last executing test programs: 5.71138505s ago: executing program 2 (id=667): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a000000020000000110000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000200000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0xc59675d6409bfaec, 0x50, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x3000010, &(0x7f0000000040)={[{@journal_dev={'journal_dev', 0x3d, 0xd353}}, {@auto_da_alloc}]}, 0x1, 0x512, &(0x7f0000000380)="$eJzs3d9rY1kdAPDvvW1mOzNdk1WRdcF1cVc6i07Sbt3dIqLriz4tqOv7WNu0lCZNadJ1Whbt4H8ggoJPPvki+AcIwzz4B8jAgL6ID6KiiM7og6DOlSQ3TidN2rrTNp3m84HTnHPvzf2ec0NO7o/TewMYWy9FxFsRMRERr0ZEMZ+e5in2uqm93IP77y21UxJZ9s5fk0jyab11tcuTEXE1f9tURHztyxHfTA7Gbe7sri/WatWtvFxp1TcrzZ3d62v1xdXqanVjfn7ujYU3F15fmM1yT9TOUi/zky99/vanv/W7G3++9u12tT73kShEXztOUrfphc626Glvo63TCDYCE3l7CqOuCAAAx9Lex/9gRHyis/9fjInO3lyfiVHUDAAAADgp2Rem499JRAYAAABcWGlETEeSlvOxANORppfycwMfjitprdFsfWqlsb2x3J4XUYpCurJWq87mY4VLUUja5bl8jG2v/FpfeT4inouI7xcvd8rlpUZtecTnPgAAAGBcXO07/v9HMe3kjzbg/wQAAACA86s0tAAAAABcFA75AQAA4OLrP/6/PaJ6AAAAAKfiK2+/3U5Z7/nXy+/ubK833r2+XG2ul+vbS+WlxtZmebXRWO3cs69+1PpqjcbmZ2Jj+2alVW22Ks2d3Rv1xvZG68baY4/ABgAAAM7Qcx+/8+skIvY+e7mTIr8PIMBj/jDqCgAnaWLUFQBGxl28YXwVRl0BYOSSI+YbvAMAAE+/mY8evP7fe/6/cwNwsRnrAwDjx/V/GF8FIwBhrKUR8YFu9plhywy9/v/L40bJsoi7xf1TnF8EAICzNd1JSVrOjwOmI03L5YhnI9JSFJKVtVp1Nj8++FWx8Ey7PNd5Z3LkmGEAAAAAAAAAAAAAAAAAAAAAAAAAoCvLksgAAACACy0i/VPSuZt/xEzxlen+8wOXkn8W44954Ufv/ODmYqu1Ndee/rfOs7wuRUTrh/n014Y+PgwAAAA4acne0Fnd4/T8de5MawUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAGHhw/72lXjrLuH/5YkSUBsWfjKnO61QUIuLK35OY3Pe+JCImTiD+3q2IeH5Q/CQeZllWymsxKP7lU45f6myawfHTiLh6AvFhnN1p9z9vDfr+pfFS53Xw928yT09qeP+X5pGf7/Rzg/qfZw+srT4wxgv3flYZGv9WxAuTg/ufXv+bDIn/8oG1/SvLsoMxvvH13d1h8bMfR8wM/P1JHotVadU3K82d3etr9cXV6mp1Y35+7o2FNxdeX5itrKzVqvnfgTG+97GfPzys/VcGxP/tb7r972Htf2XYSvv8597N+x/qZguD4l97eeDv71QMiZ/mv32fzPPt+TO9/F43v9+LP7374mHtXx6y/Y/6/K8ds/2vfvW7vz/mogDAGWju7K4v1mrVrUMyU8dY5mnM/GLqXFTj/8xk3+l+cuelPu83095bfTSl16pzULF9mezMYk3EOWny/zIj7ZYAAIBT8Ginf9Q1AQAAAAAAAAAAAAAAAAAAgPF1FrcT64+5N5qmAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAc6r8BAAD//0wa4Aw=") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'ip6gre0\x00', 0x2}) readv(r2, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) 4.638248107s ago: executing program 2 (id=676): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{0x1, <r0=>0xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000000380)}, 0x20) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x2, 0x0, 0x3566, 0x989c, r0, 0xf1b, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x5, 0x0, @value, @void, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000001a80)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYRES64=r1, @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000c0000007b8af8ff00000000bfa200000000000007420000f8ffffffb703000008000000b704000000000000850000ec020000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c3c00000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000700)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000000)='sys_enter\x00', r2}, 0x18) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000005c0)='syz_tun\x00', 0x10) sendto$inet(r3, 0x0, 0x0, 0x20000844, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, &(0x7f0000000800)={'bridge0\x00', &(0x7f0000000240)=@ethtool_coalesce={0xf, 0x0, 0x101, 0xc3a5, 0x6, 0xffff, 0x4, 0x2, 0xfffffff6, 0x7fb, 0xfffffffd, 0xc99c, 0x2, 0x80000001, 0x91, 0x7ff, 0x3, 0xa98, 0x8b9c, 0x6, 0x10000040, 0x0, 0x3}}) syz_emit_ethernet(0x42, &(0x7f0000000240)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x10, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa}]}}}}}}}, 0x0) 4.543592388s ago: executing program 2 (id=678): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400ee", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c00010062"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x3548}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x80, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x50, 0x2, [@TCA_BASIC_EMATCHES={0x4c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x40, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{}, {0x0, 0x0, 0x1}}}, @TCF_EM_META={0x2c, 0x2, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc}, @TCA_EM_META_RVALUE={0x4}, @TCA_EM_META_LVALUE={0xf, 0x2, [@TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_VAR="5e12e8", @TCF_META_TYPE_VAR, @TCF_META_TYPE_INT]}]}}]}]}]}}]}, 0x80}}, 0x0) 4.402749511s ago: executing program 2 (id=683): openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000200)={[{@quota}, {@oldalloc}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@block_validity}, {@jqfmt_vfsv1}]}, 0x3, 0x434, &(0x7f0000000940)="$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") r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xe, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r1, 0x0, 0x8000000}, 0x18) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r2 = open(&(0x7f0000000500)='./bus\x00', 0x0, 0x42) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @random="4ba6224a6818", @void, {@ipv4={0x800, @tcp={{0xa, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@lsrr={0x83, 0x3, 0x10}, @timestamp={0x44, 0x10, 0xd, 0x2, 0x0, [0x0, 0x0, 0x0]}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000480), &(0x7f00000004c0)=0x4) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x13, 0x0, "ef359f41a4ae6dddfbd1ce5d29c2ee5e5c9d000ff8ee09e737ff0edf110ff4eb4b78c66ee677df701905b9aafab4ffffffff00", "cba3d625780820d1cbf7db71038259ca171ce1a311ef97e4298d1e14ef01060000e9009600fdff00000000000000000000000000000000000400", "d300e6d6ae9ef30bea2a004000", [0x2]}) 4.104897286s ago: executing program 2 (id=686): bpf$PROG_LOAD(0x5, 0x0, 0x1f51f5d0) r0 = syz_open_procfs(0x0, 0x0) pread64(r0, &(0x7f000001a240)=""/102400, 0x19000, 0xffffffffd) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000880)='./file0\x00', 0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="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", @ANYRESHEX=0x0, @ANYRESOCT], 0x2, 0x699, &(0x7f0000000140)="$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") r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 3.674568892s ago: executing program 2 (id=689): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x5c, 0x1, 0x1, 0x101, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}}}]}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0xcd}]}]}, 0x5c}}, 0x0) 3.614580183s ago: executing program 32 (id=689): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x5c, 0x1, 0x1, 0x101, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}}}]}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0xcd}]}]}, 0x5c}}, 0x0) 2.951718273s ago: executing program 1 (id=704): syz_open_dev$loop(0x0, 0x9, 0x12d600) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_user\x00', 0x275a, 0x0) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r2}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="c8010000", @ANYRES16=r4, @ANYBLOB="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"], 0x1c8}}, 0x0) 2.481512971s ago: executing program 1 (id=708): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r2, 0x0, 0x9}, 0x18) move_pages(0x0, 0x2064, &(0x7f0000000040)=[&(0x7f0000ff9000/0x2000)=nil], &(0x7f0000001180), &(0x7f0000000000), 0x0) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,') bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7fffffff, @void, @value}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r0, 0x1) pipe2$9p(&(0x7f0000000140), 0x80880) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x2, 0x3, 0x0, 0x2, 0xb, 0x0, 0xfffffffd, 0x25dfdbff, [@sadb_address={0x3, 0x6, 0x0, 0x20, 0x0, @in={0x2, 0x0, @rand_addr=0x64010100}}, @sadb_sa={0x2, 0x1, 0x0, 0x7, 0x0, 0xfb, 0x3}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}, @sadb_key={0x1, 0x8}]}, 0x58}, 0x1, 0x7}, 0x0) clock_adjtime(0x0, &(0x7f0000001100)={0xd77, 0x2000000000000000, 0x0, 0x0, 0x0, 0x4b, 0xf2, 0x0, 0x0, 0xa12, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xefe, 0x4}) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0xc28c2) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r6, 0x4040534e, &(0x7f00000000c0)={0x80, @tick, 0x1, {0x5, 0x3}, 0xa, 0x0, 0xff}) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000050b6850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r8}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{r1}, &(0x7f0000000680), &(0x7f00000006c0)=r3}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000008c0)=@bpf_tracing={0x1a, 0x14, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xf}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@cb_func={0x18, 0x2, 0x4, 0x0, 0x3}, @call={0x85, 0x0, 0x0, 0x34}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x2}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000004c0)='GPL\x00', 0xfffff001, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, 0x17, r1, 0x8, &(0x7f0000000500)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000640)={0x1, 0x1, 0x8000, 0x5}, 0x10, 0x25cb6, r8, 0x4, 0x0, &(0x7f0000000780)=[{0x4, 0x3, 0x0, 0x6}, {0x5, 0x2, 0xc, 0x6}, {0x0, 0x4, 0x10}, {0x2, 0x5, 0xe, 0x5}], 0x10, 0x4, @void, @value}, 0x94) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) r10 = gettid() ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000600)={'wpan0\x00', <r11=>0x0}) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, r9, 0x1, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r11}, @NL802154_ATTR_PID={0x8, 0x1c, r10}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000) fcntl$setown(r4, 0x8, r10) 2.177598236s ago: executing program 1 (id=710): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x2, 0x7ffc1ffb}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x70, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0x7e05}, 0x18) open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180200000020702500000000002020207b1af8ff00000000bfa100000000000007010000dbffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=@newqdisc={0x7c, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe, 0x4}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x50, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x42, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x2, 0x1}}, {0x6, 0x1b, [0x0]}}, {{0x1c, 0x1, {0x2, 0x9e, 0x1, 0x8f49, 0x0, 0x4000000, 0x1d3, 0x3}}, {0xa, 0x2, [0xb, 0x4, 0xd]}}]}]}, 0x7c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000480)={[{@nojournal_checksum}, {@nombcache}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x4}}, {@oldalloc}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@usrquota}, {@noauto_da_alloc}, {@nolazytime}, {@init_itable}]}, 0xff, 0x551, &(0x7f0000000cc0)="$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") chdir(&(0x7f0000000300)='./file0\x00') mq_unlink(&(0x7f0000000000)='eth0\x00') 1.980531539s ago: executing program 1 (id=711): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) socketpair(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff}) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0x2, &(0x7f00000003c0)=0x8, 0x4) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r6, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000fbdbdf25250000000e0001006e65db38d67464657673696d0000000f0002006e657464657673696d300000"], 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x18) r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r9, &(0x7f0000000000)=0xfe8e, 0x12) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89a0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89a1, &(0x7f0000000080)) socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="240000001600010a0000"], 0x24}}, 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x8004, &(0x7f0000000080)={[{@discard}, {@bh}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x7b9, &(0x7f00000007c0)="$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") r10 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r10, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) r11 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) write$cgroup_int(r11, &(0x7f00000004c0)=0xfffe, 0x12) chown(&(0x7f0000000040)='./file1\x00', 0xffffffffffffffff, 0x0) 1.734905173s ago: executing program 0 (id=715): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair(0x2, 0x3, 0x0, &(0x7f0000000200)) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001dc0)=ANY=[], 0x48) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000001c0)='sched_process_wait\x00', r0}, 0x18) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="85000000070000006a0a00ff000000220c00", @ANYRES32, @ANYBLOB="0000002100000000050000000000000095c333d4c0a3ecdd69086b8e4c36439a8808b90ea579cdf8bd475a470064827701f4169ebebecb5bba94f06f020fb64e5594a86f5f00000000000008c7533dc98a94008d7d2a7d2c23bc3f4cc1992aebd29fd21e95b3c7c49de340c24cb6ba1a33740825c424ecd87a3b02ae7840be900964b6948074a8f2ed867fd6601b0ca02215f4c2a5157135575fa1903abe92246853cb7cb868a3b2524a92bfa8aaeaf3ff3f08fb97ec0c126bfea903ef567bdf48aecb23342c8102732b7257f65b1f7d82adec836fd77d2f5c6e6c18ae428531d9e4d906b0a19827bffab9ced1e24e8f063d44fb76dd59"], &(0x7f0000000140)='GPL\x00', 0x2, 0x95, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)={@ifindex, r3, 0x11, 0x0, 0x0, @void, @value=r2}, 0x20) 1.673895274s ago: executing program 0 (id=717): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r1}, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'ip6gretap0\x00', <r4=>0x0}) sendto$packet(r3, &(0x7f0000000180)="0b036800e0ff64000200475400f6a13bb1000000080086dd4803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x0, r4}, 0x14) 1.632372675s ago: executing program 0 (id=718): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$SO_COOKIE(r2, 0x1, 0x39, &(0x7f00000001c0), &(0x7f0000000280)=0x2f) socket$rds(0x15, 0x5, 0x0) 1.479911237s ago: executing program 3 (id=720): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r2, 0x0, 0x9}, 0x18) move_pages(0x0, 0x2064, &(0x7f0000000040)=[&(0x7f0000ff9000/0x2000)=nil], &(0x7f0000001180), &(0x7f0000000000), 0x0) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,') bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7fffffff, @void, @value}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r0, 0x1) pipe2$9p(&(0x7f0000000140), 0x80880) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x2, 0x3, 0x0, 0x2, 0xb, 0x0, 0xfffffffd, 0x25dfdbff, [@sadb_address={0x3, 0x6, 0x0, 0x20, 0x0, @in={0x2, 0x0, @rand_addr=0x64010100}}, @sadb_sa={0x2, 0x1, 0x0, 0x7, 0x0, 0xfb, 0x3}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}, @sadb_key={0x1, 0x8}]}, 0x58}, 0x1, 0x7}, 0x0) clock_adjtime(0x0, &(0x7f0000001100)={0xd77, 0x2000000000000000, 0x0, 0x0, 0x0, 0x4b, 0xf2, 0x0, 0x0, 0xa12, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xefe, 0x4}) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0xc28c2) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r6, 0x4040534e, &(0x7f00000000c0)={0x80, @tick, 0x1, {0x5, 0x3}, 0xa, 0x0, 0xff}) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000050b6850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r8}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{r1}, &(0x7f0000000680), &(0x7f00000006c0)=r3}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000008c0)=@bpf_tracing={0x1a, 0x14, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xf}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@cb_func={0x18, 0x2, 0x4, 0x0, 0x3}, @call={0x85, 0x0, 0x0, 0x34}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x2}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000004c0)='GPL\x00', 0xfffff001, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, 0x17, r1, 0x8, &(0x7f0000000500)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000640)={0x1, 0x1, 0x8000, 0x5}, 0x10, 0x25cb6, r8, 0x4, 0x0, &(0x7f0000000780)=[{0x4, 0x3, 0x0, 0x6}, {0x5, 0x2, 0xc, 0x6}, {0x0, 0x4, 0x10}, {0x2, 0x5, 0xe, 0x5}], 0x10, 0x4, @void, @value}, 0x94) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) r10 = gettid() ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000600)={'wpan0\x00', <r11=>0x0}) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, r9, 0x1, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r11}, @NL802154_ATTR_PID={0x8, 0x1c, r10}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000) fcntl$setown(r4, 0x8, r10) 1.390532919s ago: executing program 4 (id=721): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='\v\x00\x00\x00\a\x00\x00\x00\b\x00\x00\x00\b\x00'], 0x48) symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f00000017c0)='./file0\x00') r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge0\x00', <r3=>0x0}) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r3, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0) 1.28865922s ago: executing program 4 (id=722): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000210018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000818110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'pim6reg1\x00', 0x2}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r3}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @broadcast}) 1.191267372s ago: executing program 3 (id=723): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r2, 0x0, 0x9}, 0x18) move_pages(0x0, 0x2064, &(0x7f0000000040)=[&(0x7f0000ff9000/0x2000)=nil], &(0x7f0000001180), &(0x7f0000000000), 0x0) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,') bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7fffffff, @void, @value}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r0, 0x1) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x80880) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x2, 0x3, 0x0, 0x2, 0xb, 0x0, 0xfffffffd, 0x25dfdbff, [@sadb_address={0x3, 0x6, 0x0, 0x20, 0x0, @in={0x2, 0x0, @rand_addr=0x64010100}}, @sadb_sa={0x2, 0x1, 0x0, 0x7, 0x0, 0xfb, 0x3}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}, @sadb_key={0x1, 0x8}]}, 0x58}, 0x1, 0x7}, 0x0) clock_adjtime(0x0, &(0x7f0000001100)={0xd77, 0x2000000000000000, 0x0, 0x0, 0x0, 0x4b, 0xf2, 0x0, 0x0, 0xa12, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xefe, 0x4}) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0xc28c2) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r7, 0x4040534e, &(0x7f00000000c0)={0x80, @tick, 0x1, {0x5, 0x3}, 0xa, 0x0, 0xff}) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000050b6850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r9}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{r1, <r10=>0xffffffffffffffff}, &(0x7f0000000680), &(0x7f00000006c0)=r3}, 0x20) r11 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000008c0)=@bpf_tracing={0x1a, 0x14, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xf}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@cb_func={0x18, 0x2, 0x4, 0x0, 0x3}, @call={0x85, 0x0, 0x0, 0x34}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x2}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000004c0)='GPL\x00', 0xfffff001, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, 0x17, r1, 0x8, &(0x7f0000000500)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000640)={0x1, 0x1, 0x8000, 0x5}, 0x10, 0x25cb6, r9, 0x4, &(0x7f0000000740)=[r10, r1, r5, r11], &(0x7f0000000780)=[{0x4, 0x3, 0x0, 0x6}, {0x5, 0x2, 0xc, 0x6}, {0x0, 0x4, 0x10}, {0x2, 0x5, 0xe, 0x5}], 0x10, 0x4, @void, @value}, 0x94) syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) r12 = gettid() ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f0000000600)={'wpan0\x00'}) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r8, 0x0, 0x4000000) fcntl$setown(r4, 0x8, r12) 1.031550524s ago: executing program 1 (id=724): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x3014840, &(0x7f00000000c0), 0xa, 0x4c1, &(0x7f0000000b80)="$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") prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006000000"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) utime(0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r2, &(0x7f0000000700)=ANY=[@ANYBLOB="7f454c4600040000ff7f00000040000003003e00ebffffff9402f5ffffffffff3f00f498dba100000000000000000000000000002c8f380001"], 0xe6) close(r2) lsetxattr$security_ima(&(0x7f0000000040)='./bus\x00', &(0x7f0000000080), &(0x7f0000000200)=ANY=[@ANYBLOB="050312ffffffff004f61e89eac9ba8aac81ce9581ddfcfcee5af6a0d0ab613643714538664a4bca24de686d46d34e6eba2a44d81038729286dd1de8629c3c4a98aeb9c8aa312ddda9773518b85c69908a26db831663104e2b01190588c4f01fddbdd94a6ed0be0cf0670770a1f11d4673348042f5108f91eab"], 0x58, 0x1) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) 1.031403394s ago: executing program 4 (id=725): perf_event_open(&(0x7f0000002100)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2000000000000000, 0xffffffffffffff9c}, 0x0, 0x0, 0x510a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000a40)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r3, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r1}, 0x20) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[], 0xc3ff}}, 0x0) close(r0) 908.659266ms ago: executing program 4 (id=726): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x1) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10) syz_open_dev$usbfs(0x0, 0x205, 0x8401) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x2) 840.343877ms ago: executing program 3 (id=727): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) pipe(&(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff}) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)=r2}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r5=>0xffffffffffffffff}) splice(r5, 0x0, r1, 0x0, 0x10000008ebc, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 744.160099ms ago: executing program 4 (id=728): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000002c0)={'rose0\x00', 0x112}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016"], 0x0, 0xdf00000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r3}, 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r4, 0x400454d9, &(0x7f0000000100)={'vlan0\x00', 0x400}) 743.642659ms ago: executing program 3 (id=729): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="01000000050000000200000007"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000380), &(0x7f00000007c0), 0x75, r1}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r3}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) 632.85738ms ago: executing program 0 (id=730): syz_read_part_table(0x1064, &(0x7f0000001640)="$eJzsz6tNBUEUx+H/zr5YFHXg6IAmsISEQmAVhhJwJAhaoAA62EaQiCH7qIF7xfeJ+Z3JHDPhpH5zNeYhY5o8vrRJN6TNc0mm+32h9h9lSM3tfr3Yziml34b3PflOd0yZv+rWp9qs+ZnL8nZ9s762x8bl0dfl7vOfvgkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAZ+0vAAD//0hEEU8=") r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r2 = getpgrp(0xffffffffffffffff) r3 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000080)) r4 = signalfd(0xffffffffffffffff, &(0x7f0000000500)={[0x5]}, 0x8) name_to_handle_at(r4, &(0x7f0000004740)='\x00', &(0x7f0000004780)=ANY=[], 0x0, 0x1200) r5 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) r7 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/net\x00') sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000100)={0x18c, r1, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r3}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r4}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r5}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r6}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r7}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x4}}]}, 0x18c}, 0x1, 0x0, 0x0, 0x4810}, 0x4000) 535.233132ms ago: executing program 3 (id=731): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2000c16, &(0x7f0000000000)={[{@usrquota}, {@acl}]}, 0xff, 0x257, &(0x7f0000000500)="$eJzs3U9oFFccB/DfzO42TbKUtL0USv9AKaUNhPRW6CW9tBAoIZRSaAsppfSiJEJM8JZ48uJBj6KSk5cg3oweJZfgRRE8Rc0hXgQNHgweVFjZnQTyTxOzmx1xPh+YzEzy5v3eMPN9ExaGDaCweiJiICJKEdEbEZWISDY2+DJbetZ2ZzoXRiJqtd8eJ4122X5m/bjuiJiOiB8iYj5N4lA5YnLur+Wni798c3Ki8vWFuT8723qSa1aWl35dPT904vLg95M3bz8cSmIgqpvOq/WSHX5XTiI+Oohib4mknPcI2IvhY5fu1HP/cUR81ch/JdLILt6p8ffmK/HduVcde/rRrU/bOVag9Wq1Sv0ZOF0DCieNiGokaV9EZNtp2teX/Q9/t9SVHh4bP9r7/9jE6H95z1RAq1Qjln6+2nGle0v+H5Sy/APvqOxDqaXfh2fv1TdWS3kPCGiLz7JV/fnf+8/UtyH/UDjyD8Ul/1Bc8g/FJf9QXPIPxSX/UFzyD8Ul/1Bc+87/mRcHNyigLTbmHwAollrHvt4abv2LyEDb5T3/AAAAAAAAAAAAAAAAAAAA2810LoysL63psbxri+tnI1Z+yppur19qfB9xxPuNn11Pkk09Jnuq8Hp/f9FkB026mPPb1x/cz7f+jc/zrT81GjF9PCL6y+Xt91+ydv/t34e7/L3yb5MF3lCyZf/HP9pbf6vns/nWH1yMuFaff/p3mn/S+KSx3nn+qdavX5P1jzxrsgMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADa5mUAAAD//7FLbdg=") r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101042, 0x45) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000140)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x48241, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r2, &(0x7f0000000140)='Q', 0x1, 0x200980) pwrite64(r1, &(0x7f0000000140)="f6", 0xffffff07, 0x8000c61) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x30, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r3, 0x0, 0x9135}, 0x18) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) 462.128363ms ago: executing program 1 (id=732): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2000c16, &(0x7f0000000000)={[{@usrquota}, {@acl}]}, 0xff, 0x257, &(0x7f0000000500)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101042, 0x45) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000140)) openat(r0, &(0x7f0000000040)='./file1\x00', 0x48241, 0x101) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffc0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000001b40)='sched_switch\x00', r1}, 0x10) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) 355.927295ms ago: executing program 4 (id=733): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000100), 0x1, 0x790, &(0x7f00000007c0)="$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") r0 = open(&(0x7f0000000100)='./file1\x00', 0x141242, 0x1b4) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg$inet(r2, 0x0, 0x0, 0xc080) pwrite64(r0, &(0x7f0000000040)="00f4a5479cf071198fe1557c472a45", 0xf, 0x101) r3 = open(&(0x7f0000000000)='./file1\x00', 0x109042, 0x0) fallocate(r3, 0x20, 0x0, 0x7000000) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) 234.230937ms ago: executing program 0 (id=734): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000080000000600"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r2 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff}) ioctl$int_in(r3, 0x5452, &(0x7f0000b28000)=0x3) fcntl$setsig(r3, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r4}], 0x2c, 0xffffffffffbffff8) dup2(r3, r4) fcntl$setown(r3, 0x8, r2) tkill(r2, 0x13) 232.448047ms ago: executing program 3 (id=735): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000240), 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x7, &(0x7f0000000540)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure\x00', 0x26e1, 0x0) r4 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r4, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="2c00000000000000000000000700000044150503"], 0x30}, 0x7e8166965e22236a) 224.578027ms ago: executing program 5 (id=691): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000001480)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) close(r0) 118.176609ms ago: executing program 5 (id=736): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x10e, &(0x7f00000000c0)={[{@errors_remount}, {@nodelalloc}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40}}, {@block_validity}, {@quota}]}, 0x3, 0x452, &(0x7f0000000780)="$eJzs289vFFUcAPDvTFug/LAV8Qc/1CoaG3+0tKBy8KLRxIMmJl7wWNtCkIUaWhMhRNEYPBoS78ajiX+BJ70Y9WTiVe+GhBguoqc1szvD/mC3tMu2g+znkwx9b+YN7333zdt9M283gIE1kf2TROyMiN8jYqyebS0wUf9z/dqF+X+uXZhPolp9+6+kVu7vaxfmi6LFeTvyzGQakX6WxP4O9S6fO39qrlJZPJvnp1dOvz+9fO78cydPz51YPLF4Zvbo0SOHZ158Yfb5vsR5b9bWfR8tHdj7+juX35w/dvndn79Nivjb4uiTidUOPlmt9rm6cu1qSifDJTaEdRmKiKy7RmrjfyyGotF5Y/Hap6U2DthQ1VyXwxerwF0sibJbAJSj+KDP7n+LbfNmH+W7+nL9BiiL+3q+1Y8MR5qXGWm7v+2niYg4dvHfr7ItNuY5BABAi++z+c+zneZ/aTzQVO6efG1oPF9L2R0R90XEnoi4P6JW9sGIeGid9bcvktw8/0mv9BTYGmXzv5fyta3W+V8x+4vxoTy3qxb/SHL8ZGXxUP6aTMbI1iw/s0odP7z62xfdjjXP/7Itq7+YC+btuDK8tfWchbmVuduJudnVTyL2DXeKP7mxEpBExN6I2NdjHSef/uZAt2O3jn8VfVhnqn4d8VS9/y9GW/yFZPX1yeltUVk8NF1cFTf75ddLb3Wr/7bi74Os/7d3vP5vxD+eNK/XLq+/jkt/fN71nmaqp+u/sWNL/vfDuZWVszMRW5I36o1u3j/bOLfIF+Wz+CcPdh7/u6PxSuyPiOwifjgiHomIR/O+eywiHo+Ig53Dy24d46dXnnivW/x3Qv8vtPX/eGuRtv5vJLZE+57OiaFTP37X+j82kmt7/ztSS03me9by/reWdvV2NQMAAMD/TxoROyNJp26kR9Opqfp3+PfE9rSytLzyzPGlD84s1H8jMB4jafGka6zpeehMfltf5Gfb8ofz58ZfDo3W8lPzS5WFsoOHAbfjpvGf1sZ/5s+hslsHbDi/14LB1TT+kzLbAWw+n/8wuIx/GFwdxv9oGe0ANl+nz/+PS2gHsPnaxr9lPxgg7v9hcBn/MLiax78vAMDAWB6NW/9IvlNiW/RylsRdk4j0jmhGfxJJj6NgrYmdZQe4/kTZ70wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD98V8AAAD///Mv57k=") r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'vcan0\x00'}) io_cancel(0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000001900)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000500)='9p_client_req\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = dup(r2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000500)='9p_client_req\x00', r4}, 0x10) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x10, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[], [], 0x6b}}) 0s ago: executing program 0 (id=737): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00"/11], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = openat$sysfs(0xffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x9) sendfile(r2, r1, 0x0, 0x7ffff000) r3 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x101) flock(r3, 0x2) open(&(0x7f0000000180)='.\x00', 0x10000, 0x0) memfd_create(&(0x7f0000000500)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85l\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~7\x16\x02\x00(v\xe6`\"6\xfcgC\xb5\xf0\x13.zj\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x82\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc0<Q8\xbeX\xde\xd6 \xef\x0e\xc2.\x9c=1\x15d\xddIv\x0fh\xe6M(D\xad\xeb\xcfX8\xb9\x8d\xbe(\xd3\x16?x\xbd@\x0f\xf5\xdb\xeb\xd7i*\xea\x86JX\xff;\x96\xbb\xa7\xa8u5R\xa2,\xba\xbc\x01\x12\xb3q,\x9d\xf8\xbdb`\xb3\xc6\x0f\xb3\xac\xc7\xa4O@\x81\xfc\x1a4$\x885\x97\xa9|\x99\x86*.\xda\x96RQ\xe5\xb1\xef\xb7\x10\x99\xd4\xa7\b\xcd\xe9\xa5\xf6wR\xc1\xdfH).\a\x9a\xab\x9e&+\xc4#\x90\xc9%\xb9\xd7o\x86\x13\a\xc0\x01w9u6\xdd\x9fJ^o\x1d\xda\x11?\xc1\xf5\xf7\xff\xec\x916\xceQ\xcfU\x035\x96\x8f\xc7\x84\"2\xef\x02\xcf\a+\x8a\xd1\x11\xb5\xa8\x92\f\xb3R\",\xfc!_&pD\xeb5\xc6\xc8\xff2\xee\x14\x83\x14l\x04\x80\xaa7\x80\xf1\x18\xf5\xa5\xd23\xe5\b\x00\xe8\x9c\xd4\xd0\a\x93#\xb9Z\xc0y\x97<\xe5i\xe9\xe4\xb02Cu\xe1d\r\x0e\xc1\xf1\x81^\xa7\xffz)\x19U\xe5\xd4\xf5@O#W\x8a\xbb3c+\n\x97\xa6\xf7\x90$\xd6*\xd0\x1b\x10\xe4HM:XO\x1b\rx\xc7\x12|\x7fN\xc9\xf9i\xe4\xe5-\x9b\xe407\x9d\xe8\xc6\x90\x9f_Jf\x05\r\x1b\x9af\v\xbcv\x83\xf3j\xaf\xd0F', 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r4 = socket(0xa, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r4, 0x84, 0x20, 0x0, &(0x7f0000000800)) kernel console output (not intermixed with test programs): sim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.730256][ T3447] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1132: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 31.738972][ T3309] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.756519][ T3447] EXT4-fs (loop1): 1 truncate cleaned up [ 31.762260][ T3309] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.768208][ T3447] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 31.907649][ T3461] capability: warning: `syz.4.5' uses deprecated v2 capabilities in a way that may be insecure [ 31.926263][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.937346][ C1] hrtimer: interrupt took 43126 ns [ 32.171327][ T3488] loop1: detected capacity change from 0 to 512 [ 32.205076][ T3488] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 32.218758][ T3488] ext4 filesystem being mounted at /4/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 32.274411][ T3504] loop0: detected capacity change from 0 to 512 [ 32.290258][ T3504] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 32.341100][ T3504] EXT4-fs (loop0): 1 orphan inode deleted [ 32.351441][ T3504] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 32.364050][ T1604] EXT4-fs error (device loop0): ext4_release_dquot:6971: comm kworker/u8:6: Failed to release dquot type 1 [ 32.375878][ T3504] ext4 filesystem being mounted at /2/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 32.394179][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.442102][ T3517] SELinux: policydb version 388426523 does not match my version range 15-34 [ 32.452915][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.453700][ T3517] SELinux: failed to load policy [ 32.599541][ T3542] loop3: detected capacity change from 0 to 512 [ 32.602006][ T3526] loop0: detected capacity change from 0 to 764 [ 32.674284][ T3542] EXT4-fs (loop3): 1 orphan inode deleted [ 32.689540][ T3542] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 32.705150][ T3526] Symlink component flag not implemented [ 32.708638][ T1604] EXT4-fs error (device loop3): ext4_release_dquot:6971: comm kworker/u8:6: Failed to release dquot type 1 [ 32.722384][ T3526] Symlink component flag not implemented (101) [ 32.739312][ T3542] ext4 filesystem being mounted at /5/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 32.745120][ T3561] lo: entered promiscuous mode [ 32.763816][ T3561] netlink: 4 bytes leftover after parsing attributes in process `syz.1.28'. [ 32.798059][ T3559] lo: left promiscuous mode [ 32.814682][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.301156][ T3651] pim6reg: entered allmulticast mode [ 33.308748][ T3651] pim6reg: left allmulticast mode [ 33.350593][ T3653] loop1: detected capacity change from 0 to 512 [ 33.361423][ T3653] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 33.385009][ T3653] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #16: comm +}[@: invalid indirect mapped block 4294967295 (level 0) [ 33.399037][ T3653] EXT4-fs (loop1): Remounting filesystem read-only [ 33.407395][ T3653] EXT4-fs (loop1): 1 orphan inode deleted [ 33.413264][ T3653] EXT4-fs (loop1): 1 truncate cleaned up [ 33.419683][ T3653] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.438927][ T3658] loop2: detected capacity change from 0 to 512 [ 33.453802][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.468125][ T3660] loop4: detected capacity change from 0 to 512 [ 33.476487][ T3658] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 33.500033][ T3660] ======================================================= [ 33.500033][ T3660] WARNING: The mand mount option has been deprecated and [ 33.500033][ T3660] and is ignored by this kernel. Remove the mand [ 33.500033][ T3660] option from the mount to silence this warning. [ 33.500033][ T3660] ======================================================= [ 33.538267][ T3658] EXT4-fs (loop2): 1 truncate cleaned up [ 33.544557][ T3658] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 33.556755][ T3663] netlink: 48 bytes leftover after parsing attributes in process `syz.1.49'. [ 33.567228][ T3660] EXT4-fs (loop4): orphan cleanup on readonly fs [ 33.574853][ T3660] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.48: bg 0: block 248: padding at end of block bitmap is not set [ 33.590049][ T3660] EXT4-fs error (device loop4): ext4_acquire_dquot:6935: comm syz.4.48: Failed to acquire dquot type 1 [ 33.603067][ T3660] EXT4-fs (loop4): 1 truncate cleaned up [ 33.612216][ T3660] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 33.647185][ T3660] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 33.672949][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.682871][ T3660] EXT4-fs error (device loop4): ext4_acquire_dquot:6935: comm syz.4.48: Failed to acquire dquot type 1 [ 33.695448][ T3660] EXT4-fs warning (device loop4): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-28, ino=4). Please run e2fsck to fix. [ 33.726226][ T3670] netlink: 202920 bytes leftover after parsing attributes in process `syz.1.52'. [ 33.741006][ T3660] syz.4.48 (3660) used greatest stack depth: 9208 bytes left [ 33.754160][ T3671] loop2: detected capacity change from 0 to 2048 [ 33.762154][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.782702][ T3671] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 33.800579][ T3677] loop4: detected capacity change from 0 to 128 [ 33.809024][ T3677] EXT4-fs: Ignoring removed nobh option [ 33.814872][ T3677] EXT4-fs: Ignoring removed i_version option [ 33.825163][ T3677] EXT4-fs (loop4): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 33.860668][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.899431][ T3682] loop4: detected capacity change from 0 to 512 [ 33.912165][ T3683] Zero length message leads to an empty skb [ 33.941058][ T3682] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 33.950225][ T3682] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 33.959640][ T3687] loop1: detected capacity change from 0 to 1024 [ 33.986192][ T3682] EXT4-fs (loop4): warning: checktime reached, running e2fsck is recommended [ 33.997139][ T3682] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 34.009090][ T3693] loop2: detected capacity change from 0 to 1024 [ 34.015509][ T3682] System zones: 0-2, 18-18, 34-34 [ 34.021354][ T3693] EXT4-fs: Ignoring removed nobh option [ 34.027262][ T3682] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1132: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 34.065881][ T3687] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.085805][ T3682] EXT4-fs (loop4): 1 truncate cleaned up [ 34.091833][ T3687] ext4 filesystem being mounted at /18/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 34.101476][ T3682] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.122477][ T3687] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 34.141838][ T3693] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.158573][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.165297][ T3687] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 2050 with max blocks 1 with error 28 [ 34.180050][ T3687] EXT4-fs (loop1): This should not happen!! Data will be lost [ 34.180050][ T3687] [ 34.189748][ T3687] EXT4-fs (loop1): Total free blocks count 0 [ 34.195772][ T3687] EXT4-fs (loop1): Free/Dirty block details [ 34.197030][ T3693] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4113: comm syz.2.61: Allocating blocks 385-513 which overlap fs metadata [ 34.201689][ T3687] EXT4-fs (loop1): free_blocks=4293918736 [ 34.201706][ T3687] EXT4-fs (loop1): dirty_blocks=16 [ 34.201719][ T3687] EXT4-fs (loop1): Block reservation details [ 34.201730][ T3687] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 34.259812][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.271012][ T3705] SELinux: failed to load policy [ 34.274889][ T3693] EXT4-fs (loop2): pa ffff888105bfa070: logic 16, phys. 129, len 24 [ 34.284112][ T3693] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 34.314141][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.366748][ T3714] loop1: detected capacity change from 0 to 512 [ 34.392453][ T3714] EXT4-fs (loop1): orphan cleanup on readonly fs [ 34.407032][ T3719] TCP: out of memory -- consider tuning tcp_mem [ 34.429502][ T3714] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.69: bg 0: block 248: padding at end of block bitmap is not set [ 34.462402][ T3722] netlink: 132 bytes leftover after parsing attributes in process `syz.4.71'. [ 34.482753][ T3714] EXT4-fs error (device loop1): ext4_acquire_dquot:6935: comm syz.1.69: Failed to acquire dquot type 1 [ 34.523540][ T3714] EXT4-fs (loop1): 1 truncate cleaned up [ 34.534365][ T3714] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 34.640055][ T3728] bridge0: entered promiscuous mode [ 34.641479][ T3714] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 34.647208][ T3728] bridge0: port 3(macsec1) entered blocking state [ 34.661137][ T3728] bridge0: port 3(macsec1) entered disabled state [ 34.668077][ T3728] macsec1: entered allmulticast mode [ 34.673435][ T3728] bridge0: entered allmulticast mode [ 34.679502][ T3728] macsec1: left allmulticast mode [ 34.679483][ T3714] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 34.693142][ T3728] bridge0: left allmulticast mode [ 34.699440][ T3728] bridge0: left promiscuous mode [ 34.726443][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.676987][ T3767] loop2: detected capacity change from 0 to 4096 [ 35.733955][ T3767] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.755928][ T3767] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 35.777361][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.787859][ T3778] netlink: 8 bytes leftover after parsing attributes in process `syz.0.92'. [ 35.796664][ T3778] netlink: 8 bytes leftover after parsing attributes in process `syz.0.92'. [ 35.946704][ T3793] loop1: detected capacity change from 0 to 1024 [ 35.953737][ T3793] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 35.964783][ T3793] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 35.996829][ T3793] JBD2: no valid journal superblock found [ 36.002672][ T3793] EXT4-fs (loop1): Could not load journal inode [ 36.008519][ T3797] loop2: detected capacity change from 0 to 512 [ 36.028818][ T3797] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 36.037967][ T3797] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 36.057574][ T3793] SELinux: security_context_str_to_sid (�-�Xܘ7.H\��%�u@) failed with errno=-22 [ 36.082528][ T3797] EXT4-fs (loop2): warning: checktime reached, running e2fsck is recommended [ 36.094004][ T3797] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 36.129891][ T3797] System zones: 0-2, 18-18, 34-34 [ 36.145020][ T3797] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1132: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 36.182224][ T3797] EXT4-fs (loop2): 1 truncate cleaned up [ 36.203775][ T3797] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.299759][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.339467][ T29] kauditd_printk_skb: 220 callbacks suppressed [ 36.339485][ T29] audit: type=1400 audit(1744827056.851:344): avc: denied { read } for pid=3803 comm="syz.2.101" dev="nsfs" ino=4026532729 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 36.390971][ T29] audit: type=1400 audit(1744827056.891:345): avc: denied { open } for pid=3803 comm="syz.2.101" path="net:[4026532729]" dev="nsfs" ino=4026532729 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 36.414131][ T29] audit: type=1400 audit(1744827056.891:346): avc: denied { create } for pid=3803 comm="syz.2.101" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 36.433677][ T29] audit: type=1326 audit(1744827056.891:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3805 comm="syz.3.102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f797d30e169 code=0x7ffc0000 [ 36.456942][ T29] audit: type=1326 audit(1744827056.891:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3805 comm="syz.3.102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f797d30e169 code=0x7ffc0000 [ 36.480380][ T29] audit: type=1326 audit(1744827056.891:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3805 comm="syz.3.102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f797d30e169 code=0x7ffc0000 [ 36.503785][ T29] audit: type=1326 audit(1744827056.891:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3805 comm="syz.3.102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f797d30e169 code=0x7ffc0000 [ 36.527333][ T29] audit: type=1326 audit(1744827056.891:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3805 comm="syz.3.102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f797d30e169 code=0x7ffc0000 [ 36.550675][ T29] audit: type=1326 audit(1744827056.891:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3805 comm="syz.3.102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f797d30e169 code=0x7ffc0000 [ 36.574038][ T29] audit: type=1326 audit(1744827056.891:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3805 comm="syz.3.102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f797d30e169 code=0x7ffc0000 [ 36.668176][ T3811] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 36.753838][ T3816] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 36.837865][ T3821] loop3: detected capacity change from 0 to 4096 [ 36.867994][ T3821] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.050979][ T3821] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 37.103327][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.164640][ T3835] loop3: detected capacity change from 0 to 512 [ 37.197839][ T3835] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 37.207063][ T3835] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 37.222886][ T3835] EXT4-fs (loop3): warning: checktime reached, running e2fsck is recommended [ 37.234834][ T3835] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 37.243123][ T3835] System zones: 0-2, 18-18, 34-34 [ 37.248994][ T3835] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1132: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 37.271221][ T3835] EXT4-fs (loop3): 1 truncate cleaned up [ 37.278327][ T3835] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.296894][ T3839] loop4: detected capacity change from 0 to 512 [ 37.314345][ T3839] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 37.343296][ T3839] EXT4-fs (loop4): 1 truncate cleaned up [ 37.350819][ T3839] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.355383][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.534951][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.576054][ T3880] tipc: Started in network mode [ 37.581041][ T3880] tipc: Node identity ac14140f, cluster identity 4711 [ 37.599715][ T3880] tipc: New replicast peer: 255.255.255.255 [ 37.606003][ T3880] tipc: Enabled bearer <udp:syz2>, priority 10 [ 37.627466][ T3886] loop4: detected capacity change from 0 to 512 [ 37.672675][ T3886] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 37.765572][ T3886] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #16: comm +}[@: invalid indirect mapped block 4294967295 (level 0) [ 37.779890][ T3886] EXT4-fs (loop4): Remounting filesystem read-only [ 37.788094][ T3886] EXT4-fs (loop4): 1 orphan inode deleted [ 37.793935][ T3886] EXT4-fs (loop4): 1 truncate cleaned up [ 37.801930][ T3886] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.847774][ T3899] pim6reg: entered allmulticast mode [ 37.907014][ T3899] pim6reg: left allmulticast mode [ 37.924867][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.032898][ T3906] loop0: detected capacity change from 0 to 512 [ 38.055774][ T3906] EXT4-fs: Ignoring removed nobh option [ 38.095751][ T3906] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.128: invalid indirect mapped block 256 (level 2) [ 38.173054][ T3906] EXT4-fs (loop0): 2 truncates cleaned up [ 38.179389][ T3906] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.271361][ T3919] loop1: detected capacity change from 0 to 764 [ 38.338981][ T3919] Symlink component flag not implemented [ 38.426855][ T3937] loop4: detected capacity change from 0 to 512 [ 38.462256][ T3937] EXT4-fs (loop4): orphan cleanup on readonly fs [ 38.469321][ T3937] EXT4-fs error (device loop4): ext4_orphan_get:1416: comm syz.4.133: bad orphan inode 13 [ 38.531304][ T3937] ext4_test_bit(bit=12, block=18) = 1 [ 38.536778][ T3937] is_bad_inode(inode)=0 [ 38.540947][ T3937] NEXT_ORPHAN(inode)=2130706432 [ 38.545895][ T3937] max_ino=32 [ 38.549153][ T3937] i_nlink=1 [ 38.564327][ T3919] Symlink component flag not implemented (101) [ 38.626557][ T3937] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 38.721198][ T3378] tipc: Node number set to 2886997007 [ 38.729537][ T3937] netlink: 28 bytes leftover after parsing attributes in process `syz.4.133'. [ 38.733375][ T3411] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm kworker/u8:9: bg 0: block 5: invalid block bitmap [ 38.754801][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.763916][ T3940] loop1: detected capacity change from 0 to 512 [ 38.770453][ T3940] EXT4-fs: Ignoring removed nobh option [ 38.781754][ T3411] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 38.794448][ T3411] EXT4-fs (loop0): This should not happen!! Data will be lost [ 38.794448][ T3411] [ 38.804142][ T3411] EXT4-fs (loop0): Total free blocks count 0 [ 38.810230][ T3411] EXT4-fs (loop0): Free/Dirty block details [ 38.816186][ T3411] EXT4-fs (loop0): free_blocks=0 [ 38.816307][ T3942] loop4: detected capacity change from 0 to 512 [ 38.821164][ T3411] EXT4-fs (loop0): dirty_blocks=16000 [ 38.821179][ T3411] EXT4-fs (loop0): Block reservation details [ 38.821190][ T3411] EXT4-fs (loop0): i_reserved_data_blocks=16000 [ 38.850152][ T3940] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.134: invalid indirect mapped block 256 (level 2) [ 38.881370][ T3940] EXT4-fs (loop1): 2 truncates cleaned up [ 38.887542][ T3940] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.904634][ T37] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 2048 with error 28 [ 38.923526][ T3942] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 38.949664][ T3942] ext4 filesystem being mounted at /30/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 39.030096][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.049554][ T3950] EXT4-fs error (device loop4): ext4_do_update_inode:5211: inode #19: comm syz.4.135: corrupted inode contents [ 39.079535][ T3950] EXT4-fs error (device loop4): ext4_dirty_inode:6103: inode #19: comm syz.4.135: mark_inode_dirty error [ 39.102720][ T3950] EXT4-fs error (device loop4): ext4_do_update_inode:5211: inode #19: comm syz.4.135: corrupted inode contents [ 39.117037][ T3950] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2991: inode #19: comm syz.4.135: mark_inode_dirty error [ 39.130522][ T3950] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2994: inode #19: comm syz.4.135: mark inode dirty (error -117) [ 39.175548][ T3950] EXT4-fs warning (device loop4): ext4_evict_inode:279: xattr delete (err -117) [ 39.204672][ T3956] loop0: detected capacity change from 0 to 256 [ 39.222034][ T3956] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 39.250512][ T3960] netlink: 4 bytes leftover after parsing attributes in process `syz.1.142'. [ 39.324722][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 39.362723][ T3968] loop0: detected capacity change from 0 to 2048 [ 39.363256][ T3960] netlink: 4 bytes leftover after parsing attributes in process `syz.1.142'. [ 39.380008][ T3968] EXT4-fs: Ignoring removed bh option [ 39.427383][ T3968] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.556561][ T3993] loop3: detected capacity change from 0 to 512 [ 39.569311][ T3997] loop4: detected capacity change from 0 to 512 [ 39.578050][ T3993] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.616172][ T3993] ext4 filesystem being mounted at /28/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 39.626978][ T3997] EXT4-fs: Ignoring removed nobh option [ 39.654325][ T3997] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.149: invalid indirect mapped block 256 (level 2) [ 39.717674][ T3997] EXT4-fs (loop4): 2 truncates cleaned up [ 39.743196][ T3997] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.812743][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.855543][ T37] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 39.889839][ T37] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 39.902120][ T37] EXT4-fs (loop0): This should not happen!! Data will be lost [ 39.902120][ T37] [ 39.911804][ T37] EXT4-fs (loop0): Total free blocks count 0 [ 39.917935][ T37] EXT4-fs (loop0): Free/Dirty block details [ 39.923891][ T37] EXT4-fs (loop0): free_blocks=2415919104 [ 39.929626][ T37] EXT4-fs (loop0): dirty_blocks=8224 [ 39.935081][ T37] EXT4-fs (loop0): Block reservation details [ 39.941123][ T37] EXT4-fs (loop0): i_reserved_data_blocks=514 [ 39.958228][ T37] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 2048 with error 28 [ 40.236405][ T4016] loop2: detected capacity change from 0 to 256 [ 40.377883][ T4016] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 40.725122][ T358] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm kworker/u8:5: bg 0: block 5: invalid block bitmap [ 40.739128][ T358] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 40.751693][ T358] EXT4-fs (loop4): This should not happen!! Data will be lost [ 40.751693][ T358] [ 40.761364][ T358] EXT4-fs (loop4): Total free blocks count 0 [ 40.766249][ T4023] loop0: detected capacity change from 0 to 512 [ 40.767405][ T358] EXT4-fs (loop4): Free/Dirty block details [ 40.767421][ T358] EXT4-fs (loop4): free_blocks=0 [ 40.767442][ T358] EXT4-fs (loop4): dirty_blocks=10740 [ 40.767453][ T358] EXT4-fs (loop4): Block reservation details [ 40.767463][ T358] EXT4-fs (loop4): i_reserved_data_blocks=10740 [ 40.777804][ T358] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 2048 with error 28 [ 40.825481][ T4023] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 40.838182][ T4023] ext4 filesystem being mounted at /19/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 40.934837][ T4030] loop4: detected capacity change from 0 to 512 [ 40.946811][ T4030] EXT4-fs (loop4): orphan cleanup on readonly fs [ 40.959254][ T4030] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.157: bg 0: block 248: padding at end of block bitmap is not set [ 40.979604][ T4028] EXT4-fs error (device loop0): ext4_do_update_inode:5211: inode #19: comm syz.0.159: corrupted inode contents [ 40.999434][ T4030] EXT4-fs error (device loop4): ext4_acquire_dquot:6935: comm syz.4.157: Failed to acquire dquot type 1 [ 41.031211][ T4028] EXT4-fs error (device loop0): ext4_dirty_inode:6103: inode #19: comm syz.0.159: mark_inode_dirty error [ 41.047113][ T4030] EXT4-fs (loop4): 1 truncate cleaned up [ 41.053206][ T4028] EXT4-fs error (device loop0): ext4_do_update_inode:5211: inode #19: comm syz.0.159: corrupted inode contents [ 41.065444][ T4037] loop2: detected capacity change from 0 to 8192 [ 41.068684][ T4030] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 41.093770][ T4028] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2991: inode #19: comm syz.0.159: mark_inode_dirty error [ 41.113457][ T4030] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 41.116840][ T4028] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2994: inode #19: comm syz.0.159: mark inode dirty (error -117) [ 41.140724][ T4028] EXT4-fs warning (device loop0): ext4_evict_inode:279: xattr delete (err -117) [ 41.168165][ T4030] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 41.189977][ T4030] syz.4.157 (4030) used greatest stack depth: 9200 bytes left [ 41.219006][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.224697][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 41.282597][ T4058] pim6reg: entered allmulticast mode [ 41.298944][ T4058] pim6reg: left allmulticast mode [ 41.451959][ T29] kauditd_printk_skb: 90 callbacks suppressed [ 41.451976][ T29] audit: type=1326 audit(1744852841.977:442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4083 comm="syz.4.167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f805a76e169 code=0x7ffc0000 [ 41.494430][ T29] audit: type=1326 audit(1744852842.007:443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4083 comm="syz.4.167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f805a76e169 code=0x7ffc0000 [ 41.517887][ T29] audit: type=1326 audit(1744852842.007:444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4083 comm="syz.4.167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f805a76e169 code=0x7ffc0000 [ 41.541475][ T29] audit: type=1326 audit(1744852842.007:445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4083 comm="syz.4.167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f805a76e169 code=0x7ffc0000 [ 41.564994][ T29] audit: type=1326 audit(1744852842.007:446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4083 comm="syz.4.167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=154 compat=0 ip=0x7f805a76e169 code=0x7ffc0000 [ 41.589291][ T29] audit: type=1326 audit(1744852842.007:447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4083 comm="syz.4.167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f805a76e169 code=0x7ffc0000 [ 41.612690][ T29] audit: type=1326 audit(1744852842.007:448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4083 comm="syz.4.167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f805a76e169 code=0x7ffc0000 [ 41.636103][ T29] audit: type=1326 audit(1744852842.007:449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4083 comm="syz.4.167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f805a76e169 code=0x7ffc0000 [ 41.659276][ T29] audit: type=1326 audit(1744852842.007:450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4083 comm="syz.4.167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f805a76e169 code=0x7ffc0000 [ 41.682707][ T29] audit: type=1326 audit(1744852842.007:451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4083 comm="syz.4.167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f805a76e169 code=0x7ffc0000 [ 41.795655][ T4091] ip6gre1: entered allmulticast mode [ 41.928615][ T4096] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 41.935955][ T4096] IPv6: NLM_F_CREATE should be set when creating new route [ 41.996990][ T4087] netlink: 'syz.0.169': attribute type 3 has an invalid length. [ 42.134748][ T4111] TCP: out of memory -- consider tuning tcp_mem [ 42.203571][ T4114] bridge0: entered promiscuous mode [ 42.214825][ T4114] bridge0: port 3(macsec1) entered blocking state [ 42.221384][ T4114] bridge0: port 3(macsec1) entered disabled state [ 42.229347][ T4114] macsec1: entered allmulticast mode [ 42.234741][ T4114] bridge0: entered allmulticast mode [ 42.244669][ T4114] macsec1: left allmulticast mode [ 42.249781][ T4114] bridge0: left allmulticast mode [ 42.264233][ T4114] bridge0: left promiscuous mode [ 42.486790][ T4127] ip6gre1: entered allmulticast mode [ 42.501838][ T4131] loop1: detected capacity change from 0 to 512 [ 42.509161][ T4131] EXT4-fs: Ignoring removed nobh option [ 42.527335][ T4131] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.188: invalid indirect mapped block 256 (level 2) [ 42.541172][ T4130] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 42.548472][ T4130] IPv6: NLM_F_CREATE should be set when creating new route [ 42.572185][ T4131] EXT4-fs (loop1): 2 truncates cleaned up [ 42.585037][ T4131] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.790336][ T4146] TCP: out of memory -- consider tuning tcp_mem [ 42.924151][ T4156] loop2: detected capacity change from 0 to 512 [ 42.946756][ T4156] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 42.962091][ T4156] ext4 filesystem being mounted at /42/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 42.993670][ T4157] loop3: detected capacity change from 0 to 2048 [ 43.000965][ T4157] EXT4-fs: Ignoring removed bh option [ 43.039585][ T4157] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.083935][ T4165] netlink: 132 bytes leftover after parsing attributes in process `syz.0.199'. [ 43.165808][ T4163] EXT4-fs error (device loop2): ext4_do_update_inode:5211: inode #19: comm syz.2.198: corrupted inode contents [ 43.209231][ T4167] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 43.216508][ T4167] IPv6: NLM_F_CREATE should be set when creating new route [ 43.243015][ T4163] EXT4-fs error (device loop2): ext4_dirty_inode:6103: inode #19: comm syz.2.198: mark_inode_dirty error [ 43.460095][ T4163] EXT4-fs error (device loop2): ext4_do_update_inode:5211: inode #19: comm syz.2.198: corrupted inode contents [ 43.463131][ T59] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm kworker/u8:4: bg 0: block 5: invalid block bitmap [ 43.490999][ T4163] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2991: inode #19: comm syz.2.198: mark_inode_dirty error [ 43.508526][ T4163] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2994: inode #19: comm syz.2.198: mark inode dirty (error -117) [ 43.521769][ T4163] EXT4-fs warning (device loop2): ext4_evict_inode:279: xattr delete (err -117) [ 43.524689][ T59] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 43.543437][ T59] EXT4-fs (loop1): This should not happen!! Data will be lost [ 43.543437][ T59] [ 43.553148][ T59] EXT4-fs (loop1): Total free blocks count 0 [ 43.559189][ T59] EXT4-fs (loop1): Free/Dirty block details [ 43.565130][ T59] EXT4-fs (loop1): free_blocks=0 [ 43.570087][ T59] EXT4-fs (loop1): dirty_blocks=16000 [ 43.575504][ T59] EXT4-fs (loop1): Block reservation details [ 43.581544][ T59] EXT4-fs (loop1): i_reserved_data_blocks=16000 [ 43.641677][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 43.662956][ T59] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 43.679329][ T59] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 43.691696][ T59] EXT4-fs (loop3): This should not happen!! Data will be lost [ 43.691696][ T59] [ 43.699261][ T3408] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 2048 with error 28 [ 43.701350][ T59] EXT4-fs (loop3): Total free blocks count 0 [ 43.701365][ T59] EXT4-fs (loop3): Free/Dirty block details [ 43.701378][ T59] EXT4-fs (loop3): free_blocks=2415919104 [ 43.701408][ T59] EXT4-fs (loop3): dirty_blocks=8224 [ 43.723267][ T4175] bridge_slave_0: left allmulticast mode [ 43.725971][ T59] EXT4-fs (loop3): Block reservation details [ 43.731739][ T4175] bridge_slave_0: left promiscuous mode [ 43.731907][ T4175] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.737016][ T59] EXT4-fs (loop3): i_reserved_data_blocks=514 [ 43.783594][ T4180] TCP: out of memory -- consider tuning tcp_mem [ 43.788680][ T59] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 2048 with error 28 [ 43.813470][ T4175] bridge_slave_1: left allmulticast mode [ 43.819248][ T4175] bridge_slave_1: left promiscuous mode [ 43.825365][ T4175] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.881745][ T4175] bond0: (slave bond_slave_0): Releasing backup interface [ 43.916036][ T4175] bond0: (slave bond_slave_1): Releasing backup interface [ 43.948049][ T4175] team0: Port device team_slave_0 removed [ 43.978100][ T4175] team0: Port device team_slave_1 removed [ 43.988989][ T4175] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 43.996558][ T4175] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 44.033124][ T4175] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 44.040647][ T4175] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 44.316148][ T4239] bridge_slave_0: left allmulticast mode [ 44.321965][ T4239] bridge_slave_0: left promiscuous mode [ 44.327695][ T4239] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.366744][ T4239] bridge_slave_1: left allmulticast mode [ 44.372479][ T4239] bridge_slave_1: left promiscuous mode [ 44.378308][ T4239] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.415964][ T4239] bond0: (slave bond_slave_0): Releasing backup interface [ 44.445467][ T4239] bond0: (slave bond_slave_1): Releasing backup interface [ 44.475646][ T4239] team0: Port device team_slave_0 removed [ 44.484278][ T4239] team0: Port device team_slave_1 removed [ 44.501336][ T4239] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 44.508876][ T4239] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 44.532159][ T4239] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 44.539635][ T4239] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 44.723450][ T4267] bridge0: entered promiscuous mode [ 44.729458][ T4267] bridge0: port 1(macsec1) entered blocking state [ 44.736094][ T4267] bridge0: port 1(macsec1) entered disabled state [ 44.750979][ T4267] macsec1: entered allmulticast mode [ 44.756437][ T4267] bridge0: entered allmulticast mode [ 44.762598][ T4267] macsec1: left allmulticast mode [ 44.767728][ T4267] bridge0: left allmulticast mode [ 44.796021][ T4267] bridge0: left promiscuous mode [ 44.884510][ T4263] netlink: 'syz.3.229': attribute type 3 has an invalid length. [ 44.961582][ T4275] loop2: detected capacity change from 0 to 512 [ 44.970017][ T4275] EXT4-fs: Ignoring removed nobh option [ 44.979184][ T4275] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.218: invalid indirect mapped block 256 (level 2) [ 45.013781][ T4277] loop3: detected capacity change from 0 to 1764 [ 45.027037][ T4275] EXT4-fs (loop2): 2 truncates cleaned up [ 45.031837][ T4282] loop4: detected capacity change from 0 to 512 [ 45.039841][ T4277] iso9660: Unknown parameter 'chd' [ 45.053873][ T4283] loop0: detected capacity change from 0 to 2048 [ 45.060953][ T4283] EXT4-fs: Ignoring removed bh option [ 45.073914][ T4275] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.098787][ T4283] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.135389][ T4282] EXT4-fs (loop4): 1 orphan inode deleted [ 45.143212][ T4282] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.157078][ T37] EXT4-fs error (device loop4): ext4_release_dquot:6971: comm kworker/u8:2: Failed to release dquot type 1 [ 45.175188][ T4282] ext4 filesystem being mounted at /46/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 45.272021][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.281350][ T4296] loop1: detected capacity change from 0 to 2048 [ 45.305935][ T4296] EXT4-fs: Ignoring removed bh option [ 45.334369][ T4296] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.362228][ T4300] loop4: detected capacity change from 0 to 512 [ 45.414820][ T4300] EXT4-fs (loop4): 1 orphan inode deleted [ 45.434004][ T4300] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.590414][ T4300] ext4 filesystem being mounted at /47/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 45.600824][ T358] EXT4-fs error (device loop4): ext4_release_dquot:6971: comm kworker/u8:5: Failed to release dquot type 1 [ 45.617886][ T3408] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 45.694524][ T3408] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 45.706849][ T3408] EXT4-fs (loop0): This should not happen!! Data will be lost [ 45.706849][ T3408] [ 45.716671][ T3408] EXT4-fs (loop0): Total free blocks count 0 [ 45.722785][ T3408] EXT4-fs (loop0): Free/Dirty block details [ 45.728693][ T3408] EXT4-fs (loop0): free_blocks=2415919104 [ 45.734449][ T3408] EXT4-fs (loop0): dirty_blocks=8224 [ 45.739749][ T3408] EXT4-fs (loop0): Block reservation details [ 45.745895][ T3408] EXT4-fs (loop0): i_reserved_data_blocks=514 [ 45.776777][ T3408] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 2048 with error 28 [ 45.781872][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.985039][ T3408] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 46.000729][ T3408] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 46.012996][ T3408] EXT4-fs (loop1): This should not happen!! Data will be lost [ 46.012996][ T3408] [ 46.018294][ T3411] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm kworker/u8:9: bg 0: block 5: invalid block bitmap [ 46.022907][ T3408] EXT4-fs (loop1): Total free blocks count 0 [ 46.036487][ T3411] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 46.041353][ T3408] EXT4-fs (loop1): Free/Dirty block details [ 46.053674][ T3411] EXT4-fs (loop2): This should not happen!! Data will be lost [ 46.053674][ T3411] [ 46.053694][ T3411] EXT4-fs (loop2): Total free blocks count 0 [ 46.053709][ T3411] EXT4-fs (loop2): Free/Dirty block details [ 46.059582][ T3408] EXT4-fs (loop1): free_blocks=2415919104 [ 46.069277][ T3411] EXT4-fs (loop2): free_blocks=0 [ 46.075392][ T3408] EXT4-fs (loop1): dirty_blocks=8224 [ 46.081170][ T3411] EXT4-fs (loop2): dirty_blocks=11184 [ 46.081185][ T3411] EXT4-fs (loop2): Block reservation details [ 46.081197][ T3411] EXT4-fs (loop2): i_reserved_data_blocks=11184 [ 46.086892][ T3408] EXT4-fs (loop1): Block reservation details [ 46.086905][ T3408] EXT4-fs (loop1): i_reserved_data_blocks=514 [ 46.154761][ T358] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 2048 with error 28 [ 46.217658][ T3411] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 2048 with error 28 [ 46.500539][ T29] kauditd_printk_skb: 59 callbacks suppressed [ 46.500633][ T29] audit: type=1400 audit(1744863159.025:509): avc: denied { read write } for pid=4316 comm="syz.0.231" name="rdma_cm" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 46.530131][ T29] audit: type=1400 audit(1744863159.025:510): avc: denied { open } for pid=4316 comm="syz.0.231" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 46.575409][ T4325] netlink: 'syz.3.240': attribute type 4 has an invalid length. [ 46.590825][ T4323] loop0: detected capacity change from 0 to 1764 [ 46.609209][ T4325] netlink: 'syz.3.240': attribute type 4 has an invalid length. [ 46.625027][ T4323] iso9660: Unknown parameter 'chd' [ 46.690293][ T4341] loop0: detected capacity change from 0 to 128 [ 46.732307][ T4341] syz.0.244: attempt to access beyond end of device [ 46.732307][ T4341] loop0: rw=2049, sector=153, nr_sectors = 8 limit=128 [ 46.746522][ T4341] syz.0.244: attempt to access beyond end of device [ 46.746522][ T4341] loop0: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 46.765393][ T4341] syz.0.244: attempt to access beyond end of device [ 46.765393][ T4341] loop0: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 46.789952][ T29] audit: type=1400 audit(1744865737.304:511): avc: denied { write } for pid=4334 comm="syz.3.243" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 46.812716][ T4341] syz.0.244: attempt to access beyond end of device [ 46.812716][ T4341] loop0: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 46.829002][ T4341] syz.0.244: attempt to access beyond end of device [ 46.829002][ T4341] loop0: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 46.842970][ T4341] syz.0.244: attempt to access beyond end of device [ 46.842970][ T4341] loop0: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 46.856526][ T4341] syz.0.244: attempt to access beyond end of device [ 46.856526][ T4341] loop0: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 46.868582][ T4350] tipc: Started in network mode [ 46.874872][ T4350] tipc: Node identity 628d8f6028a1, cluster identity 4711 [ 46.881618][ T4341] syz.0.244: attempt to access beyond end of device [ 46.881618][ T4341] loop0: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 46.882162][ T4350] tipc: Enabled bearer <eth:syzkaller0>, priority 0 [ 46.897036][ T4341] syz.0.244: attempt to access beyond end of device [ 46.897036][ T4341] loop0: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 46.926139][ T4345] tipc: Resetting bearer <eth:syzkaller0> [ 46.947896][ T4341] syz.0.244: attempt to access beyond end of device [ 46.947896][ T4341] loop0: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 46.962544][ T4345] tipc: Disabling bearer <eth:syzkaller0> [ 47.045952][ T4357] bridge0: entered promiscuous mode [ 47.055032][ T4357] bridge0: entered allmulticast mode [ 47.144921][ T4371] netlink: 'syz.0.254': attribute type 4 has an invalid length. [ 47.164059][ T4367] loop4: detected capacity change from 0 to 128 [ 47.182889][ T4371] netlink: 'syz.0.254': attribute type 4 has an invalid length. [ 47.274713][ T4373] tipc: Enabled bearer <eth:syzkaller0>, priority 0 [ 47.283698][ T4379] loop1: detected capacity change from 0 to 1024 [ 47.290469][ T4372] tipc: Resetting bearer <eth:syzkaller0> [ 47.316556][ T4379] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.333915][ T4372] tipc: Disabling bearer <eth:syzkaller0> [ 47.343644][ T4379] ext4 filesystem being mounted at /57/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 47.378813][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.550733][ T29] audit: type=1400 audit(1744868316.073:512): avc: denied { create } for pid=4417 comm="syz.1.266" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 47.596058][ T29] audit: type=1400 audit(1744868316.093:513): avc: denied { write } for pid=4417 comm="syz.1.266" name="file0" dev="tmpfs" ino=336 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 47.618514][ T29] audit: type=1400 audit(1744868316.093:514): avc: denied { open } for pid=4417 comm="syz.1.266" path="/59/file0" dev="tmpfs" ino=336 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 47.641095][ T29] audit: type=1400 audit(1744868316.093:515): avc: denied { ioctl } for pid=4417 comm="syz.1.266" path="/59/file0" dev="tmpfs" ino=336 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 47.687562][ T29] audit: type=1400 audit(1744868316.203:516): avc: denied { unlink } for pid=3303 comm="syz-executor" name="file0" dev="tmpfs" ino=336 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 47.721685][ T4424] loop2: detected capacity change from 0 to 128 [ 47.723246][ T4422] macvlan1: entered promiscuous mode [ 47.764713][ T4422] ipvlan0: entered promiscuous mode [ 47.777261][ T4430] loop1: detected capacity change from 0 to 512 [ 47.786226][ T4422] ipvlan0: left promiscuous mode [ 47.801334][ T4422] macvlan1: left promiscuous mode [ 47.808356][ T4430] EXT4-fs error (device loop1): ext4_do_update_inode:5211: inode #3: comm syz.1.280: corrupted inode contents [ 47.826266][ T4434] netlink: 'syz.2.270': attribute type 4 has an invalid length. [ 47.830028][ T4430] EXT4-fs error (device loop1): ext4_dirty_inode:6103: inode #3: comm syz.1.280: mark_inode_dirty error [ 47.854341][ T29] audit: type=1400 audit(1744868316.373:517): avc: denied { sqpoll } for pid=4435 comm="syz.3.271" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 47.874085][ T4430] EXT4-fs error (device loop1): ext4_do_update_inode:5211: inode #3: comm syz.1.280: corrupted inode contents [ 47.888545][ T4428] netlink: 'syz.2.270': attribute type 4 has an invalid length. [ 47.902463][ T29] audit: type=1326 audit(1744868316.403:518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4435 comm="syz.3.271" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f797d30e169 code=0x0 [ 47.930303][ T4430] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #3: comm syz.1.280: mark_inode_dirty error [ 47.943454][ T4438] loop0: detected capacity change from 0 to 1024 [ 47.951247][ T4430] EXT4-fs error (device loop1): ext4_acquire_dquot:6935: comm syz.1.280: Failed to acquire dquot type 0 [ 47.964617][ T4430] EXT4-fs error (device loop1): ext4_do_update_inode:5211: inode #16: comm syz.1.280: corrupted inode contents [ 47.977443][ T4438] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.989519][ T4430] EXT4-fs error (device loop1): ext4_dirty_inode:6103: inode #16: comm syz.1.280: mark_inode_dirty error [ 48.004898][ T4438] ext4 filesystem being mounted at /43/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 48.016886][ T4430] EXT4-fs error (device loop1): ext4_do_update_inode:5211: inode #16: comm syz.1.280: corrupted inode contents [ 48.029089][ T4430] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #16: comm syz.1.280: mark_inode_dirty error [ 48.040714][ T4430] EXT4-fs error (device loop1): ext4_do_update_inode:5211: inode #16: comm syz.1.280: corrupted inode contents [ 48.059374][ T4430] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 48.090971][ T4430] EXT4-fs error (device loop1): ext4_do_update_inode:5211: inode #16: comm syz.1.280: corrupted inode contents [ 48.111044][ T4430] EXT4-fs error (device loop1): ext4_truncate:4255: inode #16: comm syz.1.280: mark_inode_dirty error [ 48.112750][ T4445] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media [ 48.132159][ T4430] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 48.142908][ T4430] EXT4-fs (loop1): 1 truncate cleaned up [ 48.149303][ T4430] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.164672][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.173928][ T4430] ext4 filesystem being mounted at /60/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 48.231277][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.483001][ T4490] loop4: detected capacity change from 0 to 2048 [ 48.510702][ T4490] Alternate GPT is invalid, using primary GPT. [ 48.517086][ T4490] loop4: p1 p2 p3 [ 48.721901][ T4512] loop3: detected capacity change from 0 to 1024 [ 48.774211][ T4512] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.786982][ T4512] ext4 filesystem being mounted at /58/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 48.821542][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.867734][ T4517] bond1: entered promiscuous mode [ 48.872884][ T4517] bond1: entered allmulticast mode [ 48.903835][ T4520] usb usb1: usbfs: interface 0 claimed by hub while 'syz.2.291' sets config #0 [ 48.920917][ T4517] 8021q: adding VLAN 0 to HW filter on device bond1 [ 48.959606][ T4517] bond1 (unregistering): Released all slaves [ 48.968950][ T4520] usb usb1: usbfs: interface 0 claimed by hub while 'syz.2.291' sets config #1 [ 49.115923][ T4536] loop2: detected capacity change from 0 to 1024 [ 49.161865][ T4536] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.176585][ T4536] ext4 filesystem being mounted at /57/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 49.187591][ T4545] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 393: padding at end of block bitmap is not set [ 49.231144][ T4550] ip6_vti0: mtu greater than device maximum [ 49.270580][ T4547] SELinux: failed to load policy [ 49.286174][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.295809][ T4556] loop4: detected capacity change from 0 to 512 [ 49.324757][ T4556] EXT4-fs (loop4): blocks per group (71) and clusters per group (32768) inconsistent [ 49.407103][ T4571] loop3: detected capacity change from 0 to 1024 [ 49.475193][ T4571] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.547010][ T4571] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2848: Unable to expand inode 12. Delete some EAs or run e2fsck. [ 49.561763][ T4571] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.302: bg 0: block 88: padding at end of block bitmap is not set [ 49.589097][ T4592] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.610785][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.645700][ T4594] syz.1.307 uses obsolete (PF_INET,SOCK_PACKET) [ 49.668979][ T4592] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.733201][ T4592] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.803904][ T4592] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.870881][ T4623] netlink: 'syz.1.314': attribute type 10 has an invalid length. [ 49.927839][ T4629] loop4: detected capacity change from 0 to 2048 [ 49.934553][ T4629] EXT4-fs: Ignoring removed bh option [ 49.970384][ T4623] batman_adv: batadv0: Adding interface: team0 [ 49.976800][ T4623] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 50.002128][ T4623] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 50.034321][ T4629] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.045317][ T4592] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.059212][ T4592] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.170528][ T4592] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.200839][ T4592] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.309397][ T4646] loop1: detected capacity change from 0 to 2048 [ 50.395987][ T4646] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.437209][ T59] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 50.472071][ T59] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 50.484416][ T59] EXT4-fs (loop4): This should not happen!! Data will be lost [ 50.484416][ T59] [ 50.494095][ T59] EXT4-fs (loop4): Total free blocks count 0 [ 50.500137][ T59] EXT4-fs (loop4): Free/Dirty block details [ 50.506054][ T59] EXT4-fs (loop4): free_blocks=2415919104 [ 50.511836][ T59] EXT4-fs (loop4): dirty_blocks=8224 [ 50.517227][ T59] EXT4-fs (loop4): Block reservation details [ 50.523346][ T59] EXT4-fs (loop4): i_reserved_data_blocks=514 [ 50.572952][ T37] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 2048 with error 28 [ 50.663089][ T4685] smc: net device bond0 applied user defined pnetid SYZ2 [ 50.675118][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.679998][ T4685] smc: net device bond0 erased user defined pnetid SYZ2 [ 50.775771][ T4696] loop0: detected capacity change from 0 to 2048 [ 50.783086][ T4696] EXT4-fs: Ignoring removed bh option [ 50.783436][ T4698] loop4: detected capacity change from 0 to 128 [ 50.811433][ T4696] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.882414][ T4709] loop2: detected capacity change from 0 to 2048 [ 50.900006][ T4709] EXT4-fs: Ignoring removed bh option [ 50.921837][ T4709] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.374457][ T4764] pim6reg1: entered promiscuous mode [ 51.379880][ T4764] pim6reg1: entered allmulticast mode [ 51.483297][ T4776] netlink: 'syz.3.346': attribute type 4 has an invalid length. [ 51.502457][ T3408] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 51.527170][ T3408] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 51.530374][ T4776] netlink: 'syz.3.346': attribute type 4 has an invalid length. [ 51.539469][ T3408] EXT4-fs (loop0): This should not happen!! Data will be lost [ 51.539469][ T3408] [ 51.556792][ T3408] EXT4-fs (loop0): Total free blocks count 0 [ 51.563119][ T3408] EXT4-fs (loop0): Free/Dirty block details [ 51.569026][ T3408] EXT4-fs (loop0): free_blocks=2415919104 [ 51.574790][ T3408] EXT4-fs (loop0): dirty_blocks=8224 [ 51.580128][ T3408] EXT4-fs (loop0): Block reservation details [ 51.586160][ T3408] EXT4-fs (loop0): i_reserved_data_blocks=514 [ 51.612077][ T31] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 2048 with error 28 [ 51.645208][ T4781] netlink: 8 bytes leftover after parsing attributes in process `syz.4.349'. [ 51.659277][ T29] kauditd_printk_skb: 69 callbacks suppressed [ 51.659294][ T29] audit: type=1400 audit(1744894100.180:586): avc: denied { connect } for pid=4782 comm="syz.3.350" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 51.684965][ T29] audit: type=1400 audit(1744894100.180:587): avc: denied { write } for pid=4782 comm="syz.3.350" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 51.700209][ T4781] IPVS: Error joining to the multicast group [ 51.725081][ T31] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 51.758157][ T31] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 51.770464][ T31] EXT4-fs (loop2): This should not happen!! Data will be lost [ 51.770464][ T31] [ 51.780610][ T31] EXT4-fs (loop2): Total free blocks count 0 [ 51.786608][ T31] EXT4-fs (loop2): Free/Dirty block details [ 51.792679][ T31] EXT4-fs (loop2): free_blocks=2415919104 [ 51.798420][ T31] EXT4-fs (loop2): dirty_blocks=4512 [ 51.803824][ T31] EXT4-fs (loop2): Block reservation details [ 51.809942][ T31] EXT4-fs (loop2): i_reserved_data_blocks=282 [ 51.820791][ T31] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 2048 with error 28 [ 51.833671][ T29] audit: type=1400 audit(1744894100.330:588): avc: denied { write } for pid=4787 comm="syz.4.353" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 51.978338][ T4806] netlink: 'syz.2.356': attribute type 3 has an invalid length. [ 52.018760][ T29] audit: type=1400 audit(1744896678.535:589): avc: denied { bind } for pid=4810 comm="syz.4.357" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 52.038168][ T29] audit: type=1400 audit(1744896678.535:590): avc: denied { listen } for pid=4810 comm="syz.4.357" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 52.065809][ T29] audit: type=1400 audit(1744896678.585:591): avc: denied { write } for pid=4810 comm="syz.4.357" path="socket:[6900]" dev="sockfs" ino=6900 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 52.089017][ T29] audit: type=1400 audit(1744896678.585:592): avc: denied { accept } for pid=4810 comm="syz.4.357" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 52.108481][ T29] audit: type=1400 audit(1744896678.585:593): avc: denied { read } for pid=4810 comm="syz.4.357" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 52.115699][ T4819] loop2: detected capacity change from 0 to 2048 [ 52.138099][ T4819] EXT4-fs: Ignoring removed bh option [ 52.173466][ T4819] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.196871][ T4827] loop3: detected capacity change from 0 to 2048 [ 52.221346][ T4827] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.236443][ T4827] EXT4-fs error (device loop3): ext4_ext_precache:648: inode #2: comm syz.3.361: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 52.253527][ T4827] EXT4-fs (loop3): Remounting filesystem read-only [ 52.274755][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.627940][ T29] audit: type=1400 audit(1744896679.145:594): avc: denied { create } for pid=4836 comm="syz.1.364" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 52.739804][ T29] audit: type=1400 audit(1744896679.175:595): avc: denied { bind } for pid=4836 comm="syz.1.364" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 52.863326][ T3408] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 52.878732][ T3408] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 52.890996][ T3408] EXT4-fs (loop2): This should not happen!! Data will be lost [ 52.890996][ T3408] [ 52.900725][ T3408] EXT4-fs (loop2): Total free blocks count 0 [ 52.906724][ T3408] EXT4-fs (loop2): Free/Dirty block details [ 52.907037][ T4845] loop0: detected capacity change from 0 to 4096 [ 52.912653][ T3408] EXT4-fs (loop2): free_blocks=2415919104 [ 52.912671][ T3408] EXT4-fs (loop2): dirty_blocks=8224 [ 52.912685][ T3408] EXT4-fs (loop2): Block reservation details [ 52.936096][ T3408] EXT4-fs (loop2): i_reserved_data_blocks=514 [ 52.945864][ T37] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 2048 with error 28 [ 52.961707][ T4845] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.038985][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.268967][ T4880] loop2: detected capacity change from 0 to 512 [ 53.281430][ T4878] netlink: 156 bytes leftover after parsing attributes in process `syz.3.374'. [ 53.370209][ T4886] loop2: detected capacity change from 0 to 4096 [ 53.370239][ T4889] loop0: detected capacity change from 0 to 164 [ 53.380707][ T4889] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 53.421404][ T4889] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 53.424788][ T4886] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.443394][ T4889] Symlink component flag not implemented [ 53.451283][ T4889] Symlink component flag not implemented [ 53.471375][ T4886] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 53.492121][ T4889] Symlink component flag not implemented (7) [ 53.499001][ T4889] Symlink component flag not implemented (116) [ 53.690237][ T4921] loop3: detected capacity change from 0 to 2048 [ 53.699691][ T4924] netlink: 24 bytes leftover after parsing attributes in process `syz.1.388'. [ 54.006787][ T4964] netlink: 'syz.3.396': attribute type 3 has an invalid length. [ 54.166695][ T4995] loop0: detected capacity change from 0 to 512 [ 54.174574][ T4995] EXT4-fs: Ignoring removed nobh option [ 54.186409][ T4995] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -13 [ 54.207100][ T4995] EXT4-fs error (device loop0): ext4_clear_blocks:876: inode #13: comm syz.0.403: attempt to clear invalid blocks 2 len 1 [ 54.222031][ T4995] EXT4-fs (loop0): Remounting filesystem read-only [ 54.228765][ T4995] EXT4-fs (loop0): 1 truncate cleaned up [ 54.306174][ T5002] loop3: detected capacity change from 0 to 2048 [ 54.314189][ T5002] EXT4-fs: Ignoring removed bh option [ 54.380880][ T5001] loop0: detected capacity change from 0 to 2048 [ 54.391132][ T5001] EXT4-fs: Ignoring removed bh option [ 54.682119][ T37] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 54.703386][ T37] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 54.715847][ T37] EXT4-fs (loop3): This should not happen!! Data will be lost [ 54.715847][ T37] [ 54.725732][ T37] EXT4-fs (loop3): Total free blocks count 0 [ 54.731823][ T37] EXT4-fs (loop3): Free/Dirty block details [ 54.737723][ T37] EXT4-fs (loop3): free_blocks=2415919104 [ 54.743528][ T37] EXT4-fs (loop3): dirty_blocks=8224 [ 54.748920][ T37] EXT4-fs (loop3): Block reservation details [ 54.754955][ T37] EXT4-fs (loop3): i_reserved_data_blocks=514 [ 54.776096][ T37] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 2048 with error 28 [ 54.788920][ T37] EXT4-fs (loop3): This should not happen!! Data will be lost [ 54.788920][ T37] [ 54.846333][ T5027] loop2: detected capacity change from 0 to 2048 [ 54.852438][ T12] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 54.889037][ T12] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 54.901365][ T12] EXT4-fs (loop0): This should not happen!! Data will be lost [ 54.901365][ T12] [ 54.911033][ T12] EXT4-fs (loop0): Total free blocks count 0 [ 54.917119][ T12] EXT4-fs (loop0): Free/Dirty block details [ 54.923055][ T12] EXT4-fs (loop0): free_blocks=2415919104 [ 54.928858][ T12] EXT4-fs (loop0): dirty_blocks=8224 [ 54.934339][ T12] EXT4-fs (loop0): Block reservation details [ 54.940409][ T12] EXT4-fs (loop0): i_reserved_data_blocks=514 [ 55.028660][ T12] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 2048 with error 28 [ 55.041281][ T12] EXT4-fs (loop0): This should not happen!! Data will be lost [ 55.041281][ T12] [ 55.076609][ T5040] netlink: 4 bytes leftover after parsing attributes in process `syz.3.418'. [ 55.242967][ T5048] loop2: detected capacity change from 0 to 512 [ 55.259006][ T5048] EXT4-fs (loop2): blocks per group (71) and clusters per group (32768) inconsistent [ 55.345738][ T5065] netlink: 156 bytes leftover after parsing attributes in process `syz.0.409'. [ 55.461769][ T5080] bond1: entered promiscuous mode [ 55.466866][ T5080] bond1: entered allmulticast mode [ 55.472533][ T5080] 8021q: adding VLAN 0 to HW filter on device bond1 [ 55.490931][ T5080] bond1 (unregistering): Released all slaves [ 55.522723][ T5085] loop2: detected capacity change from 0 to 1024 [ 55.567434][ T5085] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.426: bg 0: block 88: padding at end of block bitmap is not set [ 55.575879][ T5092] loop0: detected capacity change from 0 to 512 [ 55.679786][ T5101] loop1: detected capacity change from 0 to 128 [ 55.855853][ T5113] netlink: 156 bytes leftover after parsing attributes in process `syz.4.434'. [ 56.008732][ T5124] veth1_to_bond: entered promiscuous mode [ 56.022612][ T5124] veth1_to_bond: left promiscuous mode [ 56.138530][ T5130] loop4: detected capacity change from 0 to 512 [ 56.264413][ T5139] loop3: detected capacity change from 0 to 2048 [ 56.307460][ T5139] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.448: bg 0: block 65: padding at end of block bitmap is not set [ 56.324755][ T5139] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 56.337130][ T5139] EXT4-fs (loop3): This should not happen!! Data will be lost [ 56.337130][ T5139] [ 56.346870][ T5139] EXT4-fs (loop3): Total free blocks count 0 [ 56.352982][ T5139] EXT4-fs (loop3): Free/Dirty block details [ 56.358962][ T5139] EXT4-fs (loop3): free_blocks=0 [ 56.363988][ T5139] EXT4-fs (loop3): dirty_blocks=16 [ 56.369201][ T5139] EXT4-fs (loop3): Block reservation details [ 56.375236][ T5139] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 56.417420][ T5148] loop9: detected capacity change from 0 to 7 [ 56.423813][ T5148] Buffer I/O error on dev loop9, logical block 0, async page read [ 56.433028][ T5148] Buffer I/O error on dev loop9, logical block 0, async page read [ 56.440953][ T5148] loop9: unable to read partition table [ 56.446794][ T5148] loop_reread_partitions: partition scan of loop9 (�被������ڬ��dƤ����ݡ����� [ 56.446794][ T5148] U�������) failed (rc=-5) [ 56.557532][ T5167] SELinux: failed to load policy [ 56.633368][ T5175] netlink: 'syz.2.457': attribute type 10 has an invalid length. [ 56.665936][ T5175] batman_adv: batadv0: Adding interface: team0 [ 56.672239][ T5175] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.697420][ T5175] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 56.752673][ T5187] loop3: detected capacity change from 0 to 512 [ 56.764188][ T5183] bond1: entered promiscuous mode [ 56.769488][ T5183] bond1: entered allmulticast mode [ 56.787387][ T5187] EXT4-fs: Ignoring removed nobh option [ 56.798405][ T5183] 8021q: adding VLAN 0 to HW filter on device bond1 [ 56.808567][ T5187] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -13 [ 56.818117][ T5183] bond1 (unregistering): Released all slaves [ 56.853537][ T29] kauditd_printk_skb: 52 callbacks suppressed [ 56.853552][ T29] audit: type=1400 audit(1744917307.372:648): avc: denied { accept } for pid=5192 comm="syz.4.463" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 56.898443][ T5187] EXT4-fs error (device loop3): ext4_clear_blocks:876: inode #13: comm syz.3.462: attempt to clear invalid blocks 2 len 1 [ 56.942631][ T5187] EXT4-fs (loop3): Remounting filesystem read-only [ 56.956343][ T5187] EXT4-fs (loop3): 1 truncate cleaned up [ 56.958360][ T5201] loop4: detected capacity change from 0 to 1024 [ 56.978828][ T29] audit: type=1326 audit(1744917307.492:649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5198 comm="syz.0.466" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5eef84e169 code=0x0 [ 56.990285][ T5201] EXT4-fs: Ignoring removed orlov option [ 57.221789][ T5233] loop1: detected capacity change from 0 to 512 [ 57.242672][ T5233] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 57.261471][ T5233] EXT4-fs (loop1): 1 truncate cleaned up [ 57.275585][ T5237] syzkaller1: entered promiscuous mode [ 57.281136][ T5237] syzkaller1: entered allmulticast mode [ 57.299514][ T29] audit: type=1400 audit(1744922463.820:650): avc: denied { create } for pid=5230 comm="syz.1.471" name=2E02 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 57.325920][ T5233] EXT4-fs error (device loop1): ext4_generic_delete_entry:2670: inode #2: block 13: comm syz.1.471: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 57.326766][ T29] audit: type=1400 audit(1744922463.840:651): avc: denied { rename } for pid=5230 comm="syz.1.471" name="file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 57.368641][ T29] audit: type=1400 audit(1744922463.840:652): avc: denied { rmdir } for pid=5230 comm="syz.1.471" name=2E02 dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 57.413923][ T29] audit: type=1326 audit(1744922463.930:653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5242 comm="syz.4.475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f805a76e169 code=0x7ffc0000 [ 57.418883][ T5233] EXT4-fs error (device loop1) in ext4_delete_entry:2741: Corrupt filesystem [ 57.437353][ T29] audit: type=1326 audit(1744922463.930:654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5242 comm="syz.4.475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f805a76e169 code=0x7ffc0000 [ 57.488962][ T29] audit: type=1326 audit(1744922463.990:655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5242 comm="syz.4.475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f805a76e169 code=0x7ffc0000 [ 57.512355][ T29] audit: type=1326 audit(1744922463.990:656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5242 comm="syz.4.475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f805a76e169 code=0x7ffc0000 [ 57.515169][ T5233] EXT4-fs warning (device loop1): ext4_rename_delete:3728: inode #2: comm syz.1.471: Deleting old file: nlink 5, error=-117 [ 57.535786][ T29] audit: type=1326 audit(1744922463.990:657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5242 comm="syz.4.475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f805a76e169 code=0x7ffc0000 [ 57.655052][ T5257] loop1: detected capacity change from 0 to 2048 [ 57.813558][ T5257] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 57.831316][ T5257] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 9 with error 28 [ 57.843685][ T5257] EXT4-fs (loop1): This should not happen!! Data will be lost [ 57.843685][ T5257] [ 57.853364][ T5257] EXT4-fs (loop1): Total free blocks count 0 [ 57.859427][ T5257] EXT4-fs (loop1): Free/Dirty block details [ 57.865922][ T5257] EXT4-fs (loop1): free_blocks=2415919104 [ 57.871717][ T5257] EXT4-fs (loop1): dirty_blocks=16 [ 57.876857][ T5257] EXT4-fs (loop1): Block reservation details [ 57.882881][ T5257] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 57.916703][ T5277] xt_hashlimit: size too large, truncated to 1048576 [ 57.992267][ T5282] loop2: detected capacity change from 0 to 1024 [ 58.002598][ T5282] EXT4-fs: Ignoring removed oldalloc option [ 58.016588][ T5282] EXT4-fs (loop2): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 58.298224][ T5308] pim6reg1: entered promiscuous mode [ 58.303654][ T5308] pim6reg1: entered allmulticast mode [ 58.380237][ T5315] IPVS: sync thread started: state = MASTER, mcast_ifn = wg1, syncid = 262145, id = 0 [ 58.392244][ T5314] IPVS: stopping master sync thread 5315 ... [ 58.591989][ T5333] netlink: 96 bytes leftover after parsing attributes in process `syz.4.498'. [ 58.687887][ T5341] pim6reg1: entered promiscuous mode [ 58.693412][ T5341] pim6reg1: entered allmulticast mode [ 58.714834][ T5345] ������: renamed from vlan1 (while UP) [ 58.921073][ T5374] openvswitch: netlink: Message has 6 unknown bytes. [ 58.933000][ T5376] loop4: detected capacity change from 0 to 512 [ 58.983519][ T5376] EXT4-fs (loop4): 1 orphan inode deleted [ 58.990623][ T5376] ext4 filesystem being mounted at /111/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 59.138817][ T5405] loop2: detected capacity change from 0 to 512 [ 59.148998][ T5405] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 59.183199][ T5405] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ee018, mo2=0002] [ 59.223661][ T5405] System zones: 1-12 [ 59.290299][ T5405] EXT4-fs (loop2): 1 truncate cleaned up [ 59.684929][ T5475] loop3: detected capacity change from 0 to 128 [ 59.933995][ T5522] loop4: detected capacity change from 0 to 512 [ 59.966268][ T5522] EXT4-fs (loop4): 1 orphan inode deleted [ 59.980812][ T5522] ext4 filesystem being mounted at /120/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 59.993125][ T5526] loop2: detected capacity change from 0 to 1024 [ 60.024641][ T5526] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 60.055231][ T5526] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 60.067616][ T5526] EXT4-fs (loop2): This should not happen!! Data will be lost [ 60.067616][ T5526] [ 60.077610][ T5526] EXT4-fs (loop2): Total free blocks count 0 [ 60.083736][ T5526] EXT4-fs (loop2): Free/Dirty block details [ 60.089753][ T5526] EXT4-fs (loop2): free_blocks=68451041280 [ 60.095621][ T5526] EXT4-fs (loop2): dirty_blocks=80 [ 60.100822][ T5526] EXT4-fs (loop2): Block reservation details [ 60.106917][ T5526] EXT4-fs (loop2): i_reserved_data_blocks=5 [ 60.118152][ T5535] netlink: 192 bytes leftover after parsing attributes in process `+}[@'. [ 60.129582][ T12] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 64 with error 28 [ 60.142005][ T12] EXT4-fs (loop2): This should not happen!! Data will be lost [ 60.142005][ T12] [ 60.685391][ T5578] SELinux: failed to load policy [ 60.915643][ T5592] loop1: detected capacity change from 0 to 512 [ 60.930174][ T5589] loop0: detected capacity change from 0 to 1024 [ 61.017664][ T5592] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 61.044849][ T5592] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #16: comm syz.1.563: invalid indirect mapped block 83886080 (level 1) [ 61.061448][ T5592] EXT4-fs (loop1): Remounting filesystem read-only [ 61.078901][ T5592] EXT4-fs (loop1): 1 orphan inode deleted [ 61.084963][ T5592] EXT4-fs (loop1): 1 truncate cleaned up [ 61.085155][ T5598] loop3: detected capacity change from 0 to 1024 [ 62.839647][ T29] kauditd_printk_skb: 137 callbacks suppressed [ 62.839666][ T29] audit: type=1326 audit(1744966295.367:795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5703 comm="syz.2.590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc54bebe169 code=0x7ffc0000 [ 62.869390][ T29] audit: type=1326 audit(1744966295.367:796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5703 comm="syz.2.590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc54bebe169 code=0x7ffc0000 [ 62.886241][ T5706] loop4: detected capacity change from 0 to 512 [ 62.922270][ T5706] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 62.956399][ T29] audit: type=1326 audit(1744966295.417:797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5703 comm="syz.2.590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc54bebe169 code=0x7ffc0000 [ 62.979905][ T29] audit: type=1326 audit(1744966295.417:798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5703 comm="syz.2.590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc54bebe169 code=0x7ffc0000 [ 63.003517][ T29] audit: type=1326 audit(1744966295.417:799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5703 comm="syz.2.590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc54bebe169 code=0x7ffc0000 [ 63.026864][ T29] audit: type=1326 audit(1744966295.427:800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5703 comm="syz.2.590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc54bebe169 code=0x7ffc0000 [ 63.050349][ T29] audit: type=1326 audit(1744966295.427:801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5703 comm="syz.2.590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc54bebe169 code=0x7ffc0000 [ 63.073886][ T29] audit: type=1326 audit(1744966295.427:802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5703 comm="syz.2.590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=193 compat=0 ip=0x7fc54bebe169 code=0x7ffc0000 [ 63.097256][ T29] audit: type=1326 audit(1744966295.427:803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5703 comm="syz.2.590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc54bebe169 code=0x7ffc0000 [ 63.099386][ T5715] loop2: detected capacity change from 0 to 128 [ 63.121414][ T29] audit: type=1326 audit(1744966295.427:804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5703 comm="syz.2.590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc54bebe169 code=0x7ffc0000 [ 63.159937][ T5722] loop1: detected capacity change from 0 to 2048 [ 63.176666][ T5715] ext4 filesystem being mounted at /116/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 63.195486][ T5706] ext4 filesystem being mounted at /127/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 63.213569][ T5719] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.595: bg 0: block 65: padding at end of block bitmap is not set [ 63.229983][ T5719] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 63.242281][ T5719] EXT4-fs (loop1): This should not happen!! Data will be lost [ 63.242281][ T5719] [ 63.251981][ T5719] EXT4-fs (loop1): Total free blocks count 0 [ 63.257985][ T5719] EXT4-fs (loop1): Free/Dirty block details [ 63.264070][ T5719] EXT4-fs (loop1): free_blocks=0 [ 63.269062][ T5719] EXT4-fs (loop1): dirty_blocks=16 [ 63.274356][ T5719] EXT4-fs (loop1): Block reservation details [ 63.280466][ T5719] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 63.418402][ T5739] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 63.425037][ T5739] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 63.432574][ T5739] vhci_hcd vhci_hcd.0: Device attached [ 63.459713][ T5739] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(7) [ 63.466257][ T5739] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 63.473761][ T5739] vhci_hcd vhci_hcd.0: Device attached [ 63.485658][ T5739] loop1: detected capacity change from 0 to 512 [ 63.605368][ T5760] loop3: detected capacity change from 0 to 2048 [ 63.627784][ T5760] EXT4-fs: Ignoring removed bh option [ 63.772217][ T5739] EXT4-fs (loop1): too many log groups per flexible block group [ 63.780132][ T5739] EXT4-fs (loop1): failed to initialize mballoc (-12) [ 63.799351][ T5739] EXT4-fs (loop1): mount failed [ 63.966651][ T5743] vhci_hcd: connection closed [ 63.966785][ T5748] vhci_hcd: connection closed [ 63.968399][ T31] vhci_hcd: stop threads [ 63.980607][ T31] vhci_hcd: release socket [ 63.985047][ T31] vhci_hcd: disconnect device [ 63.997981][ T31] vhci_hcd: stop threads [ 64.002476][ T31] vhci_hcd: release socket [ 64.006952][ T31] vhci_hcd: disconnect device [ 64.018178][ T23] vhci_hcd: vhci_device speed not set [ 64.108445][ T5782] syzkaller0: entered allmulticast mode [ 64.114337][ T5782] syzkaller0: entered promiscuous mode [ 64.129224][ T5782] syzkaller0 (unregistering): left promiscuous mode [ 64.135871][ T5782] syzkaller0 (unregistering): left allmulticast mode [ 64.324207][ T3408] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 64.348667][ T3408] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 64.360992][ T3408] EXT4-fs (loop3): This should not happen!! Data will be lost [ 64.360992][ T3408] [ 64.370746][ T3408] EXT4-fs (loop3): Total free blocks count 0 [ 64.376931][ T3408] EXT4-fs (loop3): Free/Dirty block details [ 64.383219][ T3408] EXT4-fs (loop3): free_blocks=2415919104 [ 64.389145][ T3408] EXT4-fs (loop3): dirty_blocks=8160 [ 64.394466][ T3408] EXT4-fs (loop3): Block reservation details [ 64.400543][ T3408] EXT4-fs (loop3): i_reserved_data_blocks=510 [ 64.445049][ T3408] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 2048 with error 28 [ 64.448899][ T5793] loop2: detected capacity change from 0 to 2048 [ 64.457799][ T3408] EXT4-fs (loop3): This should not happen!! Data will be lost [ 64.457799][ T3408] [ 64.532343][ T5793] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.613: bg 0: block 65: padding at end of block bitmap is not set [ 64.564120][ T5793] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 64.576478][ T5793] EXT4-fs (loop2): This should not happen!! Data will be lost [ 64.576478][ T5793] [ 64.586255][ T5793] EXT4-fs (loop2): Total free blocks count 0 [ 64.592341][ T5793] EXT4-fs (loop2): Free/Dirty block details [ 64.598292][ T5793] EXT4-fs (loop2): free_blocks=0 [ 64.603257][ T5793] EXT4-fs (loop2): dirty_blocks=16 [ 64.608448][ T5793] EXT4-fs (loop2): Block reservation details [ 64.614465][ T5793] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 64.702164][ T5802] loop3: detected capacity change from 0 to 1024 [ 64.721392][ T5804] syzkaller0: entered promiscuous mode [ 64.727134][ T5804] syzkaller0: entered allmulticast mode [ 64.733708][ T5802] EXT4-fs: Ignoring removed nobh option [ 64.742142][ T3411] syzkaller0: tun_net_xmit 48 [ 64.754700][ T5804] syzkaller0: create flow: hash 1195505887 index 1 [ 64.771146][ T5804] syzkaller0: delete flow: hash 1195505887 index 1 [ 64.781824][ T5802] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4113: comm syz.3.612: Allocating blocks 385-513 which overlap fs metadata [ 64.807710][ T5802] EXT4-fs (loop3): pa ffff888105bfa380: logic 16, phys. 129, len 24 [ 64.815887][ T5802] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 64.865317][ T5802] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 28 [ 64.877891][ T5802] EXT4-fs (loop3): This should not happen!! Data will be lost [ 64.877891][ T5802] [ 64.887687][ T5802] EXT4-fs (loop3): Total free blocks count 0 [ 64.893867][ T5802] EXT4-fs (loop3): Free/Dirty block details [ 64.899826][ T5802] EXT4-fs (loop3): free_blocks=128 [ 64.905018][ T5802] EXT4-fs (loop3): dirty_blocks=0 [ 64.910188][ T5802] EXT4-fs (loop3): Block reservation details [ 64.916212][ T5802] EXT4-fs (loop3): i_reserved_data_blocks=0 [ 64.999785][ T5827] loop3: detected capacity change from 0 to 512 [ 65.030752][ T5827] EXT4-fs error (device loop3): ext4_do_update_inode:5211: inode #3: comm syz.3.624: corrupted inode contents [ 65.058503][ T5827] EXT4-fs error (device loop3): ext4_dirty_inode:6103: inode #3: comm syz.3.624: mark_inode_dirty error [ 65.081906][ T5827] EXT4-fs error (device loop3): ext4_do_update_inode:5211: inode #3: comm syz.3.624: corrupted inode contents [ 65.098004][ T5827] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #3: comm syz.3.624: mark_inode_dirty error [ 65.124220][ T5827] EXT4-fs error (device loop3): ext4_acquire_dquot:6935: comm syz.3.624: Failed to acquire dquot type 0 [ 65.144032][ T5827] EXT4-fs error (device loop3): ext4_do_update_inode:5211: inode #16: comm syz.3.624: corrupted inode contents [ 65.160814][ T5837] loop0: detected capacity change from 0 to 512 [ 65.183327][ T5827] EXT4-fs error (device loop3): ext4_dirty_inode:6103: inode #16: comm syz.3.624: mark_inode_dirty error [ 65.205769][ T5837] EXT4-fs (loop0): 1 truncate cleaned up [ 65.223757][ T5827] EXT4-fs error (device loop3): ext4_do_update_inode:5211: inode #16: comm syz.3.624: corrupted inode contents [ 65.259946][ T5827] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #16: comm syz.3.624: mark_inode_dirty error [ 65.282149][ T5840] netlink: 'syz.0.627': attribute type 4 has an invalid length. [ 65.285338][ T5827] EXT4-fs error (device loop3): ext4_do_update_inode:5211: inode #16: comm syz.3.624: corrupted inode contents [ 65.289841][ T5840] netlink: 'syz.0.627': attribute type 27 has an invalid length. [ 65.394733][ T5840] loop0: detected capacity change from 0 to 1024 [ 65.401812][ T5827] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 65.415519][ T5827] EXT4-fs error (device loop3): ext4_do_update_inode:5211: inode #16: comm syz.3.624: corrupted inode contents [ 65.446872][ T5827] EXT4-fs error (device loop3): ext4_truncate:4255: inode #16: comm syz.3.624: mark_inode_dirty error [ 65.459162][ T5827] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 65.470997][ T5827] EXT4-fs (loop3): 1 truncate cleaned up [ 65.477560][ T5827] ext4 filesystem being mounted at /137/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 65.518651][ T5840] EXT4-fs: Ignoring removed oldalloc option [ 65.603288][ T5849] loop3: detected capacity change from 0 to 512 [ 65.616006][ T5850] loop2: detected capacity change from 0 to 2048 [ 65.624925][ T5850] EXT4-fs: Ignoring removed bh option [ 65.631461][ T5849] EXT4-fs error (device loop3): ext4_do_update_inode:5211: inode #3: comm syz.3.629: corrupted inode contents [ 65.659809][ T5849] EXT4-fs error (device loop3): ext4_dirty_inode:6103: inode #3: comm syz.3.629: mark_inode_dirty error [ 65.674117][ T5849] EXT4-fs error (device loop3): ext4_do_update_inode:5211: inode #3: comm syz.3.629: corrupted inode contents [ 65.686518][ T5849] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #3: comm syz.3.629: mark_inode_dirty error [ 65.699181][ T5849] EXT4-fs error (device loop3): ext4_acquire_dquot:6935: comm syz.3.629: Failed to acquire dquot type 0 [ 65.718518][ T5849] EXT4-fs error (device loop3): ext4_do_update_inode:5211: inode #16: comm syz.3.629: corrupted inode contents [ 65.730760][ T5849] EXT4-fs error (device loop3): ext4_dirty_inode:6103: inode #16: comm syz.3.629: mark_inode_dirty error [ 65.750439][ T5849] EXT4-fs error (device loop3): ext4_do_update_inode:5211: inode #16: comm syz.3.629: corrupted inode contents [ 65.782668][ T5849] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #16: comm syz.3.629: mark_inode_dirty error [ 65.831422][ T5849] EXT4-fs error (device loop3): ext4_do_update_inode:5211: inode #16: comm syz.3.629: corrupted inode contents [ 65.868309][ T5849] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 65.902117][ T5849] EXT4-fs error (device loop3): ext4_do_update_inode:5211: inode #16: comm syz.3.629: corrupted inode contents [ 65.933338][ T5849] EXT4-fs error (device loop3): ext4_truncate:4255: inode #16: comm syz.3.629: mark_inode_dirty error [ 65.955797][ T5849] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 65.975403][ T5849] EXT4-fs (loop3): 1 truncate cleaned up [ 65.984873][ T5870] loop1: detected capacity change from 0 to 512 [ 66.008827][ T5849] ext4 filesystem being mounted at /138/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 66.037001][ T5870] EXT4-fs: Ignoring removed nomblk_io_submit option [ 66.062912][ T5870] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 66.071043][ T5870] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=842c01c, mo2=0002] [ 66.090094][ T5870] EXT4-fs (loop1): couldn't mount RDWR because of unsupported optional features (80) [ 66.099844][ T5870] EXT4-fs (loop1): Skipping orphan cleanup due to unknown ROCOMPAT features [ 66.156829][ T5889] loop4: detected capacity change from 0 to 512 [ 66.195120][ T5889] ext4 filesystem being mounted at /136/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 66.280545][ T5898] loop3: detected capacity change from 0 to 512 [ 66.331219][ T5903] EXT4-fs error (device loop4): ext4_do_update_inode:5211: inode #19: comm syz.4.638: corrupted inode contents [ 66.354681][ T3408] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 66.370338][ T5898] ext4 filesystem being mounted at /140/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 66.381308][ T5903] EXT4-fs error (device loop4): ext4_dirty_inode:6103: inode #19: comm syz.4.638: mark_inode_dirty error [ 66.392646][ T3408] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 66.404979][ T3408] EXT4-fs (loop2): This should not happen!! Data will be lost [ 66.404979][ T3408] [ 66.414731][ T3408] EXT4-fs (loop2): Total free blocks count 0 [ 66.420779][ T3408] EXT4-fs (loop2): Free/Dirty block details [ 66.427008][ T3408] EXT4-fs (loop2): free_blocks=2415919104 [ 66.429321][ T5903] EXT4-fs error (device loop4): ext4_do_update_inode:5211: inode #19: comm syz.4.638: corrupted inode contents [ 66.432891][ T3408] EXT4-fs (loop2): dirty_blocks=8224 [ 66.450458][ T3408] EXT4-fs (loop2): Block reservation details [ 66.456481][ T3408] EXT4-fs (loop2): i_reserved_data_blocks=514 [ 66.472505][ T5903] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2991: inode #19: comm syz.4.638: mark_inode_dirty error [ 66.485846][ T5903] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2994: inode #19: comm syz.4.638: mark inode dirty (error -117) [ 66.491341][ T358] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 2048 with error 28 [ 66.502087][ T5903] EXT4-fs warning (device loop4): ext4_evict_inode:279: xattr delete (err -117) [ 66.511349][ T358] EXT4-fs (loop2): This should not happen!! Data will be lost [ 66.511349][ T358] [ 66.537451][ T5912] pim6reg1: entered promiscuous mode [ 66.542893][ T5912] pim6reg1: entered allmulticast mode [ 66.559114][ T5914] loop3: detected capacity change from 0 to 256 [ 66.683041][ T5919] vlan2: entered allmulticast mode [ 66.688365][ T5919] bond0: entered allmulticast mode [ 66.694626][ T5922] loop2: detected capacity change from 0 to 256 [ 66.740298][ T5922] bio_check_eod: 3 callbacks suppressed [ 66.740316][ T5922] syz.2.645: attempt to access beyond end of device [ 66.740316][ T5922] loop2: rw=0, sector=256, nr_sectors = 20 limit=256 [ 66.792243][ T5924] loop3: detected capacity change from 0 to 128 [ 66.825430][ T5924] syz.3.651: attempt to access beyond end of device [ 66.825430][ T5924] loop3: rw=0, sector=121, nr_sectors = 920 limit=128 [ 66.896464][ T5932] ref_ctr increment failed for inode: 0x2af offset: 0x9 ref_ctr_offset: 0x82 of mm: 0xffff88810005f900 [ 66.927134][ T5931] uprobe: syz.2.654:5931 failed to unregister, leaking uprobe [ 66.936028][ T5936] loop4: detected capacity change from 0 to 512 [ 66.960152][ T5936] ext4 filesystem being mounted at /140/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 66.972904][ T5934] loop0: detected capacity change from 0 to 8192 [ 67.013211][ T5934] loop0: p1 p2[DM] p4 [ 67.021259][ T5934] loop0: p1 size 196608 extends beyond EOD, truncated [ 67.031164][ T5934] loop0: p2 start 4292936063 is beyond EOD, truncated [ 67.038057][ T5934] loop0: p4 size 50331648 extends beyond EOD, truncated [ 67.065085][ T5943] loop9: detected capacity change from 0 to 7 [ 67.104390][ T5943] Buffer I/O error on dev loop9, logical block 0, async page read [ 67.150718][ T5951] loop3: detected capacity change from 0 to 1024 [ 67.154302][ T5953] loop0: detected capacity change from 0 to 2048 [ 67.157158][ T5943] Buffer I/O error on dev loop9, logical block 0, async page read [ 67.171406][ T5943] loop9: unable to read partition table [ 67.186703][ T5943] loop_reread_partitions: partition scan of loop9 (�被x������ڬ��dƤ����ݡ����� [ 67.186703][ T5943] U�������) failed (rc=-5) [ 67.245413][ T5951] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 67.325189][ T5951] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 67.337577][ T5951] EXT4-fs (loop3): This should not happen!! Data will be lost [ 67.337577][ T5951] [ 67.347264][ T5951] EXT4-fs (loop3): Total free blocks count 0 [ 67.353346][ T5951] EXT4-fs (loop3): Free/Dirty block details [ 67.359376][ T5951] EXT4-fs (loop3): free_blocks=68451041280 [ 67.361624][ T5953] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, [ 67.365185][ T5951] EXT4-fs (loop3): dirty_blocks=80 [ 67.365210][ T5951] EXT4-fs (loop3): Block reservation details [ 67.365221][ T5951] EXT4-fs (loop3): i_reserved_data_blocks=5 [ 67.368598][ T5962] loop4: detected capacity change from 0 to 128 [ 67.406943][ T5967] loop2: detected capacity change from 0 to 512 [ 67.410188][ T5953] block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 67.426511][ T5962] syz.4.665: attempt to access beyond end of device [ 67.426511][ T5962] loop4: rw=0, sector=2071, nr_sectors = 1 limit=128 [ 67.463368][ T3408] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 64 with error 28 [ 67.470329][ T5953] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 28 [ 67.475708][ T3408] EXT4-fs (loop3): This should not happen!! Data will be lost [ 67.475708][ T3408] [ 67.499353][ T5953] EXT4-fs (loop0): This should not happen!! Data will be lost [ 67.499353][ T5953] [ 67.512123][ T5953] EXT4-fs (loop0): Total free blocks count 0 [ 67.512620][ T5967] EXT4-fs error (device loop2): ext4_do_update_inode:5211: inode #3: comm syz.2.667: corrupted inode contents [ 67.518400][ T5953] EXT4-fs (loop0): Free/Dirty block details [ 67.534366][ T5967] EXT4-fs error (device loop2): ext4_dirty_inode:6103: inode #3: comm syz.2.667: mark_inode_dirty error [ 67.537036][ T5953] EXT4-fs (loop0): free_blocks=2415919104 [ 67.555934][ T5953] EXT4-fs (loop0): dirty_blocks=32 [ 67.561602][ T5953] EXT4-fs (loop0): Block reservation details [ 67.561684][ T5972] loop1: detected capacity change from 0 to 2048 [ 67.562663][ T5972] EXT4-fs: Ignoring removed bh option [ 67.568376][ T5953] EXT4-fs (loop0): i_reserved_data_blocks=2 [ 67.587000][ T5967] EXT4-fs error (device loop2): ext4_do_update_inode:5211: inode #3: comm syz.2.667: corrupted inode contents [ 67.587233][ T5967] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #3: comm syz.2.667: mark_inode_dirty error [ 67.591789][ T5967] EXT4-fs error (device loop2): ext4_acquire_dquot:6935: comm syz.2.667: Failed to acquire dquot type 0 [ 67.631262][ T5967] EXT4-fs error (device loop2): ext4_do_update_inode:5211: inode #16: comm syz.2.667: corrupted inode contents [ 67.649431][ T5977] loop3: detected capacity change from 0 to 512 [ 67.656057][ T5977] EXT4-fs: Ignoring removed oldalloc option [ 67.663765][ T5967] EXT4-fs error (device loop2): ext4_dirty_inode:6103: inode #16: comm syz.2.667: mark_inode_dirty error [ 67.677781][ T5977] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 67.691971][ T5972] EXT4-fs mount: 72 callbacks suppressed [ 67.691988][ T5972] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 67.716030][ T5967] EXT4-fs error (device loop2): ext4_do_update_inode:5211: inode #16: comm syz.2.667: corrupted inode contents [ 67.729573][ T5977] EXT4-fs (loop3): 1 truncate cleaned up [ 67.735685][ T5977] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.754006][ T5967] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #16: comm syz.2.667: mark_inode_dirty error [ 67.755246][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.805074][ T5967] EXT4-fs error (device loop2): ext4_do_update_inode:5211: inode #16: comm syz.2.667: corrupted inode contents [ 67.819190][ T10] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x1 [ 67.827251][ T10] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 67.835222][ T10] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 67.843030][ T10] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 67.850851][ T10] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 67.858724][ T10] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 67.866568][ T10] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x4 [ 67.874389][ T10] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 67.882299][ T10] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 67.890100][ T10] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 67.897987][ T10] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x2 [ 67.905801][ T10] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 67.913687][ T10] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 67.921505][ T10] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x4 [ 67.929402][ T10] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 67.937175][ T10] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 67.945070][ T10] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x2 [ 67.953020][ T10] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 67.960824][ T10] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 67.968615][ T10] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 67.976418][ T10] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 67.980996][ T5967] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 67.984280][ T10] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 67.995027][ T5967] EXT4-fs error (device loop2): ext4_do_update_inode:5211: inode #16: comm syz.2.667: corrupted inode contents [ 68.000515][ T10] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 68.020146][ T10] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 68.027943][ T10] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 68.035700][ T10] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 68.043570][ T10] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 68.051481][ T10] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 68.059332][ T10] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 68.067118][ T10] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 68.074949][ T10] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 68.082988][ T10] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 68.090860][ T10] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 68.098721][ T10] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 68.106538][ T10] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 68.114339][ T10] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 68.122152][ T10] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 68.130036][ T10] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 68.140230][ T5967] EXT4-fs error (device loop2): ext4_truncate:4255: inode #16: comm syz.2.667: mark_inode_dirty error [ 68.157617][ T5967] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 68.159574][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.184585][ T10] hid-generic 0000:007F:FFFFFFFE.0001: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0 [ 68.195339][ T5967] EXT4-fs (loop2): 1 truncate cleaned up [ 68.201553][ T5967] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.214409][ T358] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 68.218505][ T5967] ext4 filesystem being mounted at /128/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 68.248954][ T29] kauditd_printk_skb: 103 callbacks suppressed [ 68.248971][ T29] audit: type=1400 audit(1744971456.769:902): avc: denied { getopt } for pid=5984 comm="syz.0.670" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 68.259034][ T358] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 68.287277][ T358] EXT4-fs (loop1): This should not happen!! Data will be lost [ 68.287277][ T358] [ 68.289139][ T5989] loop3: detected capacity change from 0 to 512 [ 68.296973][ T358] EXT4-fs (loop1): Total free blocks count 0 [ 68.309356][ T358] EXT4-fs (loop1): Free/Dirty block details [ 68.315268][ T358] EXT4-fs (loop1): free_blocks=2415919104 [ 68.321175][ T358] EXT4-fs (loop1): dirty_blocks=8224 [ 68.326578][ T358] EXT4-fs (loop1): Block reservation details [ 68.332751][ T358] EXT4-fs (loop1): i_reserved_data_blocks=514 [ 68.335266][ T5989] EXT4-fs: Ignoring removed oldalloc option [ 68.360454][ T5989] EXT4-fs error (device loop3): ext4_quota_enable:7126: inode #4: comm syz.3.674: unexpected EA_INODE flag [ 68.364373][ T358] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 2048 with error 28 [ 68.392477][ T5989] EXT4-fs error (device loop3): ext4_quota_enable:7129: comm syz.3.674: Bad quota inode: 4, type: 1 [ 68.403478][ T5989] EXT4-fs warning (device loop3): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 68.426970][ T5989] EXT4-fs (loop3): mount failed [ 68.443000][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.526228][ T6006] netlink: 100 bytes leftover after parsing attributes in process `syz.3.677'. [ 68.551929][ T6006] netlink: 24 bytes leftover after parsing attributes in process `syz.3.677'. [ 68.561460][ T6013] netlink: 4 bytes leftover after parsing attributes in process `syz.2.678'. [ 68.580448][ T6013] netlink: 28 bytes leftover after parsing attributes in process `syz.2.678'. [ 68.605871][ T6017] netlink: 8 bytes leftover after parsing attributes in process `syz.1.673'. [ 68.627867][ T29] audit: type=1400 audit(1744974035.152:903): avc: denied { ioctl } for pid=6018 comm="syz.3.679" path="net:[4026532571]" dev="nsfs" ino=4026532571 ioctlcmd=0xb708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 68.685495][ T6019] IPv6: NLM_F_CREATE should be specified when creating new route [ 68.685495][ T6027] loop2: detected capacity change from 0 to 512 [ 68.685829][ T6027] EXT4-fs: Ignoring removed oldalloc option [ 68.713703][ T6027] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 68.724742][ T29] audit: type=1400 audit(1744974035.162:904): avc: denied { read } for pid=6021 comm="+}[@" name="sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 68.747724][ T29] audit: type=1400 audit(1744974035.162:905): avc: denied { open } for pid=6021 comm="+}[@" path="/dev/sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 68.758779][ T6030] loop3: detected capacity change from 0 to 2048 [ 68.771331][ T29] audit: type=1400 audit(1744974035.162:906): avc: denied { ioctl } for pid=6021 comm="+}[@" path="/dev/sg0" dev="devtmpfs" ino=137 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 68.804662][ T6027] EXT4-fs (loop2): 1 truncate cleaned up [ 68.811685][ T6027] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.832914][ T6030] loop3: p1 < > p4 [ 68.838763][ T6030] loop3: p4 size 8388608 extends beyond EOD, truncated [ 68.912847][ T29] audit: type=1400 audit(1744974035.402:907): avc: denied { mounton } for pid=6026 comm="syz.2.683" path="/131/bus/bus" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 68.957500][ T6027] loop2: detected capacity change from 512 to 64 [ 68.975275][ T29] audit: type=1400 audit(1744974035.492:908): avc: denied { unmount } for pid=3311 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 68.997327][ T3311] EXT4-fs warning (device loop2): ext4_evict_inode:279: xattr delete (err -12) [ 69.011541][ T3311] EXT4-fs error (device loop2): ext4_lookup:1789: inode #14: comm syz-executor: invalid fast symlink length 39 [ 69.025277][ T3311] EXT4-fs error (device loop2): ext4_lookup:1789: inode #14: comm syz-executor: invalid fast symlink length 39 [ 69.265513][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.282362][ T3411] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.377116][ T29] audit: type=1400 audit(1744974035.512:909): avc: denied { remove_name } for pid=3311 comm="syz-executor" name="bus" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 69.399815][ T29] audit: type=1400 audit(1744974035.512:910): avc: denied { unlink } for pid=3311 comm="syz-executor" name="bus" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 69.421878][ T29] audit: type=1400 audit(1744974035.532:911): avc: denied { rmdir } for pid=3311 comm="syz-executor" name="lost+found" dev="loop2" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 69.493147][ T3411] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.594766][ T3411] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.681216][ T6068] loop3: detected capacity change from 0 to 764 [ 69.695884][ T6068] Symlink component flag not implemented [ 69.705394][ T6068] Symlink component flag not implemented (7) [ 69.758595][ T3411] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.782817][ T6073] wg2: entered promiscuous mode [ 69.787761][ T6073] wg2: entered allmulticast mode [ 69.852909][ T6048] chnl_net:caif_netlink_parms(): no params data found [ 69.889278][ T3411] bridge_slave_1: left allmulticast mode [ 69.894988][ T3411] bridge_slave_1: left promiscuous mode [ 69.900759][ T3411] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.935725][ T3411] bridge_slave_0: left allmulticast mode [ 69.941472][ T3411] bridge_slave_0: left promiscuous mode [ 69.947211][ T3411] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.979159][ T6095] loop1: detected capacity change from 0 to 1024 [ 69.999094][ T6095] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.024963][ T6095] ext4 filesystem being mounted at /134/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 70.053644][ T6095] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 70.070464][ T6095] EXT4-fs (loop1): Remounting filesystem read-only [ 70.077159][ T3408] EXT4-fs warning (device loop1): ext4_convert_unwritten_extents:4829: inode #15: block 1: len 3: ext4_ext_map_blocks returned -30 [ 70.115889][ T6095] syz.1.703 (6095) used greatest stack depth: 8968 bytes left [ 70.123808][ T3411] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 70.133168][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.143482][ T3411] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 70.154796][ T3411] bond0 (unregistering): Released all slaves [ 70.222113][ T3411] hsr_slave_0: left promiscuous mode [ 70.239774][ T6114] loop3: detected capacity change from 0 to 512 [ 70.247049][ T3411] hsr_slave_1: left promiscuous mode [ 70.247081][ T6114] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 70.256287][ T3411] batman_adv: batadv0: Removing interface: team0 [ 70.261459][ T6114] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 70.275837][ T6114] EXT4-fs (loop3): warning: checktime reached, running e2fsck is recommended [ 70.285325][ T3411] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 70.286406][ T6114] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 70.292796][ T3411] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 70.301692][ T6114] System zones: 0-2, 18-18, 34-34 [ 70.313342][ T6114] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1132: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 70.313503][ T3411] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 70.329494][ T6114] EXT4-fs (loop3): 1 truncate cleaned up [ 70.335258][ T3411] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 70.341717][ T6114] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.369563][ T3411] veth1_macvtap: left promiscuous mode [ 70.375926][ T3411] veth0_macvtap: left promiscuous mode [ 70.381618][ T3411] veth1_vlan: left promiscuous mode [ 70.386979][ T3411] veth0_vlan: left promiscuous mode [ 70.393619][ T6117] SELinux: Context system_u:object_r:dhcpd_unit_file_t:s0 is not valid (left unmapped). [ 70.467119][ T3411] team0 (unregistering): Port device team_slave_1 removed [ 70.477120][ T3411] team0 (unregistering): Port device team_slave_0 removed [ 70.572026][ T6048] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.579207][ T6048] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.592861][ T6048] bridge_slave_0: entered allmulticast mode [ 70.603625][ T6048] bridge_slave_0: entered promiscuous mode [ 70.615471][ T6048] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.622676][ T6048] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.629946][ T6048] bridge_slave_1: entered allmulticast mode [ 70.636647][ T6048] bridge_slave_1: entered promiscuous mode [ 70.691360][ T6048] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.713670][ T6048] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.755728][ T6048] team0: Port device team_slave_0 added [ 70.763081][ T6048] team0: Port device team_slave_1 added [ 70.797009][ T6048] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.804061][ T6048] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.830065][ T6048] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.841761][ T6048] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.848792][ T6048] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.875026][ T6048] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.911442][ T6048] hsr_slave_0: entered promiscuous mode [ 70.918889][ T6048] hsr_slave_1: entered promiscuous mode [ 70.924977][ T6048] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.930295][ T6163] netlink: 'syz.1.710': attribute type 4 has an invalid length. [ 70.932660][ T6048] Cannot create hsr debugfs directory [ 70.940237][ T6163] netlink: 'syz.1.710': attribute type 27 has an invalid length. [ 70.973660][ T6163] loop1: detected capacity change from 0 to 1024 [ 70.988889][ T6163] EXT4-fs: Ignoring removed oldalloc option [ 71.018611][ T6163] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 71.091715][ T6048] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 71.099532][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 71.111668][ T6048] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 71.121553][ T6048] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 71.153339][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.198514][ T6048] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 71.201600][ T6200] loop3: detected capacity change from 0 to 512 [ 71.229127][ T6201] loop1: detected capacity change from 0 to 2048 [ 71.235716][ T6201] EXT4-fs: Ignoring removed bh option [ 71.243313][ T6200] EXT4-fs (loop3): blocks per group (95) and clusters per group (32768) inconsistent [ 71.256801][ T6048] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.263941][ T6048] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.271276][ T6048] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.278571][ T6048] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.315832][ T6201] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.456577][ T6048] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.520366][ T6048] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.571628][ T31] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.617689][ T31] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.654669][ T358] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.661769][ T358] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.740114][ T358] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.747486][ T358] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.833309][ T6269] pim6reg1: entered promiscuous mode [ 71.838722][ T6269] pim6reg1: entered allmulticast mode [ 71.965708][ T6048] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.052368][ T3408] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 72.068433][ T3408] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 72.080702][ T3408] EXT4-fs (loop1): This should not happen!! Data will be lost [ 72.080702][ T3408] [ 72.090395][ T3408] EXT4-fs (loop1): Total free blocks count 0 [ 72.096426][ T3408] EXT4-fs (loop1): Free/Dirty block details [ 72.102461][ T3408] EXT4-fs (loop1): free_blocks=2415919104 [ 72.108268][ T3408] EXT4-fs (loop1): dirty_blocks=5648 [ 72.113571][ T3408] EXT4-fs (loop1): Block reservation details [ 72.119593][ T3408] EXT4-fs (loop1): i_reserved_data_blocks=353 [ 72.200879][ T3408] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 2048 with error 28 [ 72.309244][ T6048] veth0_vlan: entered promiscuous mode [ 72.351445][ T6048] veth1_vlan: entered promiscuous mode [ 72.389813][ T6342] pim6reg1: entered promiscuous mode [ 72.395160][ T6342] pim6reg1: entered allmulticast mode [ 72.412142][ T6348] loop1: detected capacity change from 0 to 512 [ 72.424472][ T6048] veth0_macvtap: entered promiscuous mode [ 72.451060][ T6048] veth1_macvtap: entered promiscuous mode [ 72.462158][ T6348] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.477343][ T6348] ext4 filesystem being mounted at /139/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 72.496784][ T6048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.501550][ T6350] loop0: detected capacity change from 0 to 8192 [ 72.507285][ T6048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.523499][ T6048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.534007][ T6048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.553634][ T6048] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.564164][ T6048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.569322][ T6356] loop3: detected capacity change from 0 to 128 [ 72.574730][ T6048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.590935][ T6048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.601460][ T6048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.612402][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.623589][ T6048] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.636091][ T6356] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 72.649270][ T6350] loop0: p1 p2 p3 p4 [ 72.653387][ T6350] loop0: p1 start 67159808 is beyond EOD, truncated [ 72.657428][ T6356] ext4 filesystem being mounted at /166/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 72.660174][ T6350] loop0: p2 size 130943 extends beyond EOD, truncated [ 72.698643][ T6048] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.707657][ T6048] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.716463][ T6048] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.725293][ T6048] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.738445][ T6350] loop0: p3 start 340266 is beyond EOD, truncated [ 72.745046][ T6350] loop0: p4 size 3599499264 extends beyond EOD, truncated [ 72.756208][ T6362] loop4: detected capacity change from 0 to 2048 [ 72.785483][ T6367] loop1: detected capacity change from 0 to 128 [ 72.861582][ T6367] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 72.867243][ T3302] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 72.875739][ T6362] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.910203][ T3294] udevd[3294]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 72.922772][ T6367] ext4 filesystem being mounted at /140/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 72.946983][ T6362] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 72.964139][ T6362] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 72.976402][ T6362] EXT4-fs (loop4): This should not happen!! Data will be lost [ 72.976402][ T6362] [ 72.986082][ T6362] EXT4-fs (loop4): Total free blocks count 0 [ 72.988962][ T6386] loop5: detected capacity change from 0 to 512 [ 72.992433][ T6362] EXT4-fs (loop4): Free/Dirty block details [ 73.004633][ T6362] EXT4-fs (loop4): free_blocks=2415919504 [ 73.010410][ T6362] EXT4-fs (loop4): dirty_blocks=16 [ 73.015627][ T6362] EXT4-fs (loop4): Block reservation details [ 73.018117][ T6386] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 73.021640][ T6362] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 73.056609][ T3302] ================================================================== [ 73.064737][ T3302] BUG: KCSAN: data-race in __find_get_block / has_bh_in_lru [ 73.072062][ T3302] [ 73.074476][ T3302] read-write to 0xffff888237c26b30 of 8 bytes by task 6386 on cpu 0: [ 73.082541][ T3302] __find_get_block+0x430/0x8a0 [ 73.087433][ T3302] bdev_getblk+0x139/0x3b0 [ 73.091875][ T3302] __ext4_get_inode_loc+0x328/0x9a0 [ 73.097094][ T3302] __ext4_iget+0x312/0x1ee0 [ 73.101611][ T3302] ext4_orphan_get+0x159/0x400 [ 73.106389][ T3302] ext4_orphan_cleanup+0x5e3/0x9f0 [ 73.111785][ T3302] ext4_fill_super+0x3215/0x3580 [ 73.116769][ T3302] get_tree_bdev_flags+0x2b4/0x330 [ 73.121909][ T3302] get_tree_bdev+0x1f/0x30 [ 73.126346][ T3302] ext4_get_tree+0x1c/0x30 [ 73.130790][ T3302] vfs_get_tree+0x56/0x1e0 [ 73.135232][ T3302] do_new_mount+0x246/0x6b0 [ 73.139759][ T3302] path_mount+0x49b/0xb30 [ 73.144111][ T3302] __se_sys_mount+0x28f/0x2e0 [ 73.148809][ T3302] __x64_sys_mount+0x67/0x80 [ 73.153419][ T3302] x64_sys_call+0xd11/0x2e10 [ 73.158020][ T3302] do_syscall_64+0xc9/0x1c0 [ 73.162563][ T3302] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.168467][ T3302] [ 73.170791][ T3302] read to 0xffff888237c26b30 of 8 bytes by task 3302 on cpu 1: [ 73.178337][ T3302] has_bh_in_lru+0x35/0x1f0 [ 73.182867][ T3302] __lru_add_drain_all+0x23f/0x3f0 [ 73.188113][ T3302] lru_add_drain_all+0x10/0x20 [ 73.193428][ T3302] invalidate_bdev+0x47/0x70 [ 73.198040][ T3302] ext4_put_super+0x65b/0x910 [ 73.202749][ T3302] generic_shutdown_super+0xe5/0x220 [ 73.208082][ T3302] kill_block_super+0x2a/0x70 [ 73.212785][ T3302] ext4_kill_sb+0x44/0x80 [ 73.217128][ T3302] deactivate_locked_super+0x7d/0x1c0 [ 73.222519][ T3302] deactivate_super+0x9f/0xb0 [ 73.227212][ T3302] cleanup_mnt+0x26e/0x2e0 [ 73.231634][ T3302] __cleanup_mnt+0x19/0x20 [ 73.236082][ T3302] task_work_run+0x13c/0x1b0 [ 73.240684][ T3302] syscall_exit_to_user_mode+0xa8/0x120 [ 73.246250][ T3302] do_syscall_64+0xd6/0x1c0 [ 73.250854][ T3302] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.256769][ T3302] [ 73.259093][ T3302] value changed: 0x0000000000000000 -> 0xffff88811dc8aaf8 [ 73.266198][ T3302] [ 73.268517][ T3302] Reported by Kernel Concurrency Sanitizer on: [ 73.274689][ T3302] CPU: 1 UID: 0 PID: 3302 Comm: syz-executor Not tainted 6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 PREEMPT(voluntary) [ 73.287294][ T3302] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 73.297440][ T3302] ================================================================== [ 73.324629][ T6386] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #16: comm syz.5.736: invalid indirect mapped block 83886080 (level 1) [ 73.345251][ T6386] EXT4-fs (loop5): Remounting filesystem read-only [ 73.352430][ T6386] EXT4-fs (loop5): 1 orphan inode deleted [ 73.358283][ T6386] EXT4-fs (loop5): 1 truncate cleaned up [ 73.369063][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.369329][ T6386] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.393381][ T3303] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 73.433010][ T29] kauditd_printk_skb: 123 callbacks suppressed [ 73.433027][ T29] audit: type=1400 audit(1744989507.955:1035): avc: denied { mounton } for pid=6385 comm="syz.5.736" path="/1/bus/file0" dev="loop5" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 73.501293][ T6048] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.