last executing test programs: 43.915458611s ago: executing program 1 (id=2): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) r2 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x80, 0x2, 0x1f9}, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r2, 0x0, &(0x7f0000000040)='./file0\x00', 0x64, 0x183000, 0x12345}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) io_uring_enter(r2, 0x47f6, 0x0, 0x0, 0x0, 0x0) 43.388369311s ago: executing program 1 (id=18): bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x80000000, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x48, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000400)='io_uring_create\x00', r2}, 0x18) syz_io_uring_setup(0x893, &(0x7f0000000140)={0x0, 0xaee4, 0x0, 0x1, 0x220}, &(0x7f0000000000), &(0x7f0000000340)) 43.177151342s ago: executing program 1 (id=25): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x1f0719, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa, 0x1, @perf_config_ext={0x100, 0x4}, 0xa822, 0x4005, 0xb, 0x3, 0x6, 0x20005, 0x9, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$nl_generic(0x10, 0x3, 0x10) pivot_root(0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000380), 0xfe, 0x558, &(0x7f0000000c00)="$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") creat(&(0x7f0000000300)='./bus\x00', 0x0) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x400, 0x0, 0x0, 0x1, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000000000000c00002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00", [0x4]}) 42.932898535s ago: executing program 1 (id=33): pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="9400000013004f0a000200"/20, @ANYRES32=r0, @ANYBLOB="00000000000000000800cfffecc507006c001a8054000a80140007"], 0x94}}, 0x20008841) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) socket$inet(0x2, 0x4000000000000001, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00'}, 0x10) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)) splice(r0, 0x0, r2, 0x0, 0x8201, 0x4) 41.430790868s ago: executing program 1 (id=64): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10) mq_notify(r2, 0x0) 41.378883274s ago: executing program 32 (id=64): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10) mq_notify(r2, 0x0) 5.333627452s ago: executing program 2 (id=793): pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000280)='kfree\x00', r1, 0x0, 0xbc3}, 0x18) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c0001", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRESOCT], 0xb4}}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f0000001e80)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0x1c, 0x0, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x802}, 0x4000) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000002200)={&(0x7f0000001ec0)=@rc={0x1f, @none, 0x10}, 0x80, &(0x7f00000020c0)=[{&(0x7f0000001f40)="d8724adf4e249bc2a88fd69e7d4ccb40e734e8ffe4742ac12bbcf533e50e520c0a91b9107a145fa8e390322d73e87799f0eb5f3c222673656905ce6049a73f711377b17dd157b373959d5b5562351adf672bae5d72d6f0a4e7933258571bbd2cff433aabc39d201218f0849cc446e24da50b97e0d21be89d8ba35aed07bac47577b27038c681d38c4fd317665bcb8c75123d3ce985e71297cfac49525a73f0fdd35bfed9b07c715eda54444a6d44223e66457611bdf15c5e2ebc68110d19810325638c17", 0xc4}, {&(0x7f0000002040)="8289a126421dba8ec20a5ce33c20243b2ac0da4c3d37c492a80e92ce1b4289252171d5a4ae42904d0b983799b1cbf40d3d1942fda5ca770136ea64cae07ea4b89626eade8d5b693b26fb2769ff06f5e2982ec5875f68ceedf00668757277067fafc998343559b213eec06d7f814a1c0f7dad76551fefcad23103f0c521", 0x7d}], 0x2}, 0x14) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x0, &(0x7f0000000040)}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48284b70043dc6124d877142a48448b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68af2ad0810000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d4023f210fa34b63a715a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900000000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b6c7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48fc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f01000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb796ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab04000000ffe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890decace0200f404e4e1f74b7eed82571be54c72d978cf906df0042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef29cd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9fdc75aaaf0100483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a998de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270bb29b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214d00000000d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ce21d69993e9960ff5f76015e6c354463d7d0917fc80e5009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab4000000000000000028df75cf43f8ecc8d37b126602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd63bed8d31c31c37a373d4efd89fa516dab183ee65744fb8fc4f9ce2242e0f00000000010000000000000000000057d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fa03b84f63e022fe755f4007a4a899eaf52c4f49198e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c716357d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c24936615ee68538e8fddd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba1c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63c41cbde2ba66ad81168070c8c6e18a6e452a31bde54ad3e16304d06a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c7340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b9e6626f19eecb87e39175e85eff010000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f14eafe4b28ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1bfeef448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1099e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f9491bca7a8c59363799be70018c25ece5ad7307dc7a95c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2cdfb7fea73ca18874664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677ec97c5c568a89d6e36b165c391339878b699644c96bd6ea589765ed2a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae2676384ff799783f55d7e5a1a092a01b965dc99cb7a9d98440c355927629f2bcf9dc2396eb2f5d25829715b24327642ac4741201014a95e0e65e12cdf27e19043e3c5d3e798375cead35b9a93190a52cdecaaccc854a1d41ef365303f0e9b4fc969c9dab6d00000000000000000000008f6555f3b7d5021dfc8eb504f1e4fef716d60f0d50b03fc014fd3dff46f56750f0ba4f1b9f7de5c17e7d1f18522897edab8e9e76b667ec6b01908400f55e16f0cfbf026be5f5acc681053f697d62b3545aec4606e190216c22c1d8807b6c43f0f0a4b53619fe5c9412821c3816194a5e29cf12cc7a197b5bdafb096d2d7f6be483814c92ef29c3a21c169794c7de3b4c706f4de5f4b93c831944c7b66fa49f317aa22dbc211e19f031c4f8bee14ecd5eb061a052044adc4dd1b63a1500a9c0e09dbba23f2726a55975efb4519d864d984dcb3a1dcafa1124a6b004029a706478df3be2438d2e35e6ca674dc190143a0b6f7db3408c0c08011e5d8f54711a0bd410ab53a15b1596cb77d2b58df2d8d8"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r2, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) bind$inet6(r2, &(0x7f0000000000)={0xa, 0xe22, 0x7fffffff, @empty, 0xfffffffe}, 0x1c) syz_emit_ethernet(0x7e, &(0x7f0000000280)={@link_local, @remote, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "108114", 0x48, 0x11, 0x0, @empty, @mcast2, {[], {0x0, 0xe22, 0x48, 0x0, @wg=@cookie={0x3, 0x3, "501d85d4c30be8f7096bcac751c47a7064c0905ddbda9581", "babcb20957603da1f0d40bdeece64d1a6888200cff6eb0e27af68eaa18f3616e"}}}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 5.293552176s ago: executing program 2 (id=795): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2004de, &(0x7f0000000500)={[{@minixdf}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x203}}, {@mblk_io_submit}, {@noblock_validity}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6}}]}, 0x3, 0x451, &(0x7f0000000f80)="$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") creat(0x0, 0x39) io_setup(0x2, &(0x7f0000002380)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)='2', 0x1, 0x8000c61) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) syz_open_procfs(0x0, 0x0) open$dir(0x0, 0x40002, 0x0) pwritev2(r2, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0x40305829, &(0x7f0000000240)={0x17c04, 0xffffffffffffffff, 0x8, 0x100000002, 0x8, 0x20000000fff}) 5.168474107s ago: executing program 2 (id=796): r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x120) lseek(r0, 0xb964, 0xad23dbce7a62eb82) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/pm_wakeup_irq', 0x0, 0x1a0) syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x0) ioctl$BLKBSZGET(r1, 0x80081270, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000340)='kfree\x00', 0xffffffffffffffff, 0x0, 0x2}, 0x18) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r3, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) recvfrom(r3, &(0x7f0000000480)=""/110, 0x168f6f3d, 0x734, 0x0, 0xfffffffffffffecb) 4.320713978s ago: executing program 2 (id=816): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="160000000000000005000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x3, 0x21f3, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000ed00000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0xcf}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) fchdir(r3) r4 = open(&(0x7f0000000480)='.\x00', 0x48800, 0x50) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0) pwrite64(r5, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080)='./file2\x00') getdents(r4, &(0x7f0000001fc0)=""/184, 0xb8) 3.542123713s ago: executing program 2 (id=821): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r0, 0x0) accept4(r0, 0x0, 0x0, 0x80800) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e0001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) 2.635923059s ago: executing program 4 (id=841): connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r2 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) writev(r2, &(0x7f0000000300)=[{&(0x7f0000000080)="aefdda9d240103005a90f57f02703aeff0f64eb9ee07962c220852f426072a00"/42, 0x2a}], 0x1) read(r2, 0x0, 0x0) socket$netlink(0x10, 0x3, 0xb) 2.566486526s ago: executing program 4 (id=842): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x3, @perf_bp={0x0, 0x6}, 0x4, 0x9, 0xfff, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x1b, 0x0, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$int_in(r0, 0x5452, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) getpid() seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$sock_buf(r1, 0x1, 0x1f, 0x0, &(0x7f0000000040)) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, 0x0, 0x20000010) getpgrp(0xffffffffffffffff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) 2.565691466s ago: executing program 2 (id=843): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() syz_usb_connect(0x0, 0x3b, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000085826d20ff046600b0d8000000010902"], 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000021000000850000001b000000b7"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = syz_clone(0x100100, 0x0, 0x0, 0x0, 0x0, 0x0) get_robust_list(r3, 0x0, 0x0) 2.487426543s ago: executing program 4 (id=844): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x50) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000200)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) ppoll(&(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r3, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_PRI(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)={0x68, r1, 0x11, 0x70bd25, 0x25dfdbff, {{}, {}, {0x4c, 0x18, {0xf64, @media='eth\x00'}}}}, 0x68}, 0x1, 0x0, 0x0, 0x40000}, 0x4000884) 2.457654156s ago: executing program 3 (id=846): socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) io_setup(0x20, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'hsr0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendto$packet(r0, &(0x7f0000000000)="dbe104b35716e67da422221d3286", 0xe, 0x20000814, &(0x7f0000000100)={0x11, 0x7, r2, 0x1, 0x5, 0x6, @local}, 0x14) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0xc, 0xd}, {0xfff3, 0x8}, {0xb}}}, 0x24}}, 0x20040000) 2.337981857s ago: executing program 3 (id=847): bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYRES16=0x0], 0x48) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000005b80)={@loopback, 0x33}) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) syz_mount_image$iso9660(&(0x7f0000000cc0), &(0x7f0000000180)='./file3\x00', 0x1004081, &(0x7f0000000500)=ANY=[@ANYRES16=0x0, @ANYRES32], 0x10, 0x7f4, &(0x7f0000000d80)="$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") open(&(0x7f0000000240)='./file1\x00', 0x145102, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 1.883394891s ago: executing program 0 (id=851): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0xe) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x40000000, 0x0, 0x0}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r1 = syz_io_uring_setup(0x38, &(0x7f0000000140)={0x0, 0x1d2d, 0x13500}, &(0x7f0000000240), &(0x7f0000000480)) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x21, &(0x7f0000000440), 0x1) 1.882968461s ago: executing program 0 (id=852): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x4, 0xb}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0x7, 0x5, 0x9}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8848}, 0x20000090) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x4, 0x5}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x5}]}}]}}]}, 0x44}}, 0x4000080) close_range(r0, 0xffffffffffffffff, 0x40000000000000) 1.815782038s ago: executing program 0 (id=853): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f00000006c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x1, 0x41, "0062ba7d82000000000000000000f7ffffff00"}) syz_open_pts(r0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000fed000/0x13000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x4ff1, &(0x7f0000000040)={0x0, 0x835c, 0xf000, 0x20000a, 0x20002f3}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x800, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0x9, 0xe}, {0xe, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x400c1}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000200)={0x0, 0xfffffefc, 0x7c, 0xfffffffa, 0xc6, "84b53f5dc1d996eee7d479db86fe609ea2029b", 0x7f, 0x2}) 1.611361477s ago: executing program 4 (id=855): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0) close(r1) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000009c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r4, {}, {0xffe0, 0xb}, {0x9, 0xb}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x1}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r5) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) 1.518210406s ago: executing program 4 (id=856): bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90) getdents(r0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r1}, 0x10) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000f, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) 1.425361564s ago: executing program 3 (id=857): openat$zero(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000200100000102"], 0x50) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000410"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x18) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000580)={@void, @void, @eth={@broadcast, @link_local, @val, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x11, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}, {0x0, 0x17c1, 0x18, 0x0, @wg=@data={0x4, 0x0, 0x2}}}}}}}, 0x42) 1.307328226s ago: executing program 3 (id=858): socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4004}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xc, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000006c59850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="440000000206030000000000000000000d0000000c000300686173683a69700005000400000000000900020073797a310000000005000500020000000500010006"], 0x44}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10040057}, 0x240008c4) 945.43646ms ago: executing program 0 (id=859): socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$usbfs(0x0, 0xe, 0x101301) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) fsopen(0x0, 0x0) unshare(0x2000400) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000040000001400050003030000000a0000005dc00000000001080002000500000014000600ff01000a00f2f3f31f000a0000000001060001"], 0x4c}, 0x1, 0x0, 0x0, 0x8014}, 0x404c000) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, 0x0, &(0x7f0000000180)=0xfffffe9f) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x4008004}, 0x4040000) 914.489723ms ago: executing program 0 (id=860): r0 = socket(0x10, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000340)={0xa, 