last executing test programs: 6m4.384250285s ago: executing program 4 (id=838): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="4000000010001fff000000000000000000060000", @ANYRES32=0x0, @ANYBLOB="81ffffff00000000180012800e0001007769726567756172640000000400028008000a00", @ANYRES32], 0x40}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x10) r3 = socket$netlink(0x10, 0x3, 0x10) socket(0x1a, 0x5, 0x0) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={r5, 0xe0, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd58, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x1a, 0x0, 0x0, 0x0, 0xf7, 0xfffffffc, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r5, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000c80)=ANY=[@ANYBLOB="d8000000", @ANYRES16, @ANYBLOB="010028bd7000fcdbdf250100000008000100", @ANYRES32=r4, @ANYBLOB="bc00028038000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000000000040000100240001006c6252706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000600000008000600", @ANYRES32=r6, @ANYBLOB="400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000007000004000700000008000600c3c0b6e52b9f3046a1f9a1327ea9379796d5b4ddcd3e64086325ebae4f80e5e0d81f0b4f0b1dc48b151fd0deeeb8863d146a8b5e60d8d25c928de7d39a9af8", @ANYRES32=r6, @ANYBLOB], 0xd8}, 0x1, 0x1000000, 0x0, 0x24004000}, 0x24040840) pwritev2(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000340)="bf", 0x1}], 0x1, 0x5412, 0x0, 0x0) 6m4.230561457s ago: executing program 4 (id=841): r0 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) r1 = getpgid(0xffffffffffffffff) timer_create(0x0, &(0x7f0000000000)={0x0, 0x9, 0x0, @tid=r1}, &(0x7f0000000040)) r2 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000006c0)={'syztnl0\x00', &(0x7f0000000640)={'syztnl0\x00', 0x0, 0x4, 0x7, 0x6, 0x8, 0x14, @mcast2, @private0, 0x40, 0x8, 0x22d2, 0x6}}) sendmsg$nl_route_sched(r2, &(0x7f0000000780)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)=@gettclass={0x24, 0x2a, 0x100, 0x70bd2a, 0xb6f8, {0x0, 0x0, 0x0, r3, {0xffff, 0x4}, {0xe}, {0x1, 0xc}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x200808c1}, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r6}, 0x10) r7 = socket$pppl2tp(0x18, 0x1, 0x1) r8 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r7, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r8, {0x2, 0x0, @multicast2}, 0x2}}, 0x2e) openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/timer\x00', 0x41, 0x0) r9 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r9, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}, 0x2, 0x2}}, 0x26) close_range(r8, 0xffffffffffffffff, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r4}, 0x8) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0x20, &(0x7f0000000380)={&(0x7f0000000500)=""/157, 0x9d, 0x0, &(0x7f00000001c0)=""/80, 0x50}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x0, 0xc, &(0x7f0000000880)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095", @ANYRES16=r1, @ANYRES64=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$inet6(0xa, 0x4, 0x89) r11 = syz_open_procfs(0x0, &(0x7f0000002380)='net/ip_mr_cache\x00') pread64(r11, &(0x7f0000000100)=""/253, 0xfd, 0xadc) sendmsg$inet6(r11, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000001c40)=[{&(0x7f0000000a00)="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", 0x1000}, {&(0x7f0000001a00)="d7b90208db8c7b5847a9ae2c1bce97f452194d7e7012a7082c1e4a72ab001b85c85f5b5606e90388e629e630cfa182df64a530c6325f87d53196a4c0e2d840c104341891ea152468d120edfd13ed378875b493763f3804eea005f077b48206639f4e82e392c53656897e03ec7ade7feea096462a5df85329f1c5a81c1def3b7ecd4d6b08c64e63544712823084a7ae8f58d1d9db0151f30a027bc902ecb8bd2ff5f3dd500fbc4f6b930b617d455c278ae705d78e3a6c2a89ddf6866a3b4a961c5bec86", 0xc3}, {&(0x7f0000001b00)="476379889b4e26be9a3106b1c96bce38f8b5e7c9137cc14a2b63e58b1d2b599e46e5b04f8db4d7e825138e0207cc79443651ae0df58793180e71e50da52f5d148d10048ad9b1f8c6479086cfb5ef9e008f4c2a421ecde034dde9d0f3024e83f0e69bff5485cd220963c6c9a837f9e4e5b0f0151a088015c9bd48fcd489397efcdde72792d8d79b35ee8723cba7740d823f8c57e52c423002646f445e7d35", 0x9e}, {&(0x7f0000000440)="c6188c61abec194a6aea0f9abe4f776ff9c736062bc6c262d82e3f666875b0661e905dc8cdf09964fd7cad4bdf8ab21d5eb3ba04291e72a3318f66fb02692fd25875b927c8a7a1045362c8f8019d3884334a96668b8877ebe99fd1b5a1dac49147aac8fb1968d0255eb3be68ee643401b89af517d5019eb66cbc2e2e", 0x7c}, {&(0x7f0000000900)="6616369a92150aa9d2fdd8828025597e7ad107d160d39cad0afaac1bdc663bd25e372cfd4b4d7b0d3e0bc2c987f792a160936f4639835e9697510a318b4fe4a6722d59ffef7244dbf301e7581c86b73343447bdfbc81ff184173b70355bf41b83841", 0x62}, {&(0x7f0000001bc0)="f10f6bc607d344117aecdd6b80df995453005cf9c64125d4820188da863606114810c7f7b78891ddee47a0aaa9e462ff0dac089e12c94665a0a752005623ad66d5cc49a2c67e5e0698c8fc8697b5351eaaa6305a6831953e36f4af1aee7fa0b8171755fb19e623dd3a3a6d", 0x6b}], 0x6, &(0x7f0000001cc0)=[@rthdr={{0x88, 0x29, 0x39, {0xec4976db820bf90c, 0xe, 0x0, 0x98, 0x0, [@mcast1, @dev={0xfe, 0x80, '\x00', 0x38}, @private2, @mcast1, @empty, @ipv4={'\x00', '\xff\xff', @broadcast}, @dev={0xfe, 0x80, '\x00', 0x23}]}}}, @dstopts_2292={{0x70, 0x29, 0x4, {0x1, 0xa, '\x00', [@generic={0x1}, @calipso={0x7, 0x50, {0x1, 0x12, 0x9, 0x7, [0x5, 0xfffffffffffffff1, 0x30efb1ad, 0x40, 0x0, 0x40, 0xffffffffffffff80, 0xe, 0x2]}}]}}}], 0xf8}, 0x4000000) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r12, 0x0, 0xffffffffffffffff}, 0x18) kexec_load(0x0, 0x1, &(0x7f0000000140)=[{0x0, 0x3e00, 0x116094000, 0x41000000}], 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000180)=0xe) ioctl$TIOCSSOFTCAR(r4, 0x80047437, &(0x7f0000000280)=0x7) write$selinux_access(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="73797374656d5f683a6f626a6563745f723a7570647077645f657865635f742073797374656d5f753a73797374656d5f723afaffffffffffffff3a73302030"], 0x56) 6m4.103765729s ago: executing program 4 (id=842): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r1}, 0x10) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000600)=@raw={'raw\x00', 0x8, 0x3, 0x4c0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f0, 0xffffffff, 0xffffffff, 0x3f0, 0xffffffff, 0xb, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x1a}, @dev={0xfe, 0x80, '\x00', 0x28}, [0xffffff00, 0xffffff00, 0x0, 0xff000000], [0xff, 0x0, 0x9f19fd7a5e924fa7, 0xff], 'macvtap0\x00', 'bridge0\x00', {0xff}, {0xff}, 0x2b, 0x7, 0x5, 0x10}, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x81, 0x0, 0x24, 0x0, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x1c8, 0x230, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}, @common=@inet=@tcpmss={{0x28}, {0x39d3, 0x9, 0x1}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c00028008000200ac1414bb080004"], 0x44}, 0x1, 0x2}, 0x0) mknod$loop(&(0x7f0000000400)='./file0\x00', 0x100000000000600d, 0x1) r3 = creat(&(0x7f0000000280)='./file0\x00', 0x0) r4 = dup2(r3, r3) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000000)={'\x00', 0x8, 0x200000a, 0x1, 0x8}) set_mempolicy(0x8000, &(0x7f0000000240)=0xa01, 0x5) ioctl$BLKTRACESETUP(r4, 0x1276, 0x0) 6m4.01513954s ago: executing program 4 (id=843): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) poll(&(0x7f0000b2c000)=[{r1}], 