last executing test programs: 3.22014255s ago: executing program 3 (id=308): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x69, 0x7ffc0005}]}) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) setgroups(0x0, 0x0) getgroups(0x0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000340)="db9cc271fea86298d1087a5734d4c9bbe1821c850ffbfe1f8326017cb55f0d24d43dfa81c81a9b42ae4d719bedb0de707846977e9111dbdc24ceb742673db0a5f17dac66c1f6c496413c63a9d550b345db5aed9da3b5923fd51b1e94bc62d682620966f3c44af961d52e5370594b93b2ce80d8d9b51906000000000000009898ccf1c86baf1361d36c30d0e8ef98", 0x8e}], 0x1}, 0x41) recvmsg(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x10001) sendmsg$inet(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)='#', 0x1}], 0x1}, 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x8004, &(0x7f0000000080)={[{@discard}, {@bh}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x7b9, &(0x7f00000007c0)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r5, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x107842, 0x42) sendfile(r6, r6, 0x0, 0x80000000) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="59bb000000000001000001000000080001001e0000004124e955165a1f6b5fecf9a145b0605652ad64fa525ead5cc431093cb5d774d976310e7be22d2e2615cca4da6d2846dfeb04696f6d591a6e4c68a9c388b2daadc30b79fe88de4d8e12dc1026eb85951c7a3107f69ba55c350b150e473a7528"], 0x1c}, 0x1, 0x0, 0x0, 0x400c080}, 0x0) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014fa0000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) unshare(0x2a020400) 2.937779407s ago: executing program 4 (id=315): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) statx(r0, &(0x7f00000000c0)='./file0\x00', 0x400, 0x800, &(0x7f0000000100)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x7c}, 0x1, 0x0, 0x0, 0x41001}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2}, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000001200)='alloc_extent_state\x00'}, 0x18) socket$kcm(0x2a, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x60, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x2c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2=0xe0000001}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_TUPLE_REPLY={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @multicast1}}}]}, @CTA_TIMEOUT={0x8}]}, 0x60}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000060a0b04000000000000000002000f002400048020000180070001006374000014000280080002400000000308000440000000010900010073797a30000000000900020073"], 0x78}}, 0x0) fsmount(r0, 0x0, 0x70) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x19, 0xfffffff2, 0x7, 0x7f, 0x501c, 0x1, 0xfffffffd, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x1, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00'}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r7}, &(0x7f0000000280), &(0x7f0000000080)}, 0x20) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') write$binfmt_script(r8, &(0x7f0000001800)={'#! ', './cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0xff1) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x6, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 2.729833229s ago: executing program 3 (id=317): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000009505a62bd05cf8317a6a6c58e0e46db4c77540085a19abcd7a9af496194b19b0025df1b766e9848de4"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000240)='f2fs_get_victim\x00', r0, 0x0, 0x7}, 0x18) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r1 = socket$inet6(0xa, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000001100)=ANY=[@ANYBLOB="140000001000010000000000000000000020000a3c000000120a0908000000000000000002000000"], 0x64}}, 0x4040080) r2 = io_uring_setup(0x1691, &(0x7f0000000400)={0x0, 0x631d, 0x80, 0x2000002, 0x2d9}) io_uring_register$IORING_REGISTER_BUFFERS2(r2, 0xf, &(0x7f0000002700)={0x119f, 0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/264, 0xf9}, {&(0x7f00000015c0)=""/4096, 0x400400}, {&(0x7f0000002a00)=""/88, 0x8}], 0x0}, 0x20) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @empty, 0x4000006}, 0x1c) listen(r4, 0x6) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) r6 = accept(r3, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0xfffffdef}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) recvfrom(r5, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x3e8, 0x0, 0x0) setsockopt$inet_int(r1, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffa, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, 0x0, 0x0) 1.954211625s ago: executing program 4 (id=324): munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000001000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x10) sendmmsg$inet(r1, &(0x7f0000000ec0)=[{{&(0x7f0000000080)={0x2, 0x4e25, @multicast2}, 0x10, 0x0}}], 0x1, 0x2000c044) sendto$inet(r1, &(0x7f0000000c80)="e8", 0x6200, 0x0, 0x0, 0x0) set_mempolicy(0x4002, &(0x7f0000000080)=0x7e, 0x9) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) 1.623831714s ago: executing program 2 (id=328): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0xffffffd3) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYRES64], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r2}, 0x10) sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081064e81f782db44b9040a1d08040000000000000aa1180002000607002603600e12080b0f0000810401a8001605200001400200000803604e0cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee422fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef5d2defd5ccae8d3fb7c27a1059ae31c60e2234d732", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x2000000, 0x0, 0x0, 0xa, "ff00f7000000000000000000af88008300"}) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000340)={[{@nojournal_checksum}, {}]}, 0x0, 0x4ee, &(0x7f0000000c40)="$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") r3 = syz_open_pts(r0, 0x141601) write(r3, &(0x7f0000000440)="63bc362cd7", 0x5) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0xfffffffc, 0x0, 0x0, "682341f2fd71a6a76177920ea7e60c0ac7a4a5"}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000140)={'\x00', 0x6132}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000001d00070f000000000000000007000000", @ANYRES32=r5, @ANYBLOB="00005200060005000100000008", @ANYRES32=r4], 0x2c}}, 0x0) r6 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000340), 0xc0000, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000d3aa772188af95789600060000000000000007000000000000", @ANYRESOCT=r5, @ANYBLOB="71c800"/20, @ANYRES32=r5, @ANYRES32=r6, @ANYBLOB="05000000050000000000000000000000000000000100000000000000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000480)='mlxsw_sp_acl_atcam_entry_add_ctcam_spill\x00', r8}, 0x18) msgctl$IPC_SET(0x0, 0x1, 0x0) r9 = gettid() r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4c0000001000370400"/20, @ANYRES32=0x0, @ANYBLOB="03000000000000002c0012800e00010069703665727370616e0000001800028008000d00030000000400120008000c0003000000"], 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) ptrace$ARCH_SET_GS(0x1e, r9, &(0x7f0000000240), 0x1001) r11 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002180)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r11, 0xffffffffffffffff, 0x0) 1.585942077s ago: executing program 1 (id=329): clock_settime(0x0, &(0x7f0000000240)={0x77359400}) clock_adjtime(0x0, &(0x7f0000000640)={0x7, 0xb, 0x380000, 0x3ff, 0xfffffffffffffff9, 0x7fffffffffffffff, 0x9, 0x4, 0x7fff, 0x6, 0x7, 0x4, 0xca3, 0x7, 0x80000000, 0xfffffffffffffffd, 0xffffffffffffffff, 0x9, 0x0, 0x100, 0x4, 0x2, 0x7, 0x3, 0x8, 0x5}) clock_adjtime(0x0, &(0x7f0000000900)={0x6, 0xe, 0xe, 0x6, 0xf, 0xa, 0x0, 0x2, 0x9, 0x2, 0x4, 0x8000000000000000, 0xc, 0x9, 0x7, 0x9, 0x7, 0x3, 0x8, 0xfffffffffffffffa, 0x0, 0x5, 0x8, 0x7, 0x3, 0x7ff}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f00000000c0)='\x00') r1 = add_key$keyring(&(0x7f0000000140), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) capset(&(0x7f00000004c0)={0x20080522}, &(0x7f0000000500)={0x80002}) keyctl$get_security(0x11, r1, &(0x7f00000002c0)=""/118, 0x76) writev(r0, &(0x7f0000000040)=[{&(0x7f0000002500)='\f7', 0x2}, {&(0x7f0000000440)='0', 0x1}], 0x2) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0}, 0x4) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0xfe, 0x7ffc0002}]}) open_tree(0xffffffffffffff9c, 0x0, 0x0) 1.449816974s ago: executing program 3 (id=330): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x101100, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000001c0)={'ip6_vti0\x00', &(0x7f0000000140)={'ip6tnl0\x00', r2, 0x6, 0x32, 0x2, 0x9, 0x0, @dev={0xfe, 0x80, '\x00', 0x32}, @loopback, 0x7, 0x10, 0x4, 0x7f}}) syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b7030000000000de850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) r4 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) mkdir(&(0x7f0000000140)='./control\x00', 0x0) add_key$keyring(&(0x7f0000000100), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) openat$selinux_enforce(0xffffffffffffff9c, 0x0, 0x402040, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44000000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7fffffff, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x10) close(r4) r7 = inotify_init1(0x0) fcntl$setstatus(r4, 0x4, 0x2c00) r8 = gettid() fcntl$setown(r4, 0x8, r8) fcntl$setsig(r7, 0xa, 0xe) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000000040)={[0xffffffffffff7ff8]}, 0x0, 0x0, 0x8) inotify_add_watch(r7, &(0x7f0000000180)='./control\x00', 0x80000010) rmdir(&(0x7f0000000100)='./control\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000004700)) 1.399006078s ago: executing program 2 (id=331): pselect6(0x0, 0x0, 0x0, &(0x7f0000000080)={0x1, 0x5, 0x4, 0x3, 0x8001, 0xfffffffffffffff6, 0x1, 0x95c}, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="24000000700001000000000000000000070000", @ANYRES32=r2, @ANYBLOB="0c000280060012"], 0x24}}, 0x0) 1.35862636s ago: executing program 1 (id=333): bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="1b0000000000000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000f1ffffffffffffff00"/27], 0x50) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x0, {}, [@FRA_GENERIC_POLICY=@FRA_SUPPRESS_IFGROUP={0x8, 0xd, 0x7}]}, 0x24}}, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f0000000200)=ANY=[@ANYBLOB="02"], 0xfe44, 0x0) 1.260279836s ago: executing program 1 (id=334): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x69, 0x7ffc0005}]}) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) setgroups(0x0, 0x0) getgroups(0x0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000340)="db9cc271fea86298d1087a5734d4c9bbe1821c850ffbfe1f8326017cb55f0d24d43dfa81c81a9b42ae4d719bedb0de707846977e9111dbdc24ceb742673db0a5f17dac66c1f6c496413c63a9d550b345db5aed9da3b5923fd51b1e94bc62d682620966f3c44af961d52e5370594b93b2ce80d8d9b51906000000000000009898ccf1c86baf1361d36c30d0e8ef98", 0x8e}], 0x1}, 0x41) recvmsg(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x10001) sendmsg$inet(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)='#', 0x1}], 0x1}, 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x8004, &(0x7f0000000080)={[{@discard}, {@bh}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x7b9, &(0x7f00000007c0)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r5, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x107842, 0x42) sendfile(r6, r6, 0x0, 0x80000000) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="59bb000000000001000001000000080001001e0000004124e955165a1f6b5fecf9a145b0605652ad64fa525ead5cc431093cb5d774d976310e7be22d2e2615cca4da6d2846dfeb04696f6d591a6e4c68a9c388b2daadc30b79fe88de4d8e12dc1026eb85951c7a3107f69ba55c350b150e473a7528"], 0x1c}, 0x1, 0x0, 0x0, 0x400c080}, 0x0) r7 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014fa0000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) unshare(0x2a020400) 966.207253ms ago: executing program 3 (id=335): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a0010000000", 0x28}, {&(0x7f0000000640)="9abe48978fc9d6d5", 0x8}], 0x2}, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a", 0x23}], 0x1}, 0x0) 915.253636ms ago: executing program 4 (id=337): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000001a0001000000000000000a00802020"], 0x38}}, 0x0) 914.858946ms ago: executing program 4 (id=338): mbind(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4006, 0x0, 0x5, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848", 0x14}, {&(0x7f0000000640)="9abe48978fc9d6d504d0c9f79768e69abc0d908c4b7714017340a5321e", 0x1d}], 0x2}, 0x0) 898.690098ms ago: executing program 3 (id=339): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{r1}, &(0x7f0000000a00), &(0x7f0000000a40)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r1}, &(0x7f0000000880), &(0x7f00000008c0)=r0}, 0x20) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000400)='kfree\x00', r3}, 0x10) mount$9p_tcp(0x0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080), 0x800000, &(0x7f0000000140)={'trans=tcp,', {'port', 0x3d, 0x20000004e23}}) r4 = socket$rds(0x15, 0x5, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x4a) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x2444c1, 0x19a) openat2(r5, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x90000, 0x8, 0x12}, 0x18) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./file0\x00', 0x414, &(0x7f0000000080)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000"], 0x1, 0x2a1, &(0x7f0000000f40)="$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") syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[], 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x20081e, &(0x7f0000000040)={[{@nodelalloc}, {@grpid}, {@auto_da_alloc}]}, 0x1, 0x4ef, &(0x7f00000003c0)="$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") r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f00000001c0), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r6, 0x0) cachestat(r6, &(0x7f0000000040), 0x0, 0x0) r7 = socket$caif_seqpacket(0x25, 0x5, 0x0) writev(r7, &(0x7f0000000c00)=[{0x0}, {&(0x7f0000000a00)="049c091da737a4384bb6dd98db80d2031b631d3dfefced7b33dddaee9d4b196c89947a1605413efb670b3c8df6a3d6427519b58945388cb6c140f4fcbb83fde36ef054eeaed924778be42a089a33a7e8e5c0e0c4b447d8eb1b6faf5d0bd559638184d338e1c14999298298580f6741b654a87b6535a3e4e471046103b2435c", 0x7f}, {&(0x7f0000000340)="d67c34103352e1e8c3bf1a2f22dd1b08b102d42e1e8238f8e485cf82241df0e303d132152715c2cf8b442de70eb6afbb2084196247d9ac8fea6e78507eb970dfc642119065a5de57416073ee643f9fc51ad3fe4f832f116c56579382f570", 0x5e}, {&(0x7f0000000b80)="985325bf814083ae6f4e079d4c305e56ab7da6f77fea4849b57cb7f1b800395d3bcb2f10fd2c24c6cec7baf9f6eb8a90940ff75abc", 0x35}], 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000d00)=ANY=[@ANYRES32, @ANYRES32=0x0], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet(r8, &(0x7f0000000380)={&(0x7f0000000000)={0x2, 0x4e22, @remote}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000040)="6b1690bb8dc095ebae95baccdce177a97389ae7df65487e3996df64c35efa6e159bd2f2180", 0xfdef}], 0x1, &(0x7f00000008c0)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aaac14140000000000160000000000000000000000070000009404000000020000e31eda9cafe75069"], 0x38}, 0x0) bind$rds(r4, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r4, &(0x7f0000000300)={&(0x7f0000000040)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f00000005c0)=[@rdma_args={0x48, 0x114, 0x1, {{0x3, 0x5}, {0x0}, &(0x7f0000000340)=[{&(0x7f0000001140)=""/102, 0x66}], 0x1, 0x60, 0xfffffffefffffffe}}], 0x48, 0x8004}, 0x0) ioctl$KDFONTOP_GET(r2, 0x4b72, &(0x7f00000003c0)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 818.055832ms ago: executing program 4 (id=340): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x98, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="02000000040000000800000001000000800000000bdccdfeb905ad9f59c31e76137453f60510437273c3e4011c", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/14], 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000002c0)={r0, 0xffffffffffffffff, 0x0}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x7a}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x76}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000000)={'wlan1\x00', @random="0100ce201000"}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={0x0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x3, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0xb7}, [], {0x95, 0x0, 0x74}}, 0x0, 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000020000000400000005"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x40000000}, [@map_val={0x18, 0x6, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x1000}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x8, &(0x7f00000003c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x87}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x0, 0xe, 0x0, &(0x7f0000000000)="e06921e8682d85ff9782762f86dd", 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r4}, 0x10) r7 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) write$binfmt_register(r7, &(0x7f0000000000)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0x7, 0x3a, 'M', 0x3a, 'M', 0x3a, './file2', 0x3a, [0x46]}, 0x2a) 714.921008ms ago: executing program 3 (id=341): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000009505a62bd05cf8317a6a6c58e0e46db4c77540085a19abcd7a9af496194b19b0025df1b766e9848de4"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000240)='f2fs_get_victim\x00', r0, 