0x5, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7f, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000480)=@gcm_256={{0x303}, "000200", "4809000000000500000000000000e9ffefff0000000006000005008000", "7e25837b", "0000e3ffffff00"}, 0x38) write$binfmt_script(r1, &(0x7f0000000500)={'#! ', './file0'}, 0xb) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, &(0x7f0000000240)=0x40) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000a40)="fb", 0x1}], 0x1) close_range(r0, r1, 0x100000000000000) 772.721127ms ago: executing program 5 (id=862): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb702000008"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xfffffff9}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r4 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r4, &(0x7f00000005c0)="bad330fbc9b55400040000ea0756a85d88a8", 0x5ea, 0x40, &(0x7f00000001c0)={0x11, 0x88a8, r3, 0x1, 0xd8, 0x6, @multicast}, 0x14) 725.290391ms ago: executing program 0 (id=863): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x8}, 0x80b0, 0x4d, 0x800020, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socket(0x1, 0x5, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x3000046, &(0x7f00000004c0)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@usrquota}, {@data_err_ignore}, {@nobarrier}, {@oldalloc}, {@grpquota}, {@noload}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) write(r3, &(0x7f00000001c0)="f1", 0x1) sendfile(r3, r1, 0x0, 0x40001) sendfile(r3, r2, 0x0, 0x7ffff000) 559.355647ms ago: executing program 5 (id=864): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000000)={[{@noinit_itable}, {@journal_dev={'journal_dev', 0x3d, 0xe}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6}}, {@grpid}, {@usrjquota}, {@grpquota}, {@nogrpid}, {@journal_dev={'journal_dev', 0x3d, 0xdcc}}, {@nouid32}]}, 0x3, 0x44a, &(0x7f0000000880)="$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") chdir(&(0x7f0000000140)='./file0\x00') bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) msgget(0x1, 0x240) r0 = open(&(0x7f0000000700)='./bus\x00', 0x8001121ac2, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000003c0)={0x40, 0x4, 0x0, 0x2, 0xfe}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000005c0), 0x101000, 0x0) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r2, 0x80083314, 0x0) 367.088106ms ago: executing program 4 (id=865): setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000280), 0x9) r2 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) openat$cgroup_procs(r0, &(0x7f0000000300)='tasks\x00', 0x2, 0x0) r3 = gettid() perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3, 0x0, 0x0, 0x0, 0x9}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_pid(r2, &(0x7f0000000340)=r3, 0x42) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000200)=0x1, 0x12) 347.595727ms ago: executing program 5 (id=866): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x4, 0xfffb}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8848}, 0x80) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r3, {0xc, 0x8}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f000001bfc0)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0x8001, {0x0, 0x0, 0x0, r6, {0x7, 0xffe0}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x22044028}, 0x4c004) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1) 89.563742ms ago: executing program 5 (id=867): bind$packet(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0, 0x0, 0x7}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffc}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) unshare(0x22020400) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000100)='./file0/bus\x00', 0xc4000100) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) 44.565406ms ago: executing program 5 (id=868): syz_emit_ethernet(0x26, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0xf}, @random="2e75189e98aa", @void, {@arp={0x806, @generic={0x30d, 0x15, 0x6, 0x4, 0x8, @random="1fe8938cd657", "a090eae1", @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}}}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0, 0x0, 0x6}, 0x18) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/cgroup.procs\x00', 0xa02, 0xc1) sendfile(r1, r1, 0x0, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="6000000009060103000000f79af92fb9269c3f000900020073797a3100000000050001000700000038000780060004404e21000005000700ff0000000c000180080001400a0101010c00028008000140e00000020c00148008000140"], 0x60}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) 35.535147ms ago: executing program 3 (id=869): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) close(0xffffffffffffffff) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r2}, &(0x7f0000000000), &(0x7f0000000100)=r3}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1400000010007b0000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) 1.0108ms ago: executing program 5 (id=870): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r1}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r2}, &(0x7f00000004c0), &(0x7f0000000500)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r3}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) 0s ago: executing program 3 (id=871): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000a00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='sched_switch\x00', r1, 0x0, 0xffffffffffff8001}, 0x18) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) readv(r3, &(0x7f0000000180)=[{&(0x7f0000000000)=""/24, 0xfd90}], 0x1) r4 = fcntl$dupfd(r3, 0x406, r3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) syz_create_resource$binfmt(0x0) truncate(0x0, 0x8fff5) write$sndseq(r4, &(0x7f0000000040)=[{0x82, 0x4, 0x0, 0x0, @tick=0xb, {0xb2, 0xb8}, {0x3, 0x1}, @result={0x10, 0x3b53}}, {0x0, 0x0, 0x3, 0x4, @time={0x4800000, 0xfff}, {0x6, 0x4}, {0xc}, @result={0x8, 0x2}}], 0x38) ioctl$sock_inet_SIOCDELRT(r2, 0x890c, 0x0) kernel console output (not intermixed with test programs): omiscuous mode [ 26.365001][ T3321] hsr_slave_1: entered promiscuous mode [ 26.370942][ T3321] debugfs: 'hsr0' already exists in 'hsr' [ 26.376652][ T3321] Cannot create hsr debugfs directory [ 26.523194][ T3313] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 26.536107][ T3313] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 26.550276][ T3313] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 26.559566][ T3313] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 26.581400][ T3314] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 26.595999][ T3314] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 26.604783][ T3314] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 26.616920][ T3314] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 26.642668][ T3321] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 26.654443][ T3321] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 26.669225][ T3321] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 26.677948][ T3321] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 26.699106][ T3320] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 26.708008][ T3320] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 26.716863][ T3320] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 26.729838][ T3320] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 26.752741][ T3313] 8021q: adding VLAN 0 to HW filter on device bond0 [ 26.776075][ T3312] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 26.785379][ T3312] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 26.794601][ T3312] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 26.805996][ T3313] 8021q: adding VLAN 0 to HW filter on device team0 [ 26.813854][ T3312] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 26.834366][ T2067] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.841547][ T2067] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.855870][ T2067] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.862941][ T2067] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.890737][ T3314] 8021q: adding VLAN 0 to HW filter on device bond0 [ 26.925285][ T3314] 8021q: adding VLAN 0 to HW filter on device team0 [ 26.934434][ T3321] 8021q: adding VLAN 0 to HW filter on device bond0 [ 26.952596][ T2067] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.959671][ T2067] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.974133][ T2067] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.981196][ T2067] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.995981][ T3321] 8021q: adding VLAN 0 to HW filter on device team0 [ 27.015914][ T3320] 8021q: adding VLAN 0 to HW filter on device bond0 [ 27.025545][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.032671][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.048867][ T3312] 8021q: adding VLAN 0 to HW filter on device bond0 [ 27.065149][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.072298][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.096015][ T3320] 8021q: adding VLAN 0 to HW filter on device team0 [ 27.116327][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.123469][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.139895][ T3312] 8021q: adding VLAN 0 to HW filter on device team0 [ 27.147830][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.154935][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.173971][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.181034][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.193537][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.200658][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.215971][ T3313] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 27.264017][ T3320] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 27.286805][ T3314] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 27.360238][ T3321] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 27.405947][ T3320] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 27.434936][ T3313] veth0_vlan: entered promiscuous mode [ 27.457847][ T3312] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 27.469136][ T3313] veth1_vlan: entered promiscuous mode [ 27.491597][ T3314] veth0_vlan: entered promiscuous mode [ 27.514872][ T3314] veth1_vlan: entered promiscuous mode [ 27.537012][ T3314] veth0_macvtap: entered promiscuous mode [ 27.544784][ T3313] veth0_macvtap: entered promiscuous mode [ 27.559370][ T3313] veth1_macvtap: entered promiscuous mode [ 27.566261][ T3314] veth1_macvtap: entered promiscuous mode [ 27.572963][ T3321] veth0_vlan: entered promiscuous mode [ 27.589895][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 27.598728][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 27.621819][ T3321] veth1_vlan: entered promiscuous mode [ 27.632896][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 27.640463][ T53] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.655305][ T53] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.667414][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 27.675858][ T53] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.694410][ T53] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.719040][ T3321] veth0_macvtap: entered promiscuous mode [ 27.725943][ T53] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.734822][ T53] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.745324][ T53] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.758713][ T53] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.759141][ T29] kauditd_printk_skb: 10 callbacks suppressed [ 27.759154][ T29] audit: type=1400 audit(1766788772.484:90): avc: denied { mounton } for pid=3313 comm="syz-executor" path="/root/syzkaller.y6LVg1/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 27.783191][ T3320] veth0_vlan: entered promiscuous mode [ 27.803599][ T29] audit: type=1400 audit(1766788772.504:91): avc: denied { mount } for pid=3313 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 27.825633][ T29] audit: type=1400 audit(1766788772.504:92): avc: denied { mounton } for pid=3313 comm="syz-executor" path="/root/syzkaller.y6LVg1/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 27.838121][ T3312] veth0_vlan: entered promiscuous mode [ 27.850826][ T29] audit: type=1400 audit(1766788772.504:93): avc: denied { mount } for pid=3313 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 27.861146][ T3312] veth1_vlan: entered promiscuous mode [ 27.878118][ T29] audit: type=1400 audit(1766788772.504:94): avc: denied { mounton } for pid=3313 comm="syz-executor" path="/root/syzkaller.y6LVg1/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 27.892184][ T3312] veth0_macvtap: entered promiscuous mode [ 27.910205][ T29] audit: type=1400 audit(1766788772.504:95): avc: denied { mounton } for pid=3313 comm="syz-executor" path="/root/syzkaller.y6LVg1/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=4745 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 27.926596][ T3321] veth1_macvtap: entered promiscuous mode [ 27.943651][ T29] audit: type=1400 audit(1766788772.504:96): avc: denied { unmount } for pid=3313 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 27.970735][ T29] audit: type=1400 audit(1766788772.534:97): avc: denied { mounton } for pid=3313 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 27.972902][ T3313] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 27.993670][ T29] audit: type=1400 audit(1766788772.534:98): avc: denied { mount } for pid=3313 comm="syz-executor" name="/" dev="gadgetfs" ino=4751 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 28.033570][ T3312] veth1_macvtap: entered promiscuous mode [ 28.044287][ T29] audit: type=1400 audit(1766788772.774:99): avc: denied { read write } for pid=3313 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 28.057731][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.090309][ T3321] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.098925][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 28.119377][ T3320] veth1_vlan: entered promiscuous mode [ 28.129319][ T3321] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 28.141435][ T42] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.174306][ T42] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.187922][ T42] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.202260][ T42] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.215674][ T3490] usb usb1: usbfs: interface 0 claimed by hub while 'syz.3.4' sets config #1 [ 28.224877][ T42] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.265529][ T42] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.278347][ T3320] veth0_macvtap: entered promiscuous mode [ 28.308947][ T42] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.319464][ T3320] veth1_macvtap: entered promiscuous mode [ 28.341459][ T42] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.375328][ T3320] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.395204][ T3320] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 28.411192][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.455603][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.499762][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.524714][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.827662][ C1] hrtimer: interrupt took 56095 ns [ 29.106085][ T3542] loop1: detected capacity change from 0 to 1024 [ 29.173260][ T3542] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 29.218533][ T3557] loop3: detected capacity change from 0 to 128 [ 29.256561][ T3560] loop4: detected capacity change from 0 to 1764 [ 29.263237][ T3542] loop1: detected capacity change from 1024 to 0 [ 29.293832][ T3557] syz.3.30: attempt to access beyond end of device [ 29.293832][ T3557] loop3: rw=0, sector=121, nr_sectors = 920 limit=128 [ 29.317575][ T3321] EXT4-fs error (device loop1): ext4_get_inode_loc:4968: inode #2: block 5: comm syz-executor: unable to read itable block [ 29.330665][ T3321] Buffer I/O error on dev loop1, logical block 1, lost sync page write [ 29.339194][ T3321] EXT4-fs (loop1): I/O error while writing superblock [ 29.346121][ T3321] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6298: IO failure [ 29.383759][ T3321] Buffer I/O error on dev loop1, logical block 1, lost sync page write [ 29.392242][ T3321] EXT4-fs (loop1): I/O error while writing superblock [ 29.399031][ T3321] EXT4-fs error (device loop1): ext4_dirty_inode:6502: inode #2: comm syz-executor: mark_inode_dirty error [ 29.410616][ T3321] Buffer I/O error on dev loop1, logical block 1, lost sync page write [ 29.429426][ T3321] EXT4-fs (loop1): I/O error while writing superblock [ 29.460568][ T49] EXT4-fs error (device loop1): __ext4_get_inode_loc_noinmem:4953: inode #2: block 5: comm kworker/u8:3: unable to read itable block [ 29.482637][ T49] Buffer I/O error