0x2c, 0xffffffffffbffff8) recvmmsg(r1, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0}, 0x400}], 0x1, 0x40000000, 0x0) r3 = dup2(r0, r1) sendmsg$NL80211_CMD_GET_STATION(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x8080) r4 = socket$inet_smc(0x2b, 0x1, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000c80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) r6 = socket(0x10, 0x3, 0x0) connect$netlink(r6, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) sendmsg$nl_route_sched(r6, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000001540)=@newtaction={0x18, 0x30, 0x829, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) r7 = syz_io_uring_setup(0x88f, &(0x7f00000005c0)={0x0, 0xaee3, 0x88, 0x1, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r10, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x7fffffff, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r11, 0x0, 0x7}, 0x18) getsockname$packet(r6, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000002c0)=0x14) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x0, 0x9, 0x1d, 0x5, 0xb1500060b39ceb63, r2, 0x6, '\x00', r12, 0xffffffffffffffff, 0x5, 0x10000, 0x4, 0x0, @value=r3, @void, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x3, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) listen(r10, 0x5) syz_emit_ethernet(0x4a, &(0x7f0000000540)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd6002000000140600fe8000000000000000000000000000bbfe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="500200009078fffc0900000044834f47eb92ace3e1246f78d921303899f6"], 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000340)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10}}}}}}}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x80000}) io_uring_enter(r7, 0x47f6, 0x0, 0x0, 0x0, 0x0) listen(r4, 0xfffffff7) r13 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x37, 0x7fffffff}]}) close_range(r13, 0xffffffffffffffff, 0x0) 6m3.717750444s ago: executing program 4 (id=847): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r0}, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYRES8=r0], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) socket$netlink(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$GIO_UNIMAP(r2, 0x4b66, &(0x7f0000000200)={0x0, 0x0}) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000009000000440003800800010002000000140002007663616e300000000000000000000000080003000000000014000600ff"], 0x58}}, 0x0) r5 = syz_clone(0x0, 0x0, 0x9, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace$getregset(0x4204, r5, 0x201, &(0x7f0000000440)={0x0}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r6, 0x40086602, &(0x7f00000002c0)=0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r1, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0], 0x0, 0xa, &(0x7f0000000540)=[{}, {}], 0x10, 0x10, &(0x7f0000000580), &(0x7f0000000600), 0x8, 0xe1, 0x8, 0x8, &(0x7f0000000640)}}, 0x10) getsockopt$MRT(r6, 0x0, 0xd0, &(0x7f0000000980), &(0x7f0000000a00)=0x4) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$cgroup_int(r7, &(0x7f0000000000), 0xffffff6a) fallocate(r7, 0x0, 0x0, 0x2c2) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r7, 0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f00000007c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1b, 0x2000000000000019, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x120000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r9}, 0x10) readahead(0xffffffffffffffff, 0x0, 0xfffffffffffffffd) 6m3.186625333s ago: executing program 4 (id=853): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r1}, 0x10) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000600)=@raw={'raw\x00', 0x8, 0x3, 0x4c0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f0, 0xffffffff, 0xffffffff, 0x3f0, 0xffffffff, 0xb, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x1a}, @dev={0xfe, 0x80, '\x00', 0x28}, [0xffffff00, 0xffffff00, 0x0, 0xff000000], [0xff, 0x0, 0x9f19fd7a5e924fa7, 0xff], 'macvtap0\x00', 'bridge0\x00', {0xff}, {0xff}, 0x2b, 0x7, 0x5, 0x10}, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x81, 0x0, 0x24, 0x0, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x1c8, 0x230, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}, @common=@inet=@tcpmss={{0x28}, {0x39d3, 0x9, 0x1}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c00028008000200ac1414bb080004"], 0x44}, 0x1, 0x2}, 0x0) mknod$loop(&(0x7f0000000400)='./file0\x00', 0x100000000000600d, 0x1) r3 = creat(&(0x7f0000000280)='./file0\x00', 0x0) r4 = dup2(r3, r3) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000000)={'\x00', 0x8, 0x200000a, 0x1, 0x8}) set_mempolicy(0x8000, &(0x7f0000000240)=0xa01, 0x5) ioctl$BLKTRACESETUP(r4, 0x1276, 0x0) 5m48.028177532s ago: executing program 32 (id=853): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r1}, 0x10) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000600)=@raw={'raw\x00', 0x8, 0x3, 0x4c0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f0, 0xffffffff, 0xffffffff, 0x3f0, 0xffffffff, 0xb, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x1a}, @dev={0xfe, 0x80, '\x00', 0x28}, [0xffffff00, 0xffffff00, 0x0, 0xff000000], [0xff, 0x0, 0x9f19fd7a5e924fa7, 0xff], 'macvtap0\x00', 'bridge0\x00', {0xff}, {0xff}, 0x2b, 0x7, 0x5, 0x10}, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x81, 0x0, 0x24, 0x0, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x1c8, 0x230, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}, @common=@inet=@tcpmss={{0x28}, {0x39d3, 0x9, 0x1}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c00028008000200ac1414bb080004"], 0x44}, 0x1, 0x2}, 0x0) mknod$loop(&(0x7f0000000400)='./file0\x00', 0x100000000000600d, 0x1) r3 = creat(&(0x7f0000000280)='./file0\x00', 0x0) r4 = dup2(r3, r3) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000000)={'\x00', 0x8, 0x200000a, 0x1, 0x8}) set_mempolicy(0x8000, &(0x7f0000000240)=0xa01, 0x5) ioctl$BLKTRACESETUP(r4, 0x1276, 0x0) 2.667126721s ago: executing program 5 (id=5223): socket(0x10, 0x803, 0x0) kexec_load(0x0, 0x0, &(0x7f0000000140), 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETA(r0, 0x5406, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) r2 = socket(0x1e, 0x4, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='memory.current\x00', 0x0, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r2, &(0x7f0000000080)=[{{0x0, 0xffffffffffffff1f, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) recvmmsg$unix(r1, &(0x7f0000005100)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000100)=""/94, 0x5e}], 0x1}}], 0x1, 0x0, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000000)=0x10003, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = socket(0x1e, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_NODE_ADDR(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x0, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x40800}, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b7030000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 2.578705192s ago: executing program 5 (id=5224): getpid() sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0x415}, 