0x0, 0x7}, 0x18) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r1 = socket$inet6(0xa, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000001100)=ANY=[@ANYBLOB="140000001000010000000000000000000020000a3c000000120a0908000000000000000002000000"], 0x64}}, 0x4040080) r2 = io_uring_setup(0x1691, &(0x7f0000000400)={0x0, 0x631d, 0x80, 0x2000002, 0x2d9}) io_uring_register$IORING_REGISTER_BUFFERS2(r2, 0xf, &(0x7f0000002700)={0x119f, 0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/264, 0xf9}, {&(0x7f00000015c0)=""/4096, 0x400400}, {&(0x7f0000002a00)=""/88, 0x8}], 0x0}, 0x20) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @empty, 0x4000006}, 0x1c) listen(r4, 0x6) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) r6 = accept(r3, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0xfffffdef}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) recvfrom(r5, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x3e8, 0x0, 0x0) setsockopt$inet_int(r1, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffa, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, 0x0, 0x0) 682.32517ms ago: executing program 4 (id=342): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x69, 0x7ffc0005}]}) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) setgroups(0x0, 0x0) getgroups(0x0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000340)="db9cc271fea86298d1087a5734d4c9bbe1821c850ffbfe1f8326017cb55f0d24d43dfa81c81a9b42ae4d719bedb0de707846977e9111dbdc24ceb742673db0a5f17dac66c1f6c496413c63a9d550b345db5aed9da3b5923fd51b1e94bc62d682620966f3c44af961d52e5370594b93b2ce80d8d9b51906000000000000009898ccf1c86baf1361d36c30d0e8ef98", 0x8e}], 0x1}, 0x41) recvmsg(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x10001) sendmsg$inet(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)='#', 0x1}], 0x1}, 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x8004, &(0x7f0000000080)={[{@discard}, {@bh}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x7b9, &(0x7f00000007c0)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r5, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x107842, 0x42) sendfile(r6, r6, 0x0, 0x80000000) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=ANY=[@ANYBLOB="1c0000", @ANYRES16=r4, @ANYBLOB="59bb000000000001000001000000080001001e0000004124e955165a1f6b5fecf9a145b0605652ad64fa525ead5cc431093cb5d774d976310e7be22d2e2615cca4da6d2846dfeb04696f6d591a6e4c68a9c388b2daadc30b79fe88de4d8e12dc1026eb85951c7a3107f69ba55c350b150e473a7528"], 0x1c}, 0x1, 0x0, 0x0, 0x400c080}, 0x0) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014fa0000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) unshare(0x2a020400) 516.91006ms ago: executing program 2 (id=346): socket(0x21, 0x5, 0x8a4) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000ff01000000000000002000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x1000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000002fc0), 0x242002, 0x0) fcntl$setstatus(r3, 0x403, 0x26c00) rt_sigaction(0x19, &(0x7f0000000000)={0xfffffffffffffffc, 0x44000006, 0x0}, 0x0, 0x8, &(0x7f0000000440)) r4 = memfd_create(&(0x7f00000006c0)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\xf2\xed\x04\x00\x00\x00\xd4N\x12\x9b\x1f\t\xd1Z+\x86T\x16\xf8\x01\x00\x00\x00\x9f+\x8d!\x0fG\xab\xc2\xdc\xa3\xb3\xae8\x9f9?\xefo\xa4k\x01\xb2>\xa1\x9c\x86xm\xe6\x9bZ4\x91\x1a\xdb\xdd\x89\xb9\xc0LF;\xd6\x84\x195\x06\x00\x00\x00~\xf3S\x12\"p^\xc1jP\x8a\xc6[\xbd\xe7q]\xdd\r\x1aZS\x01*\x1b\xfd\xbcMA\xdcq\xa1\x00\xb3\xf9\x91r\x7f\xdc\xf1\xc3G,\xdb\xccS\x15\x95b\x17\xab\xe4?\x96\x95\xa4kP\x99YO\xb8V\xd5p\x90X\xaaf', 0x2) fallocate(r4, 0x0, 0x400000000000000, 0x7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000340)='kfree\x00', r1, 0x0, 0xfffffffffffffffb}, 0x18) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) io_setup(0x401, &(0x7f0000000180)=0x0) io_submit(r6, 0x0, 0x0) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32, @ANYBLOB="0000000002000000000000ccd50000000000030000000000"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=ANY=[@ANYBLOB="4401000021000100000000000000000000000000000000000000000000000000fe8000000000000000000000000000bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000a000000e80011"], 0x144}}, 0x0) r9 = socket(0x40000000015, 0x5, 0x0) connect$inet6(r9, &(0x7f0000000000)={0xa, 0x0, 0x6, @ipv4={'\x00', '\xff\xff', @empty}, 0x40}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0x7, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000fcffffff18110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x31, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r10 = io_uring_setup(0x3454, &(0x7f0000000080)={0x0, 0xffffeffe, 0x18, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r10, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r10, 0x10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000002700)=""/4096, 0x1000}], 0x0, 0xa}, 0x20) 479.107632ms ago: executing program 1 (id=347): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x101100, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000001c0)={'ip6_vti0\x00', &(0x7f0000000140)={'ip6tnl0\x00', r2, 0x6, 0x32, 0x2, 0x9, 0x0, @dev={0xfe, 0x80, '\x00', 0x32}, @loopback, 0x7, 0x10, 0x4, 0x7f}}) syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b7030000000000de850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) r4 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) mkdir(&(0x7f0000000140)='./control\x00', 0x0) add_key$keyring(&(0x7f0000000100), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) openat$selinux_enforce(0xffffffffffffff9c, 0x0, 0x402040, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44000000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7fffffff, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x10) close(r4) r7 = inotify_init1(0x0) fcntl$setstatus(r4, 0x4, 0x2c00) r8 = gettid() fcntl$setown(r4, 0x8, r8) fcntl$setsig(r7, 0xa, 0xe) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000000040)={[0xffffffffffff7ff8]}, 0x0, 0x0, 0x8) inotify_add_watch(r7, &(0x7f0000000180)='./control\x00', 0x80000010) rmdir(&(0x7f0000000100)='./control\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000004700)) 419.667686ms ago: executing program 0 (id=348): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x10, 0x0, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1, 0x0, 0x8000000000002}, 0x18) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="1c00000021001100000000006f8ff56a6a10000000000a"], 0x1c}}, 0x0) write$tun(r2, &(0x7f00000005c0)=ANY=[@ANYBLOB="020086dd0300000000003000000060ec970012302c00fe8000000000000000000000000000aaff0200000000000000000000000000013a"], 0xfdef) 325.412771ms ago: executing program 2 (id=349): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a0010000000", 0x28}, {&(0x7f0000000640)="9abe48978fc9d6d5", 0x8}], 0x2}, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a", 0x23}], 0x1}, 0x0) 310.852842ms ago: executing program 0 (id=350): mbind(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4006, 0x0, 0x5, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848", 0x14}, {&(0x7f0000000640)="9abe48978fc9d6d504d0c9f79768e69abc0d908c4b7714017340a5321e", 0x1d}], 0x2}, 0x0) 264.929605ms ago: executing program 0 (id=351): mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, &(0x7f0000000080)=ANY=[]) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x340, 0x11, 0x148, 0x340, 0x0, 0x440, 0x2a8, 0x2a8, 0x440, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x88000000, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00'}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x538) 240.928696ms ago: executing program 2 (id=352): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sys_enter\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) socket$key(0xf, 0x3, 0x2) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000001040)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@broadcast, @in6=@remote}, {@in6=@remote, 0x0, 0x32}, @in6=@mcast1, {}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}, 0x1, 0xe}, 0x0) getrlimit(0x1, &(0x7f0000000400)) socket$netlink(0x10, 0x3, 0x0) socket$tipc(0x1e, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x2, 0x0) socket$packet(0x11, 0x2, 0x300) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xe, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r7}, &(0x7f0000000240), &(0x7f00000003c0)=r9}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r8, r5, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x15, &(0x7f0000000300)={@random="6ea88d319b8c", @multicast, @val={@void, {0x8100, 0x0, 0x1, 0x4}}, {@x25={0x805, {0x0, 0x1, 0xb}}}}, 0x0) 238.552816ms ago: executing program 1 (id=353): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{r1}, &(0x7f0000000a00), &(0x7f0000000a40)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r1}, &(0x7f0000000880), &(0x7f00000008c0)=r0}, 0x20) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000400)='kfree\x00', r3}, 0x10) mount$9p_tcp(0x0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080), 0x800000, &(0x7f0000000140)={'trans=tcp,', {'port', 0x3d, 0x20000004e23}}) r4 = socket$rds(0x15, 0x5, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x4a) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x2444c1, 0x19a) openat2(r5, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x90000, 0x8, 0x12}, 0x18) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./file0\x00', 0x414, &(0x7f0000000080)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000"], 0x1, 0x2a1, &(0x7f0000000f40)="$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") syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[], 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x20081e, &(0x7f0000000040)={[{@nodelalloc}, {@grpid}, {@auto_da_alloc}]}, 0x1, 0x4ef, &(0x7f00000003c0)="$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") r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f00000001c0), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r6, 0x0) cachestat(r6, &(0x7f0000000040), 0x0, 0x0) r7 = socket$caif_seqpacket(0x25, 0x5, 0x0) writev(r7, &(0x7f0000000c00)=[{0x0}, {&(0x7f0000000a00)="049c091da737a4384bb6dd98db80d2031b631d3dfefced7b33dddaee9d4b196c89947a1605413efb670b3c8df6a3d6427519b58945388cb6c140f4fcbb83fde36ef054eeaed924778be42a089a33a7e8e5c0e0c4b447d8eb1b6faf5d0bd559638184d338e1c14999298298580f6741b654a87b6535a3e4e471046103b2435cb6852cbb7a1dca90", 0x87}, {&(0x7f0000000340)="d67c34103352e1e8c3bf1a2f22dd1b08b102d42e1e8238f8e485cf82241df0e303d132152715c2cf8b442de70eb6afbb2084196247d9ac8fea6e78507eb970dfc642119065a5de57416073ee643f9fc51ad3fe4f832f116c56579382f570", 0x5e}, {&(0x7f0000000b80)="985325bf814083ae6f4e079d4c305e56ab7da6f77fea4849b57cb7f1b800395d3bcb2f10fd2c24c6cec7baf9f6eb8a90940ff75abc", 0x35}], 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000d00)=ANY=[@ANYRES32, @ANYRES32=0x0], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet(r8, &(0x7f0000000380)={&(0x7f0000000000)={0x2, 0x4e22, @remote}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000040)="6b1690bb8dc095ebae95baccdce177a97389ae7df65487e3996df64c35efa6e159bd2f2180", 0xfdef}], 0x1, &(0x7f00000008c0)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aaac14140000000000160000000000000000000000070000009404000000020000e31eda9cafe75069"], 0x38}, 0x0) bind$rds(r4, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r4, &(0x7f0000000300)={&(0x7f0000000040)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f00000005c0)=[@rdma_args={0x48, 0x114, 0x1, {{0x3, 0x5}, {0x0}, &(0x7f0000000340)=[{&(0x7f0000001140)=""/102, 0x66}], 0x1, 0x60, 0xfffffffefffffffe}}], 0x48, 0x8004}, 0x0) ioctl$KDFONTOP_GET(r2, 0x4b72, &(0x7f00000003c0)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 201.643948ms ago: executing program 0 (id=354): mbind(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4006, 0x0, 0x5, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e1406020000", 0x1e}, {&(0x7f0000000640)="9abe48978fc9d6d504d0c9f79768e69abc0d908c4b7714017340a5321e2091ace2f3", 0x22}], 0x2}, 0x0) 164.462691ms ago: executing program 0 (id=355): bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="1b0000000000000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000f1ffffffffffffff00"/27], 0x50) socket$nl_route(0x10, 0x3, 0x0) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fsetxattr$system_posix_acl(r0, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f0000000200)=ANY=[@ANYBLOB="02"], 0xfe44, 0x0) 124.142013ms ago: executing program 2 (id=356): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{r1}, &(0x7f0000000a00), &(0x7f0000000a40)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r1}, &(0x7f0000000880), &(0x7f00000008c0)=r0}, 0x20) syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000400)='kfree\x00', r2}, 0x10) mount$9p_tcp(0x0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080), 0x800000, &(0x7f0000000140)={'trans=tcp,', {'port', 0x3d, 0x20000004e23}}) r3 = socket$rds(0x15, 0x5, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x4a) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x2444c1, 0x19a) openat2(r4, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x90000, 0x8, 0x12}, 0x18) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./file0\x00', 0x414, &(0x7f0000000080)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000"], 0x1, 0x2a1, &(0x7f0000000f40)="$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") syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[], 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x20081e, &(0x7f0000000040)={[{@nodelalloc}, {@grpid}, {@auto_da_alloc}]}, 0x1, 0x4ef, &(0x7f00000003c0)="$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") r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f00000001c0), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r5, 0x0) cachestat(r5, &(0x7f0000000040), 0x0, 0x0) r6 = socket$caif_seqpacket(0x25, 0x5, 0x0) writev(r6, &(0x7f0000000c00)=[{0x0}, {&(0x7f0000000a00)="049c091da737a4384bb6dd98db80d2031b631d3dfefced7b33dddaee9d4b196c89947a1605413efb670b3c8df6a3d6427519b58945388cb6c140f4fcbb83fde36ef054eeaed924778be42a089a33a7e8e5c0e0c4b447d8eb1b6faf5d0bd559638184d338e1c1", 0x66}, {&(0x7f0000000340)="d67c34103352e1e8c3bf1a2f22dd1b08b102d42e1e8238f8e485cf82241df0e303d132152715c2cf8b442de70eb6afbb2084196247d9ac8fea6e78507eb970dfc642119065a5de57416073ee643f9fc51ad3fe4f832f116c56579382f570", 0x5e}, {&(0x7f0000000b80)="985325bf814083ae6f4e079d4c305e56ab7da6f77fea4849b57cb7f1b800395d3bcb2f10fd2c24c6cec7baf9f6eb8a90940ff75abc", 0x35}], 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000d00)=ANY=[@ANYRES32, @ANYRES32=0x0], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet(r7, &(0x7f0000000380)={&(0x7f0000000000)={0x2, 0x4e22, @remote}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000040)="6b1690bb8dc095ebae95baccdce177a97389ae7df65487e3996df64c35efa6e159bd2f2180", 0xfdef}], 0x1, &(0x7f00000008c0)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aaac14140000000000160000000000000000000000070000009404000000020000e31eda9cafe75069"], 0x38}, 0x0) bind$rds(r3, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r3, &(0x7f0000000300)={&(0x7f0000000040)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f00000005c0)=[@rdma_args={0x48, 0x114, 0x1, {{0x3, 0x5}, {0x0}, &(0x7f0000000340)=[{&(0x7f0000001140)=""/102, 0x66}], 0x1, 0x60, 0xfffffffefffffffe}}], 0x48, 0x8004}, 0x0) 110.206694ms ago: executing program 1 (id=357): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYRES16], 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, &(0x7f0000000080)=ANY=[]) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00'}, 0x10) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000180006bcf271a9df0000000000000000950000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x16, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r1}, &(0x7f0000000000), &(0x7f00000005c0)=r2}, 0x20) symlink(&(0x7f0000001780)='./file2\x00', &(0x7f0000000280)='./file1\x00') bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x88, &(0x7f00000005c0)={[{@nogrpid}, {@min_batch_time}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@nobarrier}, {@nodiscard}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$eJzs289rHFUcAPDvzCat/WViqT+aVo1WMfgjadJae/CiKHhQEPRQjzFJS+y2kSaCLUGjSD1Kwbt4FPwLPOlF1JPgVe9SKJJLq6eV2Z1Jdje7aZJustX9fGCS92be8t53Z97ue/N2AuhZw9mfJGJ/RPweEQO1bGOB4dq/W8uLU38vL04lUam89VdSLXdzeXGqKFq8bl+R6YtIP0viSIt65y9fOT9ZLs9cyvNjCxfeH5u/fOW52QuT52bOzVycOH365InxF05NPN+ROLO4bg59NHf08GvvXHtj6sy1d3/+Ninib4qjQ4bXO/hkpdLh6rrrQF066etiQ9iUUq2bRn+1/w9EKVZP3kC8+mlXGwdsq0qlUnmg/eGlCvA/lkS3WwB0R/FFn81/i22Hhh53hRsv1SZAWdy38q12pC/SvEx/0/y2k4Yj4szSP19lW2zPfQgAgAbfZ+OfZ1uN/9Kovy90b76GMhgR90XEwYg4FRGHIuL+iGrZByPioU3W37xIsnb8k17fUmAblI3/XszXthrHf8XoLwZLee5ANf7+5OxseeZ4/p6MRP/uLD++Th0/vPLbF+2O1Y//si2rvxgL5u243re78TXTkwuTdxJzvRufRAz1tYo/WVkJSCLicEQMbbGO2ae/Odru2O3jX0cH1pkqX0c8VTv/S9EUfyFZf31y7J4ozxwfK66KtX759eqb7eq/o/g7IDv/e1te/yvxDyb167Xzm6/j6h+ft53TbPX635W83bDvw8mFhUvjEbuS12uNrt8/0VRuYrV8Fv/Isdb9/2CsvhNHIiK7iB+OiEci4tG87Y9FxOMRcWyd+H96+Yn3th7/9srin97U+V9N7IrmPa0TpfM/ftdQ6eBm4s/O/8lqaiTfs5HPv420a2tXMwAAAPz3pBGxP5J0dCWdpqOjtd/wH4q9aXlufuGZs3MfXJyuPSMwGP1pcadroO5+6Hg+rS/yE035E/l94y9Le6r50am58nS3g4cet69N/8/8Wep264Bt53kt6F36P/Qu/R96l/4PvatF/9/TjXYAO6/V9//HXWgHsPOa+r9lP+gh5v/Qu/R/6F36P/Sk+T1x+4fkJSTWJCK9K5ohsU2Jbn8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdMa/AQAA//9QOObV") setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r4}, 