on dev loop1, logical block 1, lost sync page write [ 29.492315][ T49] EXT4-fs (loop1): I/O error while writing superblock [ 29.499774][ T3321] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 29.521705][ T3321] Buffer I/O error on dev loop1, logical block 1, lost sync page write [ 29.529985][ T3321] EXT4-fs (loop1): I/O error while writing superblock [ 29.546777][ T3572] loop2: detected capacity change from 0 to 512 [ 29.555237][ T3570] loop0: detected capacity change from 0 to 1024 [ 29.564370][ T3570] EXT4-fs: Ignoring removed nomblk_io_submit option [ 29.586704][ T3549] Buffer I/O error on dev loop1, logical block 64, lost sync page write [ 29.612873][ T3570] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 29.626069][ T3572] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 29.644423][ T3577] Zero length message leads to an empty skb [ 29.674944][ T3572] ext4 filesystem being mounted at /7/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 29.687583][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 29.695880][ T3584] netlink: 8 bytes leftover after parsing attributes in process `syz.4.39'. [ 29.737445][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 29.868026][ T3590] wg2: entered promiscuous mode [ 29.873052][ T3590] wg2: entered allmulticast mode [ 30.003740][ T3591] loop0: detected capacity change from 0 to 8192 [ 30.152824][ T3610] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 30.283004][ T3613] loop4: detected capacity change from 0 to 1024 [ 30.290510][ T3613] EXT4-fs: Ignoring removed orlov option [ 30.311570][ T3613] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 30.334733][ T3616] mmap: syz.0.53 (3616) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 30.414626][ T3620] netlink: 4 bytes leftover after parsing attributes in process `syz.3.55'. [ 30.500613][ T3620] netlink: 12 bytes leftover after parsing attributes in process `syz.3.55'. [ 30.517476][ T3626] IPv4: Oversized IP packet from 127.202.26.0 [ 30.583147][ T3630] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 30.665199][ T3634] netlink: 68 bytes leftover after parsing attributes in process `syz.3.61'. [ 30.705846][ T3637] netlink: 8 bytes leftover after parsing attributes in process `syz.3.62'. [ 30.786338][ T49] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 30.892271][ T3647] loop2: detected capacity change from 0 to 1024 [ 30.902348][ T3647] EXT4-fs: Ignoring removed orlov option [ 30.924751][ T3647] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 30.981884][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 30.997035][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.038486][ T49] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 31.069071][ T3660] netlink: 96 bytes leftover after parsing attributes in process `syz.2.71'. [ 31.103783][ T49] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 31.153829][ T49] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 31.217105][ T3673] IPVS: stopping master sync thread 3674 ... [ 31.226419][ T3674] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 31.308634][ T49] bridge_slave_1: left allmulticast mode [ 31.314546][ T49] bridge_slave_1: left promiscuous mode [ 31.320286][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.339895][ T49] bridge_slave_0: left allmulticast mode [ 31.345667][ T49] bridge_slave_0: left promiscuous mode [ 31.351411][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.412891][ T3685] loop3: detected capacity change from 0 to 1024 [ 31.428491][ T3685] EXT4-fs: Ignoring removed orlov option [ 31.453751][ T3685] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 31.517818][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 31.535774][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 31.547100][ T49] bond0 (unregistering): Released all slaves [ 31.598581][ T3695] netlink: 12 bytes leftover after parsing attributes in process `syz.2.83'. [ 31.617358][ T49] hsr_slave_0: left promiscuous mode [ 31.646616][ T49] hsr_slave_1: left promiscuous mode [ 31.654645][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 31.662294][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 31.670395][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 31.678006][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 31.689078][ T49] veth1_macvtap: left promiscuous mode [ 31.694749][ T49] veth0_macvtap: left promiscuous mode [ 31.700498][ T49] veth1_vlan: left promiscuous mode [ 31.710425][ T49] veth0_vlan: left promiscuous mode [ 31.880581][ T49] team0 (unregistering): Port device team_slave_1 removed [ 31.892676][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.903561][ T49] team0 (unregistering): Port device team_slave_0 removed [ 31.938429][ T3720] netlink: 16 bytes leftover after parsing attributes in process `syz.3.86'. [ 31.961054][ T3650] chnl_net:caif_netlink_parms(): no params data found [ 32.024848][ T3730] Driver unsupported XDP return value 0 on prog (id 67) dev N/A, expect packet loss! [ 32.044154][ T3650] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.051436][ T3650] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.064296][ T3735] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 32.065811][ T3650] bridge_slave_0: entered allmulticast mode [ 32.081596][ T3650] bridge_slave_0: entered promiscuous mode [ 32.088636][ T3650] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.095792][ T3650] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.103994][ T3650] bridge_slave_1: entered allmulticast mode [ 32.110595][ T3650] bridge_slave_1: entered promiscuous mode [ 32.142708][ T3650] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 32.155992][ T3650] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 32.194629][ T3650] team0: Port device team_slave_0 added [ 32.195954][ T3650] team0: Port device team_slave_1 added [ 32.216072][ T3650] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.216088][ T3650] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.216117][ T3650] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.220145][ T3650] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.270149][ T3650] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.270180][ T3650] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.362279][ T3753] netlink: 4 bytes leftover after parsing attributes in process `syz.0.93'. [ 32.392628][ T3650] hsr_slave_0: entered promiscuous mode [ 32.398776][ T3650] hsr_slave_1: entered promiscuous mode [ 32.430288][ T3761] process 'syz.3.97' launched '/dev/fd/5' with NULL argv: empty string added [ 32.432307][ T3650] debugfs: 'hsr0' already exists in 'hsr' [ 32.444908][ T3650] Cannot create hsr debugfs directory [ 32.464241][ T3753] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 32.471718][ T3753] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 32.481009][ T3753] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 32.488423][ T3753] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 32.583610][ T3769] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.590845][ T3769] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.632403][ T3783] capability: warning: `wޣ' uses deprecated v2 capabilities in a way that may be insecure [ 32.681868][ T3769] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 32.696187][ T3769] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 32.777715][ T61] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 32.779739][ T3793] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 32.786837][ T29] kauditd_printk_skb: 255 callbacks suppressed [ 32.786853][ T29] audit: type=1326 audit(1766788777.504:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3794 comm="syz.4.103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7e1fdf749 code=0x7ffc0000 [ 32.819319][ T3795] vlan2: entered allmulticast mode [ 32.835763][ T29] audit: type=1326 audit(1766788777.534:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3794 comm="syz.4.103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff7e1fdf749 code=0x7ffc0000 [ 32.859252][ T29] audit: type=1400 audit(1766788777.534:357): avc: denied { read write } for pid=3794 comm="syz.4.103" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 32.882729][ T29] audit: type=1400 audit(1766788777.534:358): avc: denied { open } for pid=3794 comm="syz.4.103" path="/dev/nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 32.890985][ T3793] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 32.906216][ T29] audit: type=1326 audit(1766788777.534:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3794 comm="syz.4.103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7e1fdf749 code=0x7ffc0000 [ 32.938516][ T29] audit: type=1326 audit(1766788777.534:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3794 comm="syz.4.103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=296 compat=0 ip=0x7ff7e1fdf749 code=0x7ffc0000 [ 32.961759][ T29] audit: type=1326 audit(1766788777.534:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3794 comm="syz.4.103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7e1fdf749 code=0x7ffc0000 [ 32.985582][ T29] audit: type=1326 audit(1766788777.534:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3794 comm="syz.4.103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff7e1fdf749 code=0x7ffc0000 [ 33.009173][ T29] audit: type=1326 audit(1766788777.534:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3794 comm="syz.4.103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7e1fdf749 code=0x7ffc0000 [ 33.032791][ T29] audit: type=1326 audit(1766788777.534:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3794 comm="syz.4.103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff7e1fe1667 code=0x7ffc0000 [ 33.057168][ T61] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 33.066616][ T61] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 33.070280][ T2848] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 33.076722][ T3793] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 33.108366][ T2848] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 33.134291][ T3650] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 33.144068][ T3650] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 33.154344][ T3650] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 33.163710][ T3650] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 33.261043][ T3650] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.273818][ T3650] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.293711][ T3650] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 33.304441][ T3650] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 33.321196][ T2848] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.328311][ T2848] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.337290][ T2848] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.344384][ T2848] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.423388][ T3650] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.505764][ T3838] netlink: 16 bytes leftover after parsing attributes in process `syz.4.110'. [ 33.697969][ T3849] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 33.764316][ T3849] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 33.826646][ T3849] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 33.863129][ T3650] veth0_vlan: entered promiscuous mode [ 33.872861][ T3650] veth1_vlan: entered promiscuous mode [ 33.890361][ T3650] veth0_macvtap: entered promiscuous mode [ 33.899082][ T3650] veth1_macvtap: entered promiscuous mode [ 33.913081][ T3650] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.948760][ T3849] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 33.967186][ T3650] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.985898][ T579] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.005344][ T579] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.061950][ T53] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.082979][ T53] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.111107][ T2848] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.121425][ T2848] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.130567][ T3869] syz.5.67 uses obsolete (PF_INET,SOCK_PACKET) [ 34.145203][ T2848] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.168543][ T2848] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.231571][ T3873] vlan2: entered allmulticast mode [ 34.352382][ T3871] netlink: zone id is out of range [ 34.357542][ T3871] netlink: zone id is out of range [ 34.358241][ T3873] syz.0.117 (3873) used greatest stack depth: 10512 bytes left [ 34.393269][ T3871] netlink: zone id is out of range [ 34.438994][ T3871] netlink: set zone limit has 8 unknown bytes [ 34.514570][ T3822] syz.2.108 (3822) used greatest stack depth: 10152 bytes left [ 34.645715][ T3817] syz.2.108 (3817) used greatest stack depth: 7256 bytes left [ 34.718879][ T3803] Set syz1 is full, maxelem 65536 reached [ 34.830872][ T3903] set_capacity_and_notify: 1 callbacks suppressed [ 34.830887][ T3903] loop5: detected capacity change from 0 to 512 [ 34.871191][ T3903] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 34.879954][ T3903] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 34.928964][ T3903] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4215: comm syz.5.129: Allocating blocks 41-42 which overlap fs metadata [ 34.979503][ T3909] tipc: Started in network mode [ 34.984479][ T3909] tipc: Node identity ac1414aa, cluster identity 4711 [ 35.004789][ T3903] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4215: comm syz.5.129: Allocating blocks 41-42 which overlap fs metadata [ 35.021212][ T3909] tipc: Enabled bearer , priority 10 [ 35.042478][ T3903] EXT4-fs error (device loop5): ext4_acquire_dquot:6986: comm syz.5.129: Failed to acquire dquot type 1 [ 35.084124][ T3914] __nla_validate_parse: 3 callbacks suppressed [ 35.084142][ T3914] netlink: 16 bytes leftover after parsing attributes in process `syz.4.133'. [ 35.115170][ T3903] EXT4-fs error (device loop5): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 35.157644][ T3903] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #12: comm syz.5.129: corrupted inode contents [ 35.170214][ T3903] EXT4-fs error (device loop5): ext4_dirty_inode:6502: inode #12: comm syz.5.129: mark_inode_dirty error [ 35.181970][ T3903] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #12: comm syz.5.129: corrupted inode contents [ 35.194219][ T3903] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #12: comm syz.5.129: mark_inode_dirty error [ 35.206532][ T3903] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #12: comm syz.5.129: corrupted inode contents [ 35.221383][ T3903] EXT4-fs error (device loop5) in ext4_orphan_del:303: Corrupt filesystem [ 35.243752][ T3903] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #12: comm syz.5.129: corrupted inode contents [ 35.265030][ T3903] EXT4-fs error (device loop5): ext4_truncate:4635: inode #12: comm syz.5.129: mark_inode_dirty error [ 35.276908][ T3903] EXT4-fs error (device loop5) in ext4_process_orphan:345: Corrupt filesystem [ 35.310253][ T3903] EXT4-fs (loop5): 1 truncate cleaned up [ 35.329976][ T3903] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.378360][ T3903] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 35.388449][ T3903] EXT4-fs (loop5): shut down requested (1) [ 35.419069][ T3650] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.476027][ T3938] netlink: 4 bytes leftover after parsing attributes in process `syz.5.144'. [ 35.496184][ T3938] netlink: 4 bytes leftover after parsing attributes in process `syz.5.144'. [ 35.573574][ T3947] SELinux: Context system_u:object_r:shell_exec_t:s0 is not valid (left unmapped). [ 35.652447][ T10] IPVS: starting estimator thread 0... [ 35.740982][ T3953] IPVS: using max 2448 ests per chain, 122400 per kthread [ 35.906665][ T3961] vlan2: entered allmulticast mode [ 35.963250][ T3966] netlink: 240 bytes leftover after parsing attributes in process `syz.3.152'. [ 36.068745][ T3974] netlink: 4 bytes leftover after parsing attributes in process `syz.0.158'. [ 36.145280][ T10] tipc: Node number set to 2886997162 [ 36.318982][ T4003] loop5: detected capacity change from 0 to 128 [ 36.475663][ T4012] loop5: detected capacity change from 0 to 2048 [ 36.485900][ T4012] FAT-fs (loop5): bogus number of directory entries (5) [ 36.492920][ T4012] FAT-fs (loop5): Can't find a valid FAT filesystem [ 36.558369][ T4016] netlink: 8 bytes leftover after parsing attributes in process `syz.5.175'. [ 36.571592][ T4016] bridge0: entered promiscuous mode [ 36.578141][ T4016] bridge0: left promiscuous mode [ 36.659997][ T4025] netlink: 56 bytes leftover after parsing attributes in process `syz.4.179'. [ 36.669359][ T4023] loop5: detected capacity change from 0 to 2048 [ 36.685591][ T4023] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 36.777639][ T4023] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 36.793257][ T4023] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1790 with error 28 [ 36.805743][ T4023] EXT4-fs (loop5): This should not happen!! Data will be lost [ 36.805743][ T4023] [ 36.815666][ T4023] EXT4-fs (loop5): Total free blocks count 0 [ 36.821709][ T4023] EXT4-fs (loop5): Free/Dirty block details [ 36.827624][ T4023] EXT4-fs (loop5): free_blocks=2415919104 [ 36.833459][ T4023] EXT4-fs (loop5): dirty_blocks=1792 [ 36.838903][ T4023] EXT4-fs (loop5): Block reservation details [ 36.844927][ T4023] EXT4-fs (loop5): i_reserved_data_blocks=112 [ 36.894978][ T3650] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 36.896817][ T4036] netlink: 16 bytes leftover after parsing attributes in process `syz.4.184'. [ 37.107377][ T4062] netlink: 8 bytes leftover after parsing attributes in process `syz.3.193'. [ 37.126555][ T4062] ip6gre1: entered allmulticast mode [ 37.172176][ T4068] netlink: 16 bytes leftover after parsing attributes in process `syz.3.195'. [ 37.278187][ T4081] xt_hashlimit: max too large, truncated to 1048576 [ 37.287619][ T4063] loop4: detected capacity change from 0 to 256 [ 37.289247][ T4081] xt_CT: You must specify a L4 protocol and not use inversions on it [ 37.302701][ T4063] FAT-fs (loop4): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 37.583866][ T4103] loop4: detected capacity change from 0 to 2048 [ 37.614813][ T4103] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 37.790968][ T29] kauditd_printk_skb: 361 callbacks suppressed [ 37.790983][ T29] audit: type=1326 audit(1766788782.524:722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4102 comm="syz.4.207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff7e1fd65e7 code=0x7ffc0000 [ 37.829204][ T4110] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 37.851010][ T29] audit: type=1326 audit(1766788782.554:723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4102 comm="syz.4.207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff7e1f7b829 code=0x7ffc0000 [ 37.854154][ T4110] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 37.874245][ T29] audit: type=1326 audit(1766788782.554:724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4102 comm="syz.4.207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff7e1fd65e7 code=0x7ffc0000 [ 37.886627][ T4110] EXT4-fs (loop4): This should not happen!! Data will be lost [ 37.886627][ T4110] [ 37.909774][ T29] audit: type=1326 audit(1766788782.554:725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4102 comm="syz.4.207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff7e1f7b829 code=0x7ffc0000 [ 37.909814][ T29] audit: type=1326 audit(1766788782.554:726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4102 comm="syz.4.207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7e1fdf749 code=0x7ffc0000 [ 37.919548][ T4110] EXT4-fs (loop4): Total free blocks count 0 [ 37.942715][ T29] audit: type=1326 audit(1766788782.554:727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4102 comm="syz.4.207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff7e1fd65e7 code=0x7ffc0000 [ 37.942747][ T29] audit: type=1326 audit(1766788782.554:728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4102 comm="syz.4.207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff7e1f7b829 code=0x7ffc0000 [ 37.942771][ T29] audit: type=1326 audit(1766788782.554:729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4102 comm="syz.4.207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7e1fdf749 code=0x7ffc0000 [ 37.966130][ T4110] EXT4-fs (loop4): Free/Dirty block details [ 37.972117][ T29] audit: type=1326 audit(1766788782.554:730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4102 comm="syz.4.207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff7e1fd65e7 code=0x7ffc0000 [ 37.995223][ T4110] EXT4-fs (loop4): free_blocks=2415919104 [ 38.018315][ T29] audit: type=1326 audit(1766788782.554:731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4102 comm="syz.4.207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff7e1f7b829 code=0x7ffc0000 [ 38.041661][ T4110] EXT4-fs (loop4): dirty_blocks=3152 [ 38.105179][ T4110] EXT4-fs (loop4): Block reservation details [ 38.111259][ T4110] EXT4-fs (loop4): i_reserved_data_blocks=197 [ 38.215929][ T4122] 9pnet: p9_errstr2errno: server reported unknown error 0x000 [ 38.251534][ T4134] loop3: detected capacity change from 0 to 512 [ 38.265473][ T4134] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 38.278628][ T4134] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 38.316992][ T4134] EXT4-fs (loop3): 1 truncate cleaned up [ 38.323487][ T12] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 4 with error 28 [ 38.323584][ T4134] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.384501][ T4137] loop0: detected capacity change from 0 to 1024 [ 38.411762][ T4137] ======================================================= [ 38.411762][ T4137] WARNING: The mand mount option has been deprecated and [ 38.411762][ T4137] and is ignored by this kernel. Remove the mand [ 38.411762][ T4137] option from the mount to silence this warning. [ 38.411762][ T4137] ======================================================= [ 38.458449][ T4137] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 38.478629][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.488082][ T4137] ext4 filesystem being mounted at /35/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 38.508533][ T4137] EXT4-fs error (device loop0): ext4_map_blocks:825: inode #15: block 8: comm syz.0.218: lblock 8 mapped to illegal pblock 8 (length 8) [ 38.523067][ T4137] EXT4-fs error (device loop0): ext4_ext_remove_space:2955: inode #15: comm syz.0.218: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 38.561213][ T4137] EXT4-fs error (device loop0): ext4_map_blocks:825: inode #15: comm syz.0.218: lblock 0 mapped to illegal pblock 0 (length 1) [ 38.582870][ T4137] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 38.595328][ T4137] EXT4-fs (loop0): This should not happen!! Data will be lost [ 38.595328][ T4137] [ 38.739005][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 38.838014][ T4158] 8021q: adding VLAN 0 to HW filter on device bond1 [ 38.898399][ T4168] loop3: detected capacity change from 0 to 128 [ 38.935214][ T4168] FAT-fs (loop3): error, invalid access to FAT (entry 0x0fff0000) [ 38.943232][ T4168] FAT-fs (loop3): Filesystem has been set read-only [ 38.988789][ T4168] FAT-fs (loop3): error, invalid access to FAT (entry 0x0fff0000) [ 39.008431][ T4182] vlan2: entered allmulticast mode [ 39.156263][ T4191] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.205718][ T4191] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.254571][ T4191] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.359197][ T4210] loop5: detected capacity change from 0 to 128 [ 39.369548][ T4191] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.380330][ T4210] vfat: Unknown parameter '01777777777777777777777' [ 39.462073][ T2067] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.493023][ T2067] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.505185][ T2067] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.528080][ T2067] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.546254][ T4218] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 39.559309][ T4218] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 39.579899][ T4218] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 39.863216][ T4228] vlan2: entered allmulticast mode [ 40.004408][ T4241] loop0: detected capacity change from 0 to 2048 [ 40.037833][ T4241] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 40.208711][ T4254] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 40.230989][ T4256] __nla_validate_parse: 4 callbacks suppressed [ 40.231005][ T4256] netlink: 96 bytes leftover after parsing attributes in process `syz.3.263'. [ 40.261335][ T4254] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 448 with error 28 [ 40.273783][ T4254] EXT4-fs (loop0): This should not happen!! Data will be lost [ 40.273783][ T4254] [ 40.283509][ T4254] EXT4-fs (loop0): Total free blocks count 0 [ 40.289606][ T4254] EXT4-fs (loop0): Free/Dirty block details [ 40.295546][ T4254] EXT4-fs (loop0): free_blocks=2415919104 [ 40.301338][ T4254] EXT4-fs (loop0): dirty_blocks=464 [ 40.306572][ T4254] EXT4-fs (loop0): Block reservation details [ 40.312628][ T4254] EXT4-fs (loop0): i_reserved_data_blocks=29 [ 40.449416][ T12] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 4 with error 28 [ 40.506263][ T4271] loop0: detected capacity change from 0 to 512 [ 40.525387][ T4271] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.538076][ T4271] ext4 filesystem being mounted at /41/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 40.564761][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.628695][ T10] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 40.643315][ T10] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 40.680059][ T4280] fido_id[4280]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 40.891729][ T4287] netlink: 4 bytes leftover after parsing attributes in process `syz.2.273'. [ 40.966822][ T4258] loop5: detected capacity change from 0 to 256 [ 40.995881][ T4258] FAT-fs (loop5): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 41.033030][ T4258] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 41.103997][ T4298] loop0: detected capacity change from 0 to 2048 [ 41.147163][ T4298] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 41.174504][ T4304] vlan2: entered allmulticast mode [ 41.332725][ T4306] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 41.348267][ T4306] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1290 with error 28 [ 41.360750][ T4306] EXT4-fs (loop0): This should not happen!! Data will be lost [ 41.360750][ T4306] [ 41.370749][ T4306] EXT4-fs (loop0): Total free blocks count 0 [ 41.376990][ T4306] EXT4-fs (loop0): Free/Dirty block details [ 41.383049][ T4306] EXT4-fs (loop0): free_blocks=2415919104 [ 41.388859][ T4306] EXT4-fs (loop0): dirty_blocks=1296 [ 41.394186][ T4306] EXT4-fs (loop0): Block reservation details [ 41.400659][ T4306] EXT4-fs (loop0): i_reserved_data_blocks=81 [ 41.658116][ T61] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 4 with error 28 [ 42.320133][ T4330] 8021q: adding VLAN 0 to HW filter on device bond1 [ 42.463309][ T4334] tipc: Enabling of bearer rejected, failed to enable media [ 42.564180][ T4342] vlan2: entered allmulticast mode [ 42.803970][ T4349] netlink: 8 bytes leftover after parsing attributes in process `syz.0.292'. [ 42.812905][ T4349] netlink: 'syz.0.292': attribute type 30 has an invalid length. [ 42.878832][ T53] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 42.887263][ T53] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 42.899200][ T53] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 42.918496][ T53] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 42.963867][ T4356] netlink: 12 bytes leftover after parsing attributes in process `syz.3.296'. [ 43.043784][ T29] kauditd_printk_skb: 648 callbacks suppressed [ 43.043801][ T29] audit: type=1326 audit(1766788787.774:1380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4359 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87ae87f749 code=0x7ffc0000 [ 43.076710][ T29] audit: type=1326 audit(1766788787.804:1381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4359 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=163 compat=0 ip=0x7f87ae87f749 code=0x7ffc0000 [ 43.100268][ T29] audit: type=1326 audit(1766788787.804:1382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4359 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87ae87f749 code=0x7ffc0000 [ 43.123668][ T29] audit: type=1326 audit(1766788787.804:1383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4359 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=432 compat=0 ip=0x7f87ae87f749 code=0x7ffc0000 [ 43.147406][ T29] audit: type=1326 audit(1766788787.804:1384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4359 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87ae87f749 code=0x7ffc0000 [ 43.171101][ T29] audit: type=1326 audit(1766788787.804:1385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4359 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=81 compat=0 ip=0x7f87ae87f749 code=0x7ffc0000 [ 43.194775][ T29] audit: type=1326 audit(1766788787.804:1386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4359 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87ae87f749 code=0x7ffc0000 [ 43.218576][ T29] audit: type=1326 audit(1766788787.804:1387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4359 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=126 compat=0 ip=0x7f87ae87f749 code=0x7ffc0000 [ 43.242142][ T29] audit: type=1326 audit(1766788787.804:1388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4359 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87ae87f749 code=0x7ffc0000 [ 43.265690][ T29] audit: type=1326 audit(1766788787.804:1389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4359 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87ae87f749 code=0x7ffc0000 [ 43.441522][ T4372] loop3: detected capacity change from 0 to 128 [ 43.496411][ T4372] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 43.633970][ T4313] syz.5.279 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 43.648141][ T4313] CPU: 1 UID: 0 PID: 4313 Comm: syz.5.279 Not tainted syzkaller #0 PREEMPT(voluntary) [ 43.648173][ T4313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 43.648188][ T4313] Call Trace: [ 43.648197][ T4313] [ 43.648207][ T4313] __dump_stack+0x1d/0x30 [ 43.648231][ T4313] dump_stack_lvl+0x95/0xd0 [ 43.648322][ T4313] dump_stack+0x15/0x1b [ 43.648341][ T4313] dump_header+0x81/0x240 [ 43.648361][ T4313] oom_kill_process+0x295/0x350 [ 43.648461][ T4313] out_of_memory+0x97b/0xb80 [ 43.648483][ T4313] try_charge_memcg+0x610/0xa10 [ 43.648513][ T4313] obj_cgroup_charge_pages+0xa6/0x150 [ 43.648545][ T4313] __memcg_kmem_charge_page+0x9f/0x170 [ 43.648612][ T4313] __alloc_frozen_pages_noprof+0x18f/0x360 [ 43.648650][ T4313] alloc_pages_mpol+0xb3/0x260 [ 43.648684][ T4313] alloc_pages_noprof+0x90/0x130 [ 43.648784][ T4313] __vmalloc_node_range_noprof+0xa7b/0x1310 [ 43.648817][ T4313] __kvmalloc_node_noprof+0x492/0x6b0 [ 43.648845][ T4313] ? ip_set_alloc+0x24/0x30 [ 43.648896][ T4313] ? ip_set_alloc+0x24/0x30 [ 43.648970][ T4313] ip_set_alloc+0x24/0x30 [ 43.649005][ T4313] hash_netiface_create+0x282/0x740 [ 43.649038][ T4313] ? __pfx_hash_netiface_create+0x10/0x10 [ 43.649147][ T4313] ip_set_create+0x3cc/0x970 [ 43.649173][ T4313] ? __nla_parse+0x40/0x60 [ 43.649199][ T4313] nfnetlink_rcv_msg+0x4c6/0x590 [ 43.649239][ T4313] netlink_rcv_skb+0x123/0x220 [ 43.649273][ T4313] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 43.649302][ T4313] nfnetlink_rcv+0x167/0x16c0 [ 43.649333][ T4313] ? kmem_cache_free+0xe3/0x3a0 [ 43.649432][ T4313] ? __kfree_skb+0x109/0x150 [ 43.649463][ T4313] ? nlmon_xmit+0x4f/0x60 [ 43.649486][ T4313] ? consume_skb+0x49/0x150 [ 43.649515][ T4313] ? nlmon_xmit+0x4f/0x60 [ 43.649580][ T4313] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 43.649660][ T4313] ? __dev_queue_xmit+0x138d/0x1ec0 [ 43.649694][ T4313] ? __dev_queue_xmit+0x148/0x1ec0 [ 43.649779][ T4313] ? __dentry_kill+0x406/0x4b0 [ 43.649814][ T4313] ? ref_tracker_free+0x37d/0x3e0 [ 43.649843][ T4313] ? __netlink_deliver_tap+0x4dc/0x500 [ 43.649904][ T4313] ? netlink_unicast+0x4c6/0x690 [ 43.650001][ T4313] netlink_unicast+0x5c0/0x690 [ 43.650037][ T4313] netlink_sendmsg+0x58b/0x6b0 [ 43.650086][ T4313] ? __pfx_netlink_sendmsg+0x10/0x10 [ 43.650115][ T4313] __sock_sendmsg+0x145/0x180 [ 43.650134][ T4313] ____sys_sendmsg+0x31e/0x4a0 [ 43.650168][ T4313] ___sys_sendmsg+0x17b/0x1d0 [ 43.650274][ T4313] __x64_sys_sendmsg+0xd4/0x160 [ 43.650303][ T4313] x64_sys_call+0x17ba/0x3000 [ 43.650330][ T4313] do_syscall_64+0xca/0x2b0 [ 43.650439][ T4313] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 43.650464][ T4313] RIP: 0033:0x7f32bc8df749 [ 43.650484][ T4313] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 43.650505][ T4313] RSP: 002b:00007f32bb33f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 43.650573][ T4313] RAX: ffffffffffffffda RBX: 00007f32bcb35fa0 RCX: 00007f32bc8df749 [ 43.650654][ T4313] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000004 [ 43.650691][ T4313] RBP: 00007f32bc963f91 R08: 0000000000000000 R09: 0000000000000000 [ 43.650703][ T4313] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 