0x18) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x3}, &(0x7f0000001fee)='R\x10rust\xe3cusg\x91\xdedn\xe5+\xf0', 0xffffffffffffffff) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x66, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x9) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000001280)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) ftruncate(r0, 0x2000009) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1, 0x1b5) pwritev2(r1, &(0x7f00000001c0)=[{&(0x7f0000000400)="ba", 0xfdef}], 0x1, 0xe7b, 0x0, 0x1) 1.904006492s ago: executing program 0 (id=5232): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) add_key$user(&(0x7f0000000080), &(0x7f0000000200)={'syz', 0x3}, &(0x7f0000000300)="0d7efdb5a87954fe34f3399965075476b8271ca7100b847391ec01b7b6bccef2574401ec0179ac13dd04c2f79fc397ad89d5406561cacdb2529b1475446ff12a47e510a96cc4f965143fc68c328c4104c96d14a0ee65692f8f18b2a1d6fd696b55ea95398ca082528a78cd6dd1d751b3", 0x70, 0xfffffffffffffff9) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000027b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000002c0)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000a50000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) setpgid(0x0, 0x0) 1.902571812s ago: executing program 2 (id=5233): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000010000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x64, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) syz_clone(0xc510c080, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0) setresuid(0xee01, 0x0, 0xffffffffffffffff) setresuid(0x0, 0x0, 0x0) 1.826609113s ago: executing program 0 (id=5234): socket(0x10, 0x803, 0x0) kexec_load(0x0, 0x0, &(0x7f0000000140), 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETA(r0, 0x5406, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) r2 = socket(0x1e, 0x4, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='memory.current\x00', 0x0, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r2, &(0x7f0000000080)=[{{0x0, 0xffffffffffffff1f, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) recvmmsg$unix(r1, &(0x7f0000005100)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000100)=""/94, 0x5e}], 0x1}}], 0x1, 0x0, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000000)=0x10003, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = socket(0x1e, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_NODE_ADDR(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x0, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x40800}, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b7030000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1.714095825s ago: executing program 0 (id=5236): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000850000002300000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r0}, 0x10) mount$9p_fd(0x0, 0x0, &(0x7f0000000080), 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, @perf_bp={0x0, 0x8}, 0x2402, 0x0, 0x800000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x0, &(0x7f00000021c0), 0x1, 0x790, &(0x7f0000000d80)="$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") openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00005fd000/0x4000)=nil, 0x4000, 0x0, 0x5, 0x20000) mlock(&(0x7f0000441000/0x4000)=nil, 0x4000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) r2 = open(&(0x7f0000000080)='./file1\x00', 0x64842, 0x86) pwritev2(r2, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x140000}], 0x1, 0x7800, 0x0, 0x3) creat(&(0x7f0000000140)='./file1\x00', 0x6) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x7, &(0x7f0000000180)=ANY=[@ANYRESOCT, @ANYRES32, @ANYRESDEC=r1], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r3}, 0x10) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f00002ed000/0x2000)=nil, 0x2000, 0x0, 0x10, r2, 0x0) ioctl$PTP_EXTTS_REQUEST2(0xffffffffffffffff, 0x43403d05, 0x0) 1.641788616s ago: executing program 5 (id=5239): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="020101020880258d6483bc306a"], 0x48) creat(&(0x7f00000001c0)='./file1\x00', 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x18) acct(&(0x7f0000000080)='./file1\x00') acct(0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x4}, 0x18) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000c80)=@raw={'raw\x00', 0x3c1, 0x3, 0x4c0, 0x2e0, 0x940c, 0x3002, 0x2e0, 0x2c0, 0x3f0, 0x3d8, 0x3d8, 0x3f0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2e0, 0x4001, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x4001, 0x1, 0x3, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x2, 0x0, 'syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'virt_wifi0\x00'}}}, {{@uncond, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x1, 0xbe, {0x565159d7}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520) setreuid(0x0, 0xee01) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r3 = openat$sndseq(0xffffff9c, &(0x7f0000000280), 0x16c0c1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000640)={'batadv_slave_1\x00'}) bind$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x4}, 0x14) socket$inet6(0xa, 0x2, 0x7f) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'nr0\x00', 0x0}) syz_read_part_table(0x632, &(0x7f00000011c0)="$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") socket$inet_tcp(0x2, 0x1, 0x0) bind$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, r4}, 0x14) 1.548456908s ago: executing program 2 (id=5241): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ff7fffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x590, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x4c58, 0x0, 0x0, 0x1, 0x8, 0x2, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) epoll_create1(0x0) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000000308010200000007"], 0x1c}, 0x1, 0x0, 0x0, 0x50}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) r6 = openat$cgroup_ro(r2, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000600), r1) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r8, @ANYBLOB="ff830500000700ffffff", @ANYRES8=r3], 0x4}}, 0x0) sendfile(r7, r6, 0x0, 0x100000005) 1.451917639s ago: executing program 2 (id=5242): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000850000002300000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r0}, 0x10) mount$9p_fd(0x0, 0x0, &(0x7f0000000080), 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="000000000000000000588f000000100000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, @perf_bp={0x0, 0x8}, 0x2402, 0x0, 0x800000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x140000}], 0x1, 0x7800, 0x0, 0x3) creat(&(0x7f0000000140)='./file1\x00', 0x6) 1.420275759s ago: executing program 2 (id=5243): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) r1 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000400)) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0x415}, 0x18) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) openat$sysfs(0xffffffffffffff9c, 0x0, 0x141b82, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000001280)="$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") r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) ftruncate(r6, 