0: entered promiscuous mode [ 274.352859][T12752] bridge0: port 2(bridge_slave_1) entered blocking state [ 274.360244][T12752] bridge0: port 2(bridge_slave_1) entered disabled state [ 274.368972][T12752] bridge_slave_1: entered allmulticast mode [ 274.375596][T12752] bridge_slave_1: entered promiscuous mode [ 274.445028][T12782] SELinux: policydb version 0 does not match my version range 15-34 [ 274.456113][T12752] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 274.466847][T12752] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 274.480341][T12782] SELinux: failed to load policy [ 274.893585][T12752] team0: Port device team_slave_0 added [ 274.901230][T12752] team0: Port device team_slave_1 added [ 275.197644][T12796] random: crng reseeded on system resumption [ 275.665763][T12800] loop2: detected capacity change from 0 to 1024 [ 275.736190][T12752] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 275.744328][T12752] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 275.770899][T12752] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 275.848711][T12752] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 275.855822][T12752] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 275.882545][T12752] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 275.897685][T12800] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 275.909270][T12800] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 275.948082][T12752] hsr_slave_0: entered promiscuous mode [ 275.954607][T12752] hsr_slave_1: entered promiscuous mode [ 275.960781][T12752] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 275.971697][T12800] JBD2: no valid journal superblock found [ 275.977670][T12800] EXT4-fs (loop2): Could not load journal inode [ 275.987185][T12752] Cannot create hsr debugfs directory [ 276.029418][T12800] netlink: 48 bytes leftover after parsing attributes in process `+}[@'. [ 276.059906][T12807] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 32 [ 276.130596][T12818] loop2: detected capacity change from 0 to 1024 [ 276.147496][T12752] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.159209][T12818] EXT4-fs: Ignoring removed orlov option [ 276.164975][T12818] EXT4-fs: Ignoring removed nomblk_io_submit option [ 276.188095][T12818] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 276.214264][T12752] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.239624][T12000] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 276.362564][T12752] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.377669][T12834] loop0: detected capacity change from 0 to 256 [ 276.462750][T12752] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.475408][T12835] random: crng reseeded on system resumption [ 276.558238][T12838] loop4: detected capacity change from 0 to 1024 [ 276.595625][T12838] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 276.606833][T12838] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 276.644816][T12838] JBD2: no valid journal superblock found [ 276.650751][T12838] EXT4-fs (loop4): Could not load journal inode [ 276.709316][T12752] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 276.727463][T12842] sit0: entered allmulticast mode [ 276.739152][T12752] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 276.749246][T12752] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 276.759294][T12752] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 276.774344][T12838] netlink: 48 bytes leftover after parsing attributes in process `+}[@'. [ 276.820940][T12752] 8021q: adding VLAN 0 to HW filter on device bond0 [ 276.838489][T12752] 8021q: adding VLAN 0 to HW filter on device team0 [ 276.851582][T12850] loop4: detected capacity change from 0 to 1024 [ 276.861708][T12850] EXT4-fs: Ignoring removed nobh option [ 276.867481][T12850] EXT4-fs: Ignoring removed bh option [ 276.874550][ T8524] bridge0: port 1(bridge_slave_0) entered blocking state [ 276.881693][ T8524] bridge0: port 1(bridge_slave_0) entered forwarding state [ 276.898778][ T8524] bridge0: port 2(bridge_slave_1) entered blocking state [ 276.898887][T12852] loop0: detected capacity change from 0 to 128 [ 276.905946][ T8524] bridge0: port 2(bridge_slave_1) entered forwarding state [ 276.924032][T12850] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 276.937824][T12852] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 276.953373][ T8515] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 276.957791][T12852] ext4 filesystem being mounted at /33/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 277.000660][T12752] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 277.024662][T12479] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 277.050444][T12279] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 277.099716][T12870] loop3: detected capacity change from 0 to 512 [ 277.174038][T12870] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 277.613245][T12870] EXT4-fs (loop3): 1 truncate cleaned up [ 277.622318][T12870] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 277.729742][T12752] veth0_vlan: entered promiscuous mode [ 277.745871][T12885] loop2: detected capacity change from 0 to 512 [ 277.775114][T12752] veth1_vlan: entered promiscuous mode [ 277.798461][T12885] EXT4-fs error (device loop2): ext4_orphan_get:1390: inode #15: comm syz.2.3217: casefold flag without casefold feature [ 277.825524][T12887] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.3214'. [ 277.844305][T12885] EXT4-fs error (device loop2): ext4_orphan_get:1395: comm syz.2.3217: couldn't read orphan inode 15 (err -117) [ 277.857163][T12752] veth0_macvtap: entered promiscuous mode [ 277.874147][T12870] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.3214'. [ 277.886916][T12885] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 277.921356][T12752] veth1_macvtap: entered promiscuous mode [ 277.932585][T12752] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 277.943529][T12752] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.954390][T12752] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 277.965112][T12752] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.975067][T12752] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 277.985720][T12752] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.995649][T12752] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 278.006108][T12752] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.016215][T12752] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 278.026828][T12752] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.039227][T11785] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 278.043416][T12752] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 278.061194][T12752] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 278.071796][T12752] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.081688][T12752] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 278.092277][T12752] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.102311][T12752] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 278.112809][T12752] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.122841][T12752] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 278.132611][T12893] netlink: 88 bytes leftover after parsing attributes in process `syz.2.3217'. [ 278.133482][T12752] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.152491][T12752] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 278.162960][T12752] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.175967][T12752] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 278.189269][T12752] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.198331][T12752] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.207440][T12752] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.216234][T12752] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.232993][ T51] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 278.244658][ T8524] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 278.244828][ T134] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 278.289596][T12901] loop4: detected capacity change from 0 to 256 [ 278.301496][T12000] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 278.495911][T12920] loop1: detected capacity change from 0 to 512 [ 278.505792][T12920] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 278.559113][T12921] syz.2.3223: attempt to access beyond end of device [ 278.559113][T12921] md2: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 278.645687][T12920] EXT4-fs (loop1): 1 truncate cleaned up [ 278.652654][T12920] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 278.757085][T12924] program syz.4.3229 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 279.087006][T12929] random: crng reseeded on system resumption [ 279.234067][T12932] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.3228'. [ 279.244476][T12920] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.3228'. [ 279.266269][T12934] loop2: detected capacity change from 0 to 1024 [ 279.279540][T12934] EXT4-fs: Ignoring removed nobh option [ 279.285261][T12934] EXT4-fs: Ignoring removed bh option [ 279.296896][T12752] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 279.357642][T12934] EXT4-fs (loop2): shut down requested (0) [ 279.416050][T12945] loop1: detected capacity change from 0 to 1024 [ 279.427207][T12945] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 279.438349][T12945] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 279.549717][T12945] JBD2: no valid journal superblock found [ 279.555773][T12945] EXT4-fs (loop1): Could not load journal inode [ 279.588612][T12945] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3235'. [ 279.638357][T12945] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 279.827010][T12962] program syz.4.3244 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 279.926421][T12953] loop2: detected capacity change from 0 to 512 [ 280.019618][T12953] ext4 filesystem being mounted at /73/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 280.051700][T12975] loop0: detected capacity change from 0 to 1024 [ 280.064963][T12975] EXT4-fs: Ignoring removed nobh option [ 280.070606][T12975] EXT4-fs: Ignoring removed bh option [ 280.074342][T12964] loop3: detected capacity change from 0 to 128 [ 280.173671][T12984] loop3: detected capacity change from 0 to 256 [ 280.320682][T12996] program syz.1.3255 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 280.381348][T12998] sit0: entered allmulticast mode [ 280.633494][T13008] loop1: detected capacity change from 0 to 1024 [ 280.640539][T13008] EXT4-fs: Ignoring removed nobh option [ 280.646265][T13008] EXT4-fs: Ignoring removed bh option [ 280.704677][T13016] netlink: 'syz.1.3261': attribute type 10 has an invalid length. [ 280.713534][T13016] syz_tun: entered promiscuous mode [ 280.733042][T13016] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 280.820401][T13026] program syz.1.3266 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 280.914962][T13032] loop1: detected capacity change from 0 to 512 [ 280.934301][T13032] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 280.970005][T13032] EXT4-fs (loop1): 1 truncate cleaned up [ 281.029585][T13014] loop2: detected capacity change from 0 to 512 [ 281.039059][T13040] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.3269'. [ 281.049308][T13032] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.3269'. [ 281.060801][T13014] ext4 filesystem being mounted at /75/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 281.125832][T13044] random: crng reseeded on system resumption [ 281.234038][T13043] syz.0.3267: attempt to access beyond end of device [ 281.234038][T13043] md2: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 281.539270][T13052] loop2: detected capacity change from 0 to 1024 [ 281.559645][T13052] EXT4-fs: Ignoring removed nobh option [ 281.565502][T13052] EXT4-fs: Ignoring removed bh option [ 281.628911][T13048] loop1: detected capacity change from 0 to 128 [ 281.915504][T13075] program syz.2.3280 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 281.991930][T13055] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3273'. [ 282.070387][T13085] loop1: detected capacity change from 0 to 1024 [ 282.089962][T13085] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 282.101024][T13085] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 282.139322][T13085] JBD2: no valid journal superblock found [ 282.145271][T13085] EXT4-fs (loop1): Could not load journal inode [ 282.191154][T13085] netlink: 48 bytes leftover after parsing attributes in process `+}[@'. [ 282.222994][T13105] random: crng reseeded on system resumption [ 282.288276][T13099] loop3: detected capacity change from 0 to 128 [ 282.304784][T13108] loop1: detected capacity change from 0 to 1024 [ 282.325669][T13108] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 282.336707][T13108] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 282.352365][T13114] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.362956][T13108] JBD2: no valid journal superblock found [ 282.368791][T13108] EXT4-fs (loop1): Could not load journal inode [ 282.394377][T13108] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3294'. [ 282.406635][T13114] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.417389][T13108] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 282.430247][T13118] loop2: detected capacity change from 0 to 1024 [ 282.440271][T13121] SELinux: policydb version 0 does not match my version range 15-34 [ 282.448182][T13118] EXT4-fs: Ignoring removed nobh option [ 282.454061][T13118] EXT4-fs: Ignoring removed bh option [ 282.460215][T13121] SELinux: failed to load policy [ 282.490095][T13114] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.559002][T13137] loop1: detected capacity change from 0 to 1024 [ 282.568276][T13137] EXT4-fs: Ignoring removed orlov option [ 282.569503][T13114] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.574458][T13137] EXT4-fs: Ignoring removed nomblk_io_submit option [ 282.630192][T13114] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.644638][T13114] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.657081][T13114] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.669177][T13114] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.676771][T13147] loop3: detected capacity change from 0 to 512 [ 282.690798][T13147] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 282.703602][T13147] EXT4-fs (loop3): 1 truncate cleaned up [ 282.711096][ T8524] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 282.730814][T13153] loop2: detected capacity change from 0 to 1024 [ 282.738273][T13153] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 282.738424][T13150] loop1: detected capacity change from 0 to 512 [ 282.749639][T13153] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 282.762184][T13150] EXT4-fs error (device loop1): ext4_orphan_get:1390: inode #15: comm syz.1.3310: casefold flag without casefold feature [ 282.766745][T13153] JBD2: no valid journal superblock found [ 282.779005][T13150] EXT4-fs error (device loop1): ext4_orphan_get:1395: comm syz.1.3310: couldn't read orphan inode 15 (err -117) [ 282.784206][T13153] EXT4-fs (loop2): Could not load journal inode [ 282.797768][T13155] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.3309'. [ 282.821501][T13153] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3311'. [ 282.831153][T13153] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 282.864268][T13159] loop0: detected capacity change from 0 to 256 [ 282.950988][T13171] loop1: detected capacity change from 0 to 1024 [ 282.985671][T13171] EXT4-fs: Ignoring removed nobh option [ 282.991309][T13171] EXT4-fs: Ignoring removed bh option [ 283.021161][T13181] loop2: detected capacity change from 0 to 1024 [ 283.032210][T13181] EXT4-fs: Ignoring removed nobh option [ 