43.650715][ T4313] R13: 00007f32bcb36038 R14: 00007f32bcb35fa0 R15: 00007ffe22a71af8 [ 43.650735][ T4313] [ 43.650744][ T4313] memory: usage 307200kB, limit 307200kB, failcnt 224 [ 43.827440][ T4372] ext4 filesystem being mounted at /82/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 43.832679][ T4313] memory+swap: usage 307396kB, limit 9007199254740988kB, failcnt 0 [ 43.917278][ T4372] EXT4-fs error (device loop3): dx_make_map:1296: inode #2: block 63: comm syz.3.302: bad entry in directory: inode out of bounds - offset=988, inode=128, rec_len=36, size=1024 fake=1 [ 43.931651][ T4313] kmem: usage 295700kB, limit 9007199254740988kB, failcnt 0 [ 43.931674][ T4313] Memory cgroup stats for [ 43.950026][ T4372] EXT4-fs (loop3): Remounting filesystem read-only [ 43.956275][ T4313] /syz5: [ 44.085794][ T4313] cache 0 [ 44.091718][ T4313] rss 11771904 [ 44.095103][ T4313] shmem 0 [ 44.098125][ T4313] mapped_file 0 [ 44.101657][ T4313] dirty 0 [ 44.104681][ T4313] writeback 4096 [ 44.108237][ T4313] workingset_refault_anon 41 [ 44.112974][ T4313] workingset_refault_file 0 [ 44.117486][ T4313] swap 176128 [ 44.120913][ T4313] swapcached 20480 [ 44.124760][ T4313] pgpgin 40175 [ 44.128138][ T4313] pgpgout 37299 [ 44.131639][ T4313] pgfault 19158 [ 44.135100][ T4313] pgmajfault 20 [ 44.138573][ T4313] inactive_anon 0 [ 44.142227][ T4313] active_anon 0 [ 44.145701][ T4313] inactive_file 11755520 [ 44.150252][ T4313] active_file 0 [ 44.153725][ T4313] unevictable 0 [ 44.157178][ T4313] hierarchical_memory_limit 314572800 [ 44.162566][ T4313] hierarchical_memsw_limit 9223372036854771712 [ 44.168867][ T4313] total_cache 0 [ 44.172435][ T4313] total_rss 11771904 [ 44.176635][ T4313] total_shmem 0 [ 44.180109][ T4313] total_mapped_file 0 [ 44.184152][ T4313] total_dirty 0 [ 44.187618][ T4313] total_writeback 4096 [ 44.191774][ T4313] total_workingset_refault_anon 41 [ 44.196893][ T4313] total_workingset_refault_file 0 [ 44.201950][ T4313] total_swap 176128 [ 44.205765][ T4313] total_swapcached 20480 [ 44.210008][ T4313] total_pgpgin 40175 [ 44.213988][ T4313] total_pgpgout 37299 [ 44.217991][ T4313] total_pgfault 19158 [ 44.222010][ T4313] total_pgmajfault 20 [ 44.226003][ T4313] total_inactive_anon 0 [ 44.230235][ T4313] total_active_anon 0 [ 44.234252][ T4313] total_inactive_file 11755520 [ 44.239022][ T4313] total_active_file 0 [ 44.243042][ T4313] total_unevictable 0 [ 44.247034][ T4313] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.279,pid=4309,uid=0 [ 44.261759][ T4313] Memory cgroup out of memory: Killed process 4313 (syz.5.279) total-vm:96016kB, anon-rss:12656kB, file-rss:22188kB, shmem-rss:0kB, UID:0 pgtables:152kB oom_score_adj:1000 [ 44.279795][ T3314] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 44.477716][ T4403] SELinux: ebitmap: empty map [ 44.496660][ T4403] SELinux: failed to load policy [ 44.522576][ T4411] vlan2: entered allmulticast mode [ 44.739815][ T4431] netlink: 72 bytes leftover after parsing attributes in process `syz.3.318'. [ 44.868259][ T4436] loop4: detected capacity change from 0 to 512 [ 44.896118][ T4436] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.917896][ T4436] ext4 filesystem being mounted at /53/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 44.942380][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.778965][ T4492] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.845788][ T4492] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.871896][ T4505] loop5: detected capacity change from 0 to 512 [ 45.880766][ T4471] chnl_net:caif_netlink_parms(): no params data found [ 45.886096][ T4496] loop3: detected capacity change from 0 to 8192 [ 45.898665][ T4505] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 45.916160][ T4492] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.945163][ T4505] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.979011][ T4471] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.986212][ T4471] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.001314][ T4505] ext4 filesystem being mounted at /50/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 46.042104][ T4471] bridge_slave_0: entered allmulticast mode [ 46.048676][ T4471] bridge_slave_0: entered promiscuous mode [ 46.058109][ T4519] team0: No ports can be present during mode change [ 46.064854][ T4471] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.072059][ T4471] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.079288][ T4471] bridge_slave_1: entered allmulticast mode [ 46.086106][ T4471] bridge_slave_1: entered promiscuous mode [ 46.101681][ T4492] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.113511][ T3650] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.129977][ T4471] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.155919][ T4471] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.166003][ T4526] syzkaller0: entered promiscuous mode [ 46.171585][ T4526] syzkaller0: entered allmulticast mode [ 46.198726][ T4471] team0: Port device team_slave_0 added [ 46.205820][ T4471] team0: Port device team_slave_1 added [ 46.221525][ T61] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.241487][ T61] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.266501][ T4471] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.273529][ T4471] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 46.299620][ T4471] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.311649][ T61] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.323700][ T4471] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.330681][ T4471] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 46.356894][ T4471] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.368003][ T61] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.386703][ T4540] vlan2: entered allmulticast mode [ 46.428315][ T4471] hsr_slave_0: entered promiscuous mode [ 46.434621][ T4471] hsr_slave_1: entered promiscuous mode [ 46.441912][ T4471] debugfs: 'hsr0' already exists in 'hsr' [ 46.447662][ T4471] Cannot create hsr debugfs directory [ 46.549390][ T4471] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 46.559263][ T4471] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.634715][ T4471] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 46.644613][ T4471] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.707846][ T4571] vlan2: entered allmulticast mode [ 46.731158][ T4471] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 46.741135][ T4471] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.834549][ T4471] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 46.844457][ T4471] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.935106][ T4471] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 47.003640][ T4471] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 47.038545][ T4471] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 47.101417][ T4471] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 47.340178][ T4471] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.373187][ T4471] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.537160][ T875] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.544269][ T875] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.590962][ T875] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.598110][ T875] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.813672][ T4471] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.064964][ T4471] veth0_vlan: entered promiscuous mode [ 48.081831][ T4471] veth1_vlan: entered promiscuous mode [ 48.100932][ T4471] veth0_macvtap: entered promiscuous mode [ 48.112072][ T4471] veth1_macvtap: entered promiscuous mode [ 48.113606][ T4635] loop3: detected capacity change from 0 to 2048 [ 48.127629][ T4471] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.151747][ T4471] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.165944][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.177037][ T4595] loop3: p2 p3 p7 [ 48.192975][ T31] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.199161][ T4635] loop3: p2 p3 p7 [ 48.203368][ T31] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.227996][ T29] kauditd_printk_skb: 221 callbacks suppressed [ 48.228015][ T29] audit: type=1400 audit(1766788792.954:1611): avc: denied { read write } for pid=4634 comm="syz.3.369" name="loop3p3" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 48.266595][ T4640] bridge0: port 3(gretap0) entered blocking state [ 48.273310][ T4640] bridge0: port 3(gretap0) entered disabled state [ 48.286363][ T4640] gretap0: entered allmulticast mode [ 48.299533][ T4640] gretap0: entered promiscuous mode [ 48.310904][ T4640] bridge0: port 3(gretap0) entered blocking state [ 48.317399][ T4640] bridge0: port 3(gretap0) entered forwarding state [ 48.324444][ T29] audit: type=1400 audit(1766788792.954:1612): avc: denied { open } for pid=4634 comm="syz.3.369" path="/dev/loop3p3" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 48.365100][ T31] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.379006][ T3558] udevd[3558]: inotify_add_watch(7, /dev/loop3p7, 10) failed: No such file or directory [ 48.390604][ T3300] udevd[3300]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 48.402452][ T4595] udevd[4595]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 48.417770][ T4650] loop5: detected capacity change from 0 to 512 [ 48.425686][ T4650] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 48.440374][ T4650] EXT4-fs warning (device loop5): ext4_expand_extra_isize_ea:2857: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 48.465564][ T4650] EXT4-fs (loop5): 1 truncate cleaned up [ 48.478880][ T4650] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.647986][ T3650] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.670942][ T29] audit: type=1400 audit(1766788793.384:1613): avc: denied { create } for pid=4668 comm="+}[@" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 48.677632][ T4671] loop4: detected capacity change from 0 to 128 [ 48.690807][ T29] audit: type=1400 audit(1766788793.384:1614): avc: denied { write } for pid=4668 comm="+}[@" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 48.716692][ T29] audit: type=1400 audit(1766788793.384:1615): avc: denied { nlmsg_write } for pid=4668 comm="+}[@" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 48.774654][ T4671] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 48.804627][ T4677] netlink: 660 bytes leftover after parsing attributes in process `syz.2.384'. [ 48.805124][ T4671] ext4 filesystem being mounted at /68/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 48.891957][ T29] audit: type=1400 audit(1766788793.624:1616): avc: denied { allowed } for pid=4682 comm="syz.0.388" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 48.953003][ T4687] netlink: 'syz.2.391': attribute type 1 has an invalid length. [ 48.968979][ T3320] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 48.989709][ T29] audit: type=1400 audit(1766788793.654:1617): avc: denied { setattr } for pid=4670 comm="syz.4.383" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 49.005578][ T4693] netlink: 4 bytes leftover after parsing attributes in process `syz.2.391'. [ 49.027710][ T4687] 8021q: adding VLAN 0 to HW filter on device bond2 [ 49.080312][ T29] audit: type=1326 audit(1766788793.794:1618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4696 comm="syz.4.392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7e1fdf749 code=0x7ffc0000 [ 49.103795][ T29] audit: type=1326 audit(1766788793.794:1619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4696 comm="syz.4.392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=282 compat=0 ip=0x7ff7e1fdf749 code=0x7ffc0000 [ 49.127455][ T29] audit: type=1326 audit(1766788793.794:1620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4696 comm="syz.4.392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7e1fdf749 code=0x7ffc0000 [ 49.168693][ T4693] bond2 (unregistering): Released all slaves [ 49.187443][ T4700] bridge0: port 3(gretap0) entered blocking state [ 49.193961][ T4700] bridge0: port 3(gretap0) entered disabled state [ 49.214644][ T4700] gretap0: entered allmulticast mode [ 49.220610][ T4700] gretap0: entered promiscuous mode [ 49.226704][ T4700] bridge0: port 3(gretap0) entered blocking state [ 49.233196][ T4700] bridge0: port 3(gretap0) entered forwarding state [ 49.361671][ T4730] loop4: detected capacity change from 0 to 128 [ 49.372925][ T4730] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 49.393397][ T4730] ext4 filesystem being mounted at /72/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 49.420101][ T3320] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 49.438880][ T4740] loop0: detected capacity change from 0 to 128 [ 49.555441][ T4722] netlink: 68 bytes leftover after parsing attributes in process `syz.5.397'. [ 49.603037][ T4750] program syz.4.405 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 49.661883][ T4754] loop4: detected capacity change from 0 to 1024 [ 49.669140][ T4752] sd 0:0:1:0: device reset [ 49.705378][ T4754] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 49.724429][ T4754] ext4 filesystem being mounted at /74/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 49.739236][ T4754] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.410: bg 0: block 112: padding at end of block bitmap is not set [ 49.754899][ T4754] EXT4-fs error (device loop4): ext4_map_blocks:825: inode #15: block 2: comm syz.4.410: lblock 2 mapped to illegal pblock 2 (length 4) [ 49.771405][ T4754] EXT4-fs error (device loop4): ext4_map_blocks:825: inode #15: comm syz.4.410: lblock 0 mapped to illegal pblock 0 (length 1) [ 49.786124][ T4754] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #15: comm syz.4.410: lblock 0 mapped to illegal pblock 0 (length 1) [ 49.803090][ T4754] EXT4-fs error (device loop4): ext4_ext_remove_space:2955: inode #15: comm syz.4.410: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 49.824193][ T4765] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #15: comm syz.4.410: lblock 0 mapped to illegal pblock 0 (length 1) [ 49.838099][ T4765] EXT4-fs error (device loop4): ext4_ext_remove_space:2955: inode #15: comm syz.4.410: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 4, max 4(4), depth 0(0) [ 49.868639][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 49.909035][ T4768] random: crng reseeded on system resumption [ 50.078739][ T4775] loop3: detected capacity change from 0 to 512 [ 50.165006][ T4775] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.225780][ T4775] ext4 filesystem being mounted at /103/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 50.354422][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.492500][ T4800] veth2: entered promiscuous mode [ 50.497596][ T4800] veth2: entered allmulticast mode [ 50.681538][ T4812] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4812 comm=syz.5.429 [ 50.699262][ T4809] loop0: detected capacity change from 0 to 1024 [ 50.708767][ T4809] EXT4-fs: inline encryption not supported [ 50.714770][ T4809] EXT4-fs: Ignoring removed i_version option [ 50.738309][ T4809] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 50.768003][ T4809] EXT4-fs error (device loop0): ext4_map_blocks:783: inode #3: block 2: comm : lblock 2 mapped to illegal pblock 2 (length 1) [ 50.796000][ T4809] EXT4-fs error (device loop0): ext4_map_blocks:783: inode #3: block 48: comm : lblock 0 mapped to illegal pblock 48 (length 1) [ 50.810438][ T4809] EXT4-fs error (device loop0): ext4_acquire_dquot:6986: comm : Failed to acquire dquot type 0 [ 50.822927][ T4809] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 50.836695][ T4809] EXT4-fs error (device loop0): ext4_evict_inode:253: inode #11: comm : mark_inode_dirty error [ 50.847607][ T4809] EXT4-fs warning (device loop0): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 50.858531][ T4809] EXT4-fs (loop0): 1 orphan inode deleted [ 50.864674][ T4822] netlink: 8 bytes leftover after parsing attributes in process `syz.2.433'. [ 50.864813][ T4809] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.873676][ T4822] netlink: 8 bytes leftover after parsing attributes in process `syz.2.433'. [ 50.891041][ T53] EXT4-fs error (device loop0): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:4: lblock 1 mapped to illegal pblock 1 (length 1) [ 50.920084][ T53] EXT4-fs error (device loop0): ext4_release_dquot:7022: comm kworker/u8:4: Failed to release dquot type 0 [ 50.994599][ T4471] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.006473][ T4471] EXT4-fs error (device loop0): __ext4_get_inode_loc:4830: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 51.024548][ T4835] vlan2: entered allmulticast mode [ 51.032693][ T4471] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 51.059357][ T4471] EXT4-fs error (device loop0): ext4_quota_off:7270: inode #3: comm syz-executor: mark_inode_dirty error [ 51.117822][ T4837] SELinux: failed to load policy [ 51.233193][ T4853] loop3: detected capacity change from 0 to 512 [ 51.254344][ T4853] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 51.264948][ T4853] EXT4-fs (loop3): 1 truncate cleaned up [ 51.275076][ T4853] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.293339][ T4853] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 51.322158][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.387557][ T4866] syz_tun: entered allmulticast mode [ 51.398582][ T4867] skbuff: bad partial csum: csum=65506/2 headroom=144 headlen=65526 [ 51.401430][ T4866] syz_tun: left allmulticast mode [ 51.439847][ T4870] netlink: 12 bytes leftover after parsing attributes in process `syz.2.453'. [ 51.504645][ T4875] loop0: detected capacity change from 0 to 1024 [ 51.515230][ T4875] EXT4-fs: Ignoring removed bh option [ 51.553231][ T4875] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.576597][ T4875] EXT4-fs error (device loop0): mb_free_blocks:2037: group 0, inode 15: block 273:freeing already freed block (bit 17); block bitmap corrupt. [ 51.591505][ T4875] EXT4-fs (loop0): Remounting filesystem read-only [ 51.598050][ T4875] EXT4-fs warning (device loop0): ext4_convert_unwritten_extents:4984: inode #15: block 64: len 64: ext4_ext_map_blocks returned -30 [ 51.622532][ T4471] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.646436][ T4881] SELinux: failed to load policy [ 51.676903][ T4883] loop0: detected capacity change from 0 to 512 [ 51.691513][ T4883] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 51.709205][ T4883] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #16: comm syz.0.458: invalid indirect mapped block 4294967295 (level 0) [ 51.723740][ T4883] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #16: comm syz.0.458: invalid indirect mapped block 4294967295 (level 1) [ 51.739427][ T4883] EXT4-fs (loop0): 1 orphan inode deleted [ 51.745337][ T4883] EXT4-fs (loop0): 1 truncate cleaned up [ 51.751924][ T4883] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.767784][ T4883] EXT4-fs error (device loop0): htree_dirblock_to_tree:1080: inode #2: block 13: comm syz.0.458: bad entry in directory: rec_len is too small for name_len - offset=12, inode=2, rec_len=12, size=1024 fake=0 [ 51.804991][ T4471] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.879009][ T4892] loop5: detected capacity change from 0 to 512 [ 51.891095][ T4892] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 51.903594][ T4892] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.916699][ T4892] ext4 filesystem being mounted at /68/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 51.952381][ T3650] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.976151][ T4896] vlan2: entered allmulticast mode [ 51.989155][ T4898] netlink: 36 bytes leftover after parsing attributes in process `syz.5.464'. [ 52.393168][ T4916] netlink: 268 bytes leftover after parsing attributes in process `syz.0.471'. [ 52.402301][ T4916] unsupported nla_type 65024 [ 52.527112][ T4922] netlink: 4 bytes leftover after parsing attributes in process `syz.4.474'. [ 52.548038][ T4924] syz.0.475 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 52.582605][ T4922] team0: Port device team_slave_1 removed [ 52.709290][ T4934] loop3: detected capacity change from 0 to 512 [ 52.719663][ T4934] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 52.728771][ T4934] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 52.738400][ T4934] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 52.758556][ T4934] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 52.780843][ T4934] System zones: 0-2, 18-18, 34-35 [ 52.786959][ T4934] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.811983][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.814361][ T4940] loop0: detected capacity change from 0 to 256 [ 52.888396][ T4940] syz.0.482: attempt to access beyond end of device [ 52.888396][ T4940] loop0: rw=2049, sector=256, nr_sectors = 32 limit=256 [ 52.921896][ T4947] netlink: 8 bytes leftover after parsing attributes in process `syz.4.485'. [ 52.933443][ T4940] syz.0.482: attempt to access beyond end of device [ 52.933443][ T4940] loop0: rw=2049, sector=352, nr_sectors = 36 limit=256 [ 52.976723][ T4945] loop3: detected capacity change from 0 to 1024 [ 52.984139][ T4949] syz.0.482: attempt to access beyond end of device [ 52.984139][ T4949] loop0: rw=34817, sector=261, nr_sectors = 27 limit=256 [ 53.006167][ T4945] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.018409][ T4949] syz.0.482: attempt to access beyond end of device [ 53.018409][ T4949] loop0: rw=8423425, sector=352, nr_sectors = 5 limit=256 [ 53.089714][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.110224][ T4957] loop4: detected capacity change from 0 to 1024 [ 53.134476][ T4957] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 53.163782][ T4957] EXT4-fs error (device loop4): ext4_map_blocks:825: inode #3: block 1: comm syz.4.488: lblock 1 mapped to illegal pblock 1 (length 1) [ 53.228745][ T4957] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.488: Failed to acquire dquot type 0 [ 53.267125][ T4957] EXT4-fs error (device loop4): ext4_free_blocks:6728: comm syz.4.488: Freeing blocks not in datazone - block = 0, count = 4096 [ 53.298962][ T4957] EXT4-fs error (device loop4): ext4_read_inode_bitmap:139: comm syz.4.488: Invalid inode bitmap blk 0 in block_group 0 [ 53.312434][ T61] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:5: lblock 1 mapped to illegal pblock 1 (length 1) [ 53.332078][ T61] __quota_error: 329 callbacks suppressed [ 53.332093][ T61] Quota error (device loop4): remove_tree: Can't read quota data block 1 [ 53.346418][ T61] EXT4-fs error (device loop4): ext4_release_dquot:7022: comm kworker/u8:5: Failed to release dquot type 0 [ 53.363973][ T4957] EXT4-fs error (device loop4) in ext4_free_inode:361: Corrupt filesystem [ 53.374101][ T4957] EXT4-fs (loop4): 1 orphan inode deleted [ 53.381881][ T4957] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.394792][ T29] audit: type=1326 audit(1766788798.124:1945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4956 comm="syz.4.488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff7e1fddf90 code=0x7ffc0000 [ 53.463938][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.484000][ T29] audit: type=1326 audit(1766788798.154:1946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4956 comm="syz.4.488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7ff7e1fde497 code=0x7ffc0000 [ 53.507339][ T29] audit: type=1326 audit(1766788798.154:1947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4956 comm="syz.4.488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff7e1fddf90 code=0x7ffc0000 [ 53.530810][ T29] audit: type=1326 audit(1766788798.154:1948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4956 comm="syz.4.488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7e1fdf749 code=0x7ffc0000 [ 53.554282][ T29] audit: type=1326 audit(1766788798.174:1949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4956 comm="syz.4.488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7e1fdf749 code=0x7ffc0000 [ 53.649861][ T29] audit: type=1400 audit(1766788798.374:1950): avc: denied { unmount } for pid=4471 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 53.697971][ T29] audit: type=1326 audit(1766788798.424:1951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4987 comm="syz.0.498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07e3a9f749 code=0x7ffc0000 [ 53.721605][ T29] audit: type=1326 audit(1766788798.424:1952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4987 comm="syz.0.498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f07e3a9f749 code=0x7ffc0000 [ 53.745088][ T29] audit: type=1326 audit(1766788798.424:1953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4987 comm="syz.0.498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07e3a9f749 code=0x7ffc0000 [ 53.790497][ T4988] vlan2: entered allmulticast mode [ 53.920044][ T4997] loop5: detected capacity change from 0 to 2048 [ 53.988808][ T4997] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.102534][ T3650] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 54.168536][ T3650] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 54.220841][ T3650] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.266650][ T5023] loop0: detected capacity change from 0 to 1024 [ 54.304794][ T5023] EXT4-fs: Ignoring removed oldalloc option [ 54.338629][ T5037] __nla_validate_parse: 1 callbacks suppressed [ 54.338648][ T5037] netlink: 16 bytes leftover after parsing attributes in process `syz.2.518'. [ 54.356696][ T5023] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.357347][ T5036] Bluetooth: hci0: Frame reassembly failed (-90) [ 54.379929][ T31] Bluetooth: hci0: Frame reassembly failed (-84) [ 54.439210][ T4471] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.587041][ T5060] netlink: 4 bytes leftover after parsing attributes in process `syz.2.529'. [ 54.616160][ T4638] hid-generic 0000:0000:0000.0002: unknown main item tag 0x1 [ 54.621754][ T5060] team1: entered promiscuous mode [ 54.623645][ T4638] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 54.628601][ T5060] team1: entered allmulticast mode [ 54.636019][ T4638] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 54.643195][ T5060] 8021q: adding VLAN 0 to HW filter on device team1 [ 54.648614][ T4638] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 54.663610][ T4638] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 54.671077][ T4638] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 54.678495][ T4638] hid-generic 0000:0000:0000.0002: unknown main item tag 0x4 [ 54.685982][ T4638] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 54.693472][ T4638] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 54.700984][ T4638] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 54.717610][ T5069] netlink: 16 bytes leftover after parsing attributes in process `syz.2.532'. [ 54.728507][ T5065] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 54.741710][ T4638] hid-generic 0000:0000:0000.0002: hidraw0: HID v8.00 Device [syz0] on syz0 [ 54.762715][ T5075] tipc: Enabling of bearer rejected, failed to enable media [ 54.783999][ T5067] syz_tun: entered allmulticast mode [ 54.794610][ T5066] syz_tun: left allmulticast mode [ 54.895805][ T5086] netlink: 'syz.4.537': attribute type 10 has an invalid length. [ 54.907689][ T5086] team0: Port device dummy0 added [ 54.953088][ T5089] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 54.985683][ T5089] ext4 filesystem being mounted at /105/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 55.074783][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 55.189710][ T5080] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 55.205577][ T5080] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 55.218140][ T5080] EXT4-fs (loop0): This should not happen!! Data will be lost [ 55.218140][ T5080] [ 55.227945][ T5080] EXT4-fs (loop0): Total free blocks count 0 [ 55.234132][ T5080] EXT4-fs (loop0): Free/Dirty block details [ 55.240039][ T5080] EXT4-fs (loop0): free_blocks=2415919104 [ 55.245881][ T5080] EXT4-fs (loop0): dirty_blocks=8208 [ 55.251256][ T5080] EXT4-fs (loop0): Block reservation details [ 55.257272][ T5080] EXT4-fs (loop0): i_reserved_data_blocks=513 [ 55.472048][ T386] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 4 with error 28 [ 55.917425][ T5136] bridge_slave_0: left promiscuous mode [ 55.923200][ T5136] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.935135][ T5136] bridge_slave_1: left allmulticast mode [ 55.941144][ T5136] bridge_slave_1: left promiscuous mode [ 55.946814][ T5136] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.964631][ T5136] bond0: (slave bond_slave_0): Releasing backup interface [ 55.987429][ T5136] bond0: (slave bond_slave_1): Releasing backup interface [ 56.023748][ T5136] team0: Port device team_slave_0 removed [ 56.060528][ T5136] team0: Port device team_slave_1 removed [ 56.066942][ T5141] EXT4-fs: Ignoring removed nomblk_io_submit option [ 56.087761][ T5136] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 56.095258][ T5136] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 56.101796][ T5141] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.116024][ T5136] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 56.123546][ T5136] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 56.133179][ T5136] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 56.167369][ T4471] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.205135][ T5147] netlink: 4 bytes leftover after parsing attributes in process `syz.0.557'. [ 56.264906][ T5151] vlan2: entered allmulticast mode [ 56.360163][ T5156] netlink: 16 bytes leftover after parsing attributes in process `syz.0.562'. [ 56.420858][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 56.440976][ T5160] netlink: 14 bytes leftover after parsing attributes in process `syz.5.563'. [ 56.450530][ T5164] syz_tun: entered allmulticast mode [ 56.456597][ T5164] netlink: 4 bytes leftover after parsing attributes in process `syz.3.566'. [ 56.470111][ T5164] syz_tun (unregistering): left allmulticast mode [ 56.594319][ T5171] syzkaller0: entered promiscuous mode [ 56.599834][ T5171] syzkaller0: entered allmulticast mode [ 56.736170][ T5182] vlan2: entered allmulticast mode [ 56.749967][ T5185] wg2: entered promiscuous mode [ 56.754947][ T5185] wg2: entered allmulticast mode [ 56.900716][ T5200] syzkaller0: entered promiscuous mode [ 56.906508][ T5200] syzkaller0: entered allmulticast mode [ 56.997412][ T5208] set_capacity_and_notify: 3 callbacks suppressed [ 56.997431][ T5208] loop5: detected capacity change from 0 to 512 [ 57.094881][ T5215] netlink: 43 bytes leftover after parsing attributes in process `syz.5.583'. [ 57.104295][ T5215] tipc: Started in network mode [ 57.109187][ T5215] tipc: Node identity aaaaaaaaaa32, cluster identity 4711 [ 57.116432][ T5215] tipc: Enabled bearer , priority 10 [ 57.123583][ T5215] : renamed from vlan0 (while UP) [ 57.130711][ T5215] tipc: Disabling bearer [ 57.186227][ T5223] loop5: detected capacity change from 0 to 1024 [ 57.193471][ T5223] EXT4-fs: inline encryption not supported [ 57.199340][ T5223] EXT4-fs: Ignoring removed orlov option [ 57.210197][ T5223] EXT4-fs (loop5): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 57.231878][ T5223] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e840c018, mo2=0002] [ 57.243094][ T5223] System zones: 0-1, 3-12 [ 57.249140][ T5223] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 57.284921][ T3650] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.324227][ T5232] tmpfs: Unknown parameter 'fsuuid' [ 57.330372][ T5234] syzkaller0: entered promiscuous mode [ 57.335984][ T5234] syzkaller0: entered allmulticast mode [ 57.388040][ T5235] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 57.602223][ T5256] loop5: detected capacity change from 0 to 4096 [ 57.606208][ T5259] syz_tun: entered allmulticast mode [ 57.614824][ T5256] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 57.628253][ T5256] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.635176][ T5257] syz_tun: left allmulticast mode [ 57.913536][ T5284] gretap0: left allmulticast mode [ 57.918733][ T5284] gretap0: left promiscuous mode [ 57.923887][ T5284] bridge0: port 3(gretap0) entered disabled state [ 57.944254][ T5284] bridge_slave_0: left promiscuous mode [ 57.949987][ T5284] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.959063][ T5284] bridge_slave_1: left allmulticast mode [ 57.964818][ T5284] bridge_slave_1: left promiscuous mode [ 57.970486][ T5284] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.980969][ T5284] bond0: (slave bond_slave_0): Releasing backup interface [ 57.991499][ T5284] bond0: (slave bond_slave_1): Releasing backup interface [ 58.004183][ T5284] team0: Port device team_slave_0 removed [ 58.014053][ T5284] team0: Port device team_slave_1 removed [ 58.021308][ T5284] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 58.028803][ T5284] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 58.039996][ T5284] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 58.047752][ T5284] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 58.066564][ T5284] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 58.223780][ T5296] loop4: detected capacity change from 0 to 512 [ 58.234054][ T5296] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.612: error while reading EA inode 32 err=-116 [ 58.247086][ T5296] EXT4-fs (loop4): Remounting filesystem read-only [ 58.253824][ T5296] EXT4-fs warning (device loop4): ext4_evict_inode:256: couldn't mark inode dirty (err -30) [ 58.264267][ T5296] EXT4-fs (loop4): 1 orphan inode deleted [ 58.270669][ T5296] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 58.311727][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.390126][ T3650] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.468847][ T5310] syzkaller0: entered promiscuous mode [ 58.474435][ T5310] syzkaller0: entered allmulticast mode [ 58.522597][ T5308] netlink: 388 bytes leftover after parsing attributes in process `syz.0.614'. [ 58.563856][ T5319] atomic_op ffff88813e495528 conn xmit_atomic 0000000000000000 [ 58.606607][ T5323] loop3: detected capacity change from 0 to 512 [ 58.614220][ T29] kauditd_printk_skb: 586 callbacks suppressed [ 58.614237][ T29] audit: type=1400 audit(1766788803.344:2540): avc: denied { mounton } for pid=5322 comm="syz.3.622" path="/137/file0" dev="tmpfs" ino=732 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 58.653512][ T5323] EXT4-fs (loop3): too many log groups per flexible block group [ 58.670548][ T5323] EXT4-fs (loop3): failed to initialize mballoc (-12) [ 58.681640][ T5323] EXT4-fs (loop3): mount failed [ 58.715004][ T29] audit: type=1400 audit(1766788803.444:2541): avc: denied { name_connect } for pid=5331 comm="syz.3.624" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 58.989003][ T29] audit: type=1326 audit(1766788803.714:2542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5347 comm="syz.2.628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69e7abf749 code=0x7ffc0000 [ 59.013038][ T29] audit: type=1326 audit(1766788803.714:2543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5347 comm="syz.2.628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69e7abf749 code=0x7ffc0000 [ 59.036528][ T29] audit: type=1326 audit(1766788803.714:2544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5347 comm="syz.2.628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f69e7abf749 code=0x7ffc0000 [ 59.059934][ T29] audit: type=1326 audit(1766788803.714:2545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5347 comm="syz.2.628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69e7abf749 code=0x7ffc0000 [ 59.083914][ T29] audit: type=1326 audit(1766788803.714:2546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5347 comm="syz.2.628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f69e7abf749 code=0x7ffc0000 [ 59.107433][ T29] audit: type=1326 audit(1766788803.714:2547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5347 comm="syz.2.628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69e7abf749 code=0x7ffc0000 [ 59.130896][ T29] audit: type=1326 audit(1766788803.744:2548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5347 comm="syz.2.628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69e7abf749 code=0x7ffc0000 [ 59.214032][ T29] audit: type=1326 audit(1766788803.944:2549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5367 comm="syz.0.634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07e3a9f749 code=0x7ffc0000 [ 59.270017][ T5369] vlan2: entered allmulticast mode [ 59.483974][ T5373] loop5: detected capacity change from 0 to 1024 [ 59.506246][ T5373] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 59.518732][ T5373] ext4 filesystem being mounted at /104/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 59.536423][ T5379] netlink: 16 bytes leftover after parsing attributes in process `syz.4.637'. [ 59.571363][ T5373] EXT4-fs error (device loop5): ext4_map_blocks:825: inode #15: comm syz.5.636: lblock 0 mapped to illegal pblock 0 (length 6) [ 59.588854][ T5381] all: renamed from team_slave_0 [ 59.593291][ T5383] loop4: detected capacity change from 0 to 1024 [ 59.600873][ T5383] EXT4-fs: Ignoring removed nomblk_io_submit option [ 59.604042][ T5373] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117 [ 59.619842][ T5373] EXT4-fs (loop5): This should not happen!! Data will be lost [ 59.619842][ T5373] [ 59.638488][ T5374] EXT4-fs error (device loop5): ext4_map_blocks:783: inode #15: comm syz.5.636: lblock 0 mapped to illegal pblock 0 (length 1) [ 59.666735][ T5374] EXT4-fs error (device loop5): ext4_ext_remove_space:2955: inode #15: comm syz.5.636: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 59.695550][ T5374] EXT4-fs error (device loop5) in ext4_setattr:6035: Corrupt filesystem [ 59.869162][ T5400] loop5: detected capacity change from 0 to 2048 [ 59.898700][ T5401] loop3: detected capacity change from 0 to 4096 [ 59.910012][ T5401] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 60.022742][ T5411] netlink: 28 bytes leftover after parsing attributes in process `syz.5.647'. [ 60.161872][ T5416] vlan2: entered allmulticast mode [ 60.408853][ T3320] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 60.419848][ T3320] CPU: 1 UID: 0 PID: 3320 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(voluntary) [ 60.419912][ T3320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 60.419926][ T3320] Call Trace: [ 60.419933][ T3320] [ 60.419942][ T3320] __dump_stack+0x1d/0x30 [ 60.419972][ T3320] dump_stack_lvl+0x95/0xd0 [ 60.420070][ T3320] dump_stack+0x15/0x1b [ 60.420090][ T3320] dump_header+0x81/0x240 [ 60.420108][ T3320] oom_kill_process+0x295/0x350 [ 60.420129][ T3320] out_of_memory+0x97b/0xb80 [ 60.420195][ T3320] try_charge_memcg+0x610/0xa10 [ 60.420219][ T3320] charge_memcg+0x51/0xc0 [ 60.420281][ T3320] __mem_cgroup_charge+0x28/0xb0 [ 60.420350][ T3320] filemap_add_folio+0x111/0x360 [ 60.420370][ T3320] __filemap_get_folio_mpol+0x326/0x650 [ 60.420409][ T3320] filemap_fault+0x44d/0xb70 [ 60.420499][ T3320] __do_fault+0xbc/0x200 [ 60.420515][ T3320] handle_mm_fault+0xfab/0x2c60 [ 60.420549][ T3320] do_user_addr_fault+0x630/0x1080 [ 60.420577][ T3320] exc_page_fault+0x62/0xa0 [ 60.420635][ T3320] asm_exc_page_fault+0x26/0x30 [ 60.420653][ T3320] RIP: 0033:0x7ff7e1eb5fd4 [ 60.420668][ T3320] Code: 85 ed 09 00 00 48 b8 db 34 b6 d7 82 de 1b 43 48 f7 a4 24 98 00 00 00 48 8b 05 c8 f7 ea 00 48 69 8c 24 90 00 00 00 e8 03 00 00 <8b> 78 08 48 8b 44 24 18 48 c1 ea 12 4c 8b 0d d9 f6 ea 00 48 01 d1 [ 60.420707][ T3320] RSP: 002b:00007ffc4072dc60 EFLAGS: 00010206 [ 60.420729][ T3320] RAX: 0000001b33b24000 RBX: 0000000000000116 RCX: 000000000000ea60 [ 60.420741][ T3320] RDX: 0000000004d222a9 RSI: 00007ffc4072dcf0 RDI: 0000000000000001 [ 60.420753][ T3320] RBP: 00007ffc4072dc9c R08: 000000001263da5b R09: 7fffffffffffffff [ 60.420769][ T3320] R10: 3fffffffffffffff R11: 0000000000000202 R12: 0000000000001388 [ 60.420784][ T3320] R13: 00000000000927c0 R14: 000000000000e99e R15: 00007ffc4072dcf0 [ 60.420852][ T3320] [ 60.599531][ T3320] memory: usage 307200kB, limit 307200kB, failcnt 540 [ 60.607169][ T3320] memory+swap: usage 308084kB, limit 9007199254740988kB, failcnt 0 [ 60.615364][ T3320] kmem: usage 307188kB, limit 9007199254740988kB, failcnt 0 [ 60.622721][ T3320] Memory cgroup stats for /syz4: [ 60.630415][ T3320] cache 8192 [ 60.638695][ T3320] rss 0 [ 60.642060][ T3320] shmem 0 [ 60.645144][ T3320] mapped_file 0 [ 60.648614][ T3320] dirty 0 [ 60.651635][ T3320] writeback 0 [ 60.654924][ T3320] workingset_refault_anon 19 [ 60.659549][ T3320] workingset_refault_file 769 [ 60.664340][ T3320] swap 905216 [ 60.667628][ T3320] swapcached 4096 [ 60.671567][ T3320] pgpgin 29583 [ 60.675131][ T3320] pgpgout 29580 [ 60.678595][ T3320] pgfault 40180 [ 60.682082][ T3320] pgmajfault 19 [ 60.685546][ T3320] inactive_anon 0 [ 60.689256][ T3320] active_anon 4096 [ 60.693158][ T3320] inactive_file 0 [ 60.697004][ T3320] active_file 8192 [ 60.700733][ T3320] unevictable 0 [ 60.704329][ T3320] hierarchical_memory_limit 314572800 [ 60.709757][ T3320] hierarchical_memsw_limit 9223372036854771712 [ 60.716004][ T3320] total_cache 8192 [ 60.719733][ T3320] total_rss 0 [ 60.723094][ T3320] total_shmem 0 [ 60.726556][ T3320] total_mapped_file 0 [ 60.730582][ T3320] total_dirty 0 [ 60.734094][ T3320] total_writeback 0 [ 60.737912][ T3320] total_workingset_refault_anon 19 [ 60.743130][ T3320] total_workingset_refault_file 769 [ 60.748421][ T3320] total_swap 905216 [ 60.752271][ T3320] total_swapcached 4096 [ 60.756433][ T3320] total_pgpgin 29583 [ 60.760337][ T3320] total_pgpgout 29580 [ 60.764373][ T3320] total_pgfault 40180 [ 60.768364][ T3320] total_pgmajfault 19 [ 60.772379][ T3320] total_inactive_anon 0 [ 60.776540][ T3320] total_active_anon 4096 [ 60.780816][ T3320] total_inactive_file 0 [ 60.784990][ T3320] total_active_file 8192 [ 60.789236][ T3320] total_unevictable 0 [ 60.793242][ T3320] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.640,pid=5382,uid=0 [ 60.807853][ T3320] Memory cgroup out of memory: Killed process 5382 (syz.4.640) total-vm:93968kB, anon-rss:1120kB, file-rss:22312kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 60.986151][ T5446] loop5: detected capacity change from 0 to 512 [ 61.008153][ T5441] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 61.053109][ T5441] ext4 filesystem being mounted at /117/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 61.307674][ T5475] ext4 filesystem being mounted at /118/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 61.340712][ T5472] ext4 filesystem being mounted at /146/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 61.542502][ T5499] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 61.623591][ T5504] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 61.670291][ T5504] ext4 filesystem being mounted at /69/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 61.929883][ T5525] pimreg: entered allmulticast mode [ 61.939169][ T5525] pimreg: left allmulticast mode [ 62.168416][ T5531] set_capacity_and_notify: 4 callbacks suppressed [ 62.168527][ T5531] loop7: detected capacity change from 0 to 7 [ 62.176171][ T5475] Set syz1 is full, maxelem 65536 reached [ 62.246015][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 62.255676][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 62.265036][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 62.274643][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 62.290216][ T4595] loop7: unable to read partition table [ 62.328420][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 62.338052][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 62.347799][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 62.357401][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 62.366618][ T5531] loop7: unable to read partition table [ 62.373924][ T5531] loop_reread_partitions: partition scan of loop7 (gCj̖P=!MX %`搘ȵ4FLQk݊5) failed (rc=-5) [ 62.388547][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 62.398166][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 62.406653][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 62.416297][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 62.424947][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 62.434552][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 62.442743][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 62.452344][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 62.473089][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 62.482807][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 62.691034][ T5554] loop3: detected capacity change from 0 to 128 [ 62.709484][ T5556] loop4: detected capacity change from 0 to 128 [ 62.712605][ T5554] EXT4-fs: test_dummy_encryption option not supported [ 62.735970][ T4595] udevd[4595]: incorrect ext4 checksum on /dev/loop3 [ 62.756280][ T5554] loop3: detected capacity change from 0 to 1024 [ 62.864226][ T5564] loop0: detected capacity change from 0 to 512 [ 63.154956][ T5582] vlan0: entered allmulticast mode [ 63.421828][ T5596] netlink: 'syz.5.717': attribute type 7 has an invalid length. [ 63.421850][ T5596] netlink: 8 bytes leftover after parsing attributes in process `syz.5.717'. [ 63.668599][ T5608] loop0: detected capacity change from 0 to 128 [ 63.670356][ T5608] ext4 filesystem being mounted at /81/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 63.818088][ T29] kauditd_printk_skb: 1342 callbacks suppressed [ 63.818104][ T29] audit: type=1326 audit(1766788808.544:3892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5616 comm="syz.0.725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07e3a9f749 code=0x7ffc0000 [ 63.818129][ T29] audit: type=1326 audit(1766788808.544:3893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5616 comm="syz.0.725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07e3a9f749 code=0x7ffc0000 [ 63.818270][ T29] audit: type=1326 audit(1766788808.544:3894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5616 comm="syz.0.725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f07e3a9f749 code=0x7ffc0000 [ 63.818339][ T29] audit: type=1326 audit(1766788808.544:3895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5616 comm="syz.0.725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07e3a9f749 code=0x7ffc0000 [ 63.818441][ T29] audit: type=1326 audit(1766788808.544:3896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5616 comm="syz.0.725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=296 compat=0 ip=0x7f07e3a9f749 code=0x7ffc0000 [ 63.818546][ T29] audit: type=1326 audit(1766788808.544:3897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5616 comm="syz.0.725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07e3a9f749 code=0x7ffc0000 [ 63.818634][ T29] audit: type=1326 audit(1766788808.544:3898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5616 comm="syz.0.725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f07e3a9f749 code=0x7ffc0000 [ 63.818833][ T29] audit: type=1326 audit(1766788808.544:3899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5616 comm="syz.0.725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07e3a9f749 code=0x7ffc0000 [ 63.818994][ T29] audit: type=1326 audit(1766788808.544:3900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5616 comm="syz.0.725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f07e3aa1667 code=0x7ffc0000 [ 63.819095][ T29] audit: type=1326 audit(1766788808.544:3901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5616 comm="syz.0.725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f07e3aa15dc code=0x7ffc0000 [ 63.845482][ T5617] vlan1: entered allmulticast mode [ 63.983286][ T5625] vlan2: entered allmulticast mode [ 64.285911][ T5639] syzkaller0: entered promiscuous mode [ 64.291711][ T5639] syzkaller0: entered allmulticast mode [ 64.352965][ T5648] netlink: 24 bytes leftover after parsing attributes in process `syz.2.738'. [ 64.374322][ T5648] netlink: 4 bytes leftover after parsing attributes in process `syz.2.738'. [ 64.400533][ T5650] loop5: detected capacity change from 0 to 1024 [ 64.407565][ T5650] EXT4-fs: inline encryption not supported [ 64.413535][ T5650] EXT4-fs: Ignoring removed orlov option [ 64.423233][ T5650] EXT4-fs (loop5): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 64.449302][ T5650] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e840c018, mo2=0002] [ 64.457632][ T5650] System zones: 0-1, 3-12 [ 64.479028][ T5656] vlan1: entered allmulticast mode [ 64.585552][ T5664] netlink: 96 bytes leftover after parsing attributes in process `syz.0.744'. [ 64.598694][ T5664] loop0: detected capacity change from 0 to 512 [ 64.606022][ T5664] EXT4-fs: dax option not supported [ 64.626691][ T36] Process accounting resumed [ 64.952600][ T5677] loop4: detected capacity change from 0 to 128 [ 65.059074][ T5677] ext4 filesystem being mounted at /126/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 65.211100][ T5682] netlink: 'syz.5.748': attribute type 13 has an invalid length. [ 65.287960][ T5680] loop3: detected capacity change from 0 to 8192 [ 65.313345][ T5680] syz.3.750: attempt to access beyond end of device [ 65.313345][ T5680] loop3: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 65.398375][ T5688] veth1_to_bond: entered allmulticast mode [ 65.404382][ T875] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.423294][ T875] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.437122][ T5687] veth1_to_bond: left allmulticast mode [ 65.442999][ T875] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.495228][ T5692] syzkaller0: entered promiscuous mode [ 65.500909][ T5692] syzkaller0: entered allmulticast mode [ 65.507350][ T875] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.529547][ T5696] netlink: 16 bytes leftover after parsing attributes in process `syz.2.756'. [ 65.571940][ T5693] EXT4-fs mount: 25 callbacks suppressed [ 65.571957][ T5693] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 65.675377][ T5708] syzkaller0: entered promiscuous mode [ 65.681011][ T5708] syzkaller0: entered allmulticast mode [ 65.719350][ T5711] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 65.734998][ T5711] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1334 with error 28 [ 65.747962][ T5711] EXT4-fs (loop5): This should not happen!! Data will be lost [ 65.747962][ T5711] [ 65.757643][ T5711] EXT4-fs (loop5): Total free blocks count 0 [ 65.763657][ T5711] EXT4-fs (loop5): Free/Dirty block details [ 65.769670][ T5711] EXT4-fs (loop5): free_blocks=2415919104 [ 65.775433][ T5711] EXT4-fs (loop5): dirty_blocks=1344 [ 65.780749][ T5711] EXT4-fs (loop5): Block reservation details [ 65.787046][ T5711] EXT4-fs (loop5): i_reserved_data_blocks=84 [ 65.805707][ T5722] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 65.827332][ T5722] EXT4-fs (loop0): 1 truncate cleaned up [ 65.840028][ T5722] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 65.866463][ T875] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 4 with error 28 [ 65.881658][ T4471] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.956193][ T5732] vlan1: entered allmulticast mode [ 66.120670][ T5730] 9pnet: p9_errstr2errno: server reported unknown error [ 66.276425][ T5745] netlink: 16 bytes leftover after parsing attributes in process `syz.5.772'. [ 66.523642][ T5751] syzkaller0: entered promiscuous mode [ 66.529167][ T5751] syzkaller0: entered allmulticast mode [ 66.541854][ T5753] EXT4-fs: Ignoring removed mblk_io_submit option [ 66.582137][ T5753] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 66.620569][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.649469][ T5764] program syz.3.781 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 66.660758][ T5764] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 66.764919][ T5780] netlink: 96 bytes leftover after parsing attributes in process `syz.2.788'. [ 66.804523][ T5782] vlan2: entered allmulticast mode [ 66.926242][ T5791] netlink: 16 bytes leftover after parsing attributes in process `syz.2.793'. [ 66.981225][ T5793] netlink: 83992 bytes leftover after parsing attributes in process `syz.0.794'. [ 66.990987][ T5793] netlink: zone id is out of range [ 66.996182][ T5793] netlink: zone id is out of range [ 67.001940][ T5793] netlink: zone id is out of range [ 67.007085][ T5793] netlink: zone id is out of range [ 67.012318][ T5793] netlink: zone id is out of range [ 67.017447][ T5793] netlink: zone id is out of range [ 67.022616][ T5793] netlink: zone id is out of range [ 67.028574][ T5793] netlink: zone id is out of range [ 67.033800][ T5793] netlink: zone id is out of range [ 67.038963][ T5793] netlink: zone id is out of range [ 67.108496][ T3382] kernel read not supported for file /vcsa (pid: 3382 comm: kworker/0:2) [ 67.137845][ T5805] tmpfs: Bad value for 'mpol' [ 67.208301][ T3382] hid_parser_main: 28 callbacks suppressed [ 67.208321][ T3382] hid-generic 0081:0005:1303.0003: unknown main item tag 0x0 [ 67.221821][ T3382] hid-generic 0081:0005:1303.0003: unknown main item tag 0x0 [ 67.229253][ T3382] hid-generic 0081:0005:1303.0003: unknown main item tag 0x0 [ 67.236731][ T3382] hid-generic 0081:0005:1303.0003: unknown main item tag 0x0 [ 67.244217][ T3382] hid-generic 0081:0005:1303.0003: unknown main item tag 0x0 [ 67.251727][ T3382] hid-generic 0081:0005:1303.0003: unknown main item tag 0x0 [ 67.259139][ T3382] hid-generic 0081:0005:1303.0003: unknown main item tag 0x0 [ 67.266626][ T3382] hid-generic 0081:0005:1303.0003: unknown main item tag 0x0 [ 67.274070][ T3382] hid-generic 0081:0005:1303.0003: unknown main item tag 0x0 [ 67.281503][ T3382] hid-generic 0081:0005:1303.0003: unknown main item tag 0x0 [ 67.305305][ T5812] set_capacity_and_notify: 5 callbacks suppressed [ 67.305395][ T5812] loop0: detected capacity change from 0 to 256 [ 67.305691][ T5814] loop3: detected capacity change from 0 to 512 [ 67.338659][ T5814] EXT4-fs error (device loop3): ext4_iget_extra_inode:5073: inode #15: comm syz.3.803: corrupted in-inode xattr: invalid ea_ino [ 67.366367][ T5814] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.803: couldn't read orphan inode 15 (err -117) [ 67.378306][ T3382] hid-generic 0081:0005:1303.0003: hidraw0: HID v0.03 Device [syz1] on syz1 [ 67.403875][ T5816] fido_id[5816]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 67.414633][ T5814] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.443752][ T5818] syzkaller0: entered promiscuous mode [ 67.449370][ T5818] syzkaller0: entered allmulticast mode [ 67.460366][ T5814] EXT4-fs error (device loop3): __ext4_expand_extra_isize:6318: inode #18: comm syz.3.803: bad extra_isize 6 (inode size 256) [ 67.480564][ T5818] tipc: Started in network mode [ 67.485572][ T5818] tipc: Node identity e6147d29ab62, cluster identity 4711 [ 67.492833][ T5818] tipc: Enabled bearer , priority 0 [ 67.501652][ T5817] tipc: Resetting bearer [ 67.512282][ T5817] tipc: Disabling bearer [ 67.527354][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.243562][ T5851] loop0: detected capacity change from 0 to 512 [ 68.307671][ T5851] EXT4-fs: Ignoring removed nobh option [ 68.389720][ T5851] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 68.503531][ T5851] EXT4-fs (loop0): orphan cleanup on readonly fs [ 68.512902][ T5851] EXT4-fs error (device loop0): ext4_orphan_get:1417: comm syz.0.817: bad orphan inode 15 [ 68.527764][ T5854] loop5: detected capacity change from 0 to 512 [ 68.534658][ T5851] ext4_test_bit(bit=14, block=18) = 1 [ 68.540079][ T5851] is_bad_inode(inode)=0 [ 68.544279][ T5851] NEXT_ORPHAN(inode)=1023 [ 68.548645][ T5851] max_ino=32 [ 68.551949][ T5851] i_nlink=0 [ 68.555521][ T5851] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.817: bg 0: block 161: padding at end of block bitmap is not set [ 68.567360][ T5854] EXT4-fs error (device loop5): ext4_iget_extra_inode:5073: inode #15: comm syz.5.818: corrupted in-inode xattr: invalid ea_ino [ 68.570081][ T5851] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 68.602787][ T5851] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 68.618780][ T5854] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.818: couldn't read orphan inode 15 (err -117) [ 68.651479][ T5854] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.685971][ T5859] loop3: detected capacity change from 0 to 256 [ 68.689619][ T5851] syzkaller0: entered promiscuous mode [ 68.697817][ T5851] syzkaller0: entered allmulticast mode [ 68.726524][ T5854] syzkaller0: entered promiscuous mode [ 68.732140][ T5854] syzkaller0: entered allmulticast mode [ 68.766697][ T5863] vlan2: entered allmulticast mode [ 68.825694][ T29] kauditd_printk_skb: 1002 callbacks suppressed [ 68.825713][ T29] audit: type=1326 audit(1766788813.554:4904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5862 comm="syz.3.822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15d20df749 code=0x7ffc0000 [ 68.871288][ T29] audit: type=1326 audit(1766788813.584:4905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5862 comm="syz.3.822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f15d20df749 code=0x7ffc0000 [ 68.894759][ T29] audit: type=1326 audit(1766788813.584:4906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5862 comm="syz.3.822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15d20df749 code=0x7ffc0000 [ 68.918152][ T29] audit: type=1326 audit(1766788813.594:4907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5862 comm="syz.3.822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15d20df749 code=0x7ffc0000 [ 68.941564][ T29] audit: type=1326 audit(1766788813.594:4908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5862 comm="syz.3.822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15d20df749 code=0x7ffc0000 [ 68.964926][ T29] audit: type=1326 audit(1766788813.594:4909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5862 comm="syz.3.822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f15d20df749 code=0x7ffc0000 [ 68.988351][ T29] audit: type=1326 audit(1766788813.594:4910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5862 comm="syz.3.822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15d20df749 code=0x7ffc0000 [ 69.011836][ T29] audit: type=1326 audit(1766788813.594:4911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5862 comm="syz.3.822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f15d20df749 code=0x7ffc0000 [ 69.035161][ T29] audit: type=1326 audit(1766788813.594:4912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5862 comm="syz.3.822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15d20df749 code=0x7ffc0000 [ 69.048110][ T5869] netlink: 28 bytes leftover after parsing attributes in process `syz.4.825'. [ 69.058552][ T29] audit: type=1326 audit(1766788813.594:4913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5862 comm="syz.3.822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f15d20df749 code=0x7ffc0000 [ 69.089736][ T5868] netlink: 12 bytes leftover after parsing attributes in process `syz.2.821'. [ 69.100581][ T4471] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.132340][ T3650] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.136811][ T5868] netlink: 12 bytes leftover after parsing attributes in process `syz.2.821'. [ 69.158046][ T5875] 9pnet_virtio: no channels available for device 127.0.0.1 [ 69.169603][ T5878] netlink: 12 bytes leftover after parsing attributes in process `syz.2.821'. [ 69.188641][ T5877] syzkaller0: entered promiscuous mode [ 69.194192][ T5877] syzkaller0: entered allmulticast mode [ 69.206406][ T5880] sd 0:0:1:0: device reset [ 69.276233][ T5890] loop0: detected capacity change from 0 to 1024 [ 69.308845][ T5890] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.335713][ T5890] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 21 with max blocks 44 with error 28 [ 69.338667][ T3382] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 69.348191][ T5890] EXT4-fs (loop0): This should not happen!! Data will be lost [ 69.348191][ T5890] [ 69.367506][ T5890] EXT4-fs (loop0): Total free blocks count 0 [ 69.372322][ T5904] loop5: detected capacity change from 0 to 512 [ 69.373633][ T5890] EXT4-fs (loop0): Free/Dirty block details [ 69.385785][ T5890] EXT4-fs (loop0): free_blocks=0 [ 69.390745][ T5890] EXT4-fs (loop0): dirty_blocks=0 [ 69.395887][ T5890] EXT4-fs (loop0): Block reservation details [ 69.401958][ T5890] EXT4-fs (loop0): i_reserved_data_blocks=0 [ 69.414852][ T5908] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 69.429400][ T5904] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 69.437885][ T5905] fido_id[5905]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 69.515103][ T4471] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.517940][ T5904] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.539422][ T5904] ext4 filesystem being mounted at /147/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 69.600160][ T3650] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.808119][ T5941] __nla_validate_parse: 3 callbacks suppressed [ 69.808138][ T5941] netlink: 4 bytes leftover after parsing attributes in process `syz.3.846'. [ 69.834302][ T5941] hsr_slave_0: left promiscuous mode [ 69.840112][ T5941] hsr_slave_1: left promiscuous mode [ 69.925093][ T5945] loop3: detected capacity change from 0 to 764 [ 69.932829][ T5945] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 69.943107][ T5945] Symlink component flag not implemented [ 69.949081][ T5945] Symlink component flag not implemented (7) [ 70.031250][ T5947] loop0: detected capacity change from 0 to 128 [ 70.075036][ T5947] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 70.119857][ T5947] ext4 filesystem being mounted at /110/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 70.161248][ T4471] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 70.197462][ T5953] pim6reg1: entered promiscuous mode [ 70.202959][ T5953] pim6reg1: entered allmulticast mode [ 70.619920][ T5969] syzkaller0: entered promiscuous mode [ 70.625472][ T5969] syzkaller0: entered allmulticast mode [ 70.634463][ T5969] tipc: Enabled bearer , priority 0 [ 70.642141][ T5968] tipc: Resetting bearer [ 70.650104][ T5968] tipc: Disabling bearer [ 71.420179][ T5984] capability: warning: `syz.5.861' uses 32-bit capabilities (legacy support in use) [ 71.519348][ T5987] loop0: detected capacity change from 0 to 1024 [ 71.531323][ T5988] syzkaller0: entered promiscuous mode [ 71.536432][ T5987] EXT4-fs: Ignoring removed oldalloc option [ 71.536854][ T5988] syzkaller0: entered allmulticast mode [ 71.542832][ T5987] EXT4-fs: Ignoring removed bh option [ 71.602683][ T5987] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.701869][ T5994] EXT4-fs error (device loop5): ext4_iget_extra_inode:5073: inode #15: comm syz.5.864: corrupted in-inode xattr: invalid ea_ino [ 71.718106][ T5994] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.864: couldn't read orphan inode 15 (err -117) [ 71.788083][ T5994] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.837071][ T5994] EXT4-fs error (device loop5): __ext4_expand_extra_isize:6318: inode #18: comm syz.5.864: bad extra_isize 6 (inode size 256) [ 71.903649][ T3650] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.194436][ T5978] net_ratelimit: 22 callbacks suppressed [ 72.194457][ T5978] Set syz1 is full, maxelem 65536 reached [ 72.231370][ T6005] netlink: 28 bytes leftover after parsing attributes in process `syz.3.869'. [ 72.254614][ T6007] pim6reg1: entered promiscuous mode [ 72.259966][ T6007] pim6reg1: entered allmulticast mode [ 72.287626][ T5987] ================================================================== [ 72.295744][ T5987] BUG: KCSAN: data-race in xas_find_marked / xas_set_mark [ 72.302891][ T5987] [ 72.305229][ T5987] write to 0xffff88811ac50fc4 of 4 bytes by task 5992 on cpu 0: [ 72.312868][ T5987] xas_set_mark+0x12b/0x140 [ 72.317392][ T5987] __folio_start_writeback+0x155/0x340 [ 72.322880][ T5987] ext4_bio_write_folio+0x5ad/0x9f0 [ 72.328111][ T5987] mpage_process_page_bufs+0x4a1/0x620 [ 72.333602][ T5987] mpage_prepare_extent_to_map+0x7a3/0xc20 [ 72.339435][ T5987] ext4_do_writepages+0x9f6/0x27e0 [ 72.344586][ T5987] ext4_writepages+0x179/0x300 [ 72.349371][ T5987] do_writepages+0x1c6/0x310 [ 72.354090][ T5987] file_write_and_wait_range+0x156/0x2c0 [ 72.359759][ T5987] generic_buffers_fsync_noflush+0x45/0x130 [ 72.365663][ T5987] ext4_sync_file+0x1ab/0x690 [ 72.370345][ T5987] vfs_fsync_range+0x10d/0x130 [ 72.375116][ T5987] ext4_buffered_write_iter+0x34f/0x3c0 [ 72.380677][ T5987] ext4_file_write_iter+0x387/0xf60 [ 72.385889][ T5987] iter_file_splice_write+0x66b/0xa20 [ 72.391262][ T5987] direct_splice_actor+0x156/0x2a0 [ 72.396371][ T5987] splice_direct_to_actor+0x312/0x680 [ 72.401740][ T5987] do_splice_direct+0xda/0x150 [ 72.406502][ T5987] do_sendfile+0x380/0x650 [ 72.410927][ T5987] __x64_sys_sendfile64+0x105/0x150 [ 72.416125][ T5987] x64_sys_call+0x2db1/0x3000 [ 72.420809][ T5987] do_syscall_64+0xca/0x2b0 [ 72.425328][ T5987] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 72.431223][ T5987] [ 72.433544][ T5987] read to 0xffff88811ac50fc4 of 4 bytes by task 5987 on cpu 1: [ 72.441092][ T5987] xas_find_marked+0x5dc/0x620 [ 72.445865][ T5987] find_get_entry+0x5d/0x380 [ 72.450453][ T5987] filemap_get_folios_tag+0x92/0x210 [ 72.455750][ T5987] mpage_prepare_extent_to_map+0x308/0xc20 [ 72.461577][ T5987] ext4_do_writepages+0x9f6/0x27e0 [ 72.466702][ T5987] ext4_writepages+0x179/0x300 [ 72.471469][ T5987] do_writepages+0x1c6/0x310 [ 72.476068][ T5987] file_write_and_wait_range+0x156/0x2c0 [ 72.481710][ T5987] generic_buffers_fsync_noflush+0x45/0x130 [ 72.487606][ T5987] ext4_sync_file+0x1ab/0x690 [ 72.492281][ T5987] vfs_fsync_range+0x10d/0x130 [ 72.497049][ T5987] ext4_buffered_write_iter+0x34f/0x3c0 [ 72.502613][ T5987] ext4_file_write_iter+0x387/0xf60 [ 72.507915][ T5987] iter_file_splice_write+0x66b/0xa20 [ 72.513288][ T5987] direct_splice_actor+0x156/0x2a0 [ 72.518409][ T5987] splice_direct_to_actor+0x312/0x680 [ 72.523785][ T5987] do_splice_direct+0xda/0x150 [ 72.528549][ T5987] do_sendfile+0x380/0x650 [ 72.532980][ T5987] __x64_sys_sendfile64+0x105/0x150 [ 72.538193][ T5987] x64_sys_call+0x2db1/0x3000 [ 72.542873][ T5987] do_syscall_64+0xca/0x2b0 [ 72.547392][ T5987] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 72.553286][ T5987] [ 72.555606][ T5987] value changed: 0x0a000021 -> 0x04000021 [ 72.561406][ T5987] [ 72.563732][ T5987] Reported by Kernel Concurrency Sanitizer on: [ 72.569883][ T5987] CPU: 1 UID: 0 PID: 5987 Comm: syz.0.863 Not tainted syzkaller #0 PREEMPT(voluntary) [ 72.579522][ T5987] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 72.589843][ T5987] ================================================================== [ 72.639757][ T4471] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.