0x2000009) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1, 0x1b5) pwritev2(r7, &(0x7f00000001c0)=[{&(0x7f0000000400)="ba", 0xfdef}], 0x1, 0xe7b, 0x0, 0x1) 1.260709612s ago: executing program 0 (id=5244): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000000000000000000000080654d970008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x22, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000002c0)='mmap_lock_acquire_returned\x00', r2}, 0x10) r3 = epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000300)={0x10000000}) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0) execve(&(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000980)={[&(0x7f00000005c0)='syz1\x00']}) socket$kcm(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008f00850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5, 0x0, 0x9}, 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000200000c12000300686173683a6e65742c706f7274"], 0x4c}}, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32, @ANYBLOB="0000000000000000b7050000080000a8c5000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b300000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3d, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$inet_sctp_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f00000002c0)={0x40, 0x4, 0x80, 0x9}, 0x8) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x8050) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000780)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x10, 0x6}, {0x1, 0xfff1}, {0xfff2, 0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) 1.222210852s ago: executing program 5 (id=5245): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r1, &(0x7f00000030c0), 0x0, 0x9200000000000000) r3 = dup3(r2, r1, 0x0) recvmmsg(r3, &(0x7f0000008840)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000040)=""/8, 0x8}], 0x1}, 0xffffffff}], 0x1, 0x40000001, 0x0) 1.188064223s ago: executing program 1 (id=5246): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="020101020880258d6483bc306a"], 0x48) creat(&(0x7f00000001c0)='./file1\x00', 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000a00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) acct(&(0x7f0000000080)='./file1\x00') acct(0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={r0}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r2, 0x0, 0x4}, 0x18) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000c80)=@raw={'raw\x00', 0x3c1, 0x3, 0x4c0, 0x2e0, 0x940c, 0x3002, 0x2e0, 0x2c0, 0x3f0, 0x3d8, 0x3d8, 0x3f0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2e0, 0x4001, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x4001, 0x1, 0x3, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x2, 0x0, 'syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'virt_wifi0\x00'}}}, {{@uncond, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x1, 0xbe, {0x565159d7}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520) setreuid(0x0, 0xee01) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r4 = openat$sndseq(0xffffff9c, &(0x7f0000000280), 0x16c0c1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000640)={'batadv_slave_1\x00'}) bind$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x4}, 0x14) socket$inet6(0xa, 0x2, 0x7f) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'nr0\x00', 0x0}) syz_read_part_table(0x632, &(0x7f00000011c0)="$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") socket$inet_tcp(0x2, 0x1, 0x0) bind$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, r5}, 0x14) 1.076933124s ago: executing program 1 (id=5247): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, 0x0, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x0, &(0x7f00000021c0), 0x1, 0x790, &(0x7f0000000d80)="$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") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000080)='./file1\x00', 0x64842, 0x86) pwritev2(r0, &(0x7f0000000240)=[{0x0}], 0x1, 0x7800, 0x0, 0x3) 997.239816ms ago: executing program 0 (id=5248): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000410"], 0x50) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x68, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x6, 0x6}, 0x2402, 0x20000000, 0x800000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xfffeffffffffeffd, 0xffffffffffffffff, 0x8) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000000000000000"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r5, 0x0, 0x80000000}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f00000001c0)=@filter={'filter\x00', 0x42, 0x4, 0x278, 0xffffffff, 0xf8, 0xf8, 0x1b8, 0xffffffff, 0xffffffff, 0x2d8, 0x2d8, 0x2d8, 0xffffffff, 0x4, 0x0, {[{{@ip={@empty, @loopback, 0x0, 0x0, 'veth0_to_batadv\x00', 'wlan0\x00', {}, {}, 0x11}, 0x0, 0x70, 0x98, 0x0, {0x100000000000000}}, @REJECT={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}, {{@ip={@multicast2, @private=0xa010102, 0x0, 0x0, 'veth1_virt_wifi\x00', '\x00', {}, {}, 0x0, 0x1}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2d8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r9, &(0x7f0000001dc0)=[{{&(0x7f0000001080)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000001200)=[{&(0x7f0000001100)="79f7ce5603bd6f822c5a79829dd71097cc7eb018e07ebad0bbe2b07e50db9fee10e9aa47b9657ed88bcd46f0ecad4380185ddbc669a0bdd5b40ead3e865b3bb471923314710d327226567d749914bfcedbfd7396f3baf2079a21acc0eb6e6dbb1384bd6c0ed988ffa15f685675b30de504bb04f8a1797c0404b5286bd18c14b73a178bf2a12a572cfd7a7a778c3fe5baacf394fdd252024ba9a901cda932822167202e68da32d90af56000e6b42e75740fad65", 0xb3}], 0x1, 0x0, 0x0, 0x40000}}, {{0x0, 0x0, &(0x7f0000001c40)=[{&(0x7f0000001780)="8e8535d547a1238e2d3fcff7ad0e8246f33010e9278e45ffb22367bc80e86bae7214df97436bd9adfe58e7fa756a31f3aeca1dc96d333cdb945231c1479ab2201cbe94a65c55cb8b95063f5fea96e864ea77c320d5ff626343c4758471b5f8ba9d116057bb3e9988aca5b0f1fc3d0727fab57aec0c54c888eb7fa9a2c144257ad72e88180382baab546d1d853a437045e97ab63f78fe0ed0c528", 0x9a}, {&(0x7f0000001840)="999548bd66eea8ba1291b8cf57b04c7731227051c9e724e6d788174607a803f73f67b5efbd71d7206989b95f1f926ccd81abe456faef70f4b9a816762a3f", 0x3e}, {&(0x7f00000018c0)="5ce0502d6e23a197f0f9", 0xa}, {&(0x7f0000001380)="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", 0x12d}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001bc0)}], 0x8, &(0x7f00000015c0)=ANY=[@ANYBLOB, @ANYRES8=r3, @ANYRES32, @ANYBLOB="485ea44d017c1c8f293c95b64420abd9d2e43987dbfd9ae699d2bcc70fa20d8b6a04c8e7c4ba3b7af13f2547baff", @ANYRES8=r4, @ANYRES32=r2, @ANYRES32=r2, @ANYBLOB="000000001c00007830d8b61b47dd00a68838663b7e36bcc37f0d7b381838d15d540bf9307ded625c6e4b1800"/56, @ANYBLOB="0ae081a9", @ANYRES32=0x0, @ANYRESHEX=r6, @ANYBLOB="0000000000000000000080000000000000000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES8=r4, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRESOCT=r9, @ANYRES8=r6], 0x90, 0x40881}}], 0x2, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) r10 = syz_open_procfs(0x0, &(0x7f0000001300)='net/kcm\x00') read$char_usb(r10, &(0x7f0000000040)=""/4109, 0x100d) preadv(r10, &(0x7f0000002240)=[{&(0x7f00000032c0)=""/4116, 0x1014}], 0x1, 