283.037886][T13181] EXT4-fs: Ignoring removed bh option [ 283.138668][T13190] loop1: detected capacity change from 0 to 1024 [ 283.178704][T13196] loop0: detected capacity change from 0 to 1024 [ 283.179305][T13190] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 283.196374][T13190] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 283.207685][T13196] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 283.218903][T13196] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 283.241048][T13190] JBD2: no valid journal superblock found [ 283.247276][T13190] EXT4-fs (loop1): Could not load journal inode [ 283.254594][T13196] JBD2: no valid journal superblock found [ 283.260573][T13196] EXT4-fs (loop0): Could not load journal inode [ 283.273462][T13190] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 283.302361][T13206] program syz.1.3332 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 283.303591][T13204] loop4: detected capacity change from 0 to 1024 [ 283.334067][T13196] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 283.338583][T13204] EXT4-fs: Ignoring removed nobh option [ 283.349830][T13204] EXT4-fs: Ignoring removed bh option [ 283.357304][ T8533] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 283.411452][T13214] SELinux: policydb version 0 does not match my version range 15-34 [ 283.419742][T13214] SELinux: failed to load policy [ 283.477674][T13220] loop1: detected capacity change from 0 to 128 [ 283.548112][T13231] loop4: detected capacity change from 0 to 512 [ 283.576232][T13236] loop1: detected capacity change from 0 to 1024 [ 283.584903][T13231] ext4 filesystem being mounted at /41/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 283.586616][T13236] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 283.607411][T13236] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 283.618421][T13236] JBD2: no valid journal superblock found [ 283.624278][T13236] EXT4-fs (loop1): Could not load journal inode [ 283.671870][T13236] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 283.708494][T13241] random: crng reseeded on system resumption [ 283.796889][T13248] loop4: detected capacity change from 0 to 512 [ 283.812960][T13248] EXT4-fs error (device loop4): ext4_orphan_get:1390: inode #15: comm syz.4.3344: casefold flag without casefold feature [ 283.826883][T13248] EXT4-fs error (device loop4): ext4_orphan_get:1395: comm syz.4.3344: couldn't read orphan inode 15 (err -117) [ 283.827341][T13247] program syz.0.3348 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 283.992350][ T8524] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 284.061325][T13265] warn_alloc: 4 callbacks suppressed [ 284.061340][T13265] syz.0.3350: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 284.081995][T13265] CPU: 1 UID: 0 PID: 13265 Comm: syz.0.3350 Not tainted 6.14.0-syzkaller-10764-gaa918db707fb #0 PREEMPT(voluntary) [ 284.082030][T13265] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 284.082046][T13265] Call Trace: [ 284.082056][T13265] [ 284.082066][T13265] dump_stack_lvl+0xf6/0x150 [ 284.082115][T13265] dump_stack+0x15/0x1a [ 284.082138][T13265] warn_alloc+0x145/0x1b0 [ 284.082161][T13265] ? __vmalloc_node_range_noprof+0x8a/0xe80 [ 284.082187][T13265] __vmalloc_node_range_noprof+0xac/0xe80 [ 284.082219][T13265] ? __pfx_futex_wake_mark+0x10/0x10 [ 284.082303][T13265] ? __rcu_read_unlock+0x4e/0x70 [ 284.082339][T13265] ? avc_has_perm_noaudit+0x1cc/0x210 [ 284.082367][T13265] ? should_fail_ex+0x31/0x270 [ 284.082392][T13265] ? should_failslab+0x8f/0xb0 [ 284.082417][T13265] vmalloc_user_noprof+0x59/0x70 [ 284.082493][T13265] ? xskq_create+0x79/0xd0 [ 284.082515][T13265] xskq_create+0x79/0xd0 [ 284.082539][T13265] xsk_init_queue+0x82/0xd0 [ 284.082624][T13265] xsk_setsockopt+0x37d/0x550 [ 284.082666][T13265] ? __pfx_xsk_setsockopt+0x10/0x10 [ 284.082710][T13265] __sys_setsockopt+0x187/0x200 [ 284.082746][T13265] __x64_sys_setsockopt+0x66/0x80 [ 284.082872][T13265] x64_sys_call+0x2a09/0x2e10 [ 284.082895][T13265] do_syscall_64+0xc9/0x1c0 [ 284.082913][T13265] ? clear_bhb_loop+0x25/0x80 [ 284.082993][T13265] ? clear_bhb_loop+0x25/0x80 [ 284.083021][T13265] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 284.083048][T13265] RIP: 0033:0x7f577d02d169 [ 284.083067][T13265] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 284.083085][T13265] RSP: 002b:00007f577b64d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 284.083103][T13265] RAX: ffffffffffffffda RBX: 00007f577d246160 RCX: 00007f577d02d169 [ 284.083202][T13265] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004 [ 284.083270][T13265] RBP: 00007f577d0ae2a0 R08: 0000000000000004 R09: 0000000000000000 [ 284.083285][T13265] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 284.083301][T13265] R13: 0000000000000000 R14: 00007f577d246160 R15: 00007ffe64fe1248 [ 284.083322][T13265] [ 284.083328][T13265] Mem-Info: [ 284.154049][T13267] loop4: detected capacity change from 0 to 512 [ 284.157690][T13265] active_anon:9170 inactive_anon:2 isolated_anon:0 [ 284.157690][T13265] active_file:7743 inactive_file:11954 isolated_file:0 [ 284.157690][T13265] unevictable:0 dirty:265 writeback:0 [ 284.157690][T13265] slab_reclaimable:3039 slab_unreclaimable:22329 [ 284.157690][T13265] mapped:34189 shmem:6025 pagetables:840 [ 284.157690][T13265] sec_pagetables:0 bounce:0 [ 284.157690][T13265] kernel_misc_reclaimable:0 [ 284.157690][T13265] free:1852223 free_pcp:1825 free_cma:0 [ 284.303723][T13260] loop0: detected capacity change from 0 to 128 [ 284.305774][T13265] Node 0 active_anon:36912kB inactive_anon:8kB active_file:30972kB inactive_file:47816kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:136756kB dirty:1060kB writeback:0kB shmem:24216kB writeback_tmp:0kB kernel_stack:3328kB pagetables:3592kB sec_pagetables:0kB all_unreclaimable? no [ 284.310506][T13270] loop3: detected capacity change from 0 to 128 [ 284.315172][T13265] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 284.366392][T13267] ext4 filesystem being mounted at /43/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 284.367150][T13265] lowmem_reserve[]: 0 2884 7862 7862 [ 284.445780][T13265] Node 0 DMA32 free:2949876kB boost:0kB min:4132kB low:7064kB high:9996kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2953408kB mlocked:0kB bounce:0kB free_pcp:3532kB local_pcp:0kB free_cma:0kB [ 284.474444][T13265] lowmem_reserve[]: 0 0 4978 4978 [ 284.479556][T13265] Node 0 Normal free:4441156kB boost:0kB min:7184kB low:12280kB high:17376kB reserved_highatomic:0KB active_anon:37028kB inactive_anon:8kB active_file:30972kB inactive_file:47816kB unevictable:0kB writepending:1036kB present:5242880kB managed:5098248kB mlocked:0kB bounce:0kB free_pcp:3668kB local_pcp:2260kB free_cma:0kB [ 284.509854][T13265] lowmem_reserve[]: 0 0 0 0 [ 284.514496][T13265] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 284.527641][T13265] Node 0 DMA32: 3*4kB (M) 3*8kB (M) 3*16kB (M) 3*32kB (M) 5*64kB (M) 4*128kB (M) 3*256kB (M) 4*512kB (M) 3*1024kB (M) 3*2048kB (M) 717*4096kB (M) = 2949876kB [ 284.544227][T13265] Node 0 Normal: 3*4kB (UME) 1*8kB (M) 414*16kB (UME) 350*32kB (UME) 280*64kB (UME) 75*128kB (UM) 91*256kB (UME) 79*512kB (UM) 76*1024kB (UME) 23*2048kB (UME) 1027*4096kB (UME) = 4440628kB [ 284.563683][T13265] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 284.573022][T13265] 25783 total pagecache pages [ 284.577706][T13265] 8 pages in swap cache [ 284.581915][T13265] Free swap = 124724kB [ 284.586081][T13265] Total swap = 124996kB [ 284.590324][T13265] 2097051 pages RAM [ 284.594159][T13265] 0 pages HighMem/MovableOnly [ 284.598934][T13265] 80297 pages reserved [ 284.836068][T13279] loop0: detected capacity change from 0 to 512 [ 284.866304][T13279] ext4 filesystem being mounted at /57/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 284.983455][T13284] loop2: detected capacity change from 0 to 1024 [ 284.992800][T13285] loop3: detected capacity change from 0 to 1024 [ 285.000012][T13285] EXT4-fs: Ignoring removed nobh option [ 285.005700][T13285] EXT4-fs: Ignoring removed bh option [ 285.006532][T13284] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 285.022108][T13284] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 285.043004][T13289] loop0: detected capacity change from 0 to 128 [ 285.044611][T13284] JBD2: no valid journal superblock found [ 285.055633][T13284] EXT4-fs (loop2): Could not load journal inode [ 285.068139][T13289] ext4 filesystem being mounted at /58/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 285.127942][T13284] __nla_validate_parse: 7 callbacks suppressed [ 285.127962][T13284] netlink: 48 bytes leftover after parsing attributes in process `+}[@'. [ 285.148228][T13295] loop1: detected capacity change from 0 to 512 [ 285.163320][T13295] EXT4-fs error (device loop1): ext4_orphan_get:1390: inode #15: comm syz.1.3363: casefold flag without casefold feature [ 285.183419][T13295] EXT4-fs error (device loop1): ext4_orphan_get:1395: comm syz.1.3363: couldn't read orphan inode 15 (err -117) [ 285.220160][T13306] random: crng reseeded on system resumption [ 285.240580][T13304] loop2: detected capacity change from 0 to 1024 [ 285.248411][T13304] EXT4-fs: Ignoring removed nobh option [ 285.254615][T13304] EXT4-fs: Ignoring removed bh option [ 285.271309][ T51] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 285.296904][T13309] netlink: 88 bytes leftover after parsing attributes in process `syz.1.3363'. [ 285.333764][T13304] EXT4-fs (loop2): shut down requested (0) [ 285.394265][T13318] random: crng reseeded on system resumption [ 285.437227][T13325] loop3: detected capacity change from 0 to 1024 [ 285.458399][T13325] EXT4-fs: Ignoring removed nobh option [ 285.464234][T13325] EXT4-fs: Ignoring removed bh option [ 285.497278][T13329] loop1: detected capacity change from 0 to 1024 [ 285.510099][T13331] loop4: detected capacity change from 0 to 1024 [ 285.517127][T13333] loop2: detected capacity change from 0 to 512 [ 285.518560][T13329] EXT4-fs: Ignoring removed nobh option [ 285.524466][T13331] EXT4-fs: Ignoring removed nobh option [ 285.529082][T13329] EXT4-fs: Ignoring removed bh option [ 285.534764][T13331] EXT4-fs: Ignoring removed bh option [ 285.548110][T13333] EXT4-fs error (device loop2): ext4_orphan_get:1390: inode #15: comm syz.2.3377: casefold flag without casefold feature [ 285.567492][T13333] EXT4-fs error (device loop2): ext4_orphan_get:1395: comm syz.2.3377: couldn't read orphan inode 15 (err -117) [ 285.617278][T13333] netlink: 88 bytes leftover after parsing attributes in process `syz.2.3377'. [ 285.634663][T13343] loop0: detected capacity change from 0 to 256 [ 285.642740][T13343] FAT-fs (loop0): Directory bread(block 1285) failed [ 285.650428][T13343] FAT-fs (loop0): FAT read failed (blocknr 1281) [ 285.985465][T13356] loop1: detected capacity change from 0 to 1024 [ 285.994136][T13356] EXT4-fs: Ignoring removed nobh option [ 285.999762][T13356] EXT4-fs: Ignoring removed bh option [ 286.012979][T13354] SELinux: policydb version 0 does not match my version range 15-34 [ 286.021422][T13354] SELinux: failed to load policy [ 286.037184][T13356] EXT4-fs (loop1): shut down requested (0) [ 286.060382][T13362] loop0: detected capacity change from 0 to 1024 [ 286.071323][T13363] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.3385'. [ 286.081328][T13362] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 286.092958][T13362] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 286.109894][T13358] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.3385'. [ 286.120965][T13362] JBD2: no valid journal superblock found [ 286.126875][T13362] EXT4-fs (loop0): Could not load journal inode [ 286.139186][T13362] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3386'. [ 286.151081][T13362] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 286.224886][T13373] loop4: detected capacity change from 0 to 1024 [ 286.236023][T13375] loop1: detected capacity change from 0 to 512 [ 286.243474][T13373] EXT4-fs: Ignoring removed orlov option [ 286.249324][T13373] EXT4-fs: Ignoring removed nomblk_io_submit option [ 286.260178][T13375] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 286.277648][T13375] EXT4-fs (loop1): 1 truncate cleaned up [ 286.308467][T13370] loop0: detected capacity change from 0 to 128 [ 286.345962][T13380] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.356324][T13383] loop3: detected capacity change from 0 to 1024 [ 286.363120][T13383] EXT4-fs: Ignoring removed nobh option [ 286.368734][T13383] EXT4-fs: Ignoring removed bh option [ 286.375378][T13381] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.3391'. [ 286.388035][T13375] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.3391'. [ 286.426418][T13389] loop0: detected capacity change from 0 to 1024 [ 286.436264][T13389] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 286.437358][T13380] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.447429][T13389] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 286.469944][T13389] JBD2: no valid journal superblock found [ 286.475944][T13389] EXT4-fs (loop0): Could not load journal inode [ 286.510805][T13389] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3395'. [ 286.520586][T13389] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 286.543641][T13380] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.596063][T13380] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.620251][T13400] loop1: detected capacity change from 0 to 1024 [ 286.627231][T13400] EXT4-fs: Ignoring removed nobh option [ 286.633067][T13400] EXT4-fs: Ignoring removed bh option [ 286.787501][T13380] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.799456][T13380] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.812287][T13380] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.824817][T13380] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.867956][T13412] loop1: detected capacity change from 0 to 1024 [ 286.879500][T13412] EXT4-fs: Ignoring removed orlov option [ 286.885503][T13412] EXT4-fs: Ignoring removed nomblk_io_submit option [ 286.904574][T13406] loop2: detected capacity change from 0 to 512 [ 286.919497][T13406] ext4 filesystem being mounted at /102/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 286.979020][T13418] random: crng reseeded on system resumption [ 287.172293][T13424] sit0: entered allmulticast mode [ 287.205827][T13431] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3406'. [ 287.215613][ T29] kauditd_printk_skb: 10 callbacks suppressed [ 287.215629][ T29] audit: type=1326 audit(1743401208.727:3986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13425 comm="syz.2.3406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1a580d169 code=0x7ffc0000 [ 287.251849][ T29] audit: type=1326 audit(1743401208.727:3987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13425 comm="syz.2.3406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa1a580d169 code=0x7ffc0000 [ 287.275650][ T29] audit: type=1326 audit(1743401208.727:3988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13425 comm="syz.2.3406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1a580d169 code=0x7ffc0000 [ 287.299527][ T29] audit: type=1326 audit(1743401208.727:3989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13425 comm="syz.2.3406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa1a580d169 code=0x7ffc0000 [ 287.366948][ T29] audit: type=1326 audit(1743401208.837:3990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13425 comm="syz.2.3406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1a580d169 code=0x7ffc0000 [ 287.390824][ T29] audit: type=1326 audit(1743401208.837:3991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13425 comm="syz.2.3406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1a580d169 code=0x7ffc0000 [ 287.427412][ T29] audit: type=1326 audit(1743401208.937:3992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13425 