0x10) sync() rename(&(0x7f0000000000)='./file1\x00', &(0x7f00000000c0)='./file0/file0\x00') bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="b424282af517ce3669ac0de2d134f264ad02fd088e12e13eec618bacf231581b4d6697380312d587a83ac1c3fbe588286bcb172920773eaaac8521b213b79cb6e8fca087b8f3c11b9b452e088192fa09c5200ac55c23c264d884722f7625d2639ca9341cb23180b61e29a7857091eaa893bd4cd80112e866ad34b28cdd9b561d48f775edea3d68827cea9ffbbd4b214f318b77f69f503a91e3a69527fedb19dc5bd2723635011e318e30263447dcd7417a93c349eb699ce763d9d0d21f3288b229bfb07a0a9f9e76dccc215fb1e1ecd192f8687390e14cd2b1a2fb1710ec0d7fb5849d95ecdd4567f53bdefd93633690dc4f2b8cceea1b77", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x340, 0x11, 0x148, 0x340, 0x0, 0x440, 0x2a8, 0x2a8, 0x440, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x88000000, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00'}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x538) 0s ago: executing program 0 (id=358): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00\x00\x00\b'], 0x38}}, 0x0) kernel console output (not intermixed with test programs): 0242][ T3299] team0: Port device team_slave_0 added [ 27.261721][ T3304] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.275716][ T3298] team0: Port device team_slave_1 added [ 27.282625][ T3299] team0: Port device team_slave_1 added [ 27.294154][ T3304] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.303999][ T3310] team0: Port device team_slave_0 added [ 27.310802][ T3310] team0: Port device team_slave_1 added [ 27.326094][ T3305] team0: Port device team_slave_0 added [ 27.332727][ T3305] team0: Port device team_slave_1 added [ 27.357889][ T3299] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.364936][ T3299] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.390853][ T3299] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.411624][ T3304] team0: Port device team_slave_0 added [ 27.422603][ T3310] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.429590][ T3310] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.455511][ T3310] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.466711][ T3298] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.473670][ T3298] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.499578][ T3298] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.510618][ T3299] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.517571][ T3299] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.543857][ T3299] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.560183][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.567270][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.593236][ T3305] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.604727][ T3304] team0: Port device team_slave_1 added [ 27.615506][ T3310] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.622483][ T3310] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.648427][ T3310] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.659482][ T3298] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.666479][ T3298] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.692407][ T3298] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.712420][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.719415][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.745334][ T3305] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.763649][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.770656][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.796561][ T3304] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.807931][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.814916][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.840841][ T3304] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.871287][ T3299] hsr_slave_0: entered promiscuous mode [ 27.877388][ T3299] hsr_slave_1: entered promiscuous mode [ 27.914563][ T3310] hsr_slave_0: entered promiscuous mode [ 27.920828][ T3310] hsr_slave_1: entered promiscuous mode [ 27.926686][ T3310] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 27.934335][ T3310] Cannot create hsr debugfs directory [ 27.951626][ T3298] hsr_slave_0: entered promiscuous mode [ 27.957781][ T3298] hsr_slave_1: entered promiscuous mode [ 27.963734][ T3298] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 27.971402][ T3298] Cannot create hsr debugfs directory [ 27.988302][ T3304] hsr_slave_0: entered promiscuous mode [ 27.994425][ T3304] hsr_slave_1: entered promiscuous mode [ 28.000383][ T3304] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 28.007942][ T3304] Cannot create hsr debugfs directory [ 28.020551][ T3305] hsr_slave_0: entered promiscuous mode [ 28.026590][ T3305] hsr_slave_1: entered promiscuous mode [ 28.032529][ T3305] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 28.040111][ T3305] Cannot create hsr debugfs directory [ 28.240433][ T3299] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 28.247307][ T29] kauditd_printk_skb: 13 callbacks suppressed [ 28.247323][ T29] audit: type=1400 audit(1740319370.586:104): avc: denied { create } for pid=3299 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 28.273999][ T29] audit: type=1400 audit(1740319370.596:105): avc: denied { write } for pid=3299 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 28.294538][ T29] audit: type=1400 audit(1740319370.596:106): avc: denied { read } for pid=3299 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 28.314922][ T29] audit: type=1400 audit(1740319370.646:107): avc: denied { remove_name } for pid=2984 comm="syslogd" name="messages" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 28.317134][ T3299] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 28.337508][ T29] audit: type=1400 audit(1740319370.646:108): avc: denied { rename } for pid=2984 comm="syslogd" name="messages" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 28.366385][ T29] audit: type=1400 audit(1740319370.646:109): avc: denied { create } for pid=2984 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 28.389261][ T3299] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 28.402950][ T3299] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 28.418222][ T3310] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 28.429960][ T3310] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 28.438558][ T3310] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 28.450569][ T3310] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 28.477681][ T3305] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 28.486523][ T3305] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 28.495750][ T3305] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 28.507111][ T3305] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 28.533518][ T3304] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 28.547592][ T3304] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 28.566566][ T3304] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 28.575908][ T3304] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 28.601791][ T3298] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 28.610859][ T3298] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 28.621322][ T3298] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 28.630724][ T3298] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 28.655485][ T3299] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.680238][ T3310] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.701188][ T3299] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.717067][ T3310] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.732287][ T28] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.739436][ T28] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.747994][ T28] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.755175][ T28] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.775680][ T1774] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.782815][ T1774] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.812444][ T3304] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.821684][ T28] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.828844][ T28] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.858011][ T3305] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.867962][ T3304] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.878686][ T3298] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.897485][ T28] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.904583][ T28] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.924905][ T1895] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.932037][ T1895] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.944926][ T3305] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.953597][ T3298] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.963190][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.970401][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.981472][ T3310] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 29.000445][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.007524][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.016221][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.023330][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.040791][ T1774] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.047923][ T1774] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.078580][ T3299] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.135808][ T3310] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.150646][ T3298] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 29.184608][ T3304] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.248637][ T3298] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.260525][ T3305] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.296280][ T3299] veth0_vlan: entered promiscuous mode [ 29.306934][ T3299] veth1_vlan: entered promiscuous mode [ 29.334232][ T3299] veth0_macvtap: entered promiscuous mode [ 29.387571][ T3299] veth1_macvtap: entered promiscuous mode [ 29.411281][ T3304] veth0_vlan: entered promiscuous mode [ 29.423610][ T3299] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.437988][ T3304] veth1_vlan: entered promiscuous mode [ 29.448133][ T3310] veth0_vlan: entered promiscuous mode [ 29.463853][ T3298] veth0_vlan: entered promiscuous mode [ 29.477372][ T3299] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.487772][ T3310] veth1_vlan: entered promiscuous mode [ 29.499056][ T3299] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.507863][ T3299] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.516704][ T3299] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.525481][ T3299] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.536364][ T3298] veth1_vlan: entered promiscuous mode [ 29.543135][ T3305] veth0_vlan: entered promiscuous mode [ 29.555282][ T3304] veth0_macvtap: entered promiscuous mode [ 29.564926][ T3304] veth1_macvtap: entered promiscuous mode [ 29.578892][ T3310] veth0_macvtap: entered promiscuous mode [ 29.592532][ T3310] veth1_macvtap: entered promiscuous mode [ 29.599754][ T3305] veth1_vlan: entered promiscuous mode [ 29.610537][ T3304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 29.621033][ T3304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.631559][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.647733][ T3298] veth0_macvtap: entered promiscuous mode [ 29.654055][ T29] audit: type=1400 audit(1740319372.006:110): avc: denied { mounton } for pid=3299 comm="syz-executor" path="/root/syzkaller.CH0FS2/syz-tmp" dev="sda1" ino=1944 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 29.662424][ T3298] veth1_macvtap: entered promiscuous mode [ 29.678406][ T29] audit: type=1400 audit(1740319372.006:111): avc: denied { mount } for pid=3299 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 29.694347][ T3298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 29.706112][ T29] audit: type=1400 audit(1740319372.006:112): avc: denied { mounton } for pid=3299 comm="syz-executor" path="/root/syzkaller.CH0FS2/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 29.716505][ T3298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.741707][ T29] audit: type=1400 audit(1740319372.006:113): avc: denied { mount } for pid=3299 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 29.751555][ T3298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 29.783981][ T3298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.798526][ T3298] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.808867][ T3299] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 29.814727][ T3298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 29.834035][ T3298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.844545][ T3298] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.852583][ T3304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 29.863043][ T3304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.872970][ T3304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 29.883512][ T3304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.894016][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.903369][ T3310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 29.913981][ T3310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.923910][ T3310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 29.934350][ T3310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.944251][ T3310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 29.954863][ T3310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.965465][ T3310] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.990318][ T3304] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.999075][ T3304] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.008099][ T3304] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.017031][ T3304] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.029566][ T3310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 30.040065][ T3310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.049926][ T3310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 30.060458][ T3310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.070373][ T3310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 30.080815][ T3310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.091168][ T3310] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.099254][ T3298] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.108126][ T3298] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.116980][ T3298] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.125712][ T3298] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.140706][ T3310] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.149698][ T3310] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.158414][ T3310] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.167318][ T3310] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.189020][ T3305] veth0_macvtap: entered promiscuous mode [ 30.217601][ T3305] veth1_macvtap: entered promiscuous mode [ 30.237104][ T3305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 30.247729][ T3305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.257664][ T3305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 30.268111][ T3305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.277938][ T3305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 30.288485][ T3305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.298369][ T3305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 30.308836][ T3305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.319823][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.346044][ T3305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 30.356604][ T3305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.366463][ T3305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 30.377027][ T3305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.386899][ T3305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 30.397408][ T3305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.407309][ T3305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 30.417878][ T3305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.429747][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.444691][ T3305] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.453502][ T3305] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.462301][ T3305] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.471105][ T3305] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.579000][ T3467] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 30.595853][ T3462] loop1: detected capacity change from 0 to 2048 [ 30.607093][ T3462] EXT4-fs: Ignoring removed bh option [ 30.612712][ T3464] loop3: detected capacity change from 0 to 128 [ 30.613108][ T3464] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 30.648259][ T3462] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 30.700456][ T3464] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 30.835958][ T112] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 30.868959][ T3480] netlink: 14 bytes leftover after parsing attributes in process `syz.3.8'. [ 30.910237][ T3480] netlink: 'syz.3.8': attribute type 10 has an invalid length. [ 30.920990][ T3480] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 30.978758][ T3483] netlink: 14 bytes leftover