0x29cf, 0x6) lchown(&(0x7f00000006c0)='./file0\x00', 0x0, 0xee01) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES16=r0, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='kmem_cache_free\x00', r11}, 0x18) r12 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$sock_int(r12, 0x1, 0x10, &(0x7f0000000080)=0x9, 0x4) 962.530706ms ago: executing program 1 (id=5249): socket(0x10, 0x803, 0x0) kexec_load(0x0, 0x0, &(0x7f0000000140), 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETA(r0, 0x5406, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) r2 = socket(0x1e, 0x4, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='memory.current\x00', 0x0, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r2, &(0x7f0000000080)=[{{0x0, 0xffffffffffffff1f, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) recvmmsg$unix(r1, &(0x7f0000005100)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000100)=""/94, 0x5e}], 0x1}}], 0x1, 0x0, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000000)=0x10003, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = socket(0x1e, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_NODE_ADDR(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x0, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x40800}, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b7030000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 796.440759ms ago: executing program 3 (id=5251): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000540)=[{0x20, 0xfc, 0xfc, 0xfffff010}, {0x6, 0x0, 0x0, 0x1000000}]}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000180), 0x10, &(0x7f0000000380)=[{&(0x7f0000000480)="c3e972bd85a6d84136d6dd55048d3593a74f338ce6772ab9a6f64041c2f6fbbecdc08ebcd3192b6a53662dae7c8e9c665e80a5d0925f728dcac30c29793992e588952653d414cb8ccdabc38767fee819ec5af0c5ee936880fe8549b4ed347779cab4ffd4e0b62c53a1c01db28f2b3f91c34211c9353bc1dece61511917c2245fd66cb8dffeacb4d46d627c97b498bf1ff6b313bfbc9765457c831771d5eec7997ec242e4505f01c1bb3e069b2e630f42a2be86598a61", 0x64}, {&(0x7f0000000300)='V', 0x1}, {&(0x7f0000001600)="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", 0x1000}, {&(0x7f0000000340)="b768eb20304f2fdc5a9694a4867840d93170ca1a86406f", 0xfffffec0}], 0x4, 0x0, 0x0, 0x8010}, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e24, @multicast2}, 0x10) sendmmsg(r1, &(0x7f0000003a80)=[{{&(0x7f00000000c0)=@in={0x2, 0x4e24, @loopback}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000240)='7', 0x1}], 0x1}}], 0x1, 0x2c000011) 775.053019ms ago: executing program 1 (id=5252): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000000200009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) socket$packet(0x11, 0x2, 0x300) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'sit0\x00', 0x0}) r4 = socket(0x10, 0x3, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r6}, 0x10) acct(0x0) setsockopt$netlink_NETLINK_PKTINFO(r4, 0x10e, 0x3, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r8, 0x0, 0x80000000000}, 0x18) sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0x6}, {0xffff, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10, 0x1}}]}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x74, 0x9, 0x7, 0x7, 0x2, 0xf1, 0xc}}, {0x4}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x48801}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f0000000680)={'ip_vti0\x00', &(0x7f00000003c0)={'syztnl1\x00', 0x0, 0x711, 0x20, 0xffffffff, 0x5, {{0xc, 0x4, 0x2, 0x3f, 0x30, 0x167, 0x0, 0x6, 0x4, 0x0, @multicast2, @private=0xa010100, {[@timestamp_prespec={0x44, 0x1c, 0x5, 0x3, 0xc, [{@remote, 0x6}, {@rand_addr=0x64010102, 0x4}, {@local, 0x40}]}]}}}}}) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000002c0)={'veth1_to_team\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r1, r11, 0x25, 0x0, @val=@netfilter}, 0x40) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r11, {}, {0xb}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x40041}, 0x0) 748.286439ms ago: executing program 3 (id=5253): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, 0x0, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="0004000000000000070800000002007fe32fc910fe80000000000000000000000000003507020000000300040200eeff"], 0x30) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioperm(0x0, 0x6, 0x2da3b9f3) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7ffffffb}]}) linkat(r1, 0x0, 0xffffffffffffffff, 0x0, 0x1000) socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffea4, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) pread64(0xffffffffffffffff, &(0x7f0000000a80)=""/255, 0xff, 0x7fffffffffffffff) 662.62299ms ago: executing program 3 (id=5254): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) socket$igmp(0x2, 0x3, 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_clone(0x102311, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x2) readv(r1, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0x940}], 0x1) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r2}, 0x18) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, 0x0) iopl(0x5) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'veth0_to_team\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xc}, {0xfff3}}}, 0x24}}, 0x0) 661.939201ms ago: executing program 1 (id=5255): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000850000002300000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r0}, 0x10) mount$9p_fd(0x0, 0x0, &(0x7f0000000080), 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, @perf_bp={0x0, 0x8}, 0x2402, 0x0, 0x800000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x0, &(0x7f00000021c0), 0x1, 0x790, &(0x7f0000000d80)="$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") openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00005fd000/0x4000)=nil, 0x4000, 0x0, 0x5, 0x20000) mlock(&(0x7f0000441000/0x4000)=nil, 0x4000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) r2 = open(&(0x7f0000000080)='./file1\x00', 0x64842, 0x86) pwritev2(r2, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x140000}], 0x1, 0x7800, 0x0, 0x3) creat(&(0x7f0000000140)='./file1\x00', 0x6) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x7, &(0x7f0000000180)=ANY=[@ANYRESOCT, @ANYRES32, @ANYRESDEC=r1], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r3}, 0x10) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f00002ed000/0x2000)=nil, 0x2000, 0x0, 0x10, r2, 0x0) ioctl$PTP_EXTTS_REQUEST2(0xffffffffffffffff, 0x43403d05, 0x0) 470.587894ms ago: executing program 2 (id=5256): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="020101020880258d6483bc306a"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x18) acct(&(0x7f0000000080)='./file1\x00') acct(0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x4}, 0x18) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000c80)=@raw={'raw\x00', 0x3c1, 0x3, 0x4c0, 0x2e0, 0x940c, 0x3002, 0x2e0, 0x2c0, 0x3f0, 0x3d8, 0x3d8, 0x3f0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2e0, 0x4001, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x4001, 0x1, 0x3, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x2, 0x0, 'syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'virt_wifi0\x00'}}}, {{@uncond, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x1, 0xbe, {0x565159d7}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520) setreuid(0x0, 0xee01) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r3 = openat$sndseq(0xffffff9c, &(0x7f0000000280), 0x16c0c1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000640)={'batadv_slave_1\x00'}) bind$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x4}, 0x14) socket$inet6(0xa, 0x2, 0x7f) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'nr0\x00', 0x0}) syz_read_part_table(0x632, &(0x7f00000011c0)="$eJzs3DGIHFUYB/D/XHZn9y6QRLFKc9FaDKb24oJclkiqSLo0UUGOiMV1EcPtSRqvuMLC2iYI18TY6JHCQhPESqyOFGrEVpCgEoNkZHZmd28LQUlSBH6/Yue9733vvfl23pY74Ym2kG5SjJu9dJIcf70zn7GZSUL6dX6SqtuOndtZPXW6qqqqqHPOp5tnvzp0PUknRdHOaFVVtTHtnMzVj5dufFCMuju36+1ubh2ow4vNbRxJnj9Y9sfLzFbopKrmbqz3qL8L/r9rK7eK4krZ9p77/cEg+fS31bO7Z7Y+vP5qG95Ivknq5/9+fZQm2e/m4rELzWnrN8MzfzSXchaZPe7FzB/R0ZX14fZgZW1vEjg63PnirZf+OnYj1Yl8W3YWJgPFbL0yGT18+XX9h+vTv31pZW1veHlxOvDMR09/neW2c7eqcqTe8qmMfzrLj2BnAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeh2uDW0lGw+1kbW/Ya6OrZ3fPbJVJXnmz34aO7591oL1ezIU79XUj68nPn6e7P6moP8aRhXQHTeyn5eqFcaMz2b+32DQuraztDe8vJXdefHB02MzKzS9PzLbbmK68m5fb1r2qMe5s/luR7RbV4Sbvu/v76l8pOsn6cHu8/+Vfik5T8GfFaHqbC0ne7uWNppjqXtnO/XtWBgAAAAAAAAAAAAAAAAAAADyU1VOn37nbts/3k/z63kLdrnrNv9yLpWIu/4desngyudpPMRokuf3an+X3h7Z+bF8dMEovoyQHP9k8104p5xaYviKgSFU+zsr4L/4JAAD//wHyfFE=") socket$inet_tcp(0x2, 0x1, 0x0) bind$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, r4}, 0x14) 462.018043ms ago: executing program 3 (id=5257): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000850000002300000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r0}, 0x10) mount$9p_fd(0x0, 0x0, &(0x7f0000000080), 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="000000000000000000588f000000100000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r1 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, @perf_bp={0x0, 0x8}, 0x2402, 0x0, 0x800000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x0, &(0x7f00000021c0), 0x1, 0x790, &(0x7f0000000d80)="$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") openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) remap_file_pages(&(0x7f00005fd000/0x4000)=nil, 0x4000, 0x0, 0x5, 0x20000) mlock(&(0x7f0000441000/0x4000)=nil, 0x4000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) r2 = open(&(0x7f0000000080)='./file1\x00', 0x64842, 0x86) pwritev2(r2, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x140000}], 0x1, 0x7800, 0x0, 0x3) creat(&(0x7f0000000140)='./file1\x00', 0x6) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x7, &(0x7f0000000180)=ANY=[@ANYRESOCT, @ANYRES32, @ANYRESDEC=r1], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r3}, 0x10) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f00002ed000/0x2000)=nil, 0x2000, 0x0, 0x10, r2, 0x0) ioctl$PTP_EXTTS_REQUEST2(0xffffffffffffffff, 0x43403d05, 0x0) 377.182435ms ago: executing program 1 (id=5258): pipe2$9p(&(0x7f0000000240), 0x0) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x2101, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f00000000c0)={0x4e00, 0x0, 0x730, 0xbdff, 0x10, "fdffffffffffffff"}) write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x3, 0x0, 0x0, "0062ba7d82000000000000000000f7fffeff00"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x17) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x6, &(0x7f0000000040)=[{0xe, 0x2, 0xe7, 0xb}, {0x6, 0x6, 0x5, 0x67}, {0x9, 0x4, 0x8, 0x7}, {0x2, 0x4, 0x4, 0x401}, {0x8, 0x6, 0x0, 0x5}, {0x5, 0x3, 0x81, 0xc}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00'}, 0x10) socket(0x40000000015, 0x5, 0x0) 335.746376ms ago: executing program 5 (id=5259): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000000000000000000000080654d970008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x22, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000002c0)='mmap_lock_acquire_returned\x00', r2}, 0x10) r3 = epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000300)={0x10000000}) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0) execve(&(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000980)={[&(0x7f00000005c0)='syz1\x00']}) bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008f00850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5, 0x0, 0x9}, 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000200000c12000300686173683a6e65742c706f7274"], 0x4c}}, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32, @ANYBLOB="0000000000000000b7050000080000a8c5000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b300000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3d, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$inet_sctp_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f00000002c0)={0x40, 0x4, 0x80, 0x9}, 0x8) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x8050) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000780)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x10, 0x6}, {0x1, 0xfff1}, {0xfff2, 0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) 335.028425ms ago: executing program 2 (id=5260): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=@gettaction={0x24, 0x32, 0x301, 0x70bd29, 0x25dfdbff, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x18}}]}]}, 0x24}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x45) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x844) futex(&(0x7f000000cffc)=0x1, 0x6, 0x0, 0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000054850000000400000095"], &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000940)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad1f50ad32d3fd25dfd73a015e0ca6a0f68a7d007f15451dfb265a0e3ccae669e173a64bc1cfd5587d452d64e7cc957d77578f4c25235138d5521f9453559c35da860e8efbc64e57cbb7aee976f2b54421eed73d5661ca3dbe74bd09de8793dbcceef76b2e5feecf9c66c54c3b3ffe1b4ce25d7c983c044c06cd0a48dfe3e26e7a23129d6606fd28a69989d552af6d9a9df2c3af36e0360050011bbecc2f4a3799af2551ce935b0f327cb3f011a7d06602e2fd5234712596b696418f163d1a13ed38ae82f87925bfacba83109753f541cd027edd68149ee99eebc6f7d6dd4aed4af7588c8e1b44ccb19e810879b70a7000000e7ffffff00000000d7900a820b63278f4e9a217b98ef7042ad2a92895614cd50cbe43a1ed25268816b00000000000009d27d753a30a147b24a48435bd8a568669596e9e0867958e1dd7a0defb6670c06054002238260000000000040587c1ed797aa21a38e1e389f640a0b8b0000000000a835ad0f61ba73c31b05c00fba8a4aee676d7c45bb29671a68ee2e60da7b01a2e5785a238afa4aba70c07fcd95bf8b0d71b6f72d6a8d87fb08533d97ad96d3943c4cc8306dac433a5cdf334178b04963d67dd5a5707e618a1ef9057fec00f9e930219fa8d30e716de8cde9c60f0000000c3b64d10f0939b42b788daa7075fa542242b00f6bf9b64ad460e386b6f388351fbdacb3ad074574ee9d450f9dcfaef1be95ff3c449e6482e4403174618c20e887d6f320616d31d78a0e5421d5742cc52509fd90cf2df6d1404f6b8f810d7b94d421971b77a3270153a0d57cccfe27872f3e8e44480f93c33421986a7737842627301fb2fee8cabab074adaa2024ff57e609ba2f4d83b3bbf52309484532416f48f43b31395c6f45fee8f1682a4e8d5e3b9ae634ed24fb0e8b5fadaf5cb7eea62b7bb4264e72950c9dc791d771acc24c08cdb6ef24c813d082a86d9b879bdf5aefdfd905a2bd4ea36b0b54915a68fe149db154a8340017e1855511e9c0fe62d0cf55"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000003700)='cgroup.events\x00', 0x0, 0x0) ioctl$SIOCPNGETOBJECT(r3, 0x89e0, &(0x7f0000003740)=0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81000) renameat2(r4, &(0x7f0000000140)='./file1\x00', r4, &(0x7f0000000900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1) 245.801847ms ago: executing program 5 (id=5261): bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000002001e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$unix(0x1, 0x5, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r2, &(0x7f00000000c0)={0x1d, r3}, 0x10) sendmsg$can_bcm(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="0100000003ece1e40ad8871461ab0800", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r1, @ANYBLOB="3bf81bb9f9"], 0x20000600}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$can_bcm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[], 0x4640}, 0x2}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000d00)='sched_switch\x00', r0}, 0x10) socket$packet(0x11, 0x3, 0x300) socketpair$tipc(0x1e, 0x1, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0x74}}, 0x0) execve(0x0, 0x0, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x400000000000004) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f00000004c0)=0x1000000, 0x4) writev(r5, &(0x7f0000000000)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000000000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) 212.108977ms ago: executing program 3 (id=5262): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000000), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r3, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, 0x0, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x10}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) shutdown(r3, 0x1) 119.669979ms ago: executing program 3 (id=5263): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000080), 0x64, 0x50a, &(0x7f0000000200)="$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") sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000f00000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r3}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) syz_usbip_server_init(0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r2}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r6, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)={0x20, r5, 0x10ada85e65c25359, 0x70bd2d, 0x8000000, {{0x6b}, {@void, @val={0xc, 0x99, {0x401, 0x70}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x6000}, 0x4040804) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB='P\x00'], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r7 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r7, 0x7, 0x0, 0x0, 0x0) quotactl$Q_GETNEXTQUOTA(0xffffffff80000901, &(0x7f00000080c0)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) 0s ago: executing program 0 (id=5264): socket(0x10, 0x803, 0x0) kexec_load(0x0, 0x0, &(0x7f0000000140), 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETA(r0, 0x5406, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) r2 = socket(0x1e, 0x4, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='memory.current\x00', 0x0, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r2, &(0x7f0000000080)=[{{0x0, 0xffffffffffffff1f, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) recvmmsg$unix(r1, &(0x7f0000005100)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000100)=""/94, 0x5e}], 0x1}}], 0x1, 0x0, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000000)=0x10003, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = socket(0x1e, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_NODE_ADDR(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x0, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x40800}, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b7030000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) kernel console output (not intermixed with test programs): 4691][T18878] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 389.202263][T18878] vhci_hcd vhci_hcd.0: Device attached [ 389.249900][T18884] __nla_validate_parse: 16 callbacks suppressed [ 389.249974][T18884] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4616'. [ 389.272636][T16136] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 389.281888][T18878] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 389.294280][T18878] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 389.303537][T18882] vhci_hcd: connection closed [ 389.304005][ T12] vhci_hcd: stop threads [ 389.313060][ T12] vhci_hcd: release socket [ 389.317546][ T12] vhci_hcd: disconnect device [ 389.386673][T18889] bond0: (slave syz_tun): Releasing backup interface [ 389.395072][T18889] syz_tun: left allmulticast mode [ 389.412397][T18889] bond0: (slave bond_slave_0): Releasing backup interface [ 389.421302][T18889] bond_slave_0: left allmulticast mode [ 389.439012][T18889] bond0: (slave bond_slave_1): Releasing backup interface [ 389.451558][T18889] bond_slave_1: left allmulticast mode [ 389.481368][T18889] team0: Port device team_slave_1 removed [ 389.498076][T18889] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 389.505789][T18889] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 389.550293][T18891] serio: Serial port ptm0 [ 389.561314][T18889] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 389.569022][T18889] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 389.647301][T18896] tc_dump_action: action bad kind [ 389.719626][T18898] loop5: detected capacity change from 0 to 128 [ 389.802383][T18902] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4622'. [ 389.811612][T18902] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4622'. [ 389.857722][T18905] FAULT_INJECTION: forcing a failure. [ 389.857722][T18905] name failslab, interval 1, probability 0, space 0, times 0 [ 389.870640][T18905] CPU: 0 UID: 0 PID: 18905 Comm: syz.3.4623 Not tainted 6.15.0-rc7-syzkaller #0 PREEMPT(voluntary) [ 389.870673][T18905] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 389.870687][T18905] Call Trace: [ 389.870693][T18905] [ 389.870780][T18905] __dump_stack+0x1d/0x30 [ 389.870809][T18905] dump_stack_lvl+0xe8/0x140 [ 389.870837][T18905] dump_stack+0x15/0x1b [ 389.870861][T18905] should_fail_ex+0x265/0x280 [ 389.870906][T18905] should_failslab+0x8c/0xb0 [ 389.871022][T18905] __kmalloc_noprof+0xa5/0x3e0 [ 389.871042][T18905] ? nft_obj_init+0x3c/0x220 [ 389.871134][T18905] nft_obj_init+0x3c/0x220 [ 389.871166][T18905] nf_tables_newobj+0x72f/0xcc0 [ 389.871301][T18905] nfnetlink_rcv+0xb99/0x1690 [ 389.871380][T18905] netlink_unicast+0x5a1/0x670 [ 389.871419][T18905] netlink_sendmsg+0x58b/0x6b0 [ 389.871442][T18905] ? __pfx_netlink_sendmsg+0x10/0x10 [ 389.871467][T18905] __sock_sendmsg+0x145/0x180 [ 389.871505][T18905] ____sys_sendmsg+0x31e/0x4e0 [ 389.871538][T18905] ___sys_sendmsg+0x17b/0x1d0 [ 389.871611][T18905] __x64_sys_sendmsg+0xd4/0x160 [ 389.871650][T18905] x64_sys_call+0x2999/0x2fb0 [ 389.871673][T18905] do_syscall_64+0xd0/0x1a0 [ 389.871768][T18905] ? clear_bhb_loop+0x40/0x90 [ 389.871798][T18905] ? clear_bhb_loop+0x40/0x90 [ 389.871822][T18905] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 