comm="syz.2.3406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa1a580d169 code=0x7ffc0000 [ 287.451312][ T29] audit: type=1326 audit(1743401208.937:3993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13425 comm="syz.2.3406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1a580d169 code=0x7ffc0000 [ 287.475067][ T29] audit: type=1326 audit(1743401208.937:3994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13425 comm="syz.2.3406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1a580d169 code=0x7ffc0000 [ 287.499324][ T29] audit: type=1326 audit(1743401208.937:3995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13425 comm="syz.2.3406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7fa1a580d169 code=0x7ffc0000 [ 287.604600][T13429] loop1: detected capacity change from 0 to 512 [ 287.617454][T13436] SELinux: policydb version 0 does not match my version range 15-34 [ 287.626055][T13436] SELinux: failed to load policy [ 287.636075][T13429] ext4 filesystem being mounted at /49/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 287.817991][T13451] loop4: detected capacity change from 0 to 1024 [ 287.825165][ T373] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 287.837418][T13451] EXT4-fs: Ignoring removed nobh option [ 287.843230][T13451] EXT4-fs: Ignoring removed bh option [ 287.971492][T13462] loop0: detected capacity change from 0 to 1024 [ 287.979744][T13462] EXT4-fs: Ignoring removed nobh option [ 287.985551][T13462] EXT4-fs: Ignoring removed bh option [ 288.006198][T13465] loop4: detected capacity change from 0 to 1024 [ 288.013352][T13465] EXT4-fs: Ignoring removed nobh option [ 288.018960][T13465] EXT4-fs: Ignoring removed bh option [ 288.368616][T13481] loop2: detected capacity change from 0 to 1024 [ 288.391043][T13482] loop3: detected capacity change from 0 to 1024 [ 288.401491][T13481] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 288.412518][T13481] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 288.415334][T13482] EXT4-fs: Ignoring removed nobh option [ 288.427759][T13482] EXT4-fs: Ignoring removed bh option [ 288.443161][T13481] JBD2: no valid journal superblock found [ 288.448951][T13481] EXT4-fs (loop2): Could not load journal inode [ 288.473762][T13482] EXT4-fs (loop3): shut down requested (0) [ 288.488750][T13481] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 288.533268][T13495] loop2: detected capacity change from 0 to 512 [ 288.536843][T13499] loop3: detected capacity change from 0 to 1024 [ 288.540201][T13495] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 288.557445][T13495] EXT4-fs (loop2): 1 truncate cleaned up [ 288.568650][T13499] EXT4-fs: Ignoring removed nobh option [ 288.574458][T13499] EXT4-fs: Ignoring removed bh option [ 288.624142][T13505] random: crng reseeded on system resumption [ 288.695274][T13511] loop0: detected capacity change from 0 to 1024 [ 288.718378][T13513] loop2: detected capacity change from 0 to 128 [ 288.726631][T13511] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 288.737653][T13511] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 288.748507][T13511] JBD2: no valid journal superblock found [ 288.754289][T13511] EXT4-fs (loop0): Could not load journal inode [ 288.767159][T13513] ext4 filesystem being mounted at /109/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 288.799315][T13518] loop3: detected capacity change from 0 to 1024 [ 288.808689][T13518] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 288.819879][T13518] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 288.833660][T13518] JBD2: no valid journal superblock found [ 288.839439][T13518] EXT4-fs (loop3): Could not load journal inode [ 288.855599][T13518] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 288.890200][T13526] loop3: detected capacity change from 0 to 1024 [ 288.897576][T13526] EXT4-fs: Ignoring removed nobh option [ 288.903353][T13526] EXT4-fs: Ignoring removed bh option [ 288.928330][T13526] EXT4-fs (loop3): shut down requested (0) [ 288.987444][T13541] random: crng reseeded on system resumption [ 289.067286][T13546] loop3: detected capacity change from 0 to 1024 [ 289.074753][T13546] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 289.085818][T13546] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 289.099677][T13546] JBD2: no valid journal superblock found [ 289.103167][ T8515] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 289.105743][T13546] EXT4-fs (loop3): Could not load journal inode [ 289.117058][ T373] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 289.151853][T13551] loop2: detected capacity change from 0 to 1024 [ 289.167784][T13551] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 289.178823][T13551] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 289.208837][T13548] loop1: detected capacity change from 0 to 512 [ 289.215815][T13551] JBD2: no valid journal superblock found [ 289.221601][T13551] EXT4-fs (loop2): Could not load journal inode [ 289.235245][T13551] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 289.247597][T13548] ext4 filesystem being mounted at /54/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 289.260635][T13557] loop3: detected capacity change from 0 to 1024 [ 289.269212][T13557] EXT4-fs: Ignoring removed nobh option [ 289.274901][T13557] EXT4-fs: Ignoring removed bh option [ 289.292482][T13557] EXT4-fs (loop3): shut down requested (0) [ 289.393162][T13568] loop4: detected capacity change from 0 to 512 [ 289.412137][T13568] EXT4-fs error (device loop4): ext4_orphan_get:1390: inode #15: comm syz.4.3458: casefold flag without casefold feature [ 289.415655][T13576] random: crng reseeded on system resumption [ 289.440139][T13568] EXT4-fs error (device loop4): ext4_orphan_get:1395: comm syz.4.3458: couldn't read orphan inode 15 (err -117) [ 289.620235][T13578] syz.2.3463: attempt to access beyond end of device [ 289.620235][T13578] md2: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 289.707006][T13590] loop2: detected capacity change from 0 to 1024 [ 289.720407][T13585] loop3: detected capacity change from 0 to 512 [ 289.731233][T13590] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 289.743001][T13590] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 289.755146][T13585] ext4 filesystem being mounted at /126/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 289.773215][T13590] JBD2: no valid journal superblock found [ 289.779282][T13590] EXT4-fs (loop2): Could not load journal inode [ 289.792471][T13590] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 289.881983][T13600] SELinux: policydb version 0 does not match my version range 15-34 [ 289.890619][T13600] SELinux: failed to load policy [ 290.049067][T13619] program syz.3.3477 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 290.080812][T13610] loop0: detected capacity change from 0 to 512 [ 290.087395][T13623] loop1: detected capacity change from 0 to 1024 [ 290.095718][T13623] EXT4-fs: Ignoring removed nobh option [ 290.098467][T13610] ext4 filesystem being mounted at /84/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 290.101614][T13623] EXT4-fs: Ignoring removed bh option [ 290.144976][T13623] EXT4-fs (loop1): shut down requested (0) [ 290.267736][T13637] __nla_validate_parse: 15 callbacks suppressed [ 290.267757][T13637] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3484'. [ 290.296768][T13640] loop0: detected capacity change from 0 to 1024 [ 290.303944][T13640] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 290.315394][T13640] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 290.329512][T13640] JBD2: no valid journal superblock found [ 290.335313][T13640] EXT4-fs (loop0): Could not load journal inode [ 290.393922][T13647] random: crng reseeded on system resumption [ 290.816633][T13640] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3481'. [ 290.850845][T13640] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 290.948780][T13669] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3495'. [ 