after parsing attributes in process `syz.3.9'. [ 31.004916][ T3483] netlink: 'syz.3.9': attribute type 10 has an invalid length. [ 31.077226][ T3485] loop3: detected capacity change from 0 to 128 [ 31.099144][ T3487] loop0: detected capacity change from 0 to 1024 [ 31.106391][ T3485] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 31.148989][ T3485] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 31.165390][ T3478] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 31.181702][ T3478] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 28 [ 31.194134][ T3478] EXT4-fs (loop1): This should not happen!! Data will be lost [ 31.194134][ T3478] [ 31.200347][ T3487] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 31.203851][ T3478] EXT4-fs (loop1): Total free blocks count 0 [ 31.221801][ T3478] EXT4-fs (loop1): Free/Dirty block details [ 31.227788][ T3478] EXT4-fs (loop1): free_blocks=2415919104 [ 31.233662][ T3478] EXT4-fs (loop1): dirty_blocks=8224 [ 31.239062][ T3478] EXT4-fs (loop1): Block reservation details [ 31.245091][ T3478] EXT4-fs (loop1): i_reserved_data_blocks=514 [ 31.277305][ T3487] EXT4-fs (loop0): shut down requested (0) [ 31.297659][ T28] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 31.318384][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.370162][ T3478] syz.1.2 (3478) used greatest stack depth: 9416 bytes left [ 31.393555][ T3498] loop0: detected capacity change from 0 to 128 [ 31.422360][ T3498] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 31.443491][ T3498] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 31.446175][ T28] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 32 with max blocks 2048 with error 28 [ 31.507012][ T11] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 31.545335][ T3502] loop0: detected capacity change from 0 to 1024 [ 31.568336][ T3502] ======================================================= [ 31.568336][ T3502] WARNING: The mand mount option has been deprecated and [ 31.568336][ T3502] and is ignored by this kernel. Remove the mand [ 31.568336][ T3502] option from the mount to silence this warning. [ 31.568336][ T3502] ======================================================= [ 31.623629][ T3502] EXT4-fs: Ignoring removed nobh option [ 31.629270][ T3502] EXT4-fs: Ignoring removed bh option [ 31.662288][ T3502] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 31.677267][ T3508] loop2: detected capacity change from 0 to 128 [ 31.684091][ T3508] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 31.716980][ T3513] loop4: detected capacity change from 0 to 1024 [ 31.718299][ T3508] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 31.745924][ T3502] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 31.764374][ T3513] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 31.782443][ T3513] EXT4-fs (loop4): shut down requested (0) [ 31.807509][ T112] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 31.825922][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.888278][ T3518] loop2: detected capacity change from 0 to 1024 [ 31.925943][ T3518] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 31.944615][ T3518] EXT4-fs (loop2): shut down requested (0) [ 32.006857][ T3526] netlink: 24 bytes leftover after parsing attributes in process `syz.4.20'. [ 32.047945][ T3526] syz.4.20 uses obsolete (PF_INET,SOCK_PACKET) [ 32.101593][ T3299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.129290][ T3530] loop1: detected capacity change from 0 to 1024 [ 32.171302][ T3530] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 32.210826][ T3530] EXT4-fs (loop1): shut down requested (0) [ 32.285493][ T3534] netlink: 'syz.4.25': attribute type 10 has an invalid length. [ 32.331296][ T3534] team0: Port device netdevsim1 added [ 32.338153][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.358822][ T3534] netlink: 'syz.4.25': attribute type 10 has an invalid length. [ 32.397363][ T3540] netlink: 'syz.2.24': attribute type 10 has an invalid length. [ 32.420639][ T3534] team0: Port device netdevsim1 removed [ 32.428581][ T3534] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 32.441183][ T3540] team0: Port device netdevsim1 added [ 32.451805][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.475310][ T3540] netlink: 'syz.2.24': attribute type 10 has an invalid length. [ 32.503703][ T3540] team0: Port device netdevsim1 removed [ 32.517985][ T3540] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 32.542046][ T3546] loop0: detected capacity change from 0 to 2048 [ 32.549065][ T3546] EXT4-fs: Ignoring removed bh option [ 32.586108][ T3551] loop3: detected capacity change from 0 to 1024 [ 32.596778][ T3551] EXT4-fs: Ignoring removed oldalloc option [ 32.602969][ T3551] EXT4-fs: Ignoring removed bh option [ 32.614597][ T3546] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 32.627743][ T3563] netlink: 'syz.4.34': attribute type 10 has an invalid length. [ 32.636077][ T3551] EXT4-fs (loop3): can't mount with journal_async_commit, fs mounted w/o journal [ 32.647797][ T3563] bond0: (slave netdevsim1): Releasing backup interface [ 32.663122][ T3563] team0: Port device netdevsim1 added [ 32.687528][ T3563] netlink: 'syz.4.34': attribute type 10 has an invalid length. [ 32.694557][ T3568] loop3: detected capacity change from 0 to 2048 [ 32.697032][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.713464][ T3563] team0: Port device netdevsim1 removed [ 32.721986][ T3563] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 32.738195][ T3568] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 32.778636][ T3574] loop4: detected capacity change from 0 to 128 [ 32.786748][ T3574] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 32.800875][ T3574] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 32.819389][ T3577] loop0: detected capacity change from 0 to 2048 [ 32.826268][ T3577] EXT4-fs: Ignoring removed bh option [ 32.846987][ T1774] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 32.861639][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.872732][ T3577] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 32.903782][ T3581] netlink: 12 bytes leftover after parsing attributes in process `syz.4.38'. [ 32.940907][ T3583] loop3: detected capacity change from 0 to 2048 [ 32.957915][ T3585] loop4: detected capacity change from 0 to 2048 [ 32.972339][ T3585] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 32.998672][ T3583] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 33.117728][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.122131][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.138587][ T3586] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 33.164577][ T3586] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 28 [ 33.177055][ T3586] EXT4-fs (loop0): This should not happen!! Data will be lost [ 33.177055][ T3586] [ 33.186749][ T3586] EXT4-fs (loop0): Total free blocks count 0 [ 33.192941][ T3586] EXT4-fs (loop0): Free/Dirty block details [ 33.198860][ T3586] EXT4-fs (loop0): free_blocks=2415919104 [ 33.204647][ T3586] EXT4-fs (loop0): dirty_blocks=8224 [ 33.210059][ T3586] EXT4-fs (loop0): Block reservation details [ 33.216057][ T3586] EXT4-fs (loop0): i_reserved_data_blocks=514 [ 33.220348][ T3593] loop4: detected capacity change from 0 to 2048 [ 33.250897][ T3593] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 33.263167][ T3593] ext4 filesystem being mounted at /11/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 33.277815][ T3593] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.41: bg 0: block 345: padding at end of block bitmap is not set [ 33.289651][ T3597] loop3: detected capacity change from 0 to 2048 [ 33.292328][ T3593] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 1 with error 117 [ 33.298646][ T3597] EXT4-fs: Ignoring removed bh option [ 33.310625][ T3593] EXT4-fs (loop4): This should not happen!! Data will be lost [ 33.310625][ T3593] [ 33.331520][ T3597] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 33.345786][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.367485][ T3601] netlink: 'syz.4.43': attribute type 10 has an invalid length. [ 33.377005][ T3601] bond0: (slave netdevsim1): Releasing backup interface [ 33.385862][ T3601] team0: Port device netdevsim1 added [ 33.395002][ T3601] netlink: 'syz.4.43': attribute type 10 has an invalid length. [ 33.404876][ T3601] team0: Port device netdevsim1 removed [ 33.412280][ T3601] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 33.422285][ T29] kauditd_printk_skb: 388 callbacks suppressed [ 33.422301][ T29] audit: type=1326 audit(1740319375.776:502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3569 comm="syz.0.36" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f6f146eef34 code=0x7ffc0000 [ 33.465190][ T29] audit: type=1326 audit(1740319375.806:503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3592 comm="syz.3.42" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fda3d4aef34 code=0x7ffc0000 [ 33.488331][ T29] audit: type=1326 audit(1740319375.806:504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3592 comm="syz.3.42" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fda3d4aef34 code=0x7ffc0000 [ 33.511465][ T29] audit: type=1326 audit(1740319375.806:505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3592 comm="syz.3.42" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fda3d4abdca code=0x7ffc0000 [ 33.534515][ T29] audit: type=1326 audit(1740319375.806:506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3592 comm="syz.3.42" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda3d4ad169 code=0x7ffc0000 [ 33.557711][ T29] audit: type=1326 audit(1740319375.806:508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3592 comm="syz.3.42" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda3d4ad169 code=0x7ffc0000 [ 33.581059][ T29] audit: type=1326 audit(1740319375.806:507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3569 comm="syz.0.36" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f6f146eef34 code=0x7ffc0000 [ 33.604480][ T29] audit: type=1326 audit(1740319375.806:509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3569 comm="syz.0.36" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f6f146ebdca code=0x7ffc0000 [ 33.627610][ T29] audit: type=1326 audit(1740319375.816:510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3569 comm="syz.0.36" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f146ed169 code=0x7ffc0000 [ 33.650837][ T29] audit: type=1326 audit(1740319375.816:511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3569 comm="syz.0.36" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f146ed169 code=0x7ffc0000 [ 33.661200][ T3607] tipc: Started in network mode [ 33.679021][ T3607] tipc: Node identity ca17c7f3f721, cluster identity 4711 [ 33.686249][ T3607] tipc: Enabled bearer , priority 0 [ 33.686500][ T3605] loop1: detected capacity change from 0 to 512 [ 33.706015][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.717573][ T3605] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.736481][ T3605] ext4 filesystem being mounted at /7/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 33.753298][ T3607] syzkaller0: entered promiscuous mode [ 33.758834][ T3607] syzkaller0: entered allmulticast mode [ 33.783977][ T3607] tipc: Resetting bearer [ 33.814584][ T3606] tipc: Resetting bearer [ 33.814988][ T3617] loop3: detected capacity change from 0 to 2048 [ 33.827813][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.842616][ T3617] EXT4-fs: Ignoring removed bh option [ 33.845953][ T1774] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 32 with max blocks 2048 with error 28 [ 33.870239][ T3606] tipc: Disabling bearer [ 33.877558][ T3617] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 33.915937][ T3627] loop1: detected capacity change from 0 to 2048 [ 33.926060][ T3627] EXT4-fs: Ignoring removed bh option [ 33.974857][ T3627] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.011795][ T3635] bond0: (slave netdevsim1): Releasing backup interface [ 34.070404][ T3635] team0: Port device netdevsim1 added [ 34.096004][ T3642] loop0: detected capacity change from 0 to 512 [ 34.149272][ T3642] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.166155][ T3642] ext4 filesystem being mounted at /6/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 34.191735][ T3648] loop2: detected capacity change from 0 to 512 [ 34.207163][ T3650] loop9: detected capacity change from 0 to 8 [ 34.246327][ T3648] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.279791][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.294403][ T3654] team0: Port device netdevsim1 removed [ 34.302308][ T3654] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 34.320078][ T3648] ext4 filesystem being mounted at /11/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 34.351500][ T3656] loop0: detected capacity change from 0 to 128 [ 34.378263][ T3641] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 34.406099][ T3299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.428040][ T3641] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 28 [ 34.432596][ T3656] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 34.440384][ T3641] EXT4-fs (loop1): This should not happen!! Data will be lost [ 34.440384][ T3641] [ 34.462126][ T3641] EXT4-fs (loop1): Total free blocks count 0 [ 34.468127][ T3641] EXT4-fs (loop1): Free/Dirty block details [ 34.474280][ T3656] ext4 filesystem being mounted at /7/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 34.506191][ T3641] EXT4-fs (loop1): free_blocks=2415919104 [ 34.512067][ T3641] EXT4-fs (loop1): dirty_blocks=8224 [ 34.517379][ T3641] EXT4-fs (loop1): Block reservation details [ 34.523477][ T3641] EXT4-fs (loop1): i_reserved_data_blocks=514 [ 34.537183][ T3659] loop4: detected capacity change from 0 to 2048 [ 34.545730][ T50] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 34.567075][ T3661] netlink: 4 bytes leftover after parsing attributes in process `syz.2.58'. [ 34.579064][ T50] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 34.583166][ T3304] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 34.591418][ T50] EXT4-fs (loop3): This should not happen!! Data will be lost [ 34.591418][ T50] [ 34.603940][ T3659] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.610053][ T50] EXT4-fs (loop3): Total free blocks count 0 [ 34.628086][ T50] EXT4-fs (loop3): Free/Dirty block details [ 34.634305][ T50] EXT4-fs (loop3): free_blocks=2415919104 [ 34.640169][ T50] EXT4-fs (loop3): dirty_blocks=8224 [ 34.645550][ T50] EXT4-fs (loop3): Block reservation details [ 34.651636][ T50] EXT4-fs (loop3): i_reserved_data_blocks=514 [ 34.671007][ T50] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 2048 with error 28 [ 34.707260][ T1774] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 32 with max blocks 2048 with error 28 [ 34.727108][ T3667] netlink: 72 bytes leftover after parsing attributes in process `syz.2.63'. [ 34.770838][ T3669] team0 (unregistering): Port device team_slave_0 removed [ 34.782906][ T3669] team0 (unregistering): Port device team_slave_1 removed [ 34.792127][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.855506][ T3671] loop2: detected capacity change from 0 to 2048 [ 34.862330][ T3675] bond0: (slave netdevsim1): Releasing backup interface [ 34.871226][ T3675] team0: Port device netdevsim1 added [ 34.887317][ T3675] team0: Port device netdevsim1 removed [ 34.893618][ T3671] EXT4-fs: Ignoring removed bh option [ 34.901787][ T3675] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 34.913159][ T3676] bond0: (slave netdevsim1): Releasing backup interface [ 34.927081][ T3676] team0: Port device netdevsim1 added [ 34.943438][ T3671] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.968483][ T3677] team0: Port device netdevsim1 removed [ 35.016764][ T3677] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 35.019100][ T3681] loop3: detected capacity change from 0 to 2048 [ 35.033737][ T3681] EXT4-fs: Ignoring removed bh option [ 35.055346][ T3683] loop1: detected capacity change from 0 to 128 [ 35.075438][ T3681] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.089872][ T3683] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 35.129751][ T3683] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 35.258211][ T3693] netlink: 12 bytes leftover after parsing attributes in process `syz.1.69'. [ 35.329460][ T3697] team0: Port device netdevsim1 added [ 35.363555][ T3695] loop4: detected capacity change from 0 to 2048 [ 35.380341][ T3695] EXT4-fs: Ignoring removed bh option [ 35.402337][ T3695] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.462446][ T3686] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 35.477474][ T3686] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 28 [ 35.489837][ T3686] EXT4-fs (loop2): This should not happen!! Data will be lost [ 35.489837][ T3686] [ 35.499548][ T3686] EXT4-fs (loop2): Total free blocks count 0 [ 35.505552][ T3686] EXT4-fs (loop2): Free/Dirty block details [ 35.511704][ T3686] EXT4-fs (loop2): free_blocks=2415919104 [ 35.517487][ T3686] EXT4-fs (loop2): dirty_blocks=8224 [ 35.523024][ T3686] EXT4-fs (loop2): Block reservation details [ 35.529072][ T3686] EXT4-fs (loop2): i_reserved_data_blocks=514 [ 35.677186][ T28] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 32 with max blocks 2048 with error 28 [ 35.682306][ T3704] loop1: detected capacity change from 0 to 2048 [ 35.705313][ T3704] EXT4-fs: Ignoring removed bh option [ 35.716853][ T3691] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 35.832651][ T3704] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.848609][ T3702] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 35.870078][ T3702] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 28 [ 35.882457][ T3702] EXT4-fs (loop4): This should not happen!! Data will be lost [ 35.882457][ T3702] [ 35.892266][ T3702] EXT4-fs (loop4): Total free blocks count 0 [ 35.898346][ T3702] EXT4-fs (loop4): Free/Dirty block details [ 35.904277][ T3702] EXT4-fs (loop4): free_blocks=2415919104 [ 35.910157][ T3702] EXT4-fs (loop4): dirty_blocks=8224 [ 35.915458][ T3702] EXT4-fs (loop4): Block reservation details [ 35.919503][ T3691] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 28 [ 35.921626][ T3702] EXT4-fs (loop4): i_reserved_data_blocks=514 [ 35.933713][ T3691] EXT4-fs (loop3): This should not happen!! Data will be lost [ 35.933713][ T3691] [ 35.949645][ T3691] EXT4-fs (loop3): Total free blocks count 0 [ 35.955648][ T3691] EXT4-fs (loop3): Free/Dirty block details [ 35.961588][ T3691] EXT4-fs (loop3): free_blocks=2415919104 [ 35.967333][ T3691] EXT4-fs (loop3): dirty_blocks=8224 [ 35.972681][ T3691] EXT4-fs (loop3): Block reservation details [ 35.978673][ T3691] EXT4-fs (loop3): i_reserved_data_blocks=514 [ 36.003231][ T3708] loop2: detected capacity change from 0 to 1024 [ 36.029934][ T3708] EXT4-fs: Ignoring removed oldalloc option [ 36.035985][ T3708] EXT4-fs: Ignoring removed bh option [ 36.051506][ T1774] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 32 with max blocks 2048 with error 28 [ 36.090889][ T3708] EXT4-fs (loop2): can't mount with journal_async_commit, fs mounted w/o journal [ 36.186972][ T28] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 32 with max blocks 2048 with error 28 [ 36.267247][ T3709] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 36.282309][ T3709] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 28 [ 36.294657][ T3709] EXT4-fs (loop1): This should not happen!! Data will be lost [ 36.294657][ T3709] [ 36.304350][ T3709] EXT4-fs (loop1): Total free blocks count 0 [ 36.310385][ T3709] EXT4-fs (loop1): Free/Dirty block details [ 36.316358][ T3709] EXT4-fs (loop1): free_blocks=2415919104 [ 36.322146][ T3709] EXT4-fs (loop1): dirty_blocks=8224 [ 36.327510][ T3709] EXT4-fs (loop1): Block reservation details [ 36.333530][ T3709] EXT4-fs (loop1): i_reserved_data_blocks=514 [ 36.390703][ T3712] netlink: 72 bytes leftover after parsing attributes in process `syz.3.75'. [ 36.463847][ T3716] netlink: 14 bytes leftover after parsing attributes in process `syz.4.86'. [ 36.520715][ T3722] validate_nla: 8 callbacks suppressed [ 36.520732][ T3722] netlink: 'syz.3.79': attribute type 10 has an invalid length. [ 36.526195][ T3720] loop2: detected capacity change from 0 to 2048 [ 36.535973][ T28] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 32 with max blocks 2048 with error 28 [ 36.550645][ T3720] EXT4-fs: Ignoring removed bh option [ 36.566638][ T3722] bond0: (slave netdevsim1): Releasing backup interface [ 36.592319][ T3720] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.622400][ T3722] team0: Port device netdevsim1 added [ 36.833256][ T3730] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 36.874241][ T3737] loop4: detected capacity change from 0 to 2048 [ 36.880760][ T3730] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 28 [ 36.893123][ T3730] EXT4-fs (loop2): This should not happen!! Data will be lost [ 36.893123][ T3730] [ 36.902812][ T3730] EXT4-fs (loop2): Total free blocks count 0 [ 36.908809][ T3730] EXT4-fs (loop2): Free/Dirty block details [ 36.914771][ T3730] EXT4-fs (loop2): free_blocks=2415919104 [ 36.920725][ T3730] EXT4-fs (loop2): dirty_blocks=8224 [ 36.926029][ T3730] EXT4-fs (loop2): Block reservation details [ 36.932054][ T3730] EXT4-fs (loop2): i_reserved_data_blocks=514 [ 36.946844][ T3737] EXT4-fs: Ignoring removed bh option [ 36.977052][ T3737] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.003547][ T112] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 32 with max blocks 2048 with error 28 [ 37.007512][ T3739] netlink: 12 bytes leftover after parsing attributes in process `syz.1.80'. [ 37.144309][ T3746] loop1: detected capacity change from 0 to 2048 [ 37.173201][ T3746] EXT4-fs: Ignoring removed bh option [ 37.292089][ T3747] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 37.307653][ T3747] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 28 [ 37.320000][ T3747] EXT4-fs (loop4): This should not happen!! Data will be lost [ 37.320000][ T3747] [ 37.320206][ T3746] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.329661][ T3747] EXT4-fs (loop4): Total free blocks count 0 [ 37.347771][ T3747] EXT4-fs (loop4): Free/Dirty block details [ 37.353736][ T3747] EXT4-fs (loop4): free_blocks=2415919104 [ 37.359569][ T3747] EXT4-fs (loop4): dirty_blocks=8224 [ 37.364958][ T3747] EXT4-fs (loop4): Block reservation details [ 37.370983][ T3747] EXT4-fs (loop4): i_reserved_data_blocks=514 [ 37.400484][ T3751] team0 (unregistering): Port device team_slave_0 removed [ 37.422762][ T3751] team0 (unregistering): Port device team_slave_1 removed [ 37.461454][ T3475] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 37.506386][ T112] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 32 with max blocks 2048 with error 28 [ 37.722485][ T3753] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 28 [ 37.734940][ T3753] EXT4-fs (loop1): This should not happen!! Data will be lost [ 37.734940][ T3753] [ 37.744663][ T3753] EXT4-fs (loop1): Total free blocks count 0 [ 37.750716][ T3753] EXT4-fs (loop1): Free/Dirty block details [ 37.756631][ T3753] EXT4-fs (loop1): free_blocks=2415919104 [ 37.762444][ T3753] EXT4-fs (loop1): dirty_blocks=8224 [ 37.767740][ T3753] EXT4-fs (loop1): Block reservation details [ 37.773759][ T3753] EXT4-fs (loop1): i_reserved_data_blocks=514 [ 37.827279][ T3764] loop3: detected capacity change from 0 to 128 [ 37.828352][ T3765] netlink: 'syz.0.94': attribute type 10 has an invalid length. [ 37.841810][ T3764] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 37.861650][ T3764] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 37.882938][ T3765] Zero length message leads to an empty skb [ 37.908476][ T3768] team0 (unregistering): Port device team_slave_0 removed [ 37.921154][ T28] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 32 with max blocks 2048 with error 28 [ 37.936426][ T3768] team0 (unregistering): Port device team_slave_1 removed [ 37.975941][ T11] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 38.041171][ T3773] loop3: detected capacity change from 0 to 2048 [ 38.055056][ T3773] EXT4-fs: Ignoring removed bh option [ 38.120237][ T3773] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.132737][ T3775] netlink: 12 bytes leftover after parsing attributes in process `syz.0.99'. [ 38.279664][ T3781] loop1: detected capacity change from 0 to 2048 [ 38.286599][ T3781] EXT4-fs: Ignoring removed bh option [ 38.318604][ T3781] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.479752][ T29] kauditd_printk_skb: 731 callbacks suppressed [ 38.479769][ T29] audit: type=1326 audit(1740319380.836:1243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3772 comm="syz.3.98" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda3d4ad169 code=0x7ffc0000 [ 38.510134][ T3782] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 38.540530][ T29] audit: type=1326 audit(1740319380.866:1244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3772 comm="syz.3.98" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda3d4ad169 code=0x7ffc0000 [ 38.569531][ T3782] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 28 [ 38.582073][ T3782] EXT4-fs (loop3): This should not happen!! Data will be lost [ 38.582073][ T3782] [ 38.591770][ T3782] EXT4-fs (loop3): Total free blocks count 0 [ 38.597767][ T3782] EXT4-fs (loop3): Free/Dirty block details [ 38.603704][ T3782] EXT4-fs (loop3): free_blocks=2415919104 [ 38.609476][ T3782] EXT4-fs (loop3): dirty_blocks=8224 [ 38.614859][ T3782] EXT4-fs (loop3): Block reservation details [ 38.620872][ T3782] EXT4-fs (loop3): i_reserved_data_blocks=514 [ 38.637144][ T29] audit: type=1400 audit(1740319380.946:1245): avc: denied { map } for pid=3790 comm="syz.0.103" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=4758 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 38.661417][ T29] audit: type=1400 audit(1740319380.946:1246): avc: denied { read write } for pid=3790 comm="syz.0.103" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=4758 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 38.785905][ T3789] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 38.803555][ T3792] mmap: syz.0.103 (3792) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 38.809630][ T3789] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 28 [ 38.817021][ T29] audit: type=1326 audit(1740319381.166:1247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3780 comm="syz.1.96" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f481a1dd169 code=0x7ffc0000 [ 38.827709][ T3789] EXT4-fs (loop1): This should not happen!! Data will be lost [ 38.827709][ T3789] [ 38.827726][ T3789] EXT4-fs (loop1): Total free blocks count 0 [ 38.851049][ T29] audit: type=1326 audit(1740319381.166:1248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3780 comm="syz.1.96" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f481a1dd169 code=0x7ffc0000 [ 38.860638][ T3789] EXT4-fs (loop1): Free/Dirty block details [ 38.895937][ T3789] EXT4-fs (loop1): free_blocks=2415919104 [ 38.901790][ T3789] EXT4-fs (loop1): dirty_blocks=8224 [ 38.907096][ T3789] EXT4-fs (loop1): Block reservation details [ 38.913274][ T3789] EXT4-fs (loop1): i_reserved_data_blocks=514 [ 38.926226][ T28] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 32 with max blocks 2048 with error 28 [ 39.023046][ T29] audit: type=1326 audit(1740319381.376:1249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3793 comm="syz.0.115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f146ed169 code=0x7ffc0000 [ 39.031933][ T11] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 32 with max blocks 2048 with error 28 [ 39.046486][ T29] audit: type=1326 audit(1740319381.376:1250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3793 comm="syz.0.115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f146ed169 code=0x7ffc0000 [ 39.108583][ T3794] loop0: detected capacity change from 0 to 2048 [ 39.125800][ T3794] EXT4-fs: Ignoring removed bh option [ 39.173097][ T3794] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.195365][ T29] audit: type=1326 audit(1740319381.436:1251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3793 comm="syz.0.115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6f146ed169 code=0x7ffc0000 [ 39.218838][ T29] audit: type=1326 audit(1740319381.436:1252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3793 comm="syz.0.115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f146ed169 code=0x7ffc0000 [ 39.223862][ T3798] netlink: 20 bytes leftover after parsing attributes in process `syz.3.104'. [ 39.353390][ T3803] netlink: 'syz.3.107': attribute type 10 has an invalid length. [ 39.420985][ T3808] netlink: 12 bytes leftover after parsing attributes in process `syz.3.108'. [ 39.441220][ T3807] team0 (unregistering): Port device team_slave_0 removed [ 39.503109][ T3807] team0 (unregistering): Port device team_slave_1 removed [ 39.563685][ T3801] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 39.584389][ T3807] team0 (unregistering): Port device netdevsim1 removed [ 39.609392][ T3801] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 28 [ 39.621801][ T3801] EXT4-fs (loop0): This should not happen!! Data will be lost [ 39.621801][ T3801] [ 39.631525][ T3801] EXT4-fs (loop0): Total free blocks count 0 [ 39.637538][ T3801] EXT4-fs (loop0): Free/Dirty block details [ 39.643572][ T3801] EXT4-fs (loop0): free_blocks=2415919104 [ 39.649309][ T3801] EXT4-fs (loop0): dirty_blocks=8224 [ 39.654725][ T3801] EXT4-fs (loop0): Block reservation details [ 39.660834][ T3801] EXT4-fs (loop0): i_reserved_data_blocks=514 [ 39.693479][ T50] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 32 with max blocks 2048 with error 28 [ 39.774832][ T3819] loop2: detected capacity change from 0 to 128 [ 39.788651][ T3819] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 39.810823][ T3819] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 39.811942][ T3823] netlink: 28 bytes leftover after parsing attributes in process `syz.4.113'. [ 39.858468][ T28] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 39.915903][ T3825] loop2: detected capacity change from 0 to 2048 [ 39.952972][ T3825] EXT4-fs: Ignoring removed bh option [ 39.974298][ T3831] netlink: 14 bytes leftover after parsing attributes in process `syz.3.117'. [ 40.000702][ T3825] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.048878][ T3836] loop0: detected capacity change from 0 to 256 [ 40.090190][ T3836] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 40.106663][ T3839] netlink: 14 bytes leftover after parsing attributes in process `syz.3.120'. [ 40.159676][ T3836] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 40.194802][ T3836] FAULT_INJECTION: forcing a failure. [ 40.194802][ T3836] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 40.208161][ T3836] CPU: 1 UID: 0 PID: 3836 Comm: syz.0.119 Not tainted 6.14.0-rc3-syzkaller-00295-g27102b38b8ca #0 [ 40.208227][ T3836] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 40.208245][ T3836] Call Trace: [ 40.208253][ T3836] [ 40.208261][ T3836] dump_stack_lvl+0xf2/0x150 [ 40.208340][ T3836] dump_stack+0x15/0x1a [ 40.208366][ T3836] should_fail_ex+0x24a/0x260 [ 40.208460][ T3836] should_fail_alloc_page+0xfd/0x110 [ 40.208569][ T3836] __alloc_frozen_pages_noprof+0x109/0x340 [ 40.208609][ T3836] alloc_pages_mpol+0xb4/0x260 [ 40.208638][ T3836] folio_alloc_noprof+0xee/0x140 [ 40.208693][ T3836] filemap_alloc_folio_noprof+0x69/0x220 [ 40.208808][ T3836] __filemap_get_folio+0x298/0x630 [ 40.208829][ T3836] cont_write_begin+0x512/0x860 [ 40.208910][ T3836] fat_write_begin+0x51/0xe0 [ 40.208929][ T3836] ? __pfx_fat_get_block+0x10/0x10 [ 40.208965][ T3836] cont_write_begin+0x5a2/0x860 [ 40.209025][ T3836] fat_write_begin+0x51/0xe0 [ 40.209048][ T3836] ? __pfx_fat_get_block+0x10/0x10 [ 40.209088][ T3836] generic_cont_expand_simple+0xaa/0x150 [ 40.209123][ T3836] fat_cont_expand+0x3a/0x160 [ 40.209231][ T3836] fat_setattr+0x2aa/0x840 [ 40.209317][ T3836] ? security_inode_setattr+0x5f/0xd0 [ 40.209352][ T3836] ? __pfx_fat_setattr+0x10/0x10 [ 40.209445][ T3836] notify_change+0x85c/0x8e0 [ 40.209477][ T3836] ? security_inode_need_killpriv+0x1c/0x70 [ 40.209508][ T3836] do_ftruncate+0x332/0x440 [ 40.209537][ T3836] __x64_sys_ftruncate+0x67/0xc0 [ 40.209599][ T3836] x64_sys_call+0x9d9/0x2dc0 [ 40.209688][ T3836] do_syscall_64+0xc9/0x1c0 [ 40.209717][ T3836] ? clear_bhb_loop+0x55/0xb0 [ 40.209751][ T3836] ? clear_bhb_loop+0x55/0xb0 [ 40.209784][ T3836] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 40.209902][ T3836] RIP: 0033:0x7f6f146ed169 [ 40.209922][ T3836] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 40.210008][ T3836] RSP: 002b:00007f6f12d57038 EFLAGS: 00000246 ORIG_RAX: 000000000000004d [ 40.210031][ T3836] RAX: ffffffffffffffda RBX: 00007f6f14905fa0 RCX: 00007f6f146ed169 [ 40.210087][ T3836] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000005 [ 40.210098][ T3836] RBP: 00007f6f12d57090 R08: 0000000000000000 R09: 0000000000000000 [ 40.210109][ T3836] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 40.210202][ T3836] R13: 0000000000000000 R14: 00007f6f14905fa0 R15: 00007ffc36919218 [ 40.210223][ T3836] [ 40.271151][ T3840] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 40.474131][ T3840] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 28 [ 40.486509][ T3840] EXT4-fs (loop2): This should not happen!! Data will be lost [ 40.486509][ T3840] [ 40.496220][ T3840] EXT4-fs (loop2): Total free blocks count 0 [ 40.502342][ T3840] EXT4-fs (loop2): Free/Dirty block details [ 40.508252][ T3840] EXT4-fs (loop2): free_blocks=2415919104 [ 40.514035][ T3840] EXT4-fs (loop2): dirty_blocks=8224 [ 40.519376][ T3840] EXT4-fs (loop2): Block reservation details [ 40.525374][ T3840] EXT4-fs (loop2): i_reserved_data_blocks=514 [ 40.556231][ T3848] loop3: detected capacity change from 0 to 1024 [ 40.574174][ T3848] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 40.601182][ T3848] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 40.624026][ T3840] syz.2.114 (3840) used greatest stack depth: 9384 bytes left [ 40.641576][ T3848] EXT4-fs error (device loop3): ext4_get_journal_inode:5798: comm syz.3.121: inode #1: comm syz.3.121: iget: illegal inode # [ 40.677943][ T3848] EXT4-fs (loop3): no journal found [ 40.683272][ T3848] EXT4-fs (loop3): can't get journal size [ 40.694287][ T112] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 32 with max blocks 2048 with error 28 [ 40.718040][ T3848] EXT4-fs (loop3): failed to initialize system zone (-22) [ 40.729675][ T3848] EXT4-fs (loop3): mount failed [ 40.794486][ T3860] netlink: 28 bytes leftover after parsing attributes in process `syz.3.126'. [ 40.905727][ T3866] loop2: detected capacity change from 0 to 128 [ 40.925360][ T3866] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 40.948413][ T3866] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 40.985286][ T112] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 41.115345][ T3884] loop3: detected capacity change from 0 to 2048 [ 41.132434][ T3884] EXT4-fs: Ignoring removed bh option [ 41.183572][ T3884] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.238075][ T3899] FAULT_INJECTION: forcing a failure. [ 41.238075][ T3899] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 41.251371][ T3899] CPU: 1 UID: 0 PID: 3899 Comm: syz.2.140 Not tainted 6.14.0-rc3-syzkaller-00295-g27102b38b8ca #0 [ 41.251468][ T3899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 41.251484][ T3899] Call Trace: [ 41.251492][ T3899] [ 41.251501][ T3899] dump_stack_lvl+0xf2/0x150 [ 41.251536][ T3899] dump_stack+0x15/0x1a [ 41.251572][ T3899] should_fail_ex+0x24a/0x260 [ 41.251603][ T3899] should_fail+0xb/0x10 [ 41.251633][ T3899] should_fail_usercopy+0x1a/0x20 [ 41.251663][ T3899] _copy_from_user+0x1c/0xa0 [ 41.251740][ T3899] ucma_resolve_ip+0x49/0x1d0 [ 41.251778][ T3899] ucma_write+0x1a4/0x240 [ 41.251888][ T3899] ? __pfx_ucma_write+0x10/0x10 [ 41.251918][ T3899] vfs_write+0x27d/0x920 [ 41.251950][ T3899] ? __fget_files+0x17c/0x1c0 [ 41.251989][ T3899] ksys_write+0xe8/0x1b0 [ 41.252091][ T3899] __x64_sys_write+0x42/0x50 [ 41.252127][ T3899] x64_sys_call+0x287e/0x2dc0 [ 41.252177][ T3899] do_syscall_64+0xc9/0x1c0 [ 41.252214][ T3899] ? clear_bhb_loop+0x55/0xb0 [ 41.252247][ T3899] ? clear_bhb_loop+0x55/0xb0 [ 41.252276][ T3899] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 41.252389][ T3899] RIP: 0033:0x7f5adb7cd169 [ 41.252406][ T3899] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 41.252425][ T3899] RSP: 002b:00007f5ad9e31038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 41.252508][ T3899] RAX: ffffffffffffffda RBX: 00007f5adb9e5fa0 RCX: 00007f5adb7cd169 [ 41.252519][ T3899] RDX: 0000000000000048 RSI: 0000400000000600 RDI: 0000000000000006 [ 41.252533][ T3899] RBP: 00007f5ad9e31090 R08: 0000000000000000 R09: 0000000000000000 [ 41.252547][ T3899] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 41.252562][ T3899] R13: 0000000000000000 R14: 00007f5adb9e5fa0 R15: 00007ffdfae801a8 [ 41.252644][ T3899] [ 41.552197][ T3904] loop1: detected capacity change from 0 to 128 [ 41.570972][ T3904] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 41.610824][ T3904] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 41.703805][ T11] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 41.753383][ T3922] __nla_validate_parse: 2 callbacks suppressed [ 41.753467][ T3922] netlink: 4 bytes leftover after parsing attributes in process `syz.1.148'. [ 41.753545][ T3922] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 41.753581][ T3922] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 41.754085][ T3922] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 41.754114][ T3922] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 41.827879][ T3928] FAULT_INJECTION: forcing a failure. [ 41.827879][ T3928] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 41.827910][ T3928] CPU: 0 UID: 0 PID: 3928 Comm: syz.2.150 Not tainted 6.14.0-rc3-syzkaller-00295-g27102b38b8ca #0 [ 41.827970][ T3928] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 41.827986][ T3928] Call Trace: [ 41.827995][ T3928] [ 41.828010][ T3928] dump_stack_lvl+0xf2/0x150 [ 41.828040][ T3928] dump_stack+0x15/0x1a [ 41.828064][ T3928] should_fail_ex+0x24a/0x260 [ 41.828176][ T3928] should_fail+0xb/0x10 [ 41.828209][ T3928] should_fail_usercopy+0x1a/0x20 [ 41.828246][ T3928] strncpy_from_user+0x25/0x210 [ 41.828285][ T3928] ? kmem_cache_alloc_noprof+0x18e/0x320 [ 41.828381][ T3928] ? getname_flags+0x81/0x3b0 [ 41.828421][ T3928] getname_flags+0xb0/0x3b0 [ 41.828468][ T3928] user_path_at+0x26/0x120 [ 41.828523][ T3928] __se_sys_open_tree+0x15a/0x700 [ 41.828560][ T3928] ? __bpf_trace_sys_enter+0x10/0x30 [ 41.828589][ T3928] ? trace_sys_enter+0xcd/0x110 [ 41.828688][ T3928] __x64_sys_open_tree+0x43/0x50 [ 41.828722][ T3928] x64_sys_call+0x2011/0x2dc0 [ 41.828754][ T3928] do_syscall_64+0xc9/0x1c0 [ 41.828791][ T3928] ? clear_bhb_loop+0x55/0xb0 [ 41.828850][ T3928] ? clear_bhb_loop+0x55/0xb0 [ 41.828936][ T3928] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 41.828968][ T3928] RIP: 0033:0x7f5adb7cd169 [ 41.828983][ T3928] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 41.829000][ T3928] RSP: 002b:00007f5ad9e31038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ac [ 41.829017][ T3928] RAX: ffffffffffffffda RBX: 00007f5adb9e5fa0 RCX: 00007f5adb7cd169 [ 41.829032][ T3928] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffffffffff9c [ 41.829107][ T3928] RBP: 00007f5ad9e31090 R08: 0000000000000000 R09: 0000000000000000 [ 41.829122][ T3928] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 41.829200][ T3928] R13: 0000000000000000 R14: 00007f5adb9e5fa0 R15: 00007ffdfae801a8 [ 41.829219][ T3928] [ 41.905252][ T3932] netlink: 28 bytes leftover after parsing attributes in process `syz.2.152'. [ 41.925206][ T3900] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 41.925318][ T3900] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 28 [ 41.925391][ T3900] EXT4-fs (loop3): This should not happen!! Data will be lost [ 41.925391][ T3900] [ 41.925407][ T3900] EXT4-fs (loop3): Total free blocks count 0 [ 41.925428][ T3900] EXT4-fs (loop3): Free/Dirty block details [ 41.925442][ T3900] EXT4-fs (loop3): free_blocks=2415919104 [ 41.925458][ T3900] EXT4-fs (loop3): dirty_blocks=8224 [ 41.925470][ T3900] EXT4-fs (loop3): Block reservation details [ 41.925480][ T3900] EXT4-fs (loop3): i_reserved_data_blocks=514 [ 41.977717][ T112] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 32 with max blocks 2048 with error 28 [ 42.056893][ T3937] netlink: 4 bytes leftover after parsing attributes in process `syz.2.155'. [ 42.227727][ T3955] loop1: detected capacity change from 0 to 128 [ 42.228089][ T3955] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 42.229591][ T3955] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 42.403116][ T3964] sd 0:0:1:0: device reset [ 42.519728][ T3966] netlink: 12 bytes leftover after parsing attributes in process `syz.2.165'. [ 42.588666][ T50] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 42.675832][ T3973] netlink: 4 bytes leftover after parsing attributes in process `syz.1.167'. [ 42.685322][ T3980] FAULT_INJECTION: forcing a failure. [ 42.685322][ T3980] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 42.698471][ T3980] CPU: 0 UID: 0 PID: 3980 Comm: syz.2.168 Not tainted 6.14.0-rc3-syzkaller-00295-g27102b38b8ca #0 [ 42.698517][ T3973] FAULT_INJECTION: forcing a failure. [ 42.698517][ T3973] name failslab, interval 1, probability 0, space 0, times 1 [ 42.698543][ T3980] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 42.698555][ T3980] Call Trace: [ 42.698564][ T3980] [ 42.698573][ T3980] dump_stack_lvl+0xf2/0x150 [ 42.698607][ T3980] dump_stack+0x15/0x1a [ 42.698634][ T3980] should_fail_ex+0x24a/0x260 [ 42.698728][ T3980] should_fail+0xb/0x10 [ 42.698760][ T3980] should_fail_usercopy+0x1a/0x20 [ 42.698799][ T3980] _copy_from_user+0x1c/0xa0 [ 42.698864][ T3980] kstrtouint_from_user+0x76/0xe0 [ 42.698900][ T3980] ? 0xffffffff81000000 [ 42.698916][ T3980] ? selinux_file_permission+0x22a/0x360 [ 42.698992][ T3980] proc_fail_nth_write+0x4f/0x150 [ 42.699027][ T3980] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 42.699064][ T3980] vfs_write+0x27d/0x920 [ 42.699098][ T3980] ? __fget_files+0x17c/0x1c0 [ 42.699143][ T3980] ksys_write+0xe8/0x1b0 [ 42.699176][ T3980] __x64_sys_write+0x42/0x50 [ 42.699210][ T3980] x64_sys_call+0x287e/0x2dc0 [ 42.699242][ T3980] do_syscall_64+0xc9/0x1c0 [ 42.699391][ T3980] ? clear_bhb_loop+0x55/0xb0 [ 42.699424][ T3980] ? clear_bhb_loop+0x55/0xb0 [ 42.699458][ T3980] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 42.699492][ T3980] RIP: 0033:0x7f5adb7cbc1f [ 42.699585][ T3980] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 42.699607][ T3980] RSP: 002b:00007f5ad9e31030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 42.699631][ T3980] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f5adb7cbc1f [ 42.699647][ T3980] RDX: 0000000000000001 RSI: 00007f5ad9e310a0 RDI: 0000000000000007 [ 42.699661][ T3980] RBP: 00007f5ad9e31090 R08: 0000000000000000 R09: 0000000000000000 [ 42.699676][ T3980] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 42.699690][ T3980] R13: 0000000000000000 R14: 00007f5adb9e5fa0 R15: 00007ffdfae801a8 [ 42.699713][ T3980] [ 42.899593][ T3990] loop4: detected capacity change from 0 to 128 [ 42.906508][ T3973] CPU: 1 UID: 0 PID: 3973 Comm: syz.1.167 Not tainted 6.14.0-rc3-syzkaller-00295-g27102b38b8ca #0 [ 42.906538][ T3973] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 42.906553][ T3973] Call Trace: [ 42.906562][ T3973] [ 42.906581][ T3973] dump_stack_lvl+0xf2/0x150 [ 42.906685][ T3973] dump_stack+0x15/0x1a [ 42.906729][ T3973] should_fail_ex+0x24a/0x260 [ 42.906766][ T3973] should_failslab+0x8f/0xb0 [ 42.906802][ T3973] kmem_cache_alloc_node_noprof+0x59/0x320 [ 42.906877][ T3973] ? __alloc_skb+0x10b/0x310 [ 42.906900][ T3973] ? security_capable+0x81/0x90 [ 42.906934][ T3973] __alloc_skb+0x10b/0x310 [ 42.906966][ T3973] netlink_ack+0xef/0x4f0 [ 42.907001][ T3973] ? ref_tracker_free+0x3a5/0x410 [ 42.907048][ T3973] netlink_rcv_skb+0x19c/0x230 [ 42.907082][ T3973] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 42.907120][ T3973] rtnetlink_rcv+0x1c/0x30 [ 42.907147][ T3973] netlink_unicast+0x599/0x670 [ 42.907247][ T3973] netlink_sendmsg+0x5cc/0x6e0 [ 42.907289][ T3973] ? __pfx_netlink_sendmsg+0x10/0x10 [ 42.907363][ T3973] __sock_sendmsg+0x140/0x180 [ 42.907402][ T3973] ____sys_sendmsg+0x326/0x4b0 [ 42.907486][ T3973] __sys_sendmsg+0x19d/0x230 [ 42.907548][ T3973] __x64_sys_sendmsg+0x46/0x50 [ 42.907600][ T3973] x64_sys_call+0x2734/0x2dc0 [ 42.907634][ T3973] do_syscall_64+0xc9/0x1c0 [ 42.907671][ T3973] ? clear_bhb_loop+0x55/0xb0 [ 42.907705][ T3973] ? clear_bhb_loop+0x55/0xb0 [ 42.907785][ T3973] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 42.907819][ T3973] RIP: 0033:0x7f481a1dd169 [ 42.907839][ T3973] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 42.907861][ T3973] RSP: 002b:00007f4818847038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 42.907884][ T3973] RAX: ffffffffffffffda RBX: 00007f481a3f5fa0 RCX: 00007f481a1dd169 [ 42.907900][ T3973] RDX: 0000000000000000 RSI: 0000400000000200 RDI: 0000000000000004 [ 42.907975][ T3973] RBP: 00007f4818847090 R08: 0000000000000000 R09: 0000000000000000 [ 42.907990][ T3973] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 42.908006][ T3973] R13: 0000000000000000 R14: 00007f481a3f5fa0 R15: 00007ffdda3e03b8 [ 42.908071][ T3973] [ 42.939207][ T3989] netlink: 12 bytes leftover after parsing attributes in process `syz.2.171'. [ 42.957499][ T3990] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 43.160568][ T3990] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 43.209682][ T112] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 43.222433][ T3999] team0 (unregistering): Port device team_slave_0 removed [ 43.245126][ T3999] team0 (unregistering): Port device team_slave_1 removed [ 43.261000][ T4004] loop4: detected capacity change from 0 to 512 [ 43.299706][ T3999] team0 (unregistering): Port device netdevsim1 removed [ 43.314320][ T3997] netlink: 4 bytes leftover after parsing attributes in process `syz.1.174'. [ 43.331658][ T4004] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 43.344779][ T4004] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 43.385715][ T4004] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2863: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 43.409923][ T4004] EXT4-fs (loop4): 1 truncate cleaned up [ 43.421709][ T4010] netlink: 12 bytes leftover after parsing attributes in process `syz.2.178'. [ 43.432346][ T4004] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.461261][ T4015] netlink: 'syz.1.179': attribute type 10 has an invalid length. [ 43.510758][ T29] kauditd_printk_skb: 664 callbacks suppressed [ 43.510774][ T29] audit: type=1400 audit(1740319385.866:1917): avc: denied { setattr } for pid=4003 comm="syz.4.176" name="file0" dev="loop4" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 43.604691][ T29] audit: type=1400 audit(1740319385.956:1918): avc: denied { create } for pid=4019 comm="syz.1.181" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 43.627741][ T4021] xt_hashlimit: max too large, truncated to 1048576 [ 43.630694][ T4020] 9pnet_fd: Insufficient options for proto=fd [ 43.652973][ T29] audit: type=1400 audit(1740319385.976:1919): avc: denied { remove_name } for pid=4003 comm="syz.4.176" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 43.675790][ T29] audit: type=1400 audit(1740319385.976:1920): avc: denied { rename } for pid=4003 comm="syz.4.176" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 43.698411][ T29] audit: type=1400 audit(1740319385.976:1921): avc: denied { unlink } for pid=4003 comm="syz.4.176" name="file0" dev="loop4" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 43.748269][ T29] audit: type=1400 audit(1740319386.096:1922): avc: denied { bind } for pid=4023 comm="syz.2.182" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 43.767543][ T29] audit: type=1400 audit(1740319386.096:1923): avc: denied { write } for pid=4023 comm="syz.2.182" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 43.928514][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.148367][ T4036] FAULT_INJECTION: forcing a failure. [ 44.148367][ T4036] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 44.161651][ T4036] CPU: 1 UID: 0 PID: 4036 Comm: syz.4.184 Not tainted 6.14.0-rc3-syzkaller-00295-g27102b38b8ca #0 [ 44.161680][ T4036] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 44.161692][ T4036] Call Trace: [ 44.161700][ T4036] [ 44.161735][ T4036] dump_stack_lvl+0xf2/0x150 [ 44.161767][ T4036] dump_stack+0x15/0x1a [ 44.161842][ T4036] should_fail_ex+0x24a/0x260 [ 44.161884][ T4036] should_fail+0xb/0x10 [ 44.161908][ T4036] should_fail_usercopy+0x1a/0x20 [ 44.161982][ T4036] _copy_from_user+0x1c/0xa0 [ 44.162023][ T4036] kstrtouint_from_user+0x76/0xe0 [ 44.162125][ T4036] ? 0xffffffff81000000 [ 44.162141][ T4036] ? selinux_file_permission+0x22a/0x360 [ 44.162171][ T4036] proc_fail_nth_write+0x4f/0x150 [ 44.162199][ T4036] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 44.162321][ T4036] vfs_write+0x27d/0x920 [ 44.162353][ T4036] ? __fget_files+0x17c/0x1c0 [ 44.162394][ T4036] ksys_write+0xe8/0x1b0 [ 44.162498][ T4036] __x64_sys_write+0x42/0x50 [ 44.162528][ T4036] x64_sys_call+0x287e/0x2dc0 [ 44.162556][ T4036] do_syscall_64+0xc9/0x1c0 [ 44.162608][ T4036] ? clear_bhb_loop+0x55/0xb0 [ 44.162686][ T4036] ? clear_bhb_loop+0x55/0xb0 [ 44.162720][ T4036] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 44.162753][ T4036] RIP: 0033:0x7f212ddbbc1f [ 44.162821][ T4036] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 44.162844][ T4036] RSP: 002b:00007f212c421030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 44.162935][ T4036] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f212ddbbc1f [ 44.162951][ T4036] RDX: 0000000000000001 RSI: 00007f212c4210a0 RDI: 0000000000000006 [ 44.162965][ T4036] RBP: 00007f212c421090 R08: 0000000000000000 R09: 0000000000000000 [ 44.162980][ T4036] R10: 0000000000000020 R11: 0000000000000293 R12: 0000000000000001 [ 44.162994][ T4036] R13: 0000000000000000 R14: 00007f212dfd5fa0 R15: 00007ffe44d5ca08 [ 44.163018][ T4036] [ 44.423942][ T29] audit: type=1326 audit(1740319386.776:1924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4042 comm="syz.0.187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f146ed169 code=0x7ffc0000 [ 44.447428][ T29] audit: type=1326 audit(1740319386.776:1925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4042 comm="syz.0.187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f146ed169 code=0x7ffc0000 [ 44.499755][ T29] audit: type=1326 audit(1740319386.776:1926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4042 comm="syz.0.187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6f146ed169 code=0x7ffc0000 [ 44.523446][ T4043] loop0: detected capacity change from 0 to 2048 [ 44.564426][ T4043] EXT4-fs: Ignoring removed bh option [ 44.579410][ T4048] loop4: detected capacity change from 0 to 2048 [ 44.586560][ T4048] EXT4-fs: Ignoring removed bh option [ 44.617383][ T4048] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.617931][ T4043] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.849693][ T4054] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 44.876404][ T4054] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 28 [ 44.888758][ T4054] EXT4-fs (loop4): This should not happen!! Data will be lost [ 44.888758][ T4054] [ 44.897877][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88811872b600: rx timeout, send abort [ 44.898466][ T4054] EXT4-fs (loop4): Total free blocks count 0 [ 44.906717][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88811872ba00: rx timeout, send abort [ 44.912695][ T4054] EXT4-fs (loop4): Free/Dirty block details [ 44.921057][ C0] vxcan0: j1939_xtp_rx_abort_one: 0xffff88811872b600: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 44.926865][ T4054] EXT4-fs (loop4): free_blocks=2415919104 [ 44.941216][ C0] vxcan0: j1939_xtp_rx_abort_one: 0xffff88811872ba00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 44.946914][ T4054] EXT4-fs (loop4): dirty_blocks=8224 [ 44.966848][ T4054] EXT4-fs (loop4): Block reservation details [ 44.972878][ T4054] EXT4-fs (loop4): i_reserved_data_blocks=514 [ 44.997267][ T4058] netlink: 12 bytes leftover after parsing attributes in process `syz.2.190'. [ 45.115918][ T1774] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 32 with max blocks 2048 with error 28 [ 45.160276][ T4062] netlink: 12 bytes leftover after parsing attributes in process `syz.2.192'. [ 45.238120][ T4055] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 45.269471][ T4055] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 28 [ 45.281801][ T4055] EXT4-fs (loop0): This should not happen!! Data will be lost [ 45.281801][ T4055] [ 45.291496][ T4055] EXT4-fs (loop0): Total free blocks count 0 [ 45.297522][ T4055] EXT4-fs (loop0): Free/Dirty block details [ 45.303467][ T4055] EXT4-fs (loop0): free_blocks=2415919104 [ 45.309253][ T4055] EXT4-fs (loop0): dirty_blocks=8224 [ 45.314576][ T4055] EXT4-fs (loop0): Block reservation details [ 45.320600][ T4055] EXT4-fs (loop0): i_reserved_data_blocks=514 [ 45.329527][ T4064] loop2: detected capacity change from 0 to 128 [ 45.336612][ T4064] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 45.360373][ T4064] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 45.434696][ T1774] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 45.473888][ T4071] loop4: detected capacity change from 0 to 2048 [ 45.474985][ T1774] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 32 with max blocks 2048 with error 28 [ 45.489758][ T4071] EXT4-fs: Ignoring removed bh option [ 45.504942][ T4074] loop2: detected capacity change from 0 to 128 [ 45.512150][ T4074] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 45.535802][ T4074] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 45.549320][ T4075] loop1: detected capacity change from 0 to 2048 [ 45.556745][ T4075] EXT4-fs: Ignoring removed bh option [ 45.566400][ T4071] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.607762][ T112] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 45.609133][ T4075] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.978343][ T4100] loop0: detected capacity change from 0 to 2048 [ 46.000427][ T4100] EXT4-fs: Ignoring removed bh option [ 46.041723][ T4100] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.156041][ T4106] loop2: detected capacity change from 0 to 128 [ 46.159663][ T4087] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 46.178260][ T4087] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 28 [ 46.190640][ T4087] EXT4-fs (loop4): This should not happen!! Data will be lost [ 46.190640][ T4087] [ 46.200316][ T4087] EXT4-fs (loop4): Total free blocks count 0 [ 46.206353][ T4087] EXT4-fs (loop4): Free/Dirty block details [ 46.212315][ T4087] EXT4-fs (loop4): free_blocks=2415919104 [ 46.218260][ T4087] EXT4-fs (loop4): dirty_blocks=8224 [ 46.220510][ T4084] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, [ 46.223570][ T4087] EXT4-fs (loop4): Block reservation details [ 46.223587][ T4087] EXT4-fs (loop4): i_reserved_data_blocks=514 [ 46.231875][ T4084] block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 46.244463][ T4106] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 46.304669][ T4084] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 28 [ 46.317065][ T4084] EXT4-fs (loop1): This should not happen!! Data will be lost [ 46.317065][ T4084] [ 46.326734][ T4084] EXT4-fs (loop1): Total free blocks count 0 [ 46.327039][ T4106] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 46.332748][ T4084] EXT4-fs (loop1): Free/Dirty block details [ 46.332765][ T4084] EXT4-fs (loop1): free_blocks=2415919104 [ 46.332854][ T4084] EXT4-fs (loop1): dirty_blocks=8224 [ 46.358927][ T4084] EXT4-fs (loop1): Block reservation details [ 46.365028][ T4084] EXT4-fs (loop1): i_reserved_data_blocks=514 [ 46.582293][ T50] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 46.586013][ T4110] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 46.616423][ T11] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 32 with max blocks 2048 with error 28 [ 46.629228][ T112] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 32 with max blocks 2048 with error 28 [ 46.641899][ T4110] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 28 [ 46.654219][ T4110] EXT4-fs (loop0): This should not happen!! Data will be lost [ 46.654219][ T4110] [ 46.663941][ T4110] EXT4-fs (loop0): Total free blocks count 0 [ 46.670015][ T4110] EXT4-fs (loop0): Free/Dirty block details [ 46.675947][ T4110] EXT4-fs (loop0): free_blocks=2415919104 [ 46.681729][ T4110] EXT4-fs (loop0): dirty_blocks=8224 [ 46.687047][ T4110] EXT4-fs (loop0): Block reservation details [ 46.693088][ T4110] EXT4-fs (loop0): i_reserved_data_blocks=514 [ 46.744478][ T4113] loop2: detected capacity change from 0 to 2048 [ 46.755727][ T4113] EXT4-fs: Ignoring removed bh option [ 46.780775][ T4113] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.827124][ T36] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 32 with max blocks 2048 with error 28 [ 46.962879][ T4122] __nla_validate_parse: 2 callbacks suppressed [ 46.962894][ T4122] netlink: 12 bytes leftover after parsing attributes in process `syz.1.209'. [ 46.989507][ T4120] netlink: 12 bytes leftover after parsing attributes in process `syz.3.211'. [ 47.106167][ T4126] loop3: detected capacity change from 0 to 128 [ 47.112907][ T4126] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 47.134287][ T4126] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 47.170568][ T4133] netlink: 8 bytes leftover after parsing attributes in process `syz.0.210'. [ 47.196378][ T4135] netlink: 32 bytes leftover after parsing attributes in process `syz.1.215'. [ 47.210418][ T36] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 47.219698][ T3435] IPVS: starting estimator thread 0... [ 47.299037][ T4140] loop3: detected capacity change from 0 to 128 [ 47.309566][ T4136] IPVS: using max 2496 ests per chain, 124800 per kthread [ 47.318692][ T4140] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 47.329518][ T4116] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 47.334330][ T4140] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 47.388370][ T4116] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 28 [ 47.400926][ T4116] EXT4-fs (loop2): This should not happen!! Data will be lost [ 47.400926][ T4116] [ 47.410619][ T4116] EXT4-fs (loop2): Total free blocks count 0 [ 47.416648][ T4116] EXT4-fs (loop2): Free/Dirty block details [ 47.416665][ T4116] EXT4-fs (loop2): free_blocks=2415919104 [ 47.416679][ T4116] EXT4-fs (loop2): dirty_blocks=8224 [ 47.416690][ T4116] EXT4-fs (loop2): Block reservation details [ 47.433649][ T4116] EXT4-fs (loop2): i_reserved_data_blocks=514 [ 47.475101][ T36] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 47.516863][ T4152] netlink: 'syz.3.221': attribute type 10 has an invalid length. [ 47.536152][ T4150] netlink: 12 bytes leftover after parsing attributes in process `syz.1.222'. [ 47.538167][ T36] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 32 with max blocks 2048 with error 28 [ 47.657217][ T4158] loop1: detected capacity change from 0 to 128 [ 47.674162][ T4158] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 47.690530][ T4148] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 47.700816][ T4158] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 47.763686][ T11] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 47.784665][ T4166] loop2: detected capacity change from 0 to 512 [ 47.791225][ T4166] EXT4-fs: Ignoring removed i_version option [ 47.797247][ T4166] EXT4-fs: Ignoring removed mblk_io_submit option [ 47.804135][ T4166] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 47.805831][ T4164] loop4: detected capacity change from 0 to 128 [ 47.824613][ T4164] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 47.831351][ T4166] EXT4-fs (loop2): 1 truncate cleaned up [ 47.846476][ T4166] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.852050][ T4164] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 47.865502][ T4166] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 47.892229][ T4173] loop1: detected capacity change from 0 to 128 [ 47.901358][ T4173] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 47.913659][ T50] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 47.913757][ T4173] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 47.925325][ T3299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.952872][ T4177] netlink: 8 bytes leftover after parsing attributes in process `syz.4.230'. [ 47.984834][ T11] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 48.011559][ T4181] netlink: 32 bytes leftover after parsing attributes in process `syz.2.233'. [ 48.021793][ T24] IPVS: starting estimator thread 0... [ 48.032944][ T4184] loop1: detected capacity change from 0 to 128 [ 48.046304][ T4184] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 48.064296][ T4184] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 48.095382][ T4188] netlink: 12 bytes leftover after parsing attributes in process `syz.4.234'. [ 48.109469][ T4182] IPVS: using max 2304 ests per chain, 115200 per kthread [ 48.132416][ T4190] netlink: 'syz.2.235': attribute type 10 has an invalid length. [ 48.148944][ T1774] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 48.159086][ T4190] bond0: (slave netdevsim1): Releasing backup interface [ 48.246186][ T4205] loop2: detected capacity change from 0 to 128 [ 48.253032][ T4205] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 48.269740][ T4208] loop1: detected capacity change from 0 to 1764 [ 48.279461][ T4205] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 48.328271][ T112] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 48.330829][ T4208] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 48.364818][ T4208] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 48.391637][ T4214] loop0: detected capacity change from 0 to 2048 [ 48.394524][ T4217] netlink: 12 bytes leftover after parsing attributes in process `syz.4.246'. [ 48.404718][ T4214] EXT4-fs: Ignoring removed bh option [ 48.416478][ T4218] loop2: detected capacity change from 0 to 2048 [ 48.425917][ T4214] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.429995][ T4218] EXT4-fs: Ignoring removed bh option [ 48.509550][ T4218] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.534345][ T4231] netlink: 'syz.3.250': attribute type 10 has an invalid length. [ 48.542199][ T29] kauditd_printk_skb: 944 callbacks suppressed [ 48.542212][ T29] audit: type=1326 audit(1740319390.896:2871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4216 comm="syz.2.245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5adb7cbad0 code=0x7ffc0000 [ 48.571929][ T29] audit: type=1326 audit(1740319390.896:2872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4216 comm="syz.2.245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7f5adb7cbeb7 code=0x7ffc0000 [ 48.595270][ T29] audit: type=1326 audit(1740319390.896:2873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4216 comm="syz.2.245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5adb7cbad0 code=0x7ffc0000 [ 48.618847][ T29] audit: type=1326 audit(1740319390.896:2874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4216 comm="syz.2.245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5adb7cd169 code=0x7ffc0000 [ 48.642329][ T29] audit: type=1326 audit(1740319390.896:2875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4216 comm="syz.2.245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5adb7cd169 code=0x7ffc0000 [ 48.665897][ T29] audit: type=1326 audit(1740319390.896:2876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4216 comm="syz.2.245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5adb7cd169 code=0x7ffc0000 [ 48.689509][ T29] audit: type=1326 audit(1740319390.896:2877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4216 comm="syz.2.245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5adb7cd169 code=0x7ffc0000 [ 48.712887][ T29] audit: type=1326 audit(1740319390.896:2878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4216 comm="syz.2.245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f5adb7cd169 code=0x7ffc0000 [ 48.736421][ T29] audit: type=1400 audit(1740319390.926:2879): avc: denied { write } for pid=4228 comm="syz.4.249" name="event2" dev="devtmpfs" ino=248 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 48.756983][ T4240] loop3: detected capacity change from 0 to 512 [ 48.759620][ T29] audit: type=1400 audit(1740319390.926:2880): avc: denied { open } for pid=4228 comm="syz.4.249" path="/dev/input/event2" dev="devtmpfs" ino=248 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 48.790196][ T4240] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 48.816923][ T4241] loop4: detected capacity change from 0 to 512 [ 48.834764][ T4240] EXT4-fs (loop3): 1 truncate cleaned up [ 48.846672][ T4240] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.863745][ T4241] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 48.908176][ T1774] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 48.921610][ T4241] EXT4-fs (loop4): 1 truncate cleaned up [ 48.928952][ T4241] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.942689][ T50] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 48.966117][ T1774] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 48.978528][ T1774] EXT4-fs (loop0): This should not happen!! Data will be lost [ 48.978528][ T1774] [ 48.979564][ T50] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 48.988198][ T1774] EXT4-fs (loop0): Total free blocks count 0 [ 48.988215][ T1774] EXT4-fs (loop0): Free/Dirty block details [ 48.988229][ T1774] EXT4-fs (loop0): free_blocks=2415919104 [ 49.000411][ T50] EXT4-fs (loop2): This should not happen!! Data will be lost [ 49.000411][ T50] [ 49.006375][ T1774] EXT4-fs (loop0): dirty_blocks=6560 [ 49.012274][ T50] EXT4-fs (loop2): Total free blocks count 0 [ 49.017983][ T1774] EXT4-fs (loop0): Block reservation details [ 49.027607][ T50] EXT4-fs (loop2): Free/Dirty block details [ 49.027622][ T50] EXT4-fs (loop2): free_blocks=2415919104 [ 49.032897][ T1774] EXT4-fs (loop0): i_reserved_data_blocks=410 [ 49.038853][ T50] EXT4-fs (loop2): dirty_blocks=8224 [ 49.050747][ T1774] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 2048 with error 28 [ 49.080681][ T50] EXT4-fs (loop2): Block reservation details [ 49.086687][ T50] EXT4-fs (loop2): i_reserved_data_blocks=514 [ 49.128985][ T50] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 2048 with error 28 [ 49.216874][ T4247] netlink: 'syz.1.255': attribute type 10 has an invalid length. [ 49.300462][ T4254] netlink: 12 bytes leftover after parsing attributes in process `syz.1.257'. [ 49.309834][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.310163][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.401773][ T4265] netlink: 'syz.3.261': attribute type 10 has an invalid length. [ 49.447802][ T4269] loop3: detected capacity change from 0 to 128 [ 49.464814][ T4269] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 49.477788][ T4269] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 49.511507][ T1774] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 49.548845][ T4279] loop3: detected capacity change from 0 to 2048 [ 49.556351][ T4279] EXT4-fs: Ignoring removed bh option [ 49.572982][ T4279] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.786569][ T4286] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 49.808699][ T4286] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 28 [ 49.821194][ T4286] EXT4-fs (loop3): This should not happen!! Data will be lost [ 49.821194][ T4286] [ 49.830881][ T4286] EXT4-fs (loop3): Total free blocks count 0 [ 49.836938][ T4286] EXT4-fs (loop3): Free/Dirty block details [ 49.842870][ T4286] EXT4-fs (loop3): free_blocks=2415919104 [ 49.848589][ T4286] EXT4-fs (loop3): dirty_blocks=8224 [ 49.853920][ T4286] EXT4-fs (loop3): Block reservation details [ 49.859965][ T4286] EXT4-fs (loop3): i_reserved_data_blocks=514 [ 49.875382][ T4290] netlink: 'syz.2.267': attribute type 10 has an invalid length. [ 49.897534][ T28] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 32 with max blocks 2048 with error 28 [ 49.989596][ T4296] loop3: detected capacity change from 0 to 512 [ 49.996587][ T4296] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 50.007928][ T4296] EXT4-fs (loop3): 1 truncate cleaned up [ 50.014279][ T4296] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.054731][ T4301] netlink: 'syz.2.272': attribute type 10 has an invalid length. [ 50.098391][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.211957][ T4317] loop3: detected capacity change from 0 to 2048 [ 50.221374][ T4317] EXT4-fs: Ignoring removed bh option [ 50.242701][ T4317] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.331103][ T4307] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 50.383971][ T4331] loop4: detected capacity change from 0 to 512 [ 50.414508][ T4331] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 50.453287][ T4331] EXT4-fs (loop4): 1 truncate cleaned up [ 50.461552][ T4331] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.488134][ T11] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 50.503508][ T11] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 50.515831][ T11] EXT4-fs (loop3): This should not happen!! Data will be lost [ 50.515831][ T11] [ 50.525530][ T11] EXT4-fs (loop3): Total free blocks count 0 [ 50.531557][ T11] EXT4-fs (loop3): Free/Dirty block details [ 50.537461][ T11] EXT4-fs (loop3): free_blocks=2415919104 [ 50.543253][ T11] EXT4-fs (loop3): dirty_blocks=8224 [ 50.548590][ T11] EXT4-fs (loop3): Block reservation details [ 50.554698][ T11] EXT4-fs (loop3): i_reserved_data_blocks=514 [ 50.561562][ T4340] xt_hashlimit: max too large, truncated to 1048576 [ 50.566709][ T11] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 2048 with error 28 [ 50.610727][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.775184][ T4353] loop3: detected capacity change from 0 to 2048 [ 50.784283][ T4353] EXT4-fs: Ignoring removed bh option [ 50.801513][ T4353] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.002992][ T4361] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 51.018273][ T4361] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 28 [ 51.030722][ T4361] EXT4-fs (loop3): This should not happen!! Data will be lost [ 51.030722][ T4361] [ 51.040558][ T4361] EXT4-fs (loop3): Total free blocks count 0 [ 51.046644][ T4361] EXT4-fs (loop3): Free/Dirty block details [ 51.052577][ T4361] EXT4-fs (loop3): free_blocks=2415919104 [ 51.058415][ T4361] EXT4-fs (loop3): dirty_blocks=8224 [ 51.063844][ T4361] EXT4-fs (loop3): Block reservation details [ 51.069875][ T4361] EXT4-fs (loop3): i_reserved_data_blocks=514 [ 51.097485][ T1774] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 32 with max blocks 2048 with error 28 [ 51.115997][ T4369] loop2: detected capacity change from 0 to 2048 [ 51.127624][ T4369] EXT4-fs: Ignoring removed bh option [ 51.151889][ T4369] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.333389][ T4384] loop0: detected capacity change from 0 to 2048 [ 51.340598][ T4384] EXT4-fs: Ignoring removed bh option [ 51.371227][ T4384] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.397096][ T4374] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 51.415102][ T4374] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 28 [ 51.427570][ T4374] EXT4-fs (loop2): This should not happen!! Data will be lost [ 51.427570][ T4374] [ 51.437341][ T4374] EXT4-fs (loop2): Total free blocks count 0 [ 51.443417][ T4374] EXT4-fs (loop2): Free/Dirty block details [ 51.449447][ T4374] EXT4-fs (loop2): free_blocks=2415919104 [ 51.455299][ T4374] EXT4-fs (loop2): dirty_blocks=8224 [ 51.460617][ T4374] EXT4-fs (loop2): Block reservation details [ 51.466602][ T4374] EXT4-fs (loop2): i_reserved_data_blocks=514 [ 51.493987][ T1774] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 32 with max blocks 2048 with error 28 [ 51.613359][ T4391] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 51.628805][ T4391] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 28 [ 51.641157][ T4391] EXT4-fs (loop0): This should not happen!! Data will be lost [ 51.641157][ T4391] [ 51.650829][ T4391] EXT4-fs (loop0): Total free blocks count 0 [ 51.656823][ T4391] EXT4-fs (loop0): Free/Dirty block details [ 51.662743][ T4391] EXT4-fs (loop0): free_blocks=2415919104 [ 51.668483][ T4391] EXT4-fs (loop0): dirty_blocks=8224 [ 51.673827][ T4391] EXT4-fs (loop0): Block reservation details [ 51.679886][ T4391] EXT4-fs (loop0): i_reserved_data_blocks=514 [ 51.690908][ T4400] loop4: detected capacity change from 0 to 128 [ 51.697628][ T4400] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 51.729798][ T4401] loop3: detected capacity change from 0 to 2048 [ 51.730138][ T4400] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 51.743322][ T4401] EXT4-fs: Ignoring removed bh option [ 51.763029][ T4401] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.809684][ T112] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 51.837518][ T50] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 32 with max blocks 2048 with error 28 [ 52.028673][ T4407] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 52.047856][ T4407] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 28 [ 52.060299][ T4407] EXT4-fs (loop3): This should not happen!! Data will be lost [ 52.060299][ T4407] [ 52.069993][ T4407] EXT4-fs (loop3): Total free blocks count 0 [ 52.076032][ T4407] EXT4-fs (loop3): Free/Dirty block details [ 52.082019][ T4407] EXT4-fs (loop3): free_blocks=2415919104 [ 52.087939][ T4407] EXT4-fs (loop3): dirty_blocks=8224 [ 52.093292][ T4407] EXT4-fs (loop3): Block reservation details [ 52.099303][ T4407] EXT4-fs (loop3): i_reserved_data_blocks=514 [ 52.153982][ T4428] __nla_validate_parse: 9 callbacks suppressed [ 52.153996][ T4428] netlink: 12 bytes leftover after parsing attributes in process `syz.0.309'. [ 52.169548][ T4427] loop2: detected capacity change from 0 to 2048 [ 52.179723][ T4427] EXT4-fs: Ignoring removed bh option [ 52.180918][ T112] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 32 with max blocks 2048 with error 28 [ 52.243640][ T4429] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 52.352826][ T4427] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.459163][ T4434] netlink: 12 bytes leftover after parsing attributes in process `syz.0.318'. [ 52.673919][ T4442] loop0: detected capacity change from 0 to 128 [ 52.687896][ T4442] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 52.702565][ T4442] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 52.741883][ T28] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 52.803455][ T4435] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 52.829850][ T4435] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 28 [ 52.842226][ T4435] EXT4-fs (loop2): This should not happen!! Data will be lost [ 52.842226][ T4435] [ 52.851978][ T4435] EXT4-fs (loop2): Total free blocks count 0 [ 52.857980][ T4435] EXT4-fs (loop2): Free/Dirty block details [ 52.864016][ T4435] EXT4-fs (loop2): free_blocks=2415919104 [ 52.869783][ T4435] EXT4-fs (loop2): dirty_blocks=8224 [ 52.870620][ T4451] loop1: detected capacity change from 0 to 2048 [ 52.875069][ T4435] EXT4-fs (loop2): Block reservation details [ 52.875085][ T4435] EXT4-fs (loop2): i_reserved_data_blocks=514 [ 52.883782][ T4451] EXT4-fs: Ignoring removed bh option [ 52.923012][ T50] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 32 with max blocks 2048 with error 28 [ 52.958983][ T4451] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.035294][ T4457] netlink: 28 bytes leftover after parsing attributes in process `syz.0.325'. [ 53.056263][ T4461] loop2: detected capacity change from 0 to 512 [ 53.073763][ T4461] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 53.106108][ T4461] EXT4-fs (loop2): 1 truncate cleaned up [ 53.107076][ T4465] netlink: 14 bytes leftover after parsing attributes in process `syz.0.326'. [ 53.112338][ T4461] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.145888][ T28] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 53.166759][ T28] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 53.179012][ T28] EXT4-fs (loop1): This should not happen!! Data will be lost [ 53.179012][ T28] [ 53.188771][ T28] EXT4-fs (loop1): Total free blocks count 0 [ 53.194804][ T28] EXT4-fs (loop1): Free/Dirty block details [ 53.200775][ T28] EXT4-fs (loop1): free_blocks=2415919104 [ 53.206606][ T28] EXT4-fs (loop1): dirty_blocks=6784 [ 53.211929][ T28] EXT4-fs (loop1): Block reservation details [ 53.217927][ T28] EXT4-fs (loop1): i_reserved_data_blocks=456 [ 53.227948][ T28] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 2048 with error 28 [ 53.259083][ T4467] loop0: detected capacity change from 0 to 2048 [ 53.278254][ T3299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.278412][ T4467] EXT4-fs: Ignoring removed bh option [ 53.314708][ T4467] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.319305][ T4472] netlink: 132 bytes leftover after parsing attributes in process `syz.2.328'. [ 53.343943][ T4472] loop2: detected capacity change from 0 to 512 [ 53.354196][ T4472] EXT4-fs (loop2): unsupported inode size: 8192 [ 53.360515][ T4472] EXT4-fs (loop2): blocksize: 2048 [ 53.394063][ T4472] netlink: 8 bytes leftover after parsing attributes in process `syz.2.328'. [ 53.550879][ T29] kauditd_printk_skb: 1120 callbacks suppressed [ 53.550895][ T29] audit: type=1400 audit(2000000000.020:4001): avc: denied { watch watch_reads } for pid=4475 comm="syz.3.330" path="/75/control" dev="tmpfs" ino=432 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 53.558642][ T4473] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 53.621926][ T4485] netlink: 12 bytes leftover after parsing attributes in process `syz.2.331'. [ 53.623266][ T4486] loop1: detected capacity change from 0 to 2048 [ 53.637326][ T29] audit: type=1326 audit(2000000000.020:4002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4466 comm="syz.0.327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f146ed169 code=0x7ffc0000 [ 53.641846][ T4473] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 28 [ 53.660732][ T29] audit: type=1326 audit(2000000000.020:4003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4466 comm="syz.0.327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f146ed169 code=0x7ffc0000 [ 53.672980][ T4473] EXT4-fs (loop0): This should not happen!! Data will be lost [ 53.672980][ T4473] [ 53.696247][ T29] audit: type=1400 audit(2000000000.050:4004): avc: denied { map_create } for pid=4481 comm="syz.1.333" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 53.696272][ T29] audit: type=1400 audit(2000000000.060:4005): avc: denied { ioctl } for pid=4475 comm="syz.3.330" path="socket:[7490]" dev="sockfs" ino=7490 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 53.705945][ T4473] EXT4-fs (loop0): Total free blocks count 0 [ 53.705960][ T4473] EXT4-fs (loop0): Free/Dirty block details [ 53.725015][ T29] audit: type=1400 audit(2000000000.060:4006): avc: denied { module_request } for pid=4475 comm="syz.3.330" kmod="netdev-team0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 53.750344][ T4473] EXT4-fs (loop0): free_blocks=2415919104 [ 53.756316][ T29] audit: type=1400 audit(2000000000.070:4007): avc: denied { read } for pid=2984 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 53.762201][ T4473] EXT4-fs (loop0): dirty_blocks=8224 [ 53.783906][ T29] audit: type=1400 audit(2000000000.070:4009): avc: denied { search } for pid=2984 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 53.789644][ T4473] EXT4-fs (loop0): Block reservation details [ 53.811643][ T29] audit: type=1326 audit(2000000000.070:4008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4484 comm="syz.1.334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f481a1dd169 code=0x7ffc0000 [ 53.816882][ T4473] EXT4-fs (loop0): i_reserved_data_blocks=514 [ 53.819983][ T4486] EXT4-fs: Ignoring removed bh option [ 53.838504][ T29] audit: type=1326 audit(2000000000.070:4010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4484 comm="syz.1.334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f481a1dd169 code=0x7ffc0000 [ 53.921325][ T4486] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.941161][ T4492] netlink: 'syz.3.335': attribute type 10 has an invalid length. [ 53.956217][ T4494] netlink: 28 bytes leftover after parsing attributes in process `syz.4.337'. [ 53.962003][ T1774] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 32 with max blocks 2048 with error 28 [ 54.011522][ T4497] netlink: 14 bytes leftover after parsing attributes in process `syz.4.338'. [ 54.026309][ T4498] loop3: detected capacity change from 0 to 128 [ 54.033129][ T4498] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 54.096463][ T4498] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 54.132824][ T4503] binfmt_misc: register: failed to install interpreter file ./file2 [ 54.178386][ T4508] loop0: detected capacity change from 0 to 128 [ 54.186437][ T50] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 54.196299][ T4508] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 54.224905][ T4508] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 54.269598][ T1774] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 54.279105][ T4514] loop4: detected capacity change from 0 to 2048 [ 54.296556][ T4516] netlink: 14 bytes leftover after parsing attributes in process `syz.0.343'. [ 54.307963][ T4514] EXT4-fs: Ignoring removed bh option [ 54.322946][ T4501] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 54.339630][ T4501] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 28 [ 54.352001][ T4501] EXT4-fs (loop1): This should not happen!! Data will be lost [ 54.352001][ T4501] [ 54.361686][ T4501] EXT4-fs (loop1): Total free blocks count 0 [ 54.367788][ T4501] EXT4-fs (loop1): Free/Dirty block details [ 54.373727][ T4501] EXT4-fs (loop1): free_blocks=2415919104 [ 54.379541][ T4501] EXT4-fs (loop1): dirty_blocks=8224 [ 54.384838][ T4501] EXT4-fs (loop1): Block reservation details [ 54.390923][ T4501] EXT4-fs (loop1): i_reserved_data_blocks=514 [ 54.433048][ T36] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 32 with max blocks 2048 with error 28 [ 54.614646][ T4533] netlink: 'syz.2.349': attribute type 10 has an invalid length. [ 54.667624][ T4540] xt_hashlimit: max too large, truncated to 1048576 [ 54.703270][ T4542] loop1: detected capacity change from 0 to 128 [ 54.710167][ T4542] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 54.723759][ T4542] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 54.751396][ T4528] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 54.790848][ T11] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 54.798935][ T4528] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 28 [ 54.812254][ T4528] EXT4-fs (loop4): This should not happen!! Data will be lost [ 54.812254][ T4528] [ 54.822007][ T4528] EXT4-fs (loop4): Total free blocks count 0 [ 54.828029][ T4528] EXT4-fs (loop4): Free/Dirty block details [ 54.834104][ T4528] EXT4-fs (loop4): free_blocks=2415919104 [ 54.839964][ T4528] EXT4-fs (loop4): dirty_blocks=8224 [ 54.845276][ T4528] EXT4-fs (loop4): Block reservation details [ 54.851324][ T4528] EXT4-fs (loop4): i_reserved_data_blocks=514 [ 54.860788][ T4552] loop2: detected capacity change from 0 to 128 [ 54.867542][ T4552] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 54.884021][ T4554] loop1: detected capacity change from 0 to 512 [ 54.891007][ T4554] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 54.901828][ T4552] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 54.913727][ T4554] EXT4-fs (loop1): 1 truncate cleaned up [ 54.919574][ T4554] ================================================================== [ 54.927668][ T4554] BUG: KCSAN: data-race in console_flush_all / console_flush_all [ 54.935407][ T4554] [ 54.937733][ T4554] write to 0xffffffff86819fe8 of 8 bytes by task 4551 on cpu 1: [ 54.945368][ T4554] console_flush_all+0x3b5/0x790 [ 54.950324][ T4554] console_unlock+0xb6/0x340 [ 54.954932][ T4554] vprintk_emit+0x408/0x690 [ 54.959445][ T4554] vprintk_default+0x26/0x30 [ 54.964050][ T4554] vprintk+0x1d/0x30 [ 54.967957][ T4554] _printk+0x7a/0xa0 [ 54.971866][ T4554] caif_disconnect_client+0x13f/0x150 [ 54.977246][ T4554] caif_release+0xea/0x230 [ 54.981684][ T4554] sock_close+0x68/0x150 [ 54.985939][ T4554] __fput+0x2ac/0x640 [ 54.989926][ T4554] ____fput+0x1c/0x30 [ 54.993955][ T4554] task_work_run+0x13a/0x1a0 [ 54.998559][ T4554] syscall_exit_to_user_mode+0xa8/0x120 [ 55.004118][ T4554] do_syscall_64+0xd6/0x1c0 [ 55.008634][ T4554] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 55.014538][ T4554] [ 55.016862][ T4554] read to 0xffffffff86819fe8 of 8 bytes by task 4554 on cpu 0: [ 55.024417][ T4554] console_flush_all+0x5a1/0x790 [ 55.029371][ T4554] console_unlock+0xb6/0x340 [ 55.033969][ T4554] vprintk_emit+0x408/0x690 [ 55.038478][ T4554] vprintk_default+0x26/0x30 [ 55.043090][ T4554] vprintk+0x1d/0x30 [ 55.046992][ T4554] _printk+0x7a/0xa0 [ 55.050897][ T4554] __ext4_msg+0x18e/0x1a0 [ 55.055241][ T4554] ext4_orphan_cleanup+0x91e/0x9e0 [ 55.060415][ T4554] ext4_fill_super+0x32ec/0x3630 [ 55.065366][ T4554] get_tree_bdev_flags+0x29f/0x310 [ 55.070489][ T4554] get_tree_bdev+0x1f/0x30 [ 55.074936][ T4554] ext4_get_tree+0x1c/0x30 [ 55.079367][ T4554] vfs_get_tree+0x56/0x1e0 [ 55.083794][ T4554] do_new_mount+0x227/0x690 [ 55.088330][ T4554] path_mount+0x49b/0xb30 [ 55.092688][ T4554] __se_sys_mount+0x27f/0x2d0 [ 55.097391][ T4554] __x64_sys_mount+0x67/0x80 [ 55.102000][ T4554] x64_sys_call+0x2c84/0x2dc0 [ 55.106778][ T4554] do_syscall_64+0xc9/0x1c0 [ 55.111296][ T4554] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 55.117206][ T4554] [ 55.119527][ T4554] value changed: 0x0000000000000b27 -> 0x0000000000000b28 [ 55.126632][ T4554] [ 55.128962][ T4554] Reported by Kernel Concurrency Sanitizer on: [ 55.135118][ T4554] CPU: 0 UID: 0 PID: 4554 Comm: syz.1.357 Not tainted 6.14.0-rc3-syzkaller-00295-g27102b38b8ca #0 [ 55.145706][ T4554] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 55.155764][ T4554] ================================================================== [ 55.190050][ T28] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 55.192768][ T1774] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 32 with max blocks 2048 with error 28 [ 55.211697][ T1774] EXT4-fs (loop4): This should not happen!! Data will be lost [ 55.211697][ T1774] [ 55.244922][ T4560] xt_hashlimit: max too large, truncated to 1048576