389.871856][T18905] RIP: 0033:0x7fb41635e969 [ 389.871872][T18905] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 389.871942][T18905] RSP: 002b:00007fb4149c7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 389.871961][T18905] RAX: ffffffffffffffda RBX: 00007fb416585fa0 RCX: 00007fb41635e969 [ 389.871974][T18905] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000005 [ 389.871986][T18905] RBP: 00007fb4149c7090 R08: 0000000000000000 R09: 0000000000000000 [ 389.872000][T18905] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 389.872017][T18905] R13: 0000000000000000 R14: 00007fb416585fa0 R15: 00007ffe035894b8 [ 389.872084][T18905] [ 390.105285][T12583] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 390.202000][T18908] loop2: detected capacity change from 0 to 2048 [ 390.273144][T18908] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 390.313917][T18916] loop3: detected capacity change from 0 to 8192 [ 390.329533][T18908] ext4 filesystem being mounted at /428/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 390.349963][T18918] loop0: detected capacity change from 0 to 8192 [ 390.560049][T18927] can0: slcan on ttyS3. [ 390.573959][T18929] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.4624: bg 0: block 345: padding at end of block bitmap is not set [ 390.632284][T18929] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 390.715663][T11793] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 390.835131][T18935] serio: Serial port ptm0 [ 390.883799][T18922] can0 (unregistered): slcan off ttyS3. [ 390.894577][T18938] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4632'. [ 390.934206][T18940] bond0: (slave syz_tun): Releasing backup interface [ 390.947054][T18940] syz_tun: left allmulticast mode [ 391.267325][T18950] loop3: detected capacity change from 0 to 2048 [ 391.281562][T18949] loop0: detected capacity change from 0 to 2048 [ 391.308079][T18950] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 391.324607][T18950] ext4 filesystem being mounted at /292/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 391.337179][T18949] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 391.355917][T18949] ext4 filesystem being mounted at /344/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 391.402882][T18950] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.4637: bg 0: block 345: padding at end of block bitmap is not set [ 391.418592][T18950] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 312 with error 117 [ 391.431396][T18950] EXT4-fs (loop3): This should not happen!! Data will be lost [ 391.431396][T18950] [ 391.432581][T18949] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.4636: bg 0: block 345: padding at end of block bitmap is not set [ 391.472855][T12583] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 391.550111][T13355] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 391.643496][T18965] loop3: detected capacity change from 0 to 256 [ 391.978748][T18978] loop2: detected capacity change from 0 to 8192 [ 392.374551][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 392.374570][ T29] audit: type=1326 audit(1747616355.138:11185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18991 comm="syz.1.4649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f781dcfe969 code=0x7ffc0000 [ 392.412739][ T29] audit: type=1326 audit(1747616355.138:11186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18991 comm="syz.1.4649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f781dcfe969 code=0x7ffc0000 [ 392.436674][ T29] audit: type=1326 audit(1747616355.138:11187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18991 comm="syz.1.4649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f781dcfe969 code=0x7ffc0000 [ 392.461321][ T29] audit: type=1326 audit(1747616355.138:11188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18991 comm="syz.1.4649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f781dcfe969 code=0x7ffc0000 [ 392.485217][ T29] audit: type=1326 audit(1747616355.138:11189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18991 comm="syz.1.4649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f781dcfe969 code=0x7ffc0000 [ 392.509198][ T29] audit: type=1326 audit(1747616355.148:11190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18991 comm="syz.1.4649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=234 compat=0 ip=0x7f781dcfe969 code=0x7ffc0000 [ 392.533622][ T29] audit: type=1326 audit(1747616355.148:11191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18991 comm="syz.1.4649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f781dcfe969 code=0x7ffc0000 [ 392.538152][T18995] loop2: detected capacity change from 0 to 512 [ 392.557570][ T29] audit: type=1326 audit(1747616355.148:11192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18991 comm="syz.1.4649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f781dcfe969 code=0x7ffc0000 [ 392.557610][ T29] audit: type=1326 audit(1747616355.148:11193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18991 comm="syz.1.4649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f781dcfe969 code=0x7ffc0000 [ 392.629586][ T29] audit: type=1326 audit(1747616355.148:11194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18991 comm="syz.1.4649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f781dcfe969 code=0x7ffc0000 [ 392.638159][T18995] EXT4-fs: Mount option(s) incompatible with ext3 [ 392.744069][ T10] Process accounting resumed [ 392.896373][T19011] bond0: (slave syz_tun): Releasing backup interface [ 392.915124][T19011] syz_tun: left allmulticast mode [ 392.946228][T19011] bond0: (slave bond_slave_0): Releasing backup interface [ 392.961264][T19015] loop5: detected capacity change from 0 to 8192 [ 392.968835][T19011] bond_slave_0: left allmulticast mode [ 392.991389][T19024] loop0: detected capacity change from 0 to 2048 [ 393.009280][T19011] bond0: (slave bond_slave_1): Releasing backup interface [ 393.020550][T19011] bond_slave_1: left allmulticast mode [ 393.031809][T19011] team0: Port device team_slave_1 removed [ 393.041933][T19024] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 393.061385][T19024] ext4 filesystem being mounted at /347/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 393.178986][T19024] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.4661: bg 0: block 345: padding at end of block bitmap is not set [ 393.195770][T19021] can0: slcan on ttyS3. [ 393.213251][T19024] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 312 with error 117 [ 393.225960][T19024] EXT4-fs (loop0): This should not happen!! Data will be lost [ 393.225960][T19024] [ 393.343726][T12583] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 393.403707][T19020] can0 (unregistered): slcan off ttyS3. [ 393.430318][T19039] loop0: detected capacity change from 0 to 512 [ 393.441438][T19039] EXT4-fs: Mount option(s) incompatible with ext3 [ 393.598824][T19052] loop0: detected capacity change from 0 to 256 [ 393.656788][T19051] bond0: (slave bond_slave_0): Releasing backup interface [ 393.680109][T19051] bond_slave_0: left allmulticast mode [ 393.715587][T19054] FAULT_