290.986083][T13656] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=13656 comm=syz.3.3490 [ 291.023118][ T8524] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 291.039687][T13662] loop4: detected capacity change from 0 to 512 [ 291.049516][T13662] ext4 filesystem being mounted at /65/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 291.127732][T13677] random: crng reseeded on system resumption [ 291.199757][T13681] loop0: detected capacity change from 0 to 1024 [ 291.213064][T12479] EXT4-fs unmount: 97 callbacks suppressed [ 291.213085][T12479] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 291.239059][T13681] EXT4-fs: Ignoring removed orlov option [ 291.244937][T13681] EXT4-fs: Ignoring removed nomblk_io_submit option [ 291.282369][T13681] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 291.344211][T12279] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 291.405881][T13705] loop0: detected capacity change from 0 to 512 [ 291.431931][T13703] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3507'. [ 291.443546][T13705] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 291.483288][T13691] loop4: detected capacity change from 0 to 512 [ 291.501038][T13705] EXT4-fs (loop0): 1 truncate cleaned up [ 291.510723][T13705] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 291.541291][T13691] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 291.561966][T13691] ext4 filesystem being mounted at /66/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 291.573249][T13695] loop1: detected capacity change from 0 to 512 [ 291.590011][T13695] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 291.606363][T13695] ext4 filesystem being mounted at /64/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 291.625460][T13719] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.3506'. [ 291.651737][T13722] random: crng reseeded on system resumption [ 291.690190][T13705] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.3506'. [ 291.710548][T12479] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 291.776866][T12279] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 291.830447][T12752] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 291.840062][T13729] program syz.3.3515 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 291.855790][T13720] loop2: detected capacity change from 0 to 512 [ 291.885275][T13720] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 291.904020][T13720] ext4 filesystem being mounted at /130/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 291.934991][T13734] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.958115][T13741] loop4: detected capacity change from 0 to 512 [ 291.965632][T13737] SELinux: policydb version 0 does not match my version range 15-34 [ 291.974050][T13737] SELinux: failed to load policy [ 291.986765][T13741] EXT4-fs error (device loop4): ext4_orphan_get:1390: inode #15: comm syz.4.3519: casefold flag without casefold feature [ 292.002414][T13741] EXT4-fs error (device loop4): ext4_orphan_get:1395: comm syz.4.3519: couldn't read orphan inode 15 (err -117) [ 292.015573][T13741] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 292.036631][T13734] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.058294][T12000] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 292.076382][T13734] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.083170][T13747] loop2: detected capacity change from 0 to 1024 [ 292.095492][T13747] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 292.106633][T13747] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 292.118033][T13747] JBD2: no valid journal superblock found [ 292.124008][T13747] EXT4-fs (loop2): Could not load journal inode [ 292.133641][T12479] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 292.136940][T13747] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3520'. [ 292.153898][T13747] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 292.167388][T13734] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.209679][T13734] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.221721][T13734] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.243690][T13734] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.260691][T13734] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.277585][T13759] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.365700][T13759] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.816856][T13759] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.856208][T13767] loop0: detected capacity change from 0 to 128 [ 292.903268][T13765] loop1: detected capacity change from 0 to 512 [ 292.910616][T13759] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.910958][T13776] loop0: detected capacity change from 0 to 1024 [ 292.925723][T13765] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 292.929313][T13776] EXT4-fs: Ignoring removed orlov option [ 292.946170][T13765] ext4 filesystem being mounted at /67/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 292.956779][T13776] EXT4-fs: Ignoring removed nomblk_io_submit option [ 292.964277][ T51] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 292.984702][T13759] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.003941][T13759] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.016841][T13776] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 293.021539][T13759] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.039097][T13784] loop3: detected capacity change from 0 to 128 [ 293.055087][T13759] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.071179][T12279] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 293.143486][T12752] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 293.233447][T13792] loop1: detected capacity change from 0 to 1024 [ 293.247797][T13795] loop0: detected capacity change from 0 to 512 [ 293.255191][T13792] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 293.266376][T13792] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 293.278448][T13795] EXT4-fs error (device loop0): ext4_orphan_get:1390: inode #15: comm syz.0.3532: casefold flag without casefold feature [ 293.293596][T13792] JBD2: no valid journal superblock found [ 293.299374][T13792] EXT4-fs (loop1): Could not load journal inode [ 293.300674][T13795] EXT4-fs error (device loop0): ext4_orphan_get:1395: comm syz.0.3532: couldn't read orphan inode 15 (err -117) [ 293.318538][T13795] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 293.364596][T13801] program syz.3.3537 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 293.396225][T13803] loop4: detected capacity change from 0 to 256 [ 293.407942][T13792] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3533'. [ 293.417740][T13792] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 293.444859][T13803] FAT-fs (loop4): Directory bread(block 1285) failed [ 293.454945][T13803] FAT-fs (loop4): FAT read failed (blocknr 1281) [ 293.488790][T13808] random: crng reseeded on system resumption [ 293.582638][T12279] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 293.632378][T13818] program syz.1.3542 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 293.689779][T13810] loop3: detected capacity change from 0 to 128 [ 293.831637][T13806] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=13806 comm=syz.2.3538 [ 293.855161][T13828] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.921019][T13828] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.975134][T13828] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.025759][T13838] loop0: detected capacity change from 0 to 1024 [ 294.042513][T13838] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 294.053635][T13838] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 294.067373][T13828] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.169474][T13828] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.188794][T13828] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.201053][T13828] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.215445][T13828] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.218118][T13838] JBD2: no valid journal superblock found [ 294.229471][T13838] EXT4-fs (loop0): Could not load journal inode [ 294.258166][T13838] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3550'. [ 294.267513][T13838] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 294.269699][T13833] loop1: detected capacity change from 0 to 512 [ 294.340847][T13844] random: crng reseeded on system resumption [ 294.512136][T13846] loop0: detected capacity change from 0 to 512 [ 294.566196][T13833] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 294.581703][T13846] EXT4-fs error (device loop0): ext4_orphan_get:1390: inode #15: comm syz.0.3552: casefold flag without casefold feature [ 294.608995][T13833] ext4 filesystem being mounted at /73/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 294.641178][T13846] EXT4-fs error (device loop0): ext4_orphan_get:1395: comm syz.0.3552: couldn't read orphan inode 15 (err -117) [ 294.668277][T13846] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 294.785319][T12279] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 294.813903][T12752] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 294.818176][T13857] loop0: detected capacity change from 0 to 1024 [ 294.831898][T13857] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 294.842932][T13857] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 294.863135][ T8524] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 294.874228][ T8515] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 294.888138][T13857] JBD2: no valid journal superblock found [ 294.894003][T13857] EXT4-fs (loop0): Could not load journal inode [ 294.905688][T13859] loop1: detected capacity change from 0 to 1024 [ 294.912670][T13859] EXT4-fs: Ignoring removed nobh option [ 294.918371][T13859] EXT4-fs: Ignoring removed bh option [ 294.977365][T13857] netlink: 48 bytes leftover after parsing attributes in process `+}[@'. [ 294.999154][T13861] loop4: detected capacity change from 0 to 512 [ 295.010494][T13849] loop3: detected capacity change from 0 to 512 [ 295.029410][T13859] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 295.047922][T13849] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 295.061096][T13869] loop0: detected capacity change from 0 to 1024 [ 295.061678][T13861] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 295.096157][T12752] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 295.107937][T13849] ext4 filesystem being mounted at /150/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 295.108415][T13869] EXT4-fs: Ignoring removed nobh option [ 295.119520][T13871] SELinux: policydb version 0 does not match my version range 15-34 [ 295.124186][T13869] EXT4-fs: Ignoring removed bh option [ 295.138509][T13871] SELinux: failed to load policy [ 295.141625][T13861] ext4 filesystem being mounted at /75/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 295.208124][T13869] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 295.231368][ T29] kauditd_printk_skb: 49 callbacks suppressed [ 295.231385][ T29] audit: type=1326 audit(1743401216.737:4045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13873 comm="syz.1.3561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf5efed169 code=0x7ffc0000 [ 295.262871][ T29] audit: type=1326 audit(1743401216.737:4046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13873 comm="syz.1.3561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcf5efed169 code=0x7ffc0000 [ 295.286545][ T29] audit: type=1326 audit(1743401216.737:4047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13873 comm="syz.1.3561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf5efed169 code=0x7ffc0000 [ 295.310089][ T29] audit: type=1326 audit(1743401216.737:4048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13873 comm="syz.1.3561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcf5efed169 code=0x7ffc0000 [ 295.339967][ T29] audit: type=1326 audit(1743401216.857:4049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13873 comm="syz.1.3561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf5efed169 code=0x7ffc0000 [ 295.343925][T12279] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 295.364168][ T29] audit: type=1326 audit(1743401216.857:4050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13873 comm="syz.1.3561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcf5efed169 code=0x7ffc0000 [ 295.364206][ T29] audit: type=1326 audit(1743401216.857:4051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13873 comm="syz.1.3561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf5efed169 code=0x7ffc0000 [ 295.397944][T11785] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 295.421019][ T29] audit: type=1326 audit(1743401216.857:4052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13873 comm="syz.1.3561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7fcf5efed169 code=0x7ffc0000 [ 295.421079][ T29] audit: type=1326 audit(1743401216.857:4053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13873 comm="syz.1.3561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf5efed169 code=0x7ffc0000 [ 295.421111][ T29] audit: type=1326 audit(1743401216.857:4054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13873 comm="syz.1.3561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7fcf5efed169 code=0x7ffc0000 [ 295.502041][ C1] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:0c [ 295.518526][T12479] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 295.595668][T13889] loop0: detected capacity change from 0 to 512 [ 295.604232][T13889] EXT4-fs error (device loop0): ext4_orphan_get:1390: inode #15: comm syz.0.3566: casefold flag without casefold feature [ 295.619784][T13889] EXT4-fs error (device loop0): ext4_orphan_get:1395: comm syz.0.3566: couldn't read orphan inode 15 (err -117) [ 295.635732][T13889] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 295.692824][T12279] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 295.717232][T13896] loop0: detected capacity change from 0 to 1024 [ 295.721123][T13880] warn_alloc: 4 callbacks suppressed [ 295.721145][T13880] syz.3.3563: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 295.724317][T13896] EXT4-fs: Ignoring removed nobh option [ 295.729034][T13880] ,cpuset=/,mems_allowed=0 [ 295.729070][T13880] CPU: 0 UID: 0 PID: 13880 Comm: syz.3.3563 Not tainted 6.14.0-syzkaller-10764-gaa918db707fb #0 PREEMPT(voluntary) [ 295.729135][T13880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 295.729153][T13880] Call Trace: [ 295.729163][T13880] [ 295.729174][T13880] dump_stack_lvl+0xf6/0x150 [ 295.729206][T13880] dump_stack+0x15/0x1a [ 295.729299][T13880] warn_alloc+0x145/0x1b0 [ 295.729353][T13880] ? __vmalloc_node_range_noprof+0x8a/0xe80 [ 295.729390][T13880] __vmalloc_node_range_noprof+0xac/0xe80 [ 295.729422][T13880] ? __pfx_futex_wake_mark+0x10/0x10 [ 295.729531][T13880] ? __rcu_read_unlock+0x4e/0x70 [ 295.729637][T13880] ? avc_has_perm_noaudit+0x1cc/0x210 [ 295.729666][T13880] ? should_fail_ex+0x31/0x270 [ 295.729692][T13880] ? should_failslab+0x8f/0xb0 [ 295.729723][T13880] vmalloc_user_noprof+0x59/0x70 [ 295.729809][T13880] ? xskq_create+0x79/0xd0 [ 295.729833][T13880] xskq_create+0x79/0xd0 [ 295.729857][T13880] xsk_init_queue+0x82/0xd0 [ 295.729928][T13880] xsk_setsockopt+0x37d/0x550 [ 295.729971][T13880] ? __pfx_xsk_setsockopt+0x10/0x10 [ 295.730013][T13880] __sys_setsockopt+0x187/0x200 [ 295.730060][T13880] __x64_sys_setsockopt+0x66/0x80 [ 295.730126][T13880] x64_sys_call+0x2a09/0x2e10 [ 295.730166][T13880] do_syscall_64+0xc9/0x1c0 [ 295.730193][T13880] ? clear_bhb_loop+0x25/0x80 [ 295.730298][T13880] ? clear_bhb_loop+0x25/0x80 [ 295.730326][T13880] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 295.730403][T13880] RIP: 0033:0x7fe04dabd169 [ 295.730423][T13880] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 295.730447][T13880] RSP: 002b:00007fe04c127038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 295.730470][T13880] RAX: ffffffffffffffda RBX: 00007fe04dcd5fa0 RCX: 00007fe04dabd169 [ 295.730560][T13880] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004 [ 295.730589][T13880] RBP: 00007fe04db3e2a0 R08: 0000000000000004 R09: 0000000000000000 [ 295.730607][T13880] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 295.730624][T13880] R13: 0000000000000000 R14: 00007fe04dcd5fa0 R15: 00007fffa31492a8 [ 295.730653][T13880] [ 295.730662][T13880] Mem-Info: [ 295.742916][T13896] EXT4-fs: Ignoring removed bh option [ 295.776521][T13896] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 295.779331][T13880] active_anon:6406 inactive_anon:3 isolated_anon:0 [ 295.779331][T13880] active_file:7760 inactive_file:11933 isolated_file:0 [ 295.779331][T13880] unevictable:0 dirty:292 writeback:0 [ 295.779331][T13880] slab_reclaimable:3093 slab_unreclaimable:23402 [ 295.779331][T13880] mapped:31618 shmem:3216 pagetables:832 [ 295.779331][T13880] sec_pagetables:0 bounce:0 [ 295.779331][T13880] kernel_misc_reclaimable:0 [ 295.779331][T13880] free:1847409 free_pcp:9575 free_cma:0 [ 295.849277][T13899] loop4: detected capacity change from 0 to 256 [ 295.853583][T13880] Node 0 active_anon:25740kB inactive_anon:12kB active_file:31040kB inactive_file:47732kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:126472kB dirty:1168kB writeback:0kB shmem:12980kB writeback_tmp:0kB kernel_stack:3376kB pagetables:3328kB sec_pagetables:0kB all_unreclaimable? no [ 296.044610][T13905] program syz.2.3568 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 296.049570][T13880] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 296.115176][T13880] lowmem_reserve[]: 0 2884 7862 7862 [ 296.120538][T13880] Node 0 DMA32 free:2949876kB boost:0kB min:4132kB low:7064kB high:9996kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2953408kB mlocked:0kB bounce:0kB free_pcp:3532kB local_pcp:3532kB free_cma:0kB [ 296.150406][T13880] lowmem_reserve[]: 0 0 4978 4978 [ 296.155782][T13880] Node 0 Normal free:4424400kB boost:0kB min:7184kB low:12280kB high:17376kB reserved_highatomic:0KB active_anon:25856kB inactive_anon:12kB active_file:31040kB inactive_file:47732kB unevictable:0kB writepending:1168kB present:5242880kB managed:5098248kB mlocked:0kB bounce:0kB free_pcp:34072kB local_pcp:1252kB free_cma:0kB [ 296.186236][T13880] lowmem_reserve[]: 0 0 0 0 [ 296.191172][T13880] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 296.204035][T13880] Node 0 DMA32: 3*4kB (M) 3*8kB (M) 3*16kB (M) 3*32kB (M) 5*64kB (M) 4*128kB (M) 3*256kB (M) 4*512kB (M) 3*1024kB (M) 3*2048kB (M) 717*4096kB (M) = 2949876kB [ 296.204573][T13901] loop3: detected capacity change from 0 to 128 [ 296.220186][T13880] Node 0 Normal: 189*4kB (UE) 319*8kB (UM) 113*16kB (UME) 14*32kB (ME) 238*64kB (UM) 85*128kB (UM) 66*256kB (UM) 82*512kB (UM) 78*1024kB (UME) 23*2048kB (UME) 1027*4096kB (UME) = 4424124kB [ 296.245927][T13880] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 296.255534][T13880] 22970 total pagecache pages [ 296.260236][T13880] 8 pages in swap cache [ 296.264428][T13880] Free swap = 124724kB [ 296.268598][T13880] Total swap = 124996kB [ 296.272798][T13880] 2097051 pages RAM [ 296.276611][T13880] 0 pages HighMem/MovableOnly [ 296.281473][T13880] 80297 pages reserved [ 296.315686][T13899] FAT-fs (loop4): Directory bread(block 1285) failed [ 296.363352][T13899] FAT-fs (loop4): FAT read failed (blocknr 1281) [ 296.498126][T13915] loop3: detected capacity change from 0 to 1024 [ 296.540765][T13915] EXT4-fs: Ignoring removed orlov option [ 296.546955][T13915] EXT4-fs: Ignoring removed nomblk_io_submit option [ 296.599069][T12279] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 296.611840][T13915] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 296.709324][T11785] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 296.740280][T13919] loop2: detected capacity change from 0 to 512 [ 296.775628][T13919] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 296.792296][ T8515] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 296.837358][T13919] ext4 filesystem being mounted at /141/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 297.024315][T13936] program syz.4.3579 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 297.060989][T13926] loop0: detected capacity change from 0 to 512 [ 297.114663][T13938] random: crng reseeded on system resumption [ 297.251572][T12000] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 297.278710][T13926] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 297.309652][T13926] ext4 filesystem being mounted at /107/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 297.381916][T13946] __nla_validate_parse: 1 callbacks suppressed [ 297.381935][T13946] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3583'. [ 297.397449][T13946] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073608888328) [ 297.408229][T13946] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 297.509939][T12279] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 297.525657][T13939] ================================================================== [ 297.534337][T13939] BUG: KCSAN: data-race in delete_from_page_cache_batch / nr_blockdev_pages [ 297.543073][T13939] [ 297.545497][T13939] read-write to 0xffff8881004c43f0 of 8 bytes by task 12279 on cpu 0: [ 297.553654][T13939] delete_from_page_cache_batch+0x4fe/0x720 [ 297.559568][T13939] truncate_inode_pages_range+0x1c7/0x6c0 [ 297.565408][T13939] truncate_inode_pages+0x24/0x30 [ 297.570499][T13939] blkdev_flush_mapping+0xa5/0x1a0 [ 297.575747][T13939] bdev_release+0x2f9/0x420 [ 297.580481][T13939] blkdev_release+0x15/0x20 [ 297.585025][T13939] __fput+0x2ac/0x640 [ 297.589039][T13939] ____fput+0x1c/0x30 [ 297.593028][T13939] task_work_run+0x13c/0x1b0 [ 297.597640][T13939] syscall_exit_to_user_mode+0xa8/0x120 [ 297.603209][T13939] do_syscall_64+0xd6/0x1c0 [ 297.607721][T13939] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 297.613630][T13939] [ 297.615984][T13939] read to 0xffff8881004c43f0 of 8 bytes by task 13939 on cpu 1: [ 297.623622][T13939] nr_blockdev_pages+0x7c/0xd0 [ 297.628433][T13939] si_meminfo+0x87/0xd0 [ 297.632612][T13939] handshake_net_init+0x7e/0x160 [ 297.637560][T13939] ops_init+0x21e/0x2d0 [ 297.641733][T13939] setup_net+0x14f/0x610 [ 297.645992][T13939] copy_net_ns+0x5a3/0x740 [ 297.650506][T13939] create_new_namespaces+0x228/0x430 [ 297.656003][T13939] unshare_nsproxy_namespaces+0xe6/0x120 [ 297.661659][T13939] ksys_unshare+0x3d3/0x700 [ 297.666187][T13939] __x64_sys_unshare+0x1f/0x30 [ 297.670971][T13939] x64_sys_call+0x2c93/0x2e10 [ 297.675844][T13939] do_syscall_64+0xc9/0x1c0 [ 297.680602][T13939] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 297.686507][T13939] [ 297.688921][T13939] value changed: 0x0000000000000001 -> 0x0000000000000000 [ 297.696047][T13939] [ 297.698490][T13939] Reported by Kernel Concurrency Sanitizer on: [ 297.704651][T13939] CPU: 1 UID: 0 PID: 13939 Comm: syz.1.3580 Not tainted 6.14.0-syzkaller-10764-gaa918db707fb #0 PREEMPT(voluntary) [ 297.716830][T13939] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 297.727071][T13939] ================================================================== [ 297.760754][T13944] loop1: detected capacity change from 0 to 128 [ 298.063543][ T373] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 299.983062][ T8515] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 300.623798][ T373] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 302.542296][ T31] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 303.102101][ T373] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 305.744177][ T373] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 305.744954][ C0] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:1c [ 306.382418][ T373] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration