last executing test programs: 5.172383309s ago: executing program 1 (id=37310): bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="050000c3040000009900000001"], 0x48) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000070000008500000086000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) connect$unix(0xffffffffffffffff, 0x0, 0x0) mq_unlink(0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000009180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000040000850000007200000095"], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) write(r5, &(0x7f0000000000)="240000005800410f9c00f4f90085b3a85c91fddf080001000501009f0800028001000000", 0x24) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r4, 0x400455c8, 0x0) syz_usb_connect(0x2, 0xfffffffffffffe86, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r6 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r6, 0x89e3, 0x0) mount(0x0, 0x0, &(0x7f0000000080)='adfs\x00', 0x220ac08, 0x0) signalfd(0xffffffffffffffff, &(0x7f00000001c0)={[0xffffffffffffffff]}, 0x8) 4.063845232s ago: executing program 4 (id=37327): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f00000000c0)="91b8a91fd3108691bbc4173c3d6f357d027273117b3d0f171ba4ac4703cad036e68907e50e9997cd9c07bd75e6ff", 0x2e}, {&(0x7f0000001c00)="4490137c227c56ee66c372f3105eb186dd8062fad2d5b5bfb0ba068e74a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9afda48e71255a747b6d03097385fb05cf8db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536025af1dea54e527c68b0ff250261953f2da79a78104c2d9e", 0x75}, {&(0x7f0000000640)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb9918e6c0827686e59209d2e02c9210fd8048f04ad6c42200fd9232f5aa6a361816bf21afb8473a064f1988536d4b5888807b3aaafaf59f53121782a0a9370dc0feae", 0x9e}, {&(0x7f0000000300)}, {&(0x7f0000000400)="0f7c77", 0x3}], 0x5}}, {{0x0, 0x0, &(0x7f0000000480)}}, {{0x0, 0x0, &(0x7f00000009c0)=[{0x0}, {&(0x7f0000000840)="8d684aa45f4b69499d707f3c8d114132fee1eafdcbbc5a16cb7b2841192b5779f99579e5c788b15b023df831028b9e6b5e9edd619e22626535212de5a998c5b793abdd7336cd8eb19e2fbd9a6ac2ca9c0f138ee10572672999ca4f51c09f9810459bad7e7bc28fc8890224dc01efcc276e62afe52450049cb6a165ce771a64b46f9b283ba8083e05c82291ed3bf4408b57142db3ae3da83206613704b856045dab", 0xa1}], 0x2}}, {{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f0000001180)="dc09ad32bdb1c12a58eac5aab96535f58c67fb9fe1895a8f009f613ec01a0a69b2c9a0951e8a3e0493ba11f2544a9ce70a53a57a08710fe5bfb49a171137f27920651aa9e1d2b425764fdc57f5b5ed58ff6ae812f492717424246a5fb27b686152ef0918f4c4d5ceb0e046d8540027647c31f842e857f23b9988fb032980992659e4f5c01e881237aac6830d495bde9bb2ec7c4af4e37f79d5a0fa2cc5585d7c8406c2", 0xa3}, {&(0x7f0000001240)="d61f65ae509c2dfcae0d3583f8d9f2", 0xf}], 0x2}}], 0x4, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f00000001c0)="153529b08eda7117f7fba64096575aaf02b5f4a605af08949be00e4be027e61174fd50bb48cd44b0b21bca1b21cec9d11e9729fad985a73e2b8b8642128b277831d20c21107e9c5079c356d1bfa3a62b749a3962f3e57f61d796f7e00563a7", 0xffffffffffffff6e, 0x10008095, 0x0, 0x0) 3.921923581s ago: executing program 2 (id=37330): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = add_key$keyring(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, r5, 0x112012) 3.112114306s ago: executing program 4 (id=37339): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0xfffffe42}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x700, 0x0, 0x0}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000001480)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newtfilter={0x48, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {}, {0xd, 0xfff1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x18, 0x2, [@TCA_CGROUP_EMATCHES={0x14, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0xc, 0x1, 0x0, 0x0, {{0x3, 0x9, 0x80}}}]}]}]}}]}, 0x48}}, 0x1) socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4000000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000100000180012800e0001007769726567756172640000000400028008000a00", @ANYRES32], 0x40}, 0x1, 0x0, 0x0, 0x800}, 0xc0b0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=@ipv6_newroute={0x1c, 0x18, 0x1, 0x70bd2c, 0x0, {0xa, 0x0, 0x14, 0x0, 0xfe, 0x4, 0xff, 0x6}}, 0x1c}}, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.967573575s ago: executing program 2 (id=37340): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f00000000c0)="91b8a91fd3108691bbc4173c3d6f357d027273117b3d0f171ba4ac4703cad036e68907e50e9997cd9c07bd75e6ff", 0x2e}, {&(0x7f0000001c00)="4490137c227c56ee66c372f3105eb186dd8062fad2d5b5bfb0ba068e74a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9afda48e71255a747b6d03097385fb05cf8db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536025af1dea54e527c68b0ff250261953f2da79a78104c2d9e7b16ed86b124945aa9ab7581ebd385fb61210c410d799168ffc4b64677af924affd442035db81e18c2d2462d0bb25fff9d3b1ce903597992b2a4d541611ce77f58dce7c9500118229e7cdf4ca7f6adca92c73d97ce54164c1942b25686866f6b53fe7e75cf6854284d501f8535bec8e020b41fb2f8", 0xea}, {&(0x7f0000000300)}, {&(0x7f0000000400)="0f7c77b4806d", 0x6}], 0x4}}, {{0x0, 0x0, &(0x7f0000000480)}}, {{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000140)="f77d2b5dd5f7d74f0748cf3d2cf218d644566a14103b1c7dd35fd2951bd022f10f2dc7f4ce0d8ac5f4abaca4b97b706153756913b7dd48248b5bfb10460019248bf238743fa2aeb5bef21ce832db670920dc5e911ef2ad63e849901d1001d7545517fd18b5d29978f32a5b5c81755cb89cc049095876", 0x76}, {&(0x7f0000000840)="8d684aa45f4b69499d707f3c8d114132fee1eafdcbbc5a16cb7b2841192b5779f99579e5c788b15b023df831028b9e6b5e9edd619e22626535212de5a998c5b793abdd7336cd8eb19e2fbd9a6ac2ca9c0f138ee10572672999ca4f51c09f9810459bad7e7b", 0x65}], 0x2}}, {{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f0000001180)="dc09ad32bdb1c12a58eac5aab96535f58c67fb9fe1895a8f009f613ec01a0a69b2c9a0951e8a3e0493ba11f2544a9ce70a53a57a08710fe5bfb49a171137f27920651aa9e1d2b425764fdc57f5b5ed58ff6ae812f492", 0x56}, {&(0x7f0000001240)="d61f65ae", 0x4}], 0x2}}], 0x4, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f00000001c0)="153529b08eda7117f7fba64096575aaf02b5f4a605af08949be00e4be027e61174fd50bb48cd44b0b21bca1b21cec9d11e9729fad985a73e2b8b8642128b277831d20c21107e9c5079c356d1bfa3a62b749a3962f3e57f61d796f7e00563a7", 0xffffffffffffff6e, 0x10008095, 0x0, 0x0) 2.935436319s ago: executing program 4 (id=37341): syz_io_uring_setup(0x4b5, &(0x7f0000010400)={0x0, 0x86e1, 0x1, 0x8, 0xa0}, &(0x7f0000010080), &(0x7f0000000000)) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f00000005c0)={[{@acl}, {@nodioread_nolock}, {@minixdf}, {@grpid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@init_itable}, {@debug}, {@acl}, {@noinit_itable}]}, 0xfc, 0x587, &(0x7f0000000cc0)="$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") r0 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r0, 0x2007ffc) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000006c0)={&(0x7f0000000140), 0xc, &(0x7f0000000640)={&(0x7f00000001c0)={0x28, 0x0, 0x2, 0x70bd25, 0x25dfdbfd, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x4040804) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendto$inet6(r1, &(0x7f00000005c0)="f5", 0x1, 0x20000880, &(0x7f0000000240)={0xa, 0x4e20, 0xfffffffc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @rand_addr=' \x01\x00', 0xfffffffd}, 0x1c) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x103, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)=r2}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={0x0}, 0x18) sendfile(r0, r0, 0x0, 0x800000009) 2.824253954s ago: executing program 4 (id=37342): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4c084}, 0x20000000) sendmsg$NFT_BATCH(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a54000000030a0fdb00000000000000000a0060050900030073797a30000000000900010073797a310000000014000480080002403cb140bb08000140000000030a000700726f757465000000080005400000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000850}, 0x4000840) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffeff) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000003c0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x280024}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000540)='\x00', 0x1}], 0x1}}], 0x1, 0x1) 2.748360543s ago: executing program 4 (id=37344): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_NAME(0xf, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48284b70043dc6124d877142a48448b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68af2ad0810000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d4023f210fa34b63a715a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900000000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b6c7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48fc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f01000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb796ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab04000000ffe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890decace0200f404e4e1f74b7eed82571be54c72d978cf906df0042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef29cd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9fdc75aaaf0100483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a998de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270bb29b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214d00000000d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ce21d69993e9960ff5f76015e6c354463d7d0917fc80e5009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab4000000000000000028df75cf43f8ecc8d37b126602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd63bed8d31c31c37a373d4efd89fa516dab183ee65744fb8fc4f9ce2242e0f00000000010000000000000000000057d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fa03b84f63e022fe755f4007a4a899eaf52c4f49198e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c716357d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c24936615ee68538e8fddd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba1c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63c41cbde2ba66ad81168070c8c6e18a6e452a31bde54ad3e16304d06a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c7340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b9e6626f19eecb87e39175e85eff010000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f14eafe4b28ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1bfeef448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1099e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f9491bca7a8c59363799be70018c25ece5ad7307dc7a95c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2cdfb7fea73ca18874664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677ec97c5c568a89d6e36b165c391339878b699644c96bd6ea589765ed2a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae2676384ff799783f55d7e5a1a092a01b965dc99cb7a9d98440c355927629f2bcf9dc2396eb2f5d25829715b24327642ac4741201014a95e0e65e12cdf27e19043e3c5d3e798375cead35b9a93190a52cdecaaccc854a1d41ef365303f0e9b4fc969c9dab6d00000000000000000000008f6555f3b7d5021dfc8eb504f1e4fef716d60f0d50b03fc014fd3dff46f56750f0ba4f1b9f7de5c17e7d1f18522897edab8e9e76b667ec6b01908400f55e16f0cfbf026be5f5acc681053f697d62b3545aec4606e190216c22c1d8807b6c43f0f0a4b53619fe5c9412821c3816194a5e29cf12cc7a197b5bdafb096d2d7f6be483814c92ef29c3a21c169794c7de3b4c706f4de5f4b93c831944c7b66fa49f317aa22dbc211e19f031c4f8bee14ecd5eb061a052044adc4dd1b63a1500a9c0e09dbba23f2726a55975efb4519d864d984dcb3a1dcafa1124a6b004029a706478df3be2438d2e35e6ca674dc190143a0b6f7db3408c0c08011e5d8f54711a0bd410ab53a15b1596cb77d2b58df2d8d8"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r1}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000040)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000380)="b5", 0x1}], 0x1}, 0x1000000}], 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r2 = getpid() r3 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r4, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r2}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0xb0) 2.461483371s ago: executing program 4 (id=37347): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mincore(&(0x7f0000813000/0x1000)=nil, 0x1000, 0x0) r1 = socket$caif_stream(0x25, 0x1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r2}, 0x10) sendmmsg$inet(r1, &(0x7f0000000040)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000380)="b5", 0x1}], 0x1}, 0x1000000}], 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r3 = getpid() r4 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r5, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r3}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0xb0) 2.331635317s ago: executing program 3 (id=37348): bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a000000070000000080000001"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000d0039000000000000b4a518110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f0000000a00)={[{@init_itable_val={'init_itable', 0x3d, 0x1}}, {@errors_remount}, {@resgid}, {@barrier}, {@bsdgroups}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}]}, 0x1, 0x783, &(0x7f0000001340)="$eJzs3M9rXOUaAOD3nGaa/si9kwt3ce+mCi20UDpJmk27Mm7ETaFQcFtDMgkhJ5mSmdQkFpq6E4TabFQE0b1Lt0Kpf4A7KSi4F0RrXKibkTOZTNt0Zjptk04bnwdO5vvOfN9533dm8uUcyJkA/rFezX8kEUMRcTEiis39aUQcbLQORaxvjdu8d20q35Ko1y/9kuTTYrNebB0raT4ejcaU+F9E3ClEnH7v0bjV1bX5ySwrLzX7I7WFKyPV1bUzcwuTs+XZ8uLY+PnRc+Pj50bHd63WE2+dP3zr2zc2Nr77qnbz2MCZJCYadUeztl0L9ICt16QQEzv2L+5FsD5Kehgz8BzyAACgu/w8/0Dz3KwQxTjQ7SzNCRwAAAC8lOqD9V792fNIAAAA4AWTRL8zAAAAAPbW9v8BbN/bu1f3wXby8+sRMdwu/kDjHuKIQ1GIiCObyUO3HyRb0+CZrN+IiNsTbT5/vdzR3N3o/ebh3Tkiu+12vv5MtFt/0tb6E23Wn4Ht7054Rp3Xv/vxD3RY/y72GOPrz/5f6Bj/RnXl/WPt4iet+EmH+G/3GP/mxge3Oj1X/yLiZNu/P8lDsbp8P8TIzFzW7lerle6dv07d7Vx/xJFH4idJI2rSvf4rPdb/7uZv8+td4p863v3934o/+NC8/DPxYTOPNCJuNR/z/saOGMcXvv/m0cjJ+nb86Q6vf/v3/81W/Z/3WP+PXw6u9DgUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGtKIGIokLbXaaVoqRRyNiP/GkTSrVGunZyrLi9P5cxHDUUhn5rLyaEQUt/pJ3h9rtO/3z+7oj0fEf344vBV0LiuXpirZdL+LBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoOVoRAxFkpYiIo2I34tpWir1OysAAABg1w33OwEAAABgz7n+BwAAgP3vaa//k13OAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANjXLl64kG/1zXvXpvL+9NXV5fnK1TPT5ep8aWF5qjRVWbpSmq1UZrNyaaqy8LjjpRExdj6WV0Zq5WptpLq6dnmhsrxYuzy3MDlbvlwuPJeqAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeFJDjS1JSxGRNtppWipF/CsihqOQzMxl5dGI+HdE3C0WBvP+WL+TBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYNdVV9fmJ7OsvPRyN+r7q5yeG5FEvABpdGh80nxXuo1J1iP6nmraTPRZjhPxJLOuP+Zl6XfjlT6tRwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9Fd1dW1+MsvKS9V+ZwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEB/pT8lEZFvJ4snhnY+ezD5o9h4jIh3Pr300cpkrbY0lu//tbW/9nFz/9kHJl5/njUAAADAvvfakwzevk7fvo4HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADoVXV1bX4yy8pLe9iIG/2uEgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeBp/BwAA//9Js7nR") r3 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) write$P9_RREADLINK(r3, &(0x7f0000000000)={0xffffffffffffff23, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) fadvise64(r3, 0x7f, 0x0, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r7}, 0x4) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r8}, 0x10) r9 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r9, 0x10e, 0xc, &(0x7f0000000200)=0x5, 0x4) sendmsg$nl_generic(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="180000003a00350200000000fcdbdf250a00000004"], 0x18}}, 0x8000) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x60, r10, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x4c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "e3de3d7b4cd07ec3ee777de774fc7987cca41989"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xffffffff}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)={0x3c, r5, 0x1, 0x0, 0x0, {{}, {}, {0x20, 0x17, {0x0, 0x0, @l2={'eth', 0x3a, 'veth0_macvtap\x00'}}}}}, 0x3c}}, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x2, 0x1, @buffer={0x300, 0x0, 0x0}, &(0x7f0000000380)="2593", 0x0, 0xffffffff, 0x30, 0x0, 0x0}) 2.272752785s ago: executing program 1 (id=37349): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$netlink(0x10, 0x3, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000088fe508a8500000004000000850000000500000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r1}, 0x18) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) socket$inet6_tcp(0xa, 0x1, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b45602067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03adcac4b74ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) 2.250948538s ago: executing program 1 (id=37350): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = add_key$keyring(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, r5, 0x112012) 2.15774151s ago: executing program 3 (id=37351): r0 = memfd_secret(0x80000) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000740)=ANY=[@ANYBLOB="61124c000000000061138c0000000000bf200000000000000703000008ff0200ad0301000000000095000000000000006916000000000000bf67000000000000170600000fff07006706000002000000070600000ee60000bf050000000000001f650000000000006507000002000000070700004c0000001f75000000000000bf54000000000000070500000419311f2d3001000000000095000000000000000500000000000000950000000000000032ed3c5be95e76b67754bb12dc8c27df8ecf264e0f84f9f17d3c30e3c72fe9751f008554bb4f2278af6d71d79a5e12810a089dc1d4681d295c45a674f888a08034b7dd399703d6c4f633a9a4f16d0a3e1282ee45a010fb94fa9de56c9d8a814261bdb94a65f78238b89dc6c60bf70d742a81b72bab8395fa64810b5b1bfd3782519518c505000000b8fab4d4d897db2c544c0e0895a9044f50c50b8eac8c63d2b1cd06a39702bd547f5ebaa69520bbb15f4f01cef3c9bacec15e2e3b2bd352e93a22adfe8efe33ff2f8ee5476d4ef7a6f0c4704403b9bad2b648e90fff24f69a5ef05f5408ea197ed09a9510ee6063229de2984abdd46ea3ec78e3127002ed37c2564bd98a621483fb2a5ff221e0d831f24759d17b8c59d0f2b0727f6b7958fb5b939af4be5e55a95f8c6d785a91c7c3f0c17ae7f9ac5ff05f5ecddf0cef90d50e763be96496661c749e21ab63a1f50b30a65a9027ba357bf8c614497ee59b68bf6a5d45c81c567e347d54574164bbea3e7b7f8a13cce7014137f250370b8a70ae3eaf6d6f17759c3886871e97d063b7f26eed3226bb0b9ee6320a2b02fea7a06a0e37182adf4b1be6f29358d4f5dfec405bde000000000000000000000000000000902e647cc5962eccaad64429335f3ce2a10ce72da82875427c1d16db24dca08487ba41a3fb337f8432d8176a515229e32ee11a1dd23dac038f989eafdd67f60b63f7be4d1bf325b57335b9973c73bfa89517a98b1fc15f8a2713718feb01059d570a0000e3b2a93bd745a74f9bf7f7abc5d15d56331055cc0820c5c9d676d92557c4e47cfbe27f91e0eb18e21dfdab3c84ec11377fbb00000000848060962bcbc47cefd1a2a7bd3b646614bf7cd3495663de5b63f6b5910daee8ebb7ba84a8b5b6f2d1fbc22a51a500f94c871d5e1d31ab5d7a89965bbdbf355a8544e1688a61f459f3618b3a5416eb143180d3d2c5f4e0b1a556422038801703e109e23944e53f230a3537a5412c7d0bf278c6c1684dd8de90aaa33f47dc2c7b5e4f73784fd31aa2f9d1b1623734f9cf84718b2bad31f651e3607f3ac6c427cb6c0652d21ecd4b29e96c0a3781ee820faab71040768f6b08a69fdfd0b2b7be25f19500c1b8330994efb57a53c1a67bda909630f75738ab40e7ab63d527d6c1e8cf611f05c1b6d0da1ba84d405b4d834162c88022a4625a5f7c431c39f3f9a7789f9b668ec4da9f1a981086dcf4c5a940691f9638ce34dba904483f2ed4e7a713b7eac29c5e122f1b6acd6f1da2"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000280)={r1, r0, 0x2e, 0x4608, @void}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000840)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r2}, 0x10) r3 = syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x14) sendmsg$netlink(r4, &(0x7f0000000500)={&(0x7f0000000200)=@proc={0x10, 0x0, 0x25dfdbfb, 0x40000}, 0xc, &(0x7f0000000580), 0x0, &(0x7f0000000300)=[@cred={{0x1c, 0x1, 0x2, {r3, 0xffffffffffffffff}}}], 0x20, 0x8000}, 0x4484c) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a2f000000000800410072786500140033007465616d5f736c6176655f30"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x8844) 2.035140876s ago: executing program 2 (id=37352): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e0000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x8}, 0x18) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close_range(r0, 0xffffffffffffffff, 0x0) 2.034501946s ago: executing program 3 (id=37353): syz_io_uring_setup(0x4b5, &(0x7f0000010400)={0x0, 0x86e1, 0x1, 0x8, 0xa0}, &(0x7f0000010080), &(0x7f0000000000)) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f00000005c0)={[{@acl}, {@nodioread_nolock}, {@minixdf}, {@grpid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@init_itable}, {@debug}, {@acl}, {@noinit_itable}]}, 0xfc, 0x587, &(0x7f0000000cc0)="$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") r0 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r0, 0x2007ffc) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000006c0)={&(0x7f0000000140), 0xc, &(0x7f0000000640)={&(0x7f00000001c0)={0x28, 0x0, 0x2, 0x70bd25, 0x25dfdbfd, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x4040804) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendto$inet6(r1, &(0x7f00000005c0)="f5", 0x1, 0x20000880, &(0x7f0000000240)={0xa, 0x4e20, 0xfffffffc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @rand_addr=' \x01\x00', 0xfffffffd}, 0x1c) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x103, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)=r2}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={0x0}, 0x18) sendfile(r0, r0, 0x0, 0x800000009) 2.027967197s ago: executing program 2 (id=37354): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f00000000c0)="91b8a91fd3108691bbc4173c3d6f357d027273117b3d0f171ba4ac4703cad036e68907e50e9997cd9c07bd75e6ff", 0x2e}, {&(0x7f0000001c00)="4490137c227c56ee66c372f3105eb186dd8062fad2d5b5bfb0ba068e74a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9afda48e71255a747b6d03097385fb05cf8db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536025af1dea54e527c68b0ff250261953f2da79a78104c2d9e7b16ed86b124945aa9ab7581ebd385fb61210c410d799168ffc4b64677af924affd442035db81e18c2d2462d0bb25fff9d3b1ce903597992b2a4d541611ce77f58dce7c9500118229e7cdf4ca7f6adca92c73d97ce54164c1942b25686866f6b53fe7e75cf6854284d501f8535bec8e020b41fb2f8", 0xea}, {&(0x7f0000000300)}, {&(0x7f0000000400)="0f7c77b4806d72cf5f68d99e", 0xc}], 0x4}}, {{0x0, 0x0, &(0x7f0000000480)}}, {{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000140)="f77d2b5dd5f7d74f0748cf3d2cf218d644566a14103b1c7dd35fd2951bd022f10f2dc7f4ce0d8ac5f4abaca4b97b706153756913b7dd48248b5bfb10460019248bf238743fa2aeb5bef21ce832db670920dc5e911ef2ad63e849901d1001d7545517fd18b5d29978f32a5b5c81755cb89cc049095876", 0x76}, {&(0x7f0000000840)="8d684aa45f4b69499d707f3c8d114132fee1eafdcbbc5a16cb7b2841192b5779f99579e5c788b15b023df831028b9e6b5e9edd619e22626535212de5a998c5b793abdd7336cd8eb19e2fbd9a6ac2ca9c0f138ee10572672999ca4f51c09f9810459bad7e", 0x64}], 0x2}}, {{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f0000001180)="dc09ad32bdb1c12a58eac5aab96535f58c67fb9fe1895a8f009f613ec01a0a69b2c9a0951e8a3e0493ba11f2544a9ce70a53a57a08710fe5bfb49a171137f27920651aa9e1d2b425764fdc57f5b5ed58ff6ae812f492", 0x56}], 0x1}}], 0x4, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f00000001c0)="153529b08eda7117f7fba64096575aaf02b5f4a605af08949be00e4be027e61174fd50bb48cd44b0b21bca1b21cec9d11e9729fad985a73e2b8b8642128b277831d20c21107e9c5079c356d1bfa3a62b749a3962f3e57f61d796f7e00563a7", 0xffffffffffffff6e, 0x10008095, 0x0, 0x0) 1.744620803s ago: executing program 3 (id=37355): bpf$MAP_CREATE(0x0, 0x0, 0x50) memfd_secret(0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0xfffffe42}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x700, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newtfilter={0x48, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {}, {0xd, 0xfff1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x18, 0x2, [@TCA_CGROUP_EMATCHES={0x14, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0xc, 0x1, 0x0, 0x0, {{0x3, 0x9, 0x80}}}]}]}]}}]}, 0x48}}, 0x1) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4000000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000100000180012800e0001007769", @ANYRES32], 0x40}, 0x1, 0x0, 0x0, 0x800}, 0xc0b0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=@ipv6_newroute={0x1c, 0x18, 0x1, 0x70bd2c, 0x0, {0xa, 0x0, 0x14, 0x0, 0xfe, 0x4, 0xff, 0x6}}, 0x1c}}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.524666722s ago: executing program 3 (id=37358): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b000000000000000000000000800000000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x7, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000340)='kfree\x00', r1, 0x0, 0x80000}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=[0x7], 0x0, 0x0, 0x1}}, 0x40) 1.508526644s ago: executing program 3 (id=37359): bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="050000c3040000009900000001"], 0x48) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000070000008500000086000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) connect$unix(0xffffffffffffffff, 0x0, 0x0) mq_unlink(0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000009180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000040000850000007200000095"], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) write(r5, &(0x7f0000000000)="240000005800410f9c00f4f90085b3a85c91fddf080001000501009f0800028001000000", 0x24) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r4, 0x400455c8, 0x0) syz_usb_connect(0x2, 0xfffffffffffffe86, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r6 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r6, 0x89e3, 0x0) mount(0x0, 0x0, &(0x7f0000000080)='adfs\x00', 0x220ac08, 0x0) signalfd(0xffffffffffffffff, &(0x7f00000001c0)={[0xffffffffffffffff]}, 0x8) 1.350002465s ago: executing program 0 (id=37361): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, 0x0) write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x20}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0xfe, 0x0, 0x13, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x43, 0xfffd, 0x88000}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e) 1.206987673s ago: executing program 1 (id=37362): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{0x0}, {&(0x7f0000001c00)="4490137c227c56ee66c372f3105eb186dd8062fad2d5b5bfb0ba068e74a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9afda48e71255a747b6d03097385fb05cf8db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536025af1dea54e527c68b0ff250261953f2da79a78104c2d9e7b16ed86b124945aa9ab7581ebd385fb61210c410d799168ffc4b64677af924affd442035db81e18c2d2462d0bb25fff9d3b1ce903597992b2a4d541611ce77f58dce7c9500118229e7cdf4ca7f6adca92c73d97ce54164c1942b25686866f6b53fe7e75cf6854284d501f8535bec8e020b41fb2f8", 0xea}, {&(0x7f0000000640)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb9918e6c0827686e59209d2e02c9210fd8048f04ad6c42200fd9232f5aa6a361816bf21afb8473a064f1988536d4b5888807b3aaafaf59f53121782a0a9370dc0feae13", 0x9f}, {&(0x7f0000000300)="9d14305f5b9176fd46a2d6cc0bf8b00ea77d12943b509e31c729441020bfc543d3aa7b29e7107a90c117dc452406d912306165e7e7628186000661e280329d16092058e2f02d853b230704e80cee683918af77403bbbf00203d23592d737fc", 0x5f}, {&(0x7f0000000400)="0f7c77b4806d72cf5f68d99e", 0xc}], 0x5}}, {{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000140)="f77d2b5dd5f7d74f0748cf3d2cf218d644566a14103b1c7dd35fd2951bd022f10f2dc7f4ce0d8ac5f4abaca4b97b706153756913b7dd48248b5bfb10460019248bf238743fa2aeb5bef21ce832db670920dc5e911ef2ad63e849901d1001d7545517fd18b5d29978f32a5b5c81755cb89cc0490958", 0x75}, {&(0x7f0000000840)="8d684aa45f4b69499d707f3c8d114132fee1eafdcbbc5a16cb7b2841192b5779f99579e5c788b15b023df831028b9e6b5e9edd619e22626535212de5a998c5b793abdd7336cd8eb19e2fbd9a6ac2ca9c0f138ee10572672999ca4f51c09f9810459bad7e7bc2", 0x66}], 0x2}}], 0x2, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f00000001c0)="153529b08eda7117f7fba64096575aaf02b5f4a605af08949be00e4be027e61174fd50bb48cd44b0b21bca1b21cec9d11e9729fad985a73e2b8b8642128b277831d20c21107e9c5079c356d1bfa3a62b749a3962f3e57f61d796f7e00563a7", 0xffffffffffffff6e, 0x10008095, 0x0, 0x0) 1.143215842s ago: executing program 0 (id=37363): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f00000000c0)="91b8a91fd3108691bbc4173c3d6f357d027273117b3d0f171ba4ac4703cad036e68907e50e9997cd9c07bd75e6ff", 0x2e}, {&(0x7f0000001c00)="4490137c227c56ee66c372f3105eb186dd8062fad2d5b5bfb0ba068e74a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9afda48e71255a747b6d03097385fb05cf8db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536025af1dea54e527c68b0ff250261953f2da79a78104c2d9e7b16ed86b124945aa9ab7581ebd385fb61210c410d799168ffc4b64677af924affd442035db81e18c2d2462d0bb25fff9d3b1ce903597992b2a4d541611ce77f58dce7c9500118229e7cdf4ca7f6adca92c73d97ce54164c1942b25686866f6b53fe7e75cf6854284d501f8535bec8e020b41fb2f8", 0xea}, {&(0x7f0000000300)}, {&(0x7f0000000400)="0f7c77b4806d72cf5f", 0x9}], 0x4}}, {{0x0, 0x0, &(0x7f0000000480)}}, {{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000140)="f77d2b5dd5f7d74f0748cf3d2cf218d644566a14103b1c7dd35fd2951bd022f10f2dc7f4ce0d8ac5f4abaca4b97b706153756913b7dd48248b5bfb10460019248bf238743fa2aeb5bef21ce832db670920dc5e911ef2ad63e849901d1001d7545517fd18b5d29978f32a5b5c81755cb89cc049095876", 0x76}, {&(0x7f0000000840)="8d684aa45f4b69499d707f3c8d114132fee1eafdcbbc5a16cb7b2841192b5779f99579e5c788b15b023df831028b9e6b5e9edd619e22626535212de5a998c5b793abdd7336cd8eb19e2fbd9a6ac2ca9c0f138ee10572672999ca4f51c09f9810459bad7e7b", 0x65}], 0x2}}, {{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f0000001180)="dc09ad32bdb1c12a58eac5aab96535f58c67fb9fe1895a8f009f613ec01a0a69b2c9a0951e8a3e0493ba11f2544a9ce70a53a57a08710fe5bfb49a171137f27920651aa9e1d2b425764fdc57f5b5ed58ff6ae812f492", 0x56}, {&(0x7f0000001240)="d61f65ae", 0x4}], 0x2}}], 0x4, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f00000001c0)="153529b08eda7117f7fba64096575aaf02b5f4a605af08949be00e4be027e61174fd50bb48cd44b0b21bca1b21cec9d11e9729fad985a73e2b8b8642128b277831d20c21107e9c5079c356d1bfa3a62b749a3962f3e57f61d796f7e00563a7", 0xffffffffffffff6e, 0x10008095, 0x0, 0x0) 1.08024305s ago: executing program 2 (id=37364): getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x3, 0x0, &(0x7f0000000180)) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f00000003c0)={0x6, {{0x2, 0x3, @remote}}}, 0x9e) poll(&(0x7f0000b2c000)=[{}], 0x2c, 0xffffffffffbffff8) dup2(0xffffffffffffffff, 0xffffffffffffffff) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) tkill(0x0, 0x13) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000000), 0x4) perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x1, 0x6, 0x1, 0x10, 0x0, 0x1af, 0x600, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0xfffffffc, 0x2, @perf_config_ext={0x80, 0x1}, 0x4000, 0x4, 0x5786cc05, 0x5, 0x92, 0x800, 0x1, 0x0, 0x1, 0x0, 0x5b0}, 0x0, 0x9, r1, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000100)={@multicast1, @dev={0xac, 0x14, 0x14, 0xf}, @multicast1}, 0xc) r2 = socket$inet_sctp(0x2, 0x5, 0x84) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f00000000c0)={0x84, @multicast2, 0x15, 0x3, 'wrr\x00', 0x30, 0x4, 0xa}, 0x2c) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='adfs\x00', 0x220ac08, 0x0) mlock2(&(0x7f0000009000/0x3000)=nil, 0x3000, 0x1) r3 = syz_open_dev$mouse(&(0x7f0000000240), 0x7fffffff, 0x200001) setsockopt$IP_VS_SO_SET_STARTDAEMON(r3, 0x0, 0x48b, &(0x7f0000000280)={0x1, 'macsec0\x00', 0x4}, 0x18) setrlimit(0x40000000000008, &(0x7f0000000000)={0x4848, 0xfffffffffffff006}) capset(&(0x7f0000a31000)={0x20080522}, &(0x7f0000000080)={0x0, 0x7ff, 0x0, 0x0, 0x9}) mlock2(&(0x7f0000008000/0x4000)=nil, 0x4000, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r4}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000218c0000000c0a01030000000000000000070000090900020073797a31000000000900010073797a3000000000600003805c000080080003400000000250000b802c0001800a0001006c696d69740000001c0002800c00024000000000000000000c0001400000000000000003200001800a00010071756f7461000000100002800c0001"], 0x110}}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f00000000c0)='./file0\x00', 0x180c081, &(0x7f0000000000), 0x2c, 0x516, &(0x7f0000000740)="$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") 299.407491ms ago: executing program 1 (id=37365): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r0, &(0x7f0000000200)={0xa, 0xffff, 0xb7, @loopback}, 0x1c) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x1e) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x303}, "2d432d74c04f228a", "d71d9a1e03558545115509e1c34caab9", "018000", "5e33931677e0f2d7"}, 0x28) close(r0) 282.022883ms ago: executing program 1 (id=37366): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4c084}, 0x20000000) sendmsg$NFT_BATCH(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a54000000030a0fdb00000000000000000a0060050900030073797a30000000000900010073797a310000000014000480080002403cb140bb08000140000000030a000700726f757465000000080005400000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000850}, 0x4000840) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x101, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x11c167, 0x0, 0xfffffffa, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x17, 0x2000000000000242, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r3}, 0x10) sendmmsg$inet6(r1, &(0x7f00000003c0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x280024}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000540)='\x00', 0x1}], 0x1}}], 0x1, 0x1) 211.699622ms ago: executing program 0 (id=37367): bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), 0xffffffffffffffff) sendmmsg$sock(r0, &(0x7f0000000f80)=[{{&(0x7f0000000840)=@pppoe={0x18, 0x0, {0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 'veth1_to_hsr\x00'}}, 0x80, &(0x7f0000000700)=[{&(0x7f00000008c0)="0dc626049bc96fb6e57b355185595a5b50f33e407d159d2cc9bad864f0645aaa69166f5ad86c5951bb452b4096d9b771403361cbce8ea8c70c5a0500d0d3443fcfe105e93611778254176af2201b2011eafc45aae163609d9feca940e1167283f7431d4ff757de34cb79df2d4bf10535469d5564b229a143835e6ce5fff7e86d2ee31caec8e4", 0x86}], 0x1, &(0x7f0000000a00)=[@txtime={{0x18, 0x1, 0x3d, 0xcdd}}, @mark={{0x14, 0x1, 0x24, 0x9}}, @txtime={{0x18, 0x1, 0x3d, 0x5}}, @timestamping={{0x14, 0x1, 0x25, 0x8}}, @txtime={{0x18, 0x1, 0x3d, 0xd}}, @txtime={{0x18, 0x1, 0x3d, 0xffffffffffffffff}}, @txtime={{0x18, 0x1, 0x3d, 0x9}}], 0xa8}}, {{&(0x7f0000000ac0)=@llc={0x1a, 0x6, 0x0, 0x2, 0x3, 0xa9}, 0x80, &(0x7f0000000e80)=[{&(0x7f0000000b40)="5b48e0cf1cf9a56124117a22b90843302b70eb29815d0ef721042ae91dda7b9e6355a855c77b6345e991d6e29d9eaeed401803c8403eb31fce0b3142e47b9099d72d48db5c84412dbd051e41a26b28144dc146cf833d061cebd34ac5e85b5df0f749f11810e29553196474e32ac14c86f7223c4633b5a18e0ca5e9f87817207e29f9a5fb9281", 0x86}, {&(0x7f0000000980)="793168cb64fdcbd527ce7cd24137df2e480678e9e75bb3903d8a82a2f8d45a488c724e2079f3d8a94abdff091ad0", 0x2e}, {&(0x7f0000000c00)="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", 0xfd}, {&(0x7f0000000d00)="34395a7b7ff4a97d8ffccfea20ba6765744a87eba0cf87107a6e2495de44c37c4e615eac89f0a7be36fda7ab00c5146cada71f68a09d9792468883d2171bda1e511ef21b8ddb732683e4df7b39e67a856cbc5f9e9d1dbf8a2520498c5f4e9dfa4aa2711a667f1bbc4c7b85df97161079cac9f43233a9c4ee1db9f7d4b0c5a043cdb77f775524ac78a50e4e288e1cb2bebbb7cf37ce946516d81307a5db9cd212e951c03449ca96c86072c31deb6179aed77318ae45492dc416019479b98a5455ca6f8d42ad4ae01044342cd95d3360902794318dcc7b", 0xd6}, {&(0x7f0000000e00)="9633cd15af6924db5e03ac808c7bc118994422a00ce38a58641e7855c09fc2566d4c30ad99ed158b99a12647237fdfbe0f6137b98561755d2b5b96c1b2a94b0b9ba1b8e299d288e49e442ce633506bc3e5995c7a0dbdf4e519c65c785e18753a083fdf8b2e0d1be5978f7b1b30", 0x6d}], 0x5, &(0x7f0000000f00)=[@mark={{0x14, 0x1, 0x24, 0x7f}}, @timestamping={{0x14}}, @timestamping={{0x14, 0x1, 0x25, 0x1}}, @mark={{0x14, 0x1, 0x24, 0x9}}, @txtime={{0x18, 0x1, 0x3d, 0x5}}], 0x78}}], 0x2, 0x4000) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000007c0)=ANY=[@ANYBLOB="a4000000", @ANYRES16=r1, @ANYBLOB="010000000000000000000a000000900004802400078008000300010000000800040000000000080001081600000008000400c42c0000240007800800030000000000080003000600000008000100000000000800030000000000040007800800020001000000080004"], 0xa4}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a500850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = open(&(0x7f00000000c0)='./file1\x00', 0x66842, 0x21) pwritev2(r3, 0x0, 0x0, 0x2000, 0x0, 0x3) 211.429822ms ago: executing program 0 (id=37368): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x7, 0x3, &(0x7f00000007c0)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0xfffffdff, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x94bb8e57c32e7657}, 0x94) perf_event_open(&(0x7f0000000600)={0x5, 0x80, 0x0, 0x0, 0x0, 0x4, 0x0, 0x5, 0x80260, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700"], 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000001480)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000080)) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d800000, 0x0, @perf_bp={0x0}, 0x0, 0xc8, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xd65}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) perf_event_open$cgroup(&(0x7f0000000000)={0x6, 0x80, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000080), 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000b40)='neigh_create\x00', r4}, 0x10) close(0xffffffffffffffff) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22"], 0xfdef) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xffffffffffffffae}, 0x0) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[], 0xfdef) close(r1) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000100000022bf000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000200012425b9a05b192156d000000ffffffff0000000000000000"], 0x48) 211.142052ms ago: executing program 2 (id=37369): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a00000709000100"], 0x7c}, 0x1, 0x0, 0x0, 0x4c084}, 0x20000000) sendmsg$NFT_BATCH(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a54000000030a0fdb00000000000000000a0060050900030073797a30000000000900010073797a310000000014000480080002403cb140bb08000140000000030a000700726f757465000000080005400000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000850}, 0x4000840) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x17, 0x2000000000000242, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000005a0000008500000022000000180100002020702500000000002020200100000000000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff"], 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10) sendmmsg$inet6(r1, &(0x7f00000003c0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x280024}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000540)='\x00', 0x1}], 0x1}}], 0x1, 0x1) 102.154207ms ago: executing program 0 (id=37370): syz_io_uring_setup(0x4b5, &(0x7f0000010400)={0x0, 0x86e1, 0x1, 0x8, 0xa0}, &(0x7f0000010080), &(0x7f0000000000)) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f00000005c0)={[{@acl}, {@nodioread_nolock}, {@minixdf}, {@grpid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@init_itable}, {@debug}, {@acl}, {@noinit_itable}]}, 0xfc, 0x587, &(0x7f0000000cc0)="$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") r0 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r0, 0x2007ffc) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000006c0)={&(0x7f0000000140), 0xc, &(0x7f0000000640)={&(0x7f00000001c0)={0x28, 0x0, 0x2, 0x70bd25, 0x25dfdbfd, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x4040804) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendto$inet6(r1, &(0x7f00000005c0)="f5", 0x1, 0x20000880, &(0x7f0000000240)={0xa, 0x4e20, 0xfffffffc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @rand_addr=' \x01\x00', 0xfffffffd}, 0x1c) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x103, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x0, 0x4, &(0x7f0000000480)=ANY=[], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)=r2}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) sendfile(r0, r0, 0x0, 0x800000009) 0s ago: executing program 0 (id=37371): socket(0x2, 0x80805, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_setup(0x239f, &(0x7f0000000380)) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') ppoll(&(0x7f0000000080)=[{r0, 0x1130}, {r0, 0x4}], 0x2, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000580)={[{@nouid32}, {@debug}], [{@fowner_eq={'fowner', 0x3d, 0xee01}}, {@obj_type={'obj_type', 0x3d, 'kfree\x00'}}, {@dont_appraise}, {@fsmagic={'fsmagic', 0x3d, 0x7}}]}, 0x1, 0x4bc, &(0x7f0000000a40)="$eJzs3ctvW1UaAPDPdpMmaWb6mNGo7UjTSh2p81DjPDRqMjObWc3MotJoKrEBqYTEDSVOHMVOaaIuUth1wQKBQEIs2PMXsKErKiTEGvaIBSqCEiRAQjK613abOHGwII1p7u8n3ebch/2dU+s7Ovf4Xt8AMuts8k8uYjgiPoyIo43VrQecbfzZuH9zJllyUa9f/iKXHpestw5tve5IRKxHxEBE/P/fEc/ktsetrq7NT5fLpeXmerG2sFSsrq5duLYwPVeaKy2OTV6cmpocnRif2rO23n7puduX3vlv/9vfvHjv7svvvZtUa7i5b3M79lKj6X1xfNO2QxHxz0cRrAcKzfYM9roi/CTJ5/ebiDiX5v/RKKSfJpAF9Xq9/n39cKfd63XgwMqnY+BcfiQiGuV8fmSkMYb/bQzly5Vq7a9XKyuLs42x8rHoy1+9Vi6NNs8VjkVfLlkfS8sP18fb1ici0jHwK4XBdH1kplKe3d+uDmhzpC3/vy408h/ICKf8kF3yH7JL/kN2yX/ILvkP2SX/IbvkP2SX/Ifskv+QXfIfskv+Qyb979KlZKm37n+fvb66Ml+5fmG2VJ0fWViZGZmpLC+NzFUqc+k9Ows/9n7lSmVp7G+xcqNYK1Vrxerq2pWFyspi7Up6X/+VUt++tAroxvEzdz7ORcT63wfTJdHf3CdX4WCr13PR63uQgd4o9LoDAnrG1B9kl3N8oP0netvHBQOdXrj0cL4QeLzke10BoGfOn/L9H2SV+X/ILvP/kF3G+MAOj+jbYrf5f+DxZP4fsmu4w/O/frXp2V2jEfHriPio0He49awv4CDIf5Zrjv/PH/3jcPve/ty36VcE/RHx/BuXX7sxXastjyXbv3ywvfZ6c/v4phd2PGEAeqWVp608BgCya+P+zZnWsp9xP/9X4yKE7fEPNecmB9LvKIc2cluuVcjt0bUL67ci4uRO8XPN5503TmSGNgrb4p9o/s013iKt76H0uen7E//Upvh/2BT/9M/+X4FsuJP0P6M75V8+zel4kH9b+5/hPbp2onP/l3/Q/xU69H9nuozx7JsvfNox/q2I0zvGb8UbSGO1x0/qdr7L+PeeeuJ3nfbV32q8z07xW5JSsbawVKyurl1If0durrQ4NnlxampydGJ8qpjOURdbM9Xb/ePkB3d3a/9Qh/i7tT/Z9ucu2//d799/8uwu8f90bufP/8Qu8Qcj4i9dxv9q/JOnO+1L4s92aH9+l/jJtoku41df/c/hLg8FAPZBdXVtfrpcLi0rKCj0pHDrl1GNtkKveybgUauuJqfmSdL3uiYAAAAAAAAAAABAt/bjcuJetxEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4CD4IQAA//9HcdTQ") syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000600)='./file0\x00', 0xc8d0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x98) socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20048054) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0b00000005000000000400000900000001000000", @ANYRES32=r1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$TIPC_NL_LINK_SET(r2, &(0x7f0000000500)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000002c0)={&(0x7f0000000a40)={0x14c, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x7ff}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xc95}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x80000001}]}, @TIPC_NLA_BEARER={0x4}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xffff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x200}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6a7}]}, @TIPC_NLA_LINK={0x8c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10001}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xec4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x718d797b}]}]}]}, 0x14c}, 0x1, 0x0, 0x0, 0x4}, 0x8010) write(r2, &(0x7f0000000a00)="c7885a8f24f458bed7211672288cfc5eb321cf4074dc13", 0x17) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x700000000000000, &(0x7f0000001a00)=ANY=[@ANYBLOB="1d00000004000000020000000000000001020000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0100000005000004000000006955db32000b08d9bb6dfdb3c8a66226"], 0x50) sendfile(r2, r1, 0x0, 0x3ffff) sendfile(r2, r1, 0x0, 0x7ffff000) kernel console output (not intermixed with test programs): 1][ T29] kauditd_printk_skb: 260 callbacks suppressed [ 2697.214907][ T29] audit: type=1326 audit(2000001875.689:165413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7580 comm="syz.0.36725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22cf26f749 code=0x7ffc0000 [ 2697.245364][ T29] audit: type=1326 audit(2000001875.717:165414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7580 comm="syz.0.36725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f22cf26f749 code=0x7ffc0000 [ 2697.269335][ T29] audit: type=1326 audit(2000001875.717:165415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7580 comm="syz.0.36725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22cf26f749 code=0x7ffc0000 [ 2697.293410][ T29] audit: type=1326 audit(2000001875.717:165416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7580 comm="syz.0.36725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22cf26f749 code=0x7ffc0000 [ 2697.317240][ T29] audit: type=1326 audit(2000001875.717:165417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7580 comm="syz.0.36725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f22cf26f749 code=0x7ffc0000 [ 2697.340940][ T29] audit: type=1326 audit(2000001875.717:165418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7580 comm="syz.0.36725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22cf26f749 code=0x7ffc0000 [ 2697.352749][ T7585] loop4: detected capacity change from 0 to 512 [ 2697.365657][ T29] audit: type=1326 audit(2000001875.717:165419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7580 comm="syz.0.36725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22cf26f749 code=0x7ffc0000 [ 2697.373762][ T7585] ext4: Unknown parameter 'fowner' [ 2697.395014][ T29] audit: type=1326 audit(2000001875.717:165420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7580 comm="syz.0.36725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=241 compat=0 ip=0x7f22cf26f749 code=0x7ffc0000 [ 2697.423984][ T29] audit: type=1326 audit(2000001875.717:165421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7580 comm="syz.0.36725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22cf26f749 code=0x7ffc0000 [ 2697.439988][ T7583] FAT-fs (loop4): error, invalid access to FAT (entry 0x0fff0000) [ 2697.447754][ T29] audit: type=1326 audit(2000001875.717:165422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7580 comm="syz.0.36725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f22cf26f749 code=0x7ffc0000 [ 2697.480028][ T7583] FAT-fs (loop4): Filesystem has been set read-only [ 2697.490240][ T7565] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2697.563103][ T7587] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=2802c09c, mo2=0002] [ 2697.571476][ T7587] System zones: 0-1, 3-12 [ 2697.578357][ T7587] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.36727: bg 0: block 88: padding at end of block bitmap is not set [ 2697.607033][ T7565] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2697.674576][T17297] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2697.690971][T17297] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2697.703109][T17297] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2697.712151][T17297] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2697.774943][ T7583] syz.4.36726: attempt to access beyond end of device [ 2697.774943][ T7583] loop4: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 2697.789113][ T7583] Buffer I/O error on dev loop4, logical block 128, lost async page write [ 2697.796438][ T956] tipc: Node number set to 9611946 [ 2697.808517][ T7585] syz.4.36726: attempt to access beyond end of device [ 2697.808517][ T7585] loop4: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 2697.822667][ T7585] Buffer I/O error on dev loop4, logical block 128, lost async page write [ 2698.005039][ T7604] sit0: left promiscuous mode [ 2698.160620][ T7605] sit0: entered promiscuous mode [ 2698.391292][ T658] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2698.403172][ T7608] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 2698.403869][ T658] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2698.438398][ T658] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2698.446726][ T658] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2698.477700][ T7610] syzkaller0: entered promiscuous mode [ 2698.482888][ T7614] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2698.483477][ T7610] syzkaller0: entered allmulticast mode [ 2698.490948][ T7614] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2698.653834][ T7618] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=2802c09c, mo2=0002] [ 2698.659200][ T7620] netlink: 12 bytes leftover after parsing attributes in process `syz.3.36739'. [ 2698.662075][ T7618] System zones: 0-1, 3-12 [ 2698.677566][ T7620] xt_connbytes: Forcing CT accounting to be enabled [ 2698.684635][ T7620] Cannot find set identified by id 0 to match [ 2698.687292][ T7618] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.36738: bg 0: block 88: padding at end of block bitmap is not set [ 2698.815841][ T7637] ext4: Unknown parameter 'fowner' [ 2698.829255][ T7638] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2698.831234][ T7627] FAT-fs (loop1): error, invalid access to FAT (entry 0x0fff0000) [ 2698.847629][ T7627] FAT-fs (loop1): Filesystem has been set read-only [ 2698.900771][ T7638] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2698.964591][ T7638] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2699.029333][ T7638] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2699.071414][ T7637] syz.1.36741: attempt to access beyond end of device [ 2699.071414][ T7637] loop1: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 2699.085350][ T7637] Buffer I/O error on dev loop1, logical block 128, lost async page write [ 2699.094355][ T7627] syz.1.36741: attempt to access beyond end of device [ 2699.094355][ T7627] loop1: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 2699.108213][ T7627] Buffer I/O error on dev loop1, logical block 128, lost async page write [ 2699.282820][ T7640] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 2699.411706][T23628] Bluetooth: hci0: command 0x1003 tx timeout [ 2699.417947][T16321] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 2699.859384][ T7653] netlink: 12 bytes leftover after parsing attributes in process `syz.4.36751'. [ 2699.870569][ T7653] Cannot find set identified by id 0 to match [ 2699.942294][ T7659] FAULT_INJECTION: forcing a failure. [ 2699.942294][ T7659] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2699.955527][ T7659] CPU: 1 UID: 0 PID: 7659 Comm: syz.4.36754 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 2699.955570][ T7659] Tainted: [W]=WARN [ 2699.955576][ T7659] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2699.955588][ T7659] Call Trace: [ 2699.955636][ T7659] [ 2699.955644][ T7659] __dump_stack+0x1d/0x30 [ 2699.955686][ T7659] dump_stack_lvl+0x95/0xd0 [ 2699.955788][ T7659] dump_stack+0x15/0x1b [ 2699.955806][ T7659] should_fail_ex+0x265/0x280 [ 2699.955827][ T7659] should_fail+0xb/0x20 [ 2699.955846][ T7659] should_fail_usercopy+0x1a/0x20 [ 2699.955907][ T7659] _copy_from_iter+0xcf/0xe70 [ 2699.955929][ T7659] ? lockref_put_return+0xf7/0x130 [ 2699.955955][ T7659] ? __rcu_read_unlock+0x4f/0x70 [ 2699.956050][ T7659] tun_get_user+0x14d/0x2670 [ 2699.956071][ T7659] ? path_openat+0x1e82/0x23b0 [ 2699.956100][ T7659] ? _parse_integer_limit+0x170/0x190 [ 2699.956121][ T7659] ? ref_tracker_alloc+0x1f2/0x2f0 [ 2699.956209][ T7659] ? selinux_file_permission+0x1e2/0x320 [ 2699.956237][ T7659] tun_chr_write_iter+0x15e/0x210 [ 2699.956259][ T7659] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 2699.956302][ T7659] vfs_write+0x52a/0x960 [ 2699.956401][ T7659] ksys_write+0xda/0x1a0 [ 2699.956419][ T7659] __x64_sys_write+0x40/0x50 [ 2699.956436][ T7659] x64_sys_call+0x2847/0x3000 [ 2699.956463][ T7659] do_syscall_64+0xca/0x2b0 [ 2699.956496][ T7659] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2699.956542][ T7659] RIP: 0033:0x7f7a4219f749 [ 2699.956636][ T7659] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2699.956654][ T7659] RSP: 002b:00007f7a40bff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2699.956672][ T7659] RAX: ffffffffffffffda RBX: 00007f7a423f5fa0 RCX: 00007f7a4219f749 [ 2699.956721][ T7659] RDX: 000000000000004e RSI: 0000200000000280 RDI: 0000000000000003 [ 2699.956820][ T7659] RBP: 00007f7a40bff090 R08: 0000000000000000 R09: 0000000000000000 [ 2699.956842][ T7659] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2699.956857][ T7659] R13: 00007f7a423f6038 R14: 00007f7a423f5fa0 R15: 00007ffc68f348f8 [ 2699.956951][ T7659] [ 2700.270410][ T7666] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 2700.289344][ T7664] ext4 filesystem being mounted at /119/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 2700.332904][ T7673] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2700.363304][ T7674] tipc: Enabling of bearer rejected, already enabled [ 2700.387366][ T7673] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2700.451616][ T7673] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2700.515129][ T7673] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2700.567857][T16860] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm kworker/u8:63: bg 0: block 345: padding at end of block bitmap is not set [ 2700.583016][T16860] EXT4-fs (loop4): Remounting filesystem read-only [ 2700.594673][ T658] EXT4-fs warning (device loop4): ext4_convert_unwritten_extents:4984: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30 [ 2700.610858][T13498] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2700.622505][T16860] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2700.635170][T16860] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2700.647238][T16860] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2700.776883][ T7684] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2700.785838][ T7684] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2700.903860][ T7688] syzkaller0: entered promiscuous mode [ 2700.909775][ T7688] syzkaller0: entered allmulticast mode [ 2700.988964][ T7691] set_capacity_and_notify: 11 callbacks suppressed [ 2700.988980][ T7691] loop2: detected capacity change from 0 to 1024 [ 2701.006599][ T7691] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=2802c09c, mo2=0002] [ 2701.014809][ T7691] System zones: 0-1, 3-12 [ 2701.025212][ T7691] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.36766: bg 0: block 88: padding at end of block bitmap is not set [ 2701.050064][ T7695] loop4: detected capacity change from 0 to 512 [ 2701.079581][ T7695] netlink: 'syz.4.36767': attribute type 1 has an invalid length. [ 2701.109668][ T7702] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 2701.123383][ T7695] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 2701.130245][ T7704] xt_hashlimit: overflow, rate too high: 0 [ 2701.136100][ T7695] bond2: (slave batadv1): making interface the new active one [ 2701.145164][ T7704] netlink: 36 bytes leftover after parsing attributes in process `syz.0.36770'. [ 2701.146161][ T7695] bond2: (slave batadv1): Enslaving as an active interface with an up link [ 2701.154264][ T7704] netlink: 16 bytes leftover after parsing attributes in process `syz.0.36770'. [ 2701.172261][ T7704] netlink: 36 bytes leftover after parsing attributes in process `syz.0.36770'. [ 2701.181570][ T7704] netlink: 36 bytes leftover after parsing attributes in process `syz.0.36770'. [ 2701.243853][ T7712] loop2: detected capacity change from 0 to 512 [ 2701.252867][ T7712] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.36774: bad orphan inode 15 [ 2701.254323][ T7710] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2701.273155][ T7712] ext4_test_bit(bit=14, block=5) = 0 [ 2701.283455][ T7712] EXT4-fs (loop2): can't disable delalloc during remount [ 2701.317523][ T7710] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2701.361785][ T7710] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2701.403006][ T7710] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2701.453260][T17297] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2701.466617][T17297] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2701.479306][T16860] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2701.491575][T16860] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2701.542988][T17297] Bluetooth: hci0: Frame reassembly failed (-84) [ 2701.793586][ T7728] loop1: detected capacity change from 0 to 512 [ 2702.182381][ T7731] loop0: detected capacity change from 0 to 512 [ 2702.189046][ T7731] ext4: Unknown parameter 'fowner' [ 2702.196512][ T7731] loop0: detected capacity change from 0 to 128 [ 2702.208394][ T7730] FAT-fs (loop0): error, invalid access to FAT (entry 0x0fff0000) [ 2702.216379][ T7730] FAT-fs (loop0): Filesystem has been set read-only [ 2702.278115][ T7733] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 2702.313828][ T7735] loop2: detected capacity change from 0 to 1024 [ 2702.332985][ T7735] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=2802c09c, mo2=0002] [ 2702.341394][ T7735] System zones: 0-1, 3-12 [ 2702.362046][ T7735] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.36783: bg 0: block 88: padding at end of block bitmap is not set [ 2702.457153][ T7731] syz.0.36781: attempt to access beyond end of device [ 2702.457153][ T7731] loop0: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 2702.471045][ T7731] Buffer I/O error on dev loop0, logical block 128, lost async page write [ 2702.480461][ T7730] syz.0.36781: attempt to access beyond end of device [ 2702.480461][ T7730] loop0: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 2702.494624][ T7730] Buffer I/O error on dev loop0, logical block 128, lost async page write [ 2702.496515][ T7740] loop2: detected capacity change from 0 to 512 [ 2702.510261][ T7730] syz.0.36781: attempt to access beyond end of device [ 2702.510261][ T7730] loop0: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 2702.523750][ T7740] ext4: Unknown parameter 'fowner' [ 2702.524262][ T7730] Buffer I/O error on dev loop0, logical block 128, lost async page write [ 2702.543316][ T7740] loop2: detected capacity change from 0 to 128 [ 2702.551529][T17297] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2702.563858][T17297] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2702.569409][ T7739] FAT-fs (loop2): error, invalid access to FAT (entry 0x0fff0000) [ 2702.580100][ T7739] FAT-fs (loop2): Filesystem has been set read-only [ 2702.588076][T17297] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2702.605932][T17297] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2702.739281][ T7746] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 2702.749315][ T7749] loop1: detected capacity change from 0 to 2048 [ 2702.786802][ T7749] ext4 filesystem being mounted at /411/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 2702.878878][ T7758] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.36788: bg 0: block 345: padding at end of block bitmap is not set [ 2702.897810][ T7755] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 2702.910964][ T7758] EXT4-fs (loop1): Remounting filesystem read-only [ 2702.917660][T13498] EXT4-fs warning (device loop1): ext4_convert_unwritten_extents:4984: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30 [ 2702.976846][ T7740] syz.2.36784: attempt to access beyond end of device [ 2702.976846][ T7740] loop2: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 2702.990860][ T7740] Buffer I/O error on dev loop2, logical block 128, lost async page write [ 2703.001442][ T7740] syz.2.36784: attempt to access beyond end of device [ 2703.001442][ T7740] loop2: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 2703.015694][ T7740] Buffer I/O error on dev loop2, logical block 128, lost async page write [ 2703.079412][ T7763] ext4 filesystem being mounted at /412/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 2703.114227][ T7763] tipc: Enabling of bearer rejected, already enabled [ 2703.161347][ T7771] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 2703.173464][ T7769] ext4 filesystem being mounted at /355/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 2703.199839][ T7769] tipc: Enabling of bearer rejected, already enabled [ 2703.241380][ T7775] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2703.329139][ T7775] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2703.393253][ T7775] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2703.617100][ T7775] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2703.690202][T23628] Bluetooth: hci0: command 0x1003 tx timeout [ 2703.697224][T16321] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 2703.706316][ T29] kauditd_printk_skb: 334 callbacks suppressed [ 2703.706330][ T29] audit: type=1326 audit(2000001881.766:165757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7719 comm="syz.4.36777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a4219f749 code=0x7ffc0000 [ 2703.738912][ T29] audit: type=1326 audit(2000001881.794:165758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7719 comm="syz.4.36777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a4219f749 code=0x7ffc0000 [ 2703.916821][ T7786] syzkaller0: entered promiscuous mode [ 2703.922402][ T7786] syzkaller0: entered allmulticast mode [ 2704.222909][ T7791] syzkaller0: entered promiscuous mode [ 2704.228705][ T7791] syzkaller0: entered allmulticast mode [ 2704.295344][ T7793] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 2704.355295][ T7800] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.36806: bg 0: block 248: padding at end of block bitmap is not set [ 2704.370415][ T7800] Quota error (device loop0): write_blk: dquota write failed [ 2704.377877][ T7800] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 2704.388082][ T7800] EXT4-fs error (device loop0): ext4_acquire_dquot:6986: comm syz.0.36806: Failed to acquire dquot type 1 [ 2704.400446][ T7800] EXT4-fs (loop0): 1 truncate cleaned up [ 2704.406658][ T7800] ext4 filesystem being mounted at /359/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 2704.422375][ T7800] EXT4-fs error (device loop0): ext4_lookup:1789: inode #2: comm syz.0.36806: deleted inode referenced: 12 [ 2704.435978][ T29] audit: type=1400 audit(2000001882.449:165759): avc: denied { map } for pid=7799 comm="syz.0.36806" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 2704.461551][ T29] audit: type=1400 audit(2000001882.449:165760): avc: denied { execute } for pid=7799 comm="syz.0.36806" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 2704.607608][ T7811] ext4: Unknown parameter 'fowner' [ 2704.622161][ T7810] FAT-fs (loop0): error, invalid access to FAT (entry 0x0fff0000) [ 2704.630053][ T7810] FAT-fs (loop0): Filesystem has been set read-only [ 2704.839256][ T7810] syz.0.36809: attempt to access beyond end of device [ 2704.839256][ T7810] loop0: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 2704.853264][ T7810] Buffer I/O error on dev loop0, logical block 128, lost async page write [ 2704.862087][ T7811] syz.0.36809: attempt to access beyond end of device [ 2704.862087][ T7811] loop0: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 2704.876177][ T7811] Buffer I/O error on dev loop0, logical block 128, lost async page write [ 2704.885650][ T7811] syz.0.36809: attempt to access beyond end of device [ 2704.885650][ T7811] loop0: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 2704.900087][ T7811] Buffer I/O error on dev loop0, logical block 128, lost async page write [ 2705.072133][ T7813] ext4 filesystem being mounted at /56/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 2705.234869][ T7822] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.36810: bg 0: block 345: padding at end of block bitmap is not set [ 2705.253462][ T7822] EXT4-fs (loop2): Remounting filesystem read-only [ 2705.261555][T13498] EXT4-fs warning (device loop2): ext4_convert_unwritten_extents:4984: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30 [ 2705.837109][ T7834] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 2705.909492][ T7836] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 2706.060285][ T7844] EXT4-fs error (device loop0): ext4_orphan_get:1417: comm syz.0.36820: bad orphan inode 15 [ 2706.071233][ T7844] ext4_test_bit(bit=14, block=5) = 0 [ 2706.087989][ T7849] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.36822: bad orphan inode 15 [ 2706.098579][ T7849] ext4_test_bit(bit=14, block=5) = 0 [ 2706.103962][ T7844] EXT4-fs (loop0): can't disable delalloc during remount [ 2706.117809][ T7849] EXT4-fs (loop2): can't disable delalloc during remount [ 2706.158657][ T7852] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2706.166300][ T7852] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2706.292713][ T7860] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 2706.318586][ T7862] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 2706.361037][ T7864] syzkaller0: entered promiscuous mode [ 2706.366714][ T7864] syzkaller0: entered allmulticast mode [ 2706.647164][T17297] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2706.676757][T17297] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2706.703691][T17297] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2706.726351][T17297] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2706.805192][ T7876] set_capacity_and_notify: 10 callbacks suppressed [ 2706.805212][ T7876] loop1: detected capacity change from 0 to 512 [ 2706.821441][ T7876] EXT4-fs error (device loop1): ext4_orphan_get:1417: comm syz.1.36833: bad orphan inode 15 [ 2706.832594][ T7876] ext4_test_bit(bit=14, block=5) = 0 [ 2706.849112][ T7876] EXT4-fs (loop1): can't disable delalloc during remount [ 2707.104995][ T7888] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 2707.120649][ T7890] netlink: 36 bytes leftover after parsing attributes in process `syz.4.36837'. [ 2707.129846][ T7890] netlink: 24 bytes leftover after parsing attributes in process `syz.4.36837'. [ 2707.147888][ T7892] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2707.155648][ T7892] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2707.307605][ T7908] syzkaller0: entered promiscuous mode [ 2707.313148][ T7908] syzkaller0: entered allmulticast mode [ 2707.401367][ T7911] loop0: detected capacity change from 0 to 512 [ 2707.410038][ T7911] EXT4-fs error (device loop0): ext4_orphan_get:1417: comm syz.0.36845: bad orphan inode 15 [ 2707.420559][ T7911] ext4_test_bit(bit=14, block=5) = 0 [ 2707.430763][ T7911] EXT4-fs (loop0): can't disable delalloc during remount [ 2707.635549][ T7917] tipc: Enabling of bearer rejected, already enabled [ 2707.928245][ T7927] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2707.935898][ T7927] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2707.996755][ T7935] loop4: detected capacity change from 0 to 512 [ 2708.005102][ T7935] EXT4-fs error (device loop4): ext4_orphan_get:1417: comm syz.4.36856: bad orphan inode 15 [ 2708.015816][ T7935] ext4_test_bit(bit=14, block=5) = 0 [ 2708.026004][ T7935] EXT4-fs (loop4): can't disable delalloc during remount [ 2708.088684][ T29] audit: type=1326 audit(2000001885.861:165761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7937 comm="syz.2.36858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f401b5df749 code=0x7ffc0000 [ 2708.098533][ T7938] netlink: 12 bytes leftover after parsing attributes in process `syz.2.36858'. [ 2708.121834][ T29] audit: type=1326 audit(2000001885.861:165762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7937 comm="syz.2.36858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f401b5df749 code=0x7ffc0000 [ 2708.145664][ T29] audit: type=1326 audit(2000001885.861:165763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7937 comm="syz.2.36858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f401b5df749 code=0x7ffc0000 [ 2708.169935][ T29] audit: type=1326 audit(2000001885.861:165764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7937 comm="syz.2.36858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f401b5df749 code=0x7ffc0000 [ 2708.197851][ T7938] Cannot find set identified by id 0 to match [ 2708.209221][ T7938] loop2: detected capacity change from 0 to 128 [ 2708.225635][ T7938] sch_tbf: burst 22 is lower than device lo mtu (65550) ! [ 2708.309177][ T7947] loop4: detected capacity change from 0 to 512 [ 2708.318773][ T7948] loop2: detected capacity change from 0 to 512 [ 2708.325556][ T7948] ext4: Unknown parameter 'fowner' [ 2708.332988][ T7948] loop2: detected capacity change from 0 to 128 [ 2708.533869][ T7946] syz.2.36861: attempt to access beyond end of device [ 2708.533869][ T7946] loop2: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 2708.547857][ T7946] Buffer I/O error on dev loop2, logical block 128, lost async page write [ 2708.557154][ T7946] syz.2.36861: attempt to access beyond end of device [ 2708.557154][ T7946] loop2: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 2708.571392][ T7946] Buffer I/O error on dev loop2, logical block 128, lost async page write [ 2708.690933][ T7950] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2708.691283][ T7952] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2708.708378][ T7952] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2708.751542][ T7950] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2708.801702][ T7960] loop0: detected capacity change from 0 to 512 [ 2708.811148][ T7950] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2708.821244][ T7960] EXT4-fs error (device loop0): ext4_orphan_get:1417: comm syz.0.36867: bad orphan inode 15 [ 2708.831855][ T7960] ext4_test_bit(bit=14, block=5) = 0 [ 2708.842533][ T7960] EXT4-fs (loop0): can't disable delalloc during remount [ 2708.904211][ T7950] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2708.933622][ T7966] xt_hashlimit: overflow, rate too high: 0 [ 2708.942766][ T7966] netlink: 36 bytes leftover after parsing attributes in process `syz.3.36870'. [ 2708.951910][ T7966] netlink: 16 bytes leftover after parsing attributes in process `syz.3.36870'. [ 2708.961180][ T7966] netlink: 36 bytes leftover after parsing attributes in process `syz.3.36870'. [ 2708.972831][ T7966] netlink: 36 bytes leftover after parsing attributes in process `syz.3.36870'. [ 2708.989590][T28144] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2709.006570][T28144] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2709.019707][T28144] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2709.028417][T28144] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2709.109376][ T7982] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 2709.121492][ T7983] loop0: detected capacity change from 0 to 512 [ 2709.134632][ T7983] ext4: Unknown parameter 'fowner' [ 2709.134648][ T7985] loop2: detected capacity change from 0 to 512 [ 2709.138397][ T7985] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.36878: bad orphan inode 15 [ 2709.157909][ T7985] ext4_test_bit(bit=14, block=5) = 0 [ 2709.170392][ T7985] EXT4-fs (loop2): can't disable delalloc during remount [ 2709.179553][ T7988] FAULT_INJECTION: forcing a failure. [ 2709.179553][ T7988] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2709.192782][ T7988] CPU: 0 UID: 0 PID: 7988 Comm: syz.3.36879 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 2709.192864][ T7988] Tainted: [W]=WARN [ 2709.192872][ T7988] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2709.192894][ T7988] Call Trace: [ 2709.192903][ T7988] [ 2709.192913][ T7988] __dump_stack+0x1d/0x30 [ 2709.192994][ T7988] dump_stack_lvl+0x95/0xd0 [ 2709.193019][ T7988] dump_stack+0x15/0x1b [ 2709.193045][ T7988] should_fail_ex+0x265/0x280 [ 2709.193074][ T7988] should_fail+0xb/0x20 [ 2709.193176][ T7988] should_fail_usercopy+0x1a/0x20 [ 2709.193208][ T7988] _copy_from_user+0x1c/0xb0 [ 2709.193306][ T7988] ___sys_sendmsg+0xc1/0x1d0 [ 2709.193421][ T7988] __x64_sys_sendmsg+0xd4/0x160 [ 2709.193562][ T7988] x64_sys_call+0x17ba/0x3000 [ 2709.193596][ T7988] do_syscall_64+0xca/0x2b0 [ 2709.193641][ T7988] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2709.193671][ T7988] RIP: 0033:0x7ff44203f749 [ 2709.193745][ T7988] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2709.193773][ T7988] RSP: 002b:00007ff440a9f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2709.193863][ T7988] RAX: ffffffffffffffda RBX: 00007ff442295fa0 RCX: 00007ff44203f749 [ 2709.193881][ T7988] RDX: 0000000020004044 RSI: 00002000000000c0 RDI: 0000000000000004 [ 2709.193898][ T7988] RBP: 00007ff440a9f090 R08: 0000000000000000 R09: 0000000000000000 [ 2709.193910][ T7988] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2709.193922][ T7988] R13: 00007ff442296038 R14: 00007ff442295fa0 R15: 00007ffe16e15aa8 [ 2709.193941][ T7988] [ 2709.379161][ T7992] xt_hashlimit: overflow, rate too high: 0 [ 2709.387354][ T7992] netlink: 36 bytes leftover after parsing attributes in process `syz.3.36882'. [ 2709.396646][ T7992] netlink: 16 bytes leftover after parsing attributes in process `syz.3.36882'. [ 2709.405899][ T7992] netlink: 36 bytes leftover after parsing attributes in process `syz.3.36882'. [ 2709.429169][ T7990] ext4 filesystem being mounted at /145/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 2709.481009][ T8000] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2709.521506][ T8000] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2709.530847][ T8005] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.36880: bg 0: block 345: padding at end of block bitmap is not set [ 2709.551247][ T8005] EXT4-fs (loop4): Remounting filesystem read-only [ 2709.558118][T28144] EXT4-fs warning (device loop4): ext4_convert_unwritten_extents:4984: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30 [ 2709.581279][ T8008] FAULT_INJECTION: forcing a failure. [ 2709.581279][ T8008] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2709.595096][ T8008] CPU: 0 UID: 0 PID: 8008 Comm: syz.3.36888 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 2709.595137][ T8008] Tainted: [W]=WARN [ 2709.595149][ T8008] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2709.595223][ T8008] Call Trace: [ 2709.595232][ T8008] [ 2709.595241][ T8008] __dump_stack+0x1d/0x30 [ 2709.595267][ T8008] dump_stack_lvl+0x95/0xd0 [ 2709.595288][ T8008] dump_stack+0x15/0x1b [ 2709.595377][ T8008] should_fail_ex+0x265/0x280 [ 2709.595408][ T8008] should_fail+0xb/0x20 [ 2709.595433][ T8008] should_fail_usercopy+0x1a/0x20 [ 2709.595470][ T8008] _copy_from_user+0x1c/0xb0 [ 2709.595529][ T8008] ___sys_sendmsg+0xc1/0x1d0 [ 2709.595583][ T8008] __x64_sys_sendmsg+0xd4/0x160 [ 2709.595624][ T8008] x64_sys_call+0x17ba/0x3000 [ 2709.595676][ T8008] do_syscall_64+0xca/0x2b0 [ 2709.595746][ T8008] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2709.595772][ T8008] RIP: 0033:0x7ff44203f749 [ 2709.595789][ T8008] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2709.595848][ T8008] RSP: 002b:00007ff440a9f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2709.595898][ T8008] RAX: ffffffffffffffda RBX: 00007ff442295fa0 RCX: 00007ff44203f749 [ 2709.595911][ T8008] RDX: 0000000000000800 RSI: 00002000000000c0 RDI: 0000000000000003 [ 2709.595924][ T8008] RBP: 00007ff440a9f090 R08: 0000000000000000 R09: 0000000000000000 [ 2709.595937][ T8008] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2709.595950][ T8008] R13: 00007ff442296038 R14: 00007ff442295fa0 R15: 00007ffe16e15aa8 [ 2709.595970][ T8008] [ 2709.597618][ T8000] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2709.709471][ T8009] ext4 filesystem being mounted at /71/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 2709.784949][ T8005] tipc: Enabling of bearer rejected, already enabled [ 2709.861506][ T8000] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2709.892638][ T8017] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.36887: bg 0: block 345: padding at end of block bitmap is not set [ 2709.916958][ T8017] EXT4-fs (loop2): Remounting filesystem read-only [ 2709.923698][T28144] EXT4-fs warning (device loop2): ext4_convert_unwritten_extents:4984: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30 [ 2709.968090][T28144] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2709.984926][ T8029] ext4: Unknown parameter 'fowner' [ 2709.992257][ T8028] xt_hashlimit: overflow, rate too high: 0 [ 2710.003611][T28144] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2710.023702][T28144] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2710.032334][T28144] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2710.058692][ T8031] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 2710.205522][ T8051] syzkaller0: entered promiscuous mode [ 2710.211107][ T8051] syzkaller0: entered allmulticast mode [ 2710.281237][ T8054] ext4 filesystem being mounted at /101/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 2710.708020][ T8058] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.36906: bg 0: block 345: padding at end of block bitmap is not set [ 2710.725364][ T8058] EXT4-fs (loop3): Remounting filesystem read-only [ 2710.732241][T13498] EXT4-fs warning (device loop3): ext4_convert_unwritten_extents:4984: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30 [ 2710.857245][ T29] kauditd_printk_skb: 122 callbacks suppressed [ 2710.857264][ T29] audit: type=1326 audit(2000001888.451:165887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8061 comm="syz.3.36907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff44203f749 code=0x7ffc0000 [ 2710.887470][ T29] audit: type=1326 audit(2000001888.451:165888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8061 comm="syz.3.36907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff44203f749 code=0x7ffc0000 [ 2710.911355][ T29] audit: type=1326 audit(2000001888.451:165889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8061 comm="syz.3.36907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7ff44203f749 code=0x7ffc0000 [ 2710.935084][ T29] audit: type=1326 audit(2000001888.451:165890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8061 comm="syz.3.36907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff44203f749 code=0x7ffc0000 [ 2710.958831][ T29] audit: type=1326 audit(2000001888.451:165891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8061 comm="syz.3.36907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff44203f749 code=0x7ffc0000 [ 2710.982557][ T29] audit: type=1326 audit(2000001888.451:165892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8061 comm="syz.3.36907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff44203f749 code=0x7ffc0000 [ 2711.006996][ T29] audit: type=1400 audit(2000001888.591:165893): avc: denied { read } for pid=8061 comm="syz.3.36907" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 2711.035670][ T29] audit: type=1326 audit(2000001888.610:165894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8061 comm="syz.3.36907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff44203f749 code=0x7ffc0000 [ 2711.059560][ T29] audit: type=1326 audit(2000001888.610:165895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8061 comm="syz.3.36907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff44203f749 code=0x7ffc0000 [ 2711.245197][ T8087] ext4: Unknown parameter 'fowner' [ 2711.258057][ T8086] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 2711.491236][ T8098] ext4 filesystem being mounted at /153/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 2711.920271][ T8106] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2711.938536][ T8104] ext4 filesystem being mounted at /393/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 2711.960355][ T8106] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2712.013814][ T8109] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.36922: bg 0: block 345: padding at end of block bitmap is not set [ 2712.028728][ T8109] EXT4-fs (loop0): Remounting filesystem read-only [ 2712.031305][ T8106] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2712.045389][T13498] EXT4-fs warning (device loop0): ext4_convert_unwritten_extents:4984: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30 [ 2712.073538][ T8104] tipc: Enabling of bearer rejected, already enabled [ 2712.094330][ T1983] EXT4-fs unmount: 92 callbacks suppressed [ 2712.094357][ T1983] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2712.110865][ T8106] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2712.128659][ T29] audit: type=1326 audit(2000001889.629:165896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8110 comm="syz.0.36924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22cf26f749 code=0x7ffc0000 [ 2712.191164][T17297] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2712.218326][T17297] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2712.227686][T17297] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2712.236157][T17297] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2712.283560][ T8116] set_capacity_and_notify: 10 callbacks suppressed [ 2712.283578][ T8116] loop3: detected capacity change from 0 to 1024 [ 2712.302080][ T8116] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=2802c09c, mo2=0002] [ 2712.310358][ T8116] System zones: 0-1, 3-12 [ 2712.315356][ T8116] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2712.329158][ T8116] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.36926: bg 0: block 88: padding at end of block bitmap is not set [ 2712.368112][ T6255] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2712.393137][ T8120] Cannot find set identified by id 0 to match [ 2712.401450][ T8120] loop3: detected capacity change from 0 to 128 [ 2712.415570][ T8120] sch_tbf: burst 22 is lower than device lo mtu (65550) ! [ 2712.480987][ T8126] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 2712.829453][ T8135] loop1: detected capacity change from 0 to 2048 [ 2712.847851][ T8135] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2712.860151][ T8135] ext4 filesystem being mounted at /423/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 2712.937199][ T8138] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.36934: bg 0: block 345: padding at end of block bitmap is not set [ 2712.952233][ T8138] EXT4-fs (loop1): Remounting filesystem read-only [ 2712.959043][T13498] EXT4-fs warning (device loop1): ext4_convert_unwritten_extents:4984: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30 [ 2712.996250][ T8135] tipc: Enabling of bearer rejected, already enabled [ 2713.018573][ T2225] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2713.040947][ T8140] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 2713.190590][ T8145] loop4: detected capacity change from 0 to 2048 [ 2713.200783][ T8145] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2713.213085][ T8145] ext4 filesystem being mounted at /156/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 2713.254364][ T6041] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2713.532799][ T8151] __nla_validate_parse: 6 callbacks suppressed [ 2713.532835][ T8151] netlink: 12 bytes leftover after parsing attributes in process `syz.3.36939'. [ 2713.554010][ T8151] Cannot find set identified by id 0 to match [ 2713.564406][ T8151] loop3: detected capacity change from 0 to 128 [ 2713.585457][ T8151] sch_tbf: burst 22 is lower than device lo mtu (65550) ! [ 2713.647025][ T8153] loop3: detected capacity change from 0 to 1024 [ 2713.673759][ T8153] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=2802c09c, mo2=0002] [ 2713.682415][ T8153] System zones: 0-1, 3-12 [ 2713.687657][ T8153] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2713.703065][ T8153] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.36940: bg 0: block 88: padding at end of block bitmap is not set [ 2713.732143][ T6255] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2713.754667][ T8161] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 2713.789447][ T8164] loop4: detected capacity change from 0 to 512 [ 2713.796190][ T8164] ext4: Unknown parameter 'fowner' [ 2713.805184][ T8164] loop4: detected capacity change from 0 to 128 [ 2713.822504][ T8159] FAT-fs (loop4): error, invalid access to FAT (entry 0x0fff0000) [ 2713.830658][ T8159] FAT-fs (loop4): Filesystem has been set read-only [ 2714.041407][ T8159] syz.4.36941: attempt to access beyond end of device [ 2714.041407][ T8159] loop4: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 2714.055462][ T8159] Buffer I/O error on dev loop4, logical block 128, lost async page write [ 2714.064867][ T8159] syz.4.36941: attempt to access beyond end of device [ 2714.064867][ T8159] loop4: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 2714.078904][ T8159] Buffer I/O error on dev loop4, logical block 128, lost async page write [ 2714.092134][ T8169] loop1: detected capacity change from 0 to 512 [ 2714.253854][ T8173] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 2714.289009][ T8175] loop4: detected capacity change from 0 to 2048 [ 2714.300610][T23628] Bluetooth: hci0: command 0x1003 tx timeout [ 2714.306704][T16321] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 2714.307170][ T8175] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2714.325429][ T8175] ext4 filesystem being mounted at /161/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 2714.348007][ T6041] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2714.372190][ T8179] netlink: 17279 bytes leftover after parsing attributes in process `syz.4.36949'. [ 2714.386289][ T8179] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8179 comm=syz.4.36949 [ 2714.868927][ T8185] netlink: 4 bytes leftover after parsing attributes in process `syz.0.36951'. [ 2714.883235][ T8185] netlink: 4 bytes leftover after parsing attributes in process `syz.0.36951'. [ 2714.987476][ T8188] ext4: Unknown parameter 'fowner' [ 2715.213834][ T8188] syz.1.36952: attempt to access beyond end of device [ 2715.213834][ T8188] loop1: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 2715.227806][ T8188] Buffer I/O error on dev loop1, logical block 128, lost async page write [ 2715.236635][ T8187] syz.1.36952: attempt to access beyond end of device [ 2715.236635][ T8187] loop1: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 2715.250616][ T8187] Buffer I/O error on dev loop1, logical block 128, lost async page write [ 2715.296587][ T8190] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=2802c09c, mo2=0002] [ 2715.304998][ T8190] System zones: 0-1, 3-12 [ 2715.310250][ T8190] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2715.326213][ T8190] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.36953: bg 0: block 88: padding at end of block bitmap is not set [ 2715.354129][ T6041] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2715.402910][ T8195] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=2802c09c, mo2=0002] [ 2715.411346][ T8195] System zones: 0-1, 3-12 [ 2715.416678][ T8195] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2715.434597][ T8195] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.36954: bg 0: block 88: padding at end of block bitmap is not set [ 2715.486856][ T2225] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2715.527492][ T8203] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 2715.612841][ T8208] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2715.620561][ T8208] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2715.780735][ T8211] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 2716.109523][ T8217] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=2802c09c, mo2=0002] [ 2716.117807][ T8217] System zones: 0-1, 3-12 [ 2716.122892][ T8217] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2716.138579][ T8217] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.36961: bg 0: block 88: padding at end of block bitmap is not set [ 2716.164350][ T2225] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2716.418172][ T8229] ext4: Unknown parameter 'fowner' [ 2716.613032][ T8229] syz.4.36965: attempt to access beyond end of device [ 2716.613032][ T8229] loop4: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 2716.626931][ T8229] Buffer I/O error on dev loop4, logical block 128, lost async page write [ 2716.826544][ T8239] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2716.833836][ T8239] IPv6: NLM_F_CREATE should be set when creating new route [ 2716.841146][ T8239] IPv6: NLM_F_CREATE should be set when creating new route [ 2716.849312][ T8239] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2716.857796][ T8241] EXT4-fs error (device loop3): ext4_orphan_get:1417: comm syz.3.36970: bad orphan inode 15 [ 2716.874231][ T8241] ext4_test_bit(bit=14, block=5) = 0 [ 2716.880532][ T8241] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2716.900453][ T8241] EXT4-fs (loop3): can't disable delalloc during remount [ 2716.919532][ T6255] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2716.933043][ T8247] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=2802c09c, mo2=0002] [ 2716.941342][ T8247] System zones: 0-1, 3-12 [ 2716.946707][ T8247] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2716.962040][ T8247] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.36972: bg 0: block 88: padding at end of block bitmap is not set [ 2717.012956][ T6041] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2717.118906][ T8259] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 2717.129287][ T8260] syzkaller0: entered promiscuous mode [ 2717.134823][ T8260] syzkaller0: entered allmulticast mode [ 2717.274322][ T29] kauditd_printk_skb: 321 callbacks suppressed [ 2717.274342][ T29] audit: type=1326 audit(2000001894.434:166218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8262 comm="syz.2.36978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f401b5df749 code=0x7ffc0000 [ 2717.304797][ T29] audit: type=1326 audit(2000001894.434:166219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8262 comm="syz.2.36978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f401b5df749 code=0x7ffc0000 [ 2717.328533][ T29] audit: type=1326 audit(2000001894.444:166220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8262 comm="syz.2.36978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f401b5df749 code=0x7ffc0000 [ 2717.352596][ T29] audit: type=1326 audit(2000001894.444:166221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8262 comm="syz.2.36978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f401b5df749 code=0x7ffc0000 [ 2717.376492][ T29] audit: type=1326 audit(2000001894.444:166222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8262 comm="syz.2.36978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f401b5df749 code=0x7ffc0000 [ 2717.400575][ T29] audit: type=1326 audit(2000001894.444:166223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8262 comm="syz.2.36978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f401b5df749 code=0x7ffc0000 [ 2717.424542][ T29] audit: type=1326 audit(2000001894.444:166224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8262 comm="syz.2.36978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f401b5df749 code=0x7ffc0000 [ 2717.448273][ T29] audit: type=1326 audit(2000001894.444:166225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8262 comm="syz.2.36978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f401b5df749 code=0x7ffc0000 [ 2717.472485][ T29] audit: type=1326 audit(2000001894.444:166226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8262 comm="syz.2.36978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f401b5df749 code=0x7ffc0000 [ 2717.496230][ T29] audit: type=1326 audit(2000001894.444:166227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8262 comm="syz.2.36978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f401b5df749 code=0x7ffc0000 [ 2717.576980][ T8263] netlink: 12 bytes leftover after parsing attributes in process `syz.2.36978'. [ 2717.606799][ T8263] Cannot find set identified by id 0 to match [ 2717.631396][ T8267] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 2717.681133][ T8268] set_capacity_and_notify: 11 callbacks suppressed [ 2717.681149][ T8268] loop4: detected capacity change from 0 to 512 [ 2717.692924][ T8263] sch_tbf: burst 22 is lower than device lo mtu (65550) ! [ 2717.695509][ T8268] ext4: Unknown parameter 'fowner' [ 2717.710800][ T8268] loop4: detected capacity change from 0 to 128 [ 2717.782299][ T8278] loop2: detected capacity change from 0 to 2048 [ 2717.800585][ T8278] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2717.813300][ T8278] ext4 filesystem being mounted at /85/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 2717.949746][ T8284] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.36984: bg 0: block 345: padding at end of block bitmap is not set [ 2717.964744][ T8284] EXT4-fs (loop2): Remounting filesystem read-only [ 2717.971641][ T658] EXT4-fs warning (device loop2): ext4_convert_unwritten_extents:4984: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30 [ 2718.026611][ T8290] syzkaller0: entered promiscuous mode [ 2718.032484][ T8290] syzkaller0: entered allmulticast mode [ 2718.058118][ T8278] tipc: Enabling of bearer rejected, already enabled [ 2718.101960][ T8298] netlink: 4 bytes leftover after parsing attributes in process `syz.0.36991'. [ 2718.116780][ T6918] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2718.166325][ T8268] syz.4.36979: attempt to access beyond end of device [ 2718.166325][ T8268] loop4: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 2718.180171][ T8268] Buffer I/O error on dev loop4, logical block 128, lost async page write [ 2718.195923][ T8302] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2718.207531][ T8268] syz.4.36979: attempt to access beyond end of device [ 2718.207531][ T8268] loop4: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 2718.221506][ T8268] Buffer I/O error on dev loop4, logical block 128, lost async page write [ 2718.227247][ T8308] netlink: 4 bytes leftover after parsing attributes in process `syz.0.36991'. [ 2718.242154][ T8309] loop2: detected capacity change from 0 to 512 [ 2718.249011][ T8309] ext4: Unknown parameter 'fowner' [ 2718.257652][ T8309] loop2: detected capacity change from 0 to 128 [ 2718.266251][ T8302] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2718.288122][ T8311] netlink: 12 bytes leftover after parsing attributes in process `syz.0.36994'. [ 2718.299965][ T8311] xt_connbytes: Forcing CT accounting to be enabled [ 2718.306831][ T8311] Cannot find set identified by id 0 to match [ 2718.315343][ T8311] loop0: detected capacity change from 0 to 128 [ 2718.333703][ T8302] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2718.354908][ T8311] sch_tbf: burst 22 is lower than device lo mtu (65550) ! [ 2718.400045][ T8302] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2718.463305][T28144] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2718.483978][T28144] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2718.492375][T28144] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2718.501210][T28144] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2718.655496][ T8305] syz.2.36992: attempt to access beyond end of device [ 2718.655496][ T8305] loop2: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 2718.669415][ T8305] Buffer I/O error on dev loop2, logical block 128, lost async page write [ 2718.691750][T18335] IPVS: starting estimator thread 0... [ 2718.697978][ T8309] syz.2.36992: attempt to access beyond end of device [ 2718.697978][ T8309] loop2: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 2718.711841][ T8309] Buffer I/O error on dev loop2, logical block 128, lost async page write [ 2718.724676][ T8323] loop3: detected capacity change from 0 to 512 [ 2718.803643][ T8325] IPVS: using max 2304 ests per chain, 115200 per kthread [ 2719.131923][ T8332] loop1: detected capacity change from 0 to 2048 [ 2719.167489][ T8334] netlink: 36 bytes leftover after parsing attributes in process `syz.2.37000'. [ 2719.176655][ T8334] netlink: 16 bytes leftover after parsing attributes in process `syz.2.37000'. [ 2719.186043][ T8334] netlink: 36 bytes leftover after parsing attributes in process `syz.2.37000'. [ 2719.199075][ T8332] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2719.212401][ T8334] netlink: 36 bytes leftover after parsing attributes in process `syz.2.37000'. [ 2719.221008][ T8332] ext4 filesystem being mounted at /437/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 2719.295621][ T8338] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.37002: bg 0: block 345: padding at end of block bitmap is not set [ 2719.310750][ T8338] EXT4-fs (loop1): Remounting filesystem read-only [ 2719.317468][T16860] EXT4-fs warning (device loop1): ext4_convert_unwritten_extents:4984: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30 [ 2719.361094][ T8332] tipc: Enabling of bearer rejected, already enabled [ 2719.382856][ T2225] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2719.384003][ T8342] loop4: detected capacity change from 0 to 1024 [ 2719.414387][ T8342] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=2802c09c, mo2=0002] [ 2719.422611][ T8342] System zones: 0-1, 3-12 [ 2719.427730][ T8342] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2719.441219][ T8342] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.37004: bg 0: block 88: padding at end of block bitmap is not set [ 2719.468474][ T8347] loop1: detected capacity change from 0 to 512 [ 2719.501938][ T6041] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2719.569040][ T8357] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 2719.609849][ T8361] syzkaller0: entered promiscuous mode [ 2719.615408][ T8361] syzkaller0: entered allmulticast mode [ 2720.015138][ T8367] ext4: Unknown parameter 'fowner' [ 2720.226042][ T8367] syz.2.37013: attempt to access beyond end of device [ 2720.226042][ T8367] loop2: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 2720.239952][ T8367] Buffer I/O error on dev loop2, logical block 128, lost async page write [ 2721.298758][ T8389] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 2721.436959][ T8399] netlink: 36 bytes leftover after parsing attributes in process `syz.1.37023'. [ 2721.446230][ T8399] netlink: 16 bytes leftover after parsing attributes in process `syz.1.37023'. [ 2721.455372][ T8399] netlink: 36 bytes leftover after parsing attributes in process `syz.1.37023'. [ 2721.464656][ T8399] netlink: 36 bytes leftover after parsing attributes in process `syz.1.37023'. [ 2721.472075][ T8397] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2721.486539][ T8397] ext4 filesystem being mounted at /412/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 2721.561412][ T8404] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.37025: bg 0: block 345: padding at end of block bitmap is not set [ 2721.576207][ T8404] EXT4-fs (loop0): Remounting filesystem read-only [ 2721.582828][T17297] EXT4-fs warning (device loop0): ext4_convert_unwritten_extents:4984: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30 [ 2721.632454][ T1983] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2721.794346][ T8416] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2721.843406][ T8416] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2721.886377][ T8416] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2721.939750][ T8416] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2721.988276][T28144] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2722.000133][T28144] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2722.012817][T28144] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2722.023801][T28144] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2722.246309][ T8427] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 2722.750470][ T8455] netlink: 36 bytes leftover after parsing attributes in process `syz.4.37047'. [ 2722.759608][ T8455] netlink: 16 bytes leftover after parsing attributes in process `syz.4.37047'. [ 2723.063731][ T8464] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2723.116484][ T8464] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2723.169643][ T8464] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2723.223385][ T8464] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2723.269508][ T8470] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 2723.352138][ T8478] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2723.415707][ T8478] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2723.459140][ T8478] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2723.523584][ T8478] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2723.593907][T16860] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2723.611707][T16860] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2723.629872][T16860] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2723.648300][T16860] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2723.871417][ T8495] sit0: left promiscuous mode [ 2724.031318][ T8499] sit0: entered promiscuous mode [ 2724.317037][ T8506] set_capacity_and_notify: 6 callbacks suppressed [ 2724.317059][ T8506] loop3: detected capacity change from 0 to 1024 [ 2724.335132][ T8506] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=2802c09c, mo2=0002] [ 2724.343531][ T8506] System zones: 0-1, 3-12 [ 2724.348632][ T8506] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2724.362210][ T8506] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.37069: bg 0: block 88: padding at end of block bitmap is not set [ 2724.385379][ T8512] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2724.392936][ T8512] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2724.413936][ T6255] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2724.547995][ T8526] loop1: detected capacity change from 0 to 2048 [ 2724.555888][ T8528] loop4: detected capacity change from 0 to 2048 [ 2724.570786][ T8528] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2724.571089][ T8526] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2724.583781][ T8528] ext4 filesystem being mounted at /190/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 2724.595690][ T8526] ext4 filesystem being mounted at /456/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 2724.690649][ T8534] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.37076: bg 0: block 345: padding at end of block bitmap is not set [ 2724.692606][ T8535] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.37077: bg 0: block 345: padding at end of block bitmap is not set [ 2724.708531][ T8534] EXT4-fs (loop1): Remounting filesystem read-only [ 2724.720548][ T8535] EXT4-fs (loop4): Remounting filesystem read-only [ 2724.726774][T28144] EXT4-fs warning (device loop1): ext4_convert_unwritten_extents:4984: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30 [ 2724.747182][T13498] EXT4-fs warning (device loop4): ext4_convert_unwritten_extents:4984: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30 [ 2724.774638][ T8528] tipc: Enabling of bearer rejected, already enabled [ 2724.817054][ T2225] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2724.838152][ T6041] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2724.897043][ T8544] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 2724.930704][ T8546] loop1: detected capacity change from 0 to 1024 [ 2724.944892][ T8546] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=2802c09c, mo2=0002] [ 2724.953101][ T8546] System zones: 0-1, 3-12 [ 2724.958163][ T8546] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2724.971569][ T8546] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.37082: bg 0: block 88: padding at end of block bitmap is not set [ 2725.015986][ T2225] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2725.543755][ T8560] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2725.694424][ T8560] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2725.748041][ T8560] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2725.811575][ T8560] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2725.826165][ T8566] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2725.833724][ T8566] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2725.870827][T28144] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2725.882894][T28144] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2725.895063][T28144] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2725.907804][T28144] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2725.985446][ T8570] loop3: detected capacity change from 0 to 2048 [ 2726.014689][ T8570] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2726.027441][ T8570] ext4 filesystem being mounted at /145/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 2726.050640][ T8578] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 2726.077921][ T8580] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 2726.094071][ T8582] loop2: detected capacity change from 0 to 1024 [ 2726.105151][ T8583] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.37090: bg 0: block 345: padding at end of block bitmap is not set [ 2726.121033][ T8583] EXT4-fs (loop3): Remounting filesystem read-only [ 2726.127903][T13498] EXT4-fs warning (device loop3): ext4_convert_unwritten_extents:4984: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30 [ 2726.129173][ T8582] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=2802c09c, mo2=0002] [ 2726.155710][ T8582] System zones: 0-1, 3-12 [ 2726.164252][ T8582] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2726.178468][ T8582] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.37094: bg 0: block 88: padding at end of block bitmap is not set [ 2726.180284][ T8570] tipc: Enabling of bearer rejected, already enabled [ 2726.214626][ T6255] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2726.240744][ T6918] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2726.321914][ T8594] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 2726.477812][ T8602] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2726.485303][ T8602] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2726.715278][ T8608] syzkaller0: entered promiscuous mode [ 2726.720980][ T8608] syzkaller0: entered allmulticast mode [ 2727.003914][ T8615] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 2727.099136][ T8617] loop4: detected capacity change from 0 to 2048 [ 2727.149077][ T8617] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2727.188021][ T8617] ext4 filesystem being mounted at /197/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 2727.209776][ T8622] loop1: detected capacity change from 0 to 512 [ 2727.224842][ T8622] ext4: Unknown parameter 'fowner' [ 2727.244137][ T8622] loop1: detected capacity change from 0 to 128 [ 2727.269069][ T8619] FAT-fs (loop1): error, invalid access to FAT (entry 0x0fff0000) [ 2727.277066][ T8619] FAT-fs (loop1): Filesystem has been set read-only [ 2727.294337][ T8623] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.37106: bg 0: block 345: padding at end of block bitmap is not set [ 2727.310514][ T8623] EXT4-fs (loop4): Remounting filesystem read-only [ 2727.317435][T13498] EXT4-fs warning (device loop4): ext4_convert_unwritten_extents:4984: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30 [ 2727.360350][ T8617] tipc: Enabling of bearer rejected, already enabled [ 2727.392228][ T6041] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2727.463896][ T8634] loop3: detected capacity change from 0 to 2048 [ 2727.487889][ T8636] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 2727.562840][ T8634] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2727.577180][ T8634] ext4 filesystem being mounted at /150/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 2727.597326][ T8643] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=2802c09c, mo2=0002] [ 2727.617253][ T8643] System zones: 0-1, 3-12 [ 2727.622245][ T8643] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2727.639544][ T8643] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.37116: bg 0: block 88: padding at end of block bitmap is not set [ 2727.660001][ T8647] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.37111: bg 0: block 345: padding at end of block bitmap is not set [ 2727.675444][ T8647] EXT4-fs (loop3): Remounting filesystem read-only [ 2727.686295][T13498] EXT4-fs warning (device loop3): ext4_convert_unwritten_extents:4984: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30 [ 2727.722889][ T6255] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2727.750459][ T6918] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2727.763068][ T8622] syz.1.37107: attempt to access beyond end of device [ 2727.763068][ T8622] loop1: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 2727.776993][ T8622] Buffer I/O error on dev loop1, logical block 128, lost async page write [ 2727.786505][ T8622] syz.1.37107: attempt to access beyond end of device [ 2727.786505][ T8622] loop1: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 2727.800644][ T8622] Buffer I/O error on dev loop1, logical block 128, lost async page write [ 2727.813231][ T8651] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2727.865591][ T8651] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2727.929682][ T8651] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2727.983345][ T8651] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2728.032294][T28144] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2728.044684][T28144] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2728.057277][T13498] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2728.070195][T13498] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2728.141656][ T8664] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 2728.203550][ T8668] syzkaller0: entered promiscuous mode [ 2728.209133][ T8668] syzkaller0: entered allmulticast mode [ 2729.233883][ T8677] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2729.255464][ T8676] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2729.267677][ T8676] ext4 filesystem being mounted at /152/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 2729.279959][ T8677] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2729.342884][ T8677] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2729.355336][ T8681] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.37128: bg 0: block 345: padding at end of block bitmap is not set [ 2729.392140][ T8681] EXT4-fs (loop3): Remounting filesystem read-only [ 2729.415767][T16860] EXT4-fs warning (device loop3): ext4_convert_unwritten_extents:4984: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30 [ 2729.451472][ T8677] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2729.463167][ T6255] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2729.543075][ T8688] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2729.550506][ T8688] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2729.558877][ T8689] __nla_validate_parse: 2 callbacks suppressed [ 2729.558943][ T8689] netlink: 36 bytes leftover after parsing attributes in process `syz.4.37129'. [ 2729.574363][ T8689] netlink: 16 bytes leftover after parsing attributes in process `syz.4.37129'. [ 2729.583468][ T8689] netlink: 36 bytes leftover after parsing attributes in process `syz.4.37129'. [ 2729.592816][ T8689] netlink: 36 bytes leftover after parsing attributes in process `syz.4.37129'. [ 2729.720931][T28144] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2729.733013][T28144] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2729.745308][T28144] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2729.755091][ T8693] set_capacity_and_notify: 2 callbacks suppressed [ 2729.755111][ T8693] loop3: detected capacity change from 0 to 512 [ 2729.761644][T28144] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2729.812555][ T8697] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2729.854971][ T8697] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2729.908713][ T8697] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2729.972842][ T8697] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2730.348334][ T8699] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 2730.390208][ T8701] syzkaller0: entered promiscuous mode [ 2730.395758][ T8701] syzkaller0: entered allmulticast mode [ 2730.508879][ T8704] syzkaller0: entered promiscuous mode [ 2730.514476][ T8704] syzkaller0: entered allmulticast mode [ 2730.635470][ T8711] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 2730.654116][ T8713] loop4: detected capacity change from 0 to 512 [ 2730.668303][ T8713] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.37139: bg 0: block 248: padding at end of block bitmap is not set [ 2730.683179][ T8713] __quota_error: 266 callbacks suppressed [ 2730.683197][ T8713] Quota error (device loop4): write_blk: dquota write failed [ 2730.696736][ T8713] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 2730.707275][ T8713] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.37139: Failed to acquire dquot type 1 [ 2730.719689][ T8715] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2730.730032][ T8713] EXT4-fs (loop4): 1 truncate cleaned up [ 2730.736180][ T8713] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2730.749183][ T8713] ext4 filesystem being mounted at /208/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 2730.765495][ T8713] EXT4-fs error (device loop4): ext4_lookup:1789: inode #2: comm syz.4.37139: deleted inode referenced: 12 [ 2730.779606][ T8715] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2730.798091][T16860] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2730.809025][ T6041] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2730.821768][T16860] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2730.835378][ T8715] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2730.846893][T16860] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2730.862110][T16860] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2730.883226][ T8715] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2730.895676][ T8722] tipc: Enabled bearer , priority 0 [ 2730.904534][ T8722] syzkaller0: entered promiscuous mode [ 2730.910182][ T8722] syzkaller0: entered allmulticast mode [ 2730.921165][ T8722] tipc: Resetting bearer [ 2730.928456][ T8721] tipc: Resetting bearer [ 2730.936237][ T8721] tipc: Disabling bearer [ 2730.983396][T28144] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2730.995382][T28144] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2731.004853][ T8728] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2731.015955][T13498] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2731.024575][ T8728] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2731.048873][T13498] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2731.078383][ T8733] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2731.103006][ T8734] loop4: detected capacity change from 0 to 512 [ 2731.170713][ T8733] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2731.204261][ T8736] loop1: detected capacity change from 0 to 2048 [ 2731.223443][ T8736] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2731.235727][ T8736] ext4 filesystem being mounted at /471/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 2731.255579][ T8733] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2731.309569][ T8733] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2731.322672][ T8739] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.37147: bg 0: block 345: padding at end of block bitmap is not set [ 2731.337850][ T8739] EXT4-fs (loop1): Remounting filesystem read-only [ 2731.344540][ T7302] EXT4-fs warning (device loop1): ext4_convert_unwritten_extents:4984: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30 [ 2731.390538][ T2225] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2732.350528][ T29] audit: type=1326 audit(2000001908.542:166494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8748 comm="syz.1.37151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f310aeaf749 code=0x7ffc0000 [ 2732.365309][ T8749] netlink: 12 bytes leftover after parsing attributes in process `syz.1.37151'. [ 2732.374871][ T29] audit: type=1326 audit(2000001908.542:166495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8748 comm="syz.1.37151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f310aeaf749 code=0x7ffc0000 [ 2732.407564][ T29] audit: type=1326 audit(2000001908.552:166496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8748 comm="syz.1.37151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f310aeaf749 code=0x7ffc0000 [ 2732.431520][ T29] audit: type=1326 audit(2000001908.552:166497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8748 comm="syz.1.37151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f310aeaf749 code=0x7ffc0000 [ 2732.444233][ T8749] Cannot find set identified by id 0 to match [ 2732.455598][ T29] audit: type=1326 audit(2000001908.552:166498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8748 comm="syz.1.37151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f310aeaf749 code=0x7ffc0000 [ 2732.485652][ T29] audit: type=1326 audit(2000001908.552:166499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8748 comm="syz.1.37151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f310aeaf749 code=0x7ffc0000 [ 2732.486438][ T8749] loop1: detected capacity change from 0 to 128 [ 2732.509457][ T29] audit: type=1326 audit(2000001908.552:166500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8748 comm="syz.1.37151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f310aeaf749 code=0x7ffc0000 [ 2732.509498][ T29] audit: type=1326 audit(2000001908.552:166501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8748 comm="syz.1.37151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f310aeaf749 code=0x7ffc0000 [ 2732.566913][ T8749] sch_tbf: burst 22 is lower than device lo mtu (65550) ! [ 2732.615196][ T8754] loop1: detected capacity change from 0 to 512 [ 2732.623484][ T8754] EXT4-fs error (device loop1): ext4_orphan_get:1417: comm syz.1.37153: bad orphan inode 15 [ 2732.634044][ T8754] ext4_test_bit(bit=14, block=5) = 0 [ 2732.640002][ T8754] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2732.656851][ T8754] EXT4-fs (loop1): can't disable delalloc during remount [ 2732.673745][ T2225] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2732.872981][ T8765] netlink: 36 bytes leftover after parsing attributes in process `syz.1.37156'. [ 2732.882138][ T8765] netlink: 16 bytes leftover after parsing attributes in process `syz.1.37156'. [ 2732.891247][ T8765] netlink: 36 bytes leftover after parsing attributes in process `syz.1.37156'. [ 2732.900520][ T8765] netlink: 36 bytes leftover after parsing attributes in process `syz.1.37156'. [ 2732.910485][ T8764] syzkaller0: entered promiscuous mode [ 2732.916140][ T8764] syzkaller0: entered allmulticast mode [ 2733.072944][ T8768] syzkaller0: entered promiscuous mode [ 2733.078578][ T8768] syzkaller0: entered allmulticast mode [ 2733.165877][ T8771] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2733.173388][ T8771] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2733.671302][ T8778] netlink: 12 bytes leftover after parsing attributes in process `syz.1.37162'. [ 2733.683043][ T8778] Cannot find set identified by id 0 to match [ 2733.691559][ T8778] loop1: detected capacity change from 0 to 128 [ 2733.704858][ T8778] sch_tbf: burst 22 is lower than device lo mtu (65550) ! [ 2733.766946][ T8784] loop1: detected capacity change from 0 to 512 [ 2733.775313][ T8784] EXT4-fs error (device loop1): ext4_orphan_get:1417: comm syz.1.37164: bad orphan inode 15 [ 2733.785957][ T8784] ext4_test_bit(bit=14, block=5) = 0 [ 2733.791626][ T8784] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2733.807980][ T8784] EXT4-fs (loop1): can't disable delalloc during remount [ 2733.825706][ T2225] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2733.939683][ T8794] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2734.004867][ T8794] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2734.068872][ T8794] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2734.112879][ T8794] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2734.150445][ T8796] loop2: detected capacity change from 0 to 2048 [ 2734.171499][ T8796] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2734.176032][ T8800] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2734.185233][ T8796] ext4 filesystem being mounted at /114/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 2734.194241][ T8800] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2734.231820][ T8802] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 2734.268262][ T8805] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.37169: bg 0: block 345: padding at end of block bitmap is not set [ 2734.283342][ T8805] EXT4-fs (loop2): Remounting filesystem read-only [ 2734.290001][T16860] EXT4-fs warning (device loop2): ext4_convert_unwritten_extents:4984: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30 [ 2734.337124][ T6918] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2734.387624][ T8810] syzkaller0: entered promiscuous mode [ 2734.393162][ T8810] syzkaller0: entered allmulticast mode [ 2734.529682][ T8815] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2734.537086][ T8815] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2734.775508][ T8828] syzkaller0: entered promiscuous mode [ 2734.781293][ T8828] syzkaller0: entered allmulticast mode [ 2734.883117][ T8833] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2734.890683][ T8833] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2734.916629][ T8835] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 2734.948194][T17297] Bluetooth: hci0: Frame reassembly failed (-84) [ 2735.176875][ T8840] loop4: detected capacity change from 0 to 2048 [ 2735.191478][ T8840] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2735.203967][ T8840] ext4 filesystem being mounted at /222/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 2735.277682][ T8843] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.37184: bg 0: block 345: padding at end of block bitmap is not set [ 2735.292451][ T8843] EXT4-fs (loop4): Remounting filesystem read-only [ 2735.299108][T28144] EXT4-fs warning (device loop4): ext4_convert_unwritten_extents:4984: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30 [ 2735.343594][ T6041] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2735.367600][T16860] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2735.379138][T16860] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2735.391080][T16860] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2735.403819][T16860] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2735.420967][T16860] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2735.433571][T16860] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2735.446765][T16860] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2735.456668][ T8846] loop4: detected capacity change from 0 to 512 [ 2735.459262][T17297] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2735.498225][ T8850] loop3: detected capacity change from 0 to 2048 [ 2735.512666][ T8850] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2735.525428][ T8850] ext4 filesystem being mounted at /159/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 2735.601208][ T8854] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.37187: bg 0: block 345: padding at end of block bitmap is not set [ 2735.619240][ T8854] EXT4-fs (loop3): Remounting filesystem read-only [ 2735.625915][T16860] EXT4-fs warning (device loop3): ext4_convert_unwritten_extents:4984: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30 [ 2735.688780][T16860] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2735.703812][T16860] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2735.717311][T16860] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2735.725788][T16860] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2735.734117][ T8850] tipc: Enabling of bearer rejected, already enabled [ 2735.757947][ T8856] __nla_validate_parse: 8 callbacks suppressed [ 2735.757967][ T8856] netlink: 4 bytes leftover after parsing attributes in process `syz.1.37188'. [ 2735.759036][ T6255] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2735.823060][ T8856] netlink: 4 bytes leftover after parsing attributes in process `syz.1.37188'. [ 2735.874097][ T8867] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 2735.911073][ T8869] loop1: detected capacity change from 0 to 512 [ 2735.918072][ T8869] ext4: Unknown parameter 'fowner' [ 2735.925848][ T8869] loop1: detected capacity change from 0 to 128 [ 2735.956486][ T8873] loop3: detected capacity change from 0 to 512 [ 2735.965358][ T8873] EXT4-fs error (device loop3): ext4_orphan_get:1417: comm syz.3.37193: bad orphan inode 15 [ 2735.982705][ T8873] ext4_test_bit(bit=14, block=5) = 0 [ 2735.990860][ T8873] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2736.008677][ T8873] EXT4-fs (loop3): can't disable delalloc during remount [ 2736.153900][ T8877] loop3: detected capacity change from 0 to 512 [ 2736.174362][ T8869] syz.1.37191: attempt to access beyond end of device [ 2736.174362][ T8869] loop1: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 2736.188853][ T8869] Buffer I/O error on dev loop1, logical block 128, lost async page write [ 2736.197595][ T8866] syz.1.37191: attempt to access beyond end of device [ 2736.197595][ T8866] loop1: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 2736.211506][ T8866] Buffer I/O error on dev loop1, logical block 128, lost async page write [ 2736.220592][ T8869] syz.1.37191: attempt to access beyond end of device [ 2736.220592][ T8869] loop1: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 2736.234439][ T8869] Buffer I/O error on dev loop1, logical block 128, lost async page write [ 2736.302353][ T8881] syzkaller0: entered promiscuous mode [ 2736.308117][ T8881] syzkaller0: entered allmulticast mode [ 2736.343183][ T8883] tipc: Enabled bearer , priority 0 [ 2736.350827][ T8883] syzkaller0: entered promiscuous mode [ 2736.356481][ T8883] syzkaller0: entered allmulticast mode [ 2736.367740][ T8883] tipc: Resetting bearer [ 2736.375326][ T8882] tipc: Resetting bearer [ 2736.385923][ T8882] tipc: Disabling bearer [ 2736.396852][ T8885] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2736.496655][ T8885] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2736.561333][ T8885] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2736.614701][ T8885] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2737.023259][ T8893] loop3: detected capacity change from 0 to 1024 [ 2737.052318][ T8893] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=2802c09c, mo2=0002] [ 2737.060601][ T8893] System zones: 0-1, 3-12 [ 2737.069124][ T8893] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.37201: bg 0: block 88: padding at end of block bitmap is not set [ 2737.147323][T23628] Bluetooth: hci0: command 0x1003 tx timeout [ 2737.153575][T16321] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 2737.160912][ T29] kauditd_printk_skb: 297 callbacks suppressed [ 2737.160931][ T29] audit: type=1326 audit(2000001913.049:166799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8836 comm="syz.2.37183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f401b5df749 code=0x7ffc0000 [ 2737.192135][ T29] audit: type=1326 audit(2000001913.077:166800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8836 comm="syz.2.37183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f401b5df749 code=0x7ffc0000 [ 2737.216267][ T8898] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 2737.263562][ T29] audit: type=1326 audit(2000001913.133:166801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8900 comm="syz.3.37203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff44203f749 code=0x7ffc0000 [ 2737.273470][ T8901] netlink: 12 bytes leftover after parsing attributes in process `syz.3.37203'. [ 2737.288043][ T29] audit: type=1326 audit(2000001913.133:166802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8900 comm="syz.3.37203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff44203f749 code=0x7ffc0000 [ 2737.320739][ T29] audit: type=1326 audit(2000001913.133:166803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8900 comm="syz.3.37203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff44203f749 code=0x7ffc0000 [ 2737.344710][ T29] audit: type=1326 audit(2000001913.133:166804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8900 comm="syz.3.37203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff44203f749 code=0x7ffc0000 [ 2737.369193][ T29] audit: type=1326 audit(2000001913.133:166805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8900 comm="syz.3.37203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff44203f749 code=0x7ffc0000 [ 2737.393209][ T29] audit: type=1326 audit(2000001913.133:166806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8900 comm="syz.3.37203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff44203f749 code=0x7ffc0000 [ 2737.417323][ T29] audit: type=1326 audit(2000001913.133:166807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8900 comm="syz.3.37203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff44203f749 code=0x7ffc0000 [ 2737.441083][ T29] audit: type=1326 audit(2000001913.133:166808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8900 comm="syz.3.37203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff44203f749 code=0x7ffc0000 [ 2737.474597][ T8901] Cannot find set identified by id 0 to match [ 2737.493401][ T8901] loop3: detected capacity change from 0 to 128 [ 2737.507477][ T8901] sch_tbf: burst 22 is lower than device lo mtu (65550) ! [ 2737.532902][ T8905] syzkaller0: entered promiscuous mode [ 2737.538464][ T8905] syzkaller0: entered allmulticast mode [ 2737.618449][ T8909] netlink: 4 bytes leftover after parsing attributes in process `syz.4.37207'. [ 2737.670309][ T8909] netlink: 4 bytes leftover after parsing attributes in process `syz.4.37207'. [ 2737.777759][ T8924] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2737.785330][ T8924] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2737.795609][ T8925] loop4: detected capacity change from 0 to 512 [ 2737.869907][ T8928] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 2737.967106][ T8933] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2737.974849][ T8933] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2738.143497][ T8940] ext4 filesystem being mounted at /132/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 2738.218111][ T8944] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.37217: bg 0: block 345: padding at end of block bitmap is not set [ 2738.233155][ T8944] EXT4-fs (loop2): Remounting filesystem read-only [ 2738.239909][T16860] EXT4-fs warning (device loop2): ext4_convert_unwritten_extents:4984: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30 [ 2738.528528][T28144] Bluetooth: hci0: Frame reassembly failed (-84) [ 2738.655764][ T8959] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2738.663191][ T8959] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2738.702328][ T8961] syzkaller0: entered promiscuous mode [ 2738.707894][ T8961] syzkaller0: entered allmulticast mode [ 2738.813988][ T8967] netlink: 4 bytes leftover after parsing attributes in process `syz.4.37227'. [ 2738.856000][ T8967] netlink: 4 bytes leftover after parsing attributes in process `syz.4.37227'. [ 2738.954446][ T8976] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 2739.204091][ T8982] xt_hashlimit: overflow, rate too high: 0 [ 2739.266009][ T8983] netlink: 36 bytes leftover after parsing attributes in process `syz.2.37231'. [ 2739.275105][ T8983] netlink: 16 bytes leftover after parsing attributes in process `syz.2.37231'. [ 2739.284392][ T8983] netlink: 36 bytes leftover after parsing attributes in process `syz.2.37231'. [ 2739.961498][ T8985] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=2802c09c, mo2=0002] [ 2739.969820][ T8985] System zones: 0-1, 3-12 [ 2739.976068][ T8985] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.37232: bg 0: block 88: padding at end of block bitmap is not set [ 2740.144132][ T8994] syzkaller0: entered promiscuous mode [ 2740.149836][ T8994] syzkaller0: entered allmulticast mode [ 2740.741085][T23628] Bluetooth: hci0: command 0x1003 tx timeout [ 2740.747023][T16321] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 2740.908008][T17297] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2740.920018][T17297] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2740.932678][T16860] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2740.957745][T16860] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2740.993185][ T9003] set_capacity_and_notify: 3 callbacks suppressed [ 2740.993253][ T9003] loop1: detected capacity change from 0 to 2048 [ 2741.010224][ T9005] syzkaller0: entered promiscuous mode [ 2741.016076][ T9005] syzkaller0: entered allmulticast mode [ 2741.037141][ T9003] ext4 filesystem being mounted at /490/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 2741.085900][ T9013] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2741.100449][ T9013] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2741.113038][ T9014] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.37239: bg 0: block 345: padding at end of block bitmap is not set [ 2741.128442][ T9014] EXT4-fs (loop1): Remounting filesystem read-only [ 2741.135264][T16860] EXT4-fs warning (device loop1): ext4_convert_unwritten_extents:4984: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30 [ 2741.183835][ T9019] loop2: detected capacity change from 0 to 512 [ 2741.199852][ T9019] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.37243: bad orphan inode 15 [ 2741.211265][ T9019] ext4_test_bit(bit=14, block=5) = 0 [ 2741.232831][ T9019] EXT4-fs (loop2): can't disable delalloc during remount [ 2741.258100][ T9025] xt_hashlimit: overflow, rate too high: 0 [ 2741.298884][ T9030] tipc: Enabled bearer , priority 0 [ 2741.311072][ T9030] syzkaller0: entered promiscuous mode [ 2741.316752][ T9030] syzkaller0: entered allmulticast mode [ 2741.325022][ T9033] __nla_validate_parse: 1 callbacks suppressed [ 2741.325041][ T9033] netlink: 36 bytes leftover after parsing attributes in process `syz.0.37245'. [ 2741.340715][ T9033] netlink: 16 bytes leftover after parsing attributes in process `syz.0.37245'. [ 2741.349790][ T9033] netlink: 36 bytes leftover after parsing attributes in process `syz.0.37245'. [ 2741.360742][ T9033] netlink: 36 bytes leftover after parsing attributes in process `syz.0.37245'. [ 2741.360898][ T9030] tipc: Resetting bearer [ 2741.387122][ T9032] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 2741.404566][ T9028] syzkaller0: entered promiscuous mode [ 2741.410124][ T9028] syzkaller0: entered allmulticast mode [ 2741.426478][ T9029] tipc: Resetting bearer [ 2741.434341][ T9029] tipc: Disabling bearer [ 2741.443353][ T9039] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2741.486706][ T9041] syzkaller0: entered promiscuous mode [ 2741.492415][ T9041] syzkaller0: entered allmulticast mode [ 2741.508499][ T9039] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2741.533434][ T9045] netlink: 4 bytes leftover after parsing attributes in process `syz.1.37254'. [ 2741.567204][ T9039] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2741.588406][ T9045] netlink: 4 bytes leftover after parsing attributes in process `syz.1.37254'. [ 2741.622252][ T9053] netlink: 12 bytes leftover after parsing attributes in process `syz.1.37255'. [ 2741.635259][ T9053] loop1: detected capacity change from 0 to 128 [ 2741.643646][ T9039] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2741.662104][ T9053] sch_tbf: burst 22 is lower than device lo mtu (65550) ! [ 2741.691329][ T9058] loop1: detected capacity change from 0 to 512 [ 2741.698269][ T9059] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2741.705641][ T9058] EXT4-fs error (device loop1): ext4_orphan_get:1417: comm syz.1.37257: bad orphan inode 15 [ 2741.715998][ T9059] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2741.723509][ T9058] ext4_test_bit(bit=14, block=5) = 0 [ 2741.734645][ T9058] EXT4-fs (loop1): can't disable delalloc during remount [ 2741.747361][T16860] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2741.761559][T28144] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2741.773714][T28144] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2741.786054][T28144] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2741.842604][T28144] Bluetooth: hci0: Frame reassembly failed (-84) [ 2741.867781][ T9069] loop1: detected capacity change from 0 to 512 [ 2741.953589][ T9075] loop1: detected capacity change from 0 to 512 [ 2742.027925][ T9079] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2742.035633][ T9079] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2742.163292][ T9084] netlink: 4 bytes leftover after parsing attributes in process `syz.0.37266'. [ 2742.184311][ T9083] syzkaller0: entered promiscuous mode [ 2742.189978][ T9083] syzkaller0: entered allmulticast mode [ 2742.233641][ T9084] netlink: 4 bytes leftover after parsing attributes in process `syz.0.37266'. [ 2742.320401][ T9094] loop0: detected capacity change from 0 to 512 [ 2742.327611][ T9094] ext4: Unknown parameter 'fowner' [ 2742.336807][ T9094] loop0: detected capacity change from 0 to 128 [ 2742.474685][ T9102] loop4: detected capacity change from 0 to 512 [ 2742.591477][ T9106] loop2: detected capacity change from 0 to 2048 [ 2742.617081][ T9106] ext4 filesystem being mounted at /148/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 2742.636340][ T9090] syz.0.37268: attempt to access beyond end of device [ 2742.636340][ T9090] loop0: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 2742.650240][ T9090] Buffer I/O error on dev loop0, logical block 128, lost async page write [ 2742.672049][ T9112] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 2742.684397][ T9094] syz.0.37268: attempt to access beyond end of device [ 2742.684397][ T9094] loop0: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 2742.698373][ T9094] Buffer I/O error on dev loop0, logical block 128, lost async page write [ 2742.726181][ T9113] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.37274: bg 0: block 345: padding at end of block bitmap is not set [ 2742.741263][ T9090] syz.0.37268: attempt to access beyond end of device [ 2742.741263][ T9090] loop0: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 2742.742247][ T9113] EXT4-fs (loop2): Remounting filesystem read-only [ 2742.755208][ T9090] Buffer I/O error on dev loop0, logical block 128, lost async page write [ 2742.762771][ T386] EXT4-fs warning (device loop2): ext4_convert_unwritten_extents:4984: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30 [ 2742.811567][ T9116] xt_hashlimit: overflow, rate too high: 0 [ 2742.821516][ T9118] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2742.835469][ T9118] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2742.858132][ T9121] netlink: 4 bytes leftover after parsing attributes in process `syz.2.37279'. [ 2742.956826][ T9130] ext4 filesystem being mounted at /432/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 2743.031775][ T9136] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.37281: bg 0: block 345: padding at end of block bitmap is not set [ 2743.046816][ T9136] EXT4-fs (loop0): Remounting filesystem read-only [ 2743.053660][T28144] EXT4-fs warning (device loop0): ext4_convert_unwritten_extents:4984: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30 [ 2743.092332][ T9130] tipc: Enabling of bearer rejected, already enabled [ 2743.162792][ T29] kauditd_printk_skb: 313 callbacks suppressed [ 2743.162811][ T29] audit: type=1326 audit(2000001918.649:167122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9141 comm="syz.0.37285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22cf26f749 code=0x7ffc0000 [ 2743.193283][ T29] audit: type=1326 audit(2000001918.649:167123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9141 comm="syz.0.37285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22cf26f749 code=0x7ffc0000 [ 2743.217243][ T29] audit: type=1326 audit(2000001918.649:167124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9141 comm="syz.0.37285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22cf26f749 code=0x7ffc0000 [ 2743.241388][ T29] audit: type=1326 audit(2000001918.649:167125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9141 comm="syz.0.37285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f22cf26f749 code=0x7ffc0000 [ 2743.265397][ T29] audit: type=1326 audit(2000001918.649:167126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9141 comm="syz.0.37285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22cf26f749 code=0x7ffc0000 [ 2743.289159][ T29] audit: type=1326 audit(2000001918.649:167127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9141 comm="syz.0.37285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22cf26f749 code=0x7ffc0000 [ 2743.313522][ T29] audit: type=1326 audit(2000001918.649:167128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9141 comm="syz.0.37285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22cf26f749 code=0x7ffc0000 [ 2743.337455][ T29] audit: type=1326 audit(2000001918.649:167129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9141 comm="syz.0.37285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22cf26f749 code=0x7ffc0000 [ 2743.361197][ T29] audit: type=1326 audit(2000001918.649:167130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9141 comm="syz.0.37285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f22cf26f749 code=0x7ffc0000 [ 2743.385065][ T29] audit: type=1326 audit(2000001918.649:167131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9141 comm="syz.0.37285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22cf26f749 code=0x7ffc0000 [ 2743.415615][ T9142] sch_tbf: burst 22 is lower than device lo mtu (65550) ! [ 2743.464162][ T9147] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 2743.901563][ T9165] tipc: Enabled bearer , priority 0 [ 2743.909115][ T9165] syzkaller0: entered promiscuous mode [ 2743.914640][ T9165] syzkaller0: entered allmulticast mode [ 2743.924571][ T9164] tipc: Resetting bearer [ 2743.934167][ T9164] tipc: Disabling bearer [ 2743.946503][ T9166] ext4: Unknown parameter 'fowner' [ 2743.992797][T16321] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 2743.999232][T23628] Bluetooth: hci0: command 0x1003 tx timeout [ 2744.170212][ T9166] syz.2.37292: attempt to access beyond end of device [ 2744.170212][ T9166] loop2: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 2744.184530][ T9166] Buffer I/O error on dev loop2, logical block 128, lost async page write [ 2744.193461][ T9163] syz.2.37292: attempt to access beyond end of device [ 2744.193461][ T9163] loop2: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 2744.207295][ T9163] Buffer I/O error on dev loop2, logical block 128, lost async page write [ 2744.216367][ T9163] syz.2.37292: attempt to access beyond end of device [ 2744.216367][ T9163] loop2: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 2744.230225][ T9163] Buffer I/O error on dev loop2, logical block 128, lost async page write [ 2744.401585][ T9173] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 2744.441241][ T9175] sch_tbf: burst 22 is lower than device lo mtu (65550) ! [ 2744.474502][ T9177] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 2744.584263][ T9184] xt_hashlimit: overflow, rate too high: 0 [ 2744.649148][ T9187] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2744.657151][ T9187] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2744.766612][ T9196] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2744.776191][ T9196] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2744.945835][ T9199] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=2802c09c, mo2=0002] [ 2744.954151][ T9199] System zones: 0-1, 3-12 [ 2744.959934][ T9199] EXT4-fs mount: 17 callbacks suppressed [ 2744.959956][ T9199] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2744.980639][ T9199] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.37305: bg 0: block 88: padding at end of block bitmap is not set [ 2745.028210][ T2225] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2745.058219][ T9207] ext4: Unknown parameter 'fowner' [ 2745.074780][ T9206] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2745.087475][ T9206] ext4 filesystem being mounted at /503/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 2745.204631][ T9210] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.37307: bg 0: block 345: padding at end of block bitmap is not set [ 2745.220080][ T9210] EXT4-fs (loop1): Remounting filesystem read-only [ 2745.227926][ T7302] EXT4-fs warning (device loop1): ext4_convert_unwritten_extents:4984: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30 [ 2745.287827][ T9213] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 2745.354588][ T2225] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2745.370410][ T9204] syz.0.37306: attempt to access beyond end of device [ 2745.370410][ T9204] loop0: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 2745.384648][ T9204] Buffer I/O error on dev loop0, logical block 128, lost async page write [ 2745.393957][ T9207] syz.0.37306: attempt to access beyond end of device [ 2745.393957][ T9207] loop0: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 2745.407935][ T9207] Buffer I/O error on dev loop0, logical block 128, lost async page write [ 2745.418104][ T9204] syz.0.37306: attempt to access beyond end of device [ 2745.418104][ T9204] loop0: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 2745.432114][ T9204] Buffer I/O error on dev loop0, logical block 128, lost async page write [ 2745.444220][ T9215] sch_tbf: burst 22 is lower than device lo mtu (65550) ! [ 2745.501735][ T9219] syzkaller0: entered promiscuous mode [ 2745.507281][ T9219] syzkaller0: entered allmulticast mode [ 2745.605639][ T9228] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2745.613202][ T9228] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2745.698743][ T9236] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=2802c09c, mo2=0002] [ 2745.716041][ T9236] System zones: 0-1, 3-12 [ 2745.724659][ T9236] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2745.744178][ T9236] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.37317: bg 0: block 88: padding at end of block bitmap is not set [ 2745.817004][ T6041] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2745.903355][ T9246] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 2745.923312][ T9248] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.37321: bg 0: block 248: padding at end of block bitmap is not set [ 2745.951210][ T9248] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.37321: Failed to acquire dquot type 1 [ 2745.964732][ T9248] EXT4-fs (loop4): 1 truncate cleaned up [ 2745.971035][ T9248] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2745.985339][ T9248] ext4 filesystem being mounted at /266/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 2746.010824][ T9248] EXT4-fs error (device loop4): ext4_lookup:1789: inode #2: comm syz.4.37321: deleted inode referenced: 12 [ 2746.034281][ T6041] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2746.150560][ T9262] ext4: Unknown parameter 'fowner' [ 2746.342788][ T9261] syz.4.37325: attempt to access beyond end of device [ 2746.342788][ T9261] loop4: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 2746.356735][ T9261] Buffer I/O error on dev loop4, logical block 128, lost async page write [ 2746.416593][ T9264] syzkaller0: entered promiscuous mode [ 2746.422413][ T9264] syzkaller0: entered allmulticast mode [ 2746.748387][ T9282] __nla_validate_parse: 16 callbacks suppressed [ 2746.748406][ T9282] netlink: 12 bytes leftover after parsing attributes in process `syz.3.37332'. [ 2746.767651][ T9282] Cannot find set identified by id 0 to match [ 2746.778002][ T9282] set_capacity_and_notify: 18 callbacks suppressed [ 2746.778021][ T9282] loop3: detected capacity change from 0 to 128 [ 2746.845824][ T9282] sch_tbf: burst 22 is lower than device lo mtu (65550) ! [ 2746.888032][ T9285] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 2746.920538][ T9287] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 2746.953694][ T9289] loop3: detected capacity change from 0 to 512 [ 2746.968966][ T9289] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.37335: bg 0: block 248: padding at end of block bitmap is not set [ 2747.000748][ T9289] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.37335: Failed to acquire dquot type 1 [ 2747.025006][ T9294] loop0: detected capacity change from 0 to 2048 [ 2747.031795][ T9289] EXT4-fs (loop3): 1 truncate cleaned up [ 2747.038562][ T9289] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2747.052695][ T9289] ext4 filesystem being mounted at /186/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 2747.065161][ T9294] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2747.082730][ T9294] ext4 filesystem being mounted at /450/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 2747.095929][ T9289] EXT4-fs error (device loop3): ext4_lookup:1789: inode #2: comm syz.3.37335: deleted inode referenced: 12 [ 2747.151368][ T6255] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2747.178794][ T9297] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.37336: bg 0: block 345: padding at end of block bitmap is not set [ 2747.193836][ T9297] EXT4-fs (loop0): Remounting filesystem read-only [ 2747.200492][T17297] EXT4-fs warning (device loop0): ext4_convert_unwritten_extents:4984: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30 [ 2747.229163][ T9294] tipc: Enabling of bearer rejected, already enabled [ 2747.256333][ T1983] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2747.335510][ T9303] loop0: detected capacity change from 0 to 512 [ 2747.342620][ T9303] ext4: Unknown parameter 'fowner' [ 2747.349631][ T9303] loop0: detected capacity change from 0 to 128 [ 2747.444268][ T9307] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2747.452048][ T9307] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2747.600850][ T9312] loop4: detected capacity change from 0 to 1024 [ 2747.619903][ T9312] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=2802c09c, mo2=0002] [ 2747.628261][ T9312] System zones: 0-1, 3-12 [ 2747.633185][ T9312] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2747.646807][ T9312] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.37341: bg 0: block 88: padding at end of block bitmap is not set [ 2747.672006][T16321] Bluetooth: hci0: command 0x1003 tx timeout [ 2747.678388][T23628] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 2747.702591][ T6041] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2747.747720][ T9321] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2747.804579][ T9321] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2747.874045][ T9321] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2747.925636][ T9321] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2747.947249][ T9328] xt_hashlimit: overflow, rate too high: 0 [ 2748.002514][ T658] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2748.016034][T28144] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2748.027942][T28144] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2748.040176][T28144] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2748.068491][ T9330] netlink: 36 bytes leftover after parsing attributes in process `syz.0.37346'. [ 2748.077608][ T9330] netlink: 16 bytes leftover after parsing attributes in process `syz.0.37346'. [ 2748.086862][ T9330] netlink: 36 bytes leftover after parsing attributes in process `syz.0.37346'. [ 2748.096016][ T9330] netlink: 36 bytes leftover after parsing attributes in process `syz.0.37346'. [ 2748.109614][ T9332] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2748.166135][ T9332] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2748.176340][ T9334] loop3: detected capacity change from 0 to 2048 [ 2748.187038][ T9334] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2748.199747][ T9334] ext4 filesystem being mounted at /188/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 2748.237918][ T9332] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2748.277852][ T9339] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.37348: bg 0: block 345: padding at end of block bitmap is not set [ 2748.292574][ T9339] EXT4-fs (loop3): Remounting filesystem read-only [ 2748.299166][ T7302] EXT4-fs warning (device loop3): ext4_convert_unwritten_extents:4984: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30 [ 2748.316019][ T9332] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2748.347563][ T9334] tipc: Enabling of bearer rejected, already enabled [ 2748.368859][ T6255] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2748.451274][ T9345] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 2748.505639][ T9350] loop3: detected capacity change from 0 to 1024 [ 2748.681199][ T9350] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=2802c09c, mo2=0002] [ 2748.689727][ T9350] System zones: 0-1, 3-12 [ 2748.695080][ T9350] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2748.716644][ T9350] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.37353: bg 0: block 88: padding at end of block bitmap is not set [ 2748.771324][ T6255] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2748.914736][ T9360] syzkaller0: entered promiscuous mode [ 2748.920394][ T9360] syzkaller0: entered allmulticast mode [ 2748.943337][ T9362] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2748.951016][ T9362] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2748.958517][ T9362] netlink: 8 bytes leftover after parsing attributes in process `syz.3.37355'. [ 2748.967647][ T9362] netlink: 4 bytes leftover after parsing attributes in process `syz.3.37355'. [ 2749.025527][ T29] kauditd_printk_skb: 573 callbacks suppressed [ 2749.025544][ T29] audit: type=1326 audit(2000001924.137:167701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9367 comm="syz.3.37359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff44203f749 code=0x7ffc0000 [ 2749.056395][ T29] audit: type=1326 audit(2000001924.137:167702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9367 comm="syz.3.37359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7ff44203f749 code=0x7ffc0000 [ 2749.080346][ T29] audit: type=1326 audit(2000001924.137:167703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9367 comm="syz.3.37359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff44203f749 code=0x7ffc0000 [ 2749.104159][ T29] audit: type=1326 audit(2000001924.137:167704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9367 comm="syz.3.37359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7ff44203f749 code=0x7ffc0000 [ 2749.127904][ T29] audit: type=1326 audit(2000001924.137:167705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9367 comm="syz.3.37359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff44203f749 code=0x7ffc0000 [ 2749.151792][ T29] audit: type=1326 audit(2000001924.137:167706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9367 comm="syz.3.37359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=241 compat=0 ip=0x7ff44203f749 code=0x7ffc0000 [ 2749.175935][ T29] audit: type=1326 audit(2000001924.137:167707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9367 comm="syz.3.37359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff44203f749 code=0x7ffc0000 [ 2749.199950][ T29] audit: type=1326 audit(2000001924.137:167708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9367 comm="syz.3.37359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff44203f749 code=0x7ffc0000 [ 2749.223678][ T29] audit: type=1326 audit(2000001924.137:167709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9367 comm="syz.3.37359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff44203f749 code=0x7ffc0000 [ 2749.247551][ T29] audit: type=1326 audit(2000001924.137:167710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9367 comm="syz.3.37359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff44203f749 code=0x7ffc0000 [ 2749.470841][ T9381] loop2: detected capacity change from 0 to 512 [ 2750.320082][ T9391] netlink: 12 bytes leftover after parsing attributes in process `syz.2.37369'. [ 2750.339005][ T9389] syzkaller0: entered promiscuous mode [ 2750.344558][ T9389] syzkaller0: entered allmulticast mode [ 2750.434290][ T9393] loop0: detected capacity change from 0 to 1024 [ 2750.443796][ T9393] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=2802c09c, mo2=0002] [ 2750.452074][ T9393] System zones: 0-1, 3-12 [ 2750.457296][ T9393] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2750.472666][ T9393] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.37370: bg 0: block 88: padding at end of block bitmap is not set [ 2750.525642][ T1983] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2750.603006][ T9399] ext4: Unknown parameter 'fowner' [ 2750.702781][ T9398] ================================================================== [ 2750.710936][ T9398] BUG: KCSAN: data-race in __writeback_single_inode / xas_set_mark [ 2750.718897][ T9398] [ 2750.721240][ T9398] write to 0xffff88811b02e914 of 4 bytes by task 9399 on cpu 0: [ 2750.728974][ T9398] xas_set_mark+0x12b/0x140 [ 2750.733534][ T9398] __folio_start_writeback+0x155/0x340 [ 2750.739037][ T9398] __block_write_full_folio+0x53a/0x8f0 [ 2750.744634][ T9398] block_write_full_folio+0x2c1/0x2e0 [ 2750.750117][ T9398] mpage_writepages+0x6cf/0x1250 [ 2750.755082][ T9398] fat_writepages+0x24/0x30 [ 2750.759643][ T9398] do_writepages+0x1c6/0x310 [ 2750.764301][ T9398] file_write_and_wait_range+0x156/0x2c0 [ 2750.769960][ T9398] __generic_file_fsync+0x46/0x160 [ 2750.775121][ T9398] fat_file_fsync+0x49/0x100 [ 2750.779723][ T9398] vfs_fsync_range+0x10d/0x130 [ 2750.784505][ T9398] generic_file_write_iter+0x1b8/0x2f0 [ 2750.790021][ T9398] iter_file_splice_write+0x66b/0xa20 [ 2750.795405][ T9398] direct_splice_actor+0x156/0x2a0 [ 2750.800618][ T9398] splice_direct_to_actor+0x312/0x680 [ 2750.806024][ T9398] do_splice_direct+0xda/0x150 [ 2750.810826][ T9398] do_sendfile+0x380/0x650 [ 2750.815258][ T9398] __x64_sys_sendfile64+0x105/0x150 [ 2750.820499][ T9398] x64_sys_call+0x2db1/0x3000 [ 2750.825410][ T9398] do_syscall_64+0xca/0x2b0 [ 2750.829933][ T9398] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2750.835836][ T9398] [ 2750.838161][ T9398] read to 0xffff88811b02e914 of 4 bytes by task 9398 on cpu 1: [ 2750.845722][ T9398] __writeback_single_inode+0x201/0x7c0 [ 2750.851288][ T9398] writeback_single_inode+0x16d/0x3f0 [ 2750.856675][ T9398] sync_inode_metadata+0x5b/0x90 [ 2750.861628][ T9398] __generic_file_fsync+0x109/0x160 [ 2750.866837][ T9398] fat_file_fsync+0x49/0x100 [ 2750.871527][ T9398] vfs_fsync_range+0x10d/0x130 [ 2750.876312][ T9398] generic_file_write_iter+0x1b8/0x2f0 [ 2750.881797][ T9398] iter_file_splice_write+0x66b/0xa20 [ 2750.887186][ T9398] direct_splice_actor+0x156/0x2a0 [ 2750.892329][ T9398] splice_direct_to_actor+0x312/0x680 [ 2750.897715][ T9398] do_splice_direct+0xda/0x150 [ 2750.902488][ T9398] do_sendfile+0x380/0x650 [ 2750.906941][ T9398] __x64_sys_sendfile64+0x105/0x150 [ 2750.912203][ T9398] x64_sys_call+0x2db1/0x3000 [ 2750.916914][ T9398] do_syscall_64+0xca/0x2b0 [ 2750.921469][ T9398] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2750.927459][ T9398] [ 2750.929820][ T9398] value changed: 0x0a000021 -> 0x04000021 [ 2750.935559][ T9398] [ 2750.937898][ T9398] Reported by Kernel Concurrency Sanitizer on: [ 2750.944061][ T9398] CPU: 1 UID: 0 PID: 9398 Comm: syz.0.37371 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 2750.955440][ T9398] Tainted: [W]=WARN [ 2750.959252][ T9398] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2750.969462][ T9398] ================================================================== [ 2751.082502][ T9399] bio_check_eod: 3 callbacks suppressed [ 2751.082593][ T9399] syz.0.37371: attempt to access beyond end of device [ 2751.082593][ T9399] loop0: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 2751.102063][ T9399] buffer_io_error: 3 callbacks suppressed [ 2751.102087][ T9399] Buffer I/O error on dev loop0, logical block 128, lost async page write [ 2751.117086][ T9398] syz.0.37371: attempt to access beyond end of device [ 2751.117086][ T9398] loop0: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 2751.130974][ T9398] Buffer I/O error on dev loop0, logical block 128, lost async page write [ 2751.266063][T23628] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 2751.269052][T16321] Bluetooth: hci0: command 0x1003 tx timeout [ 2753.571256][T28144] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2753.582999][ T386] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2753.594936][ T386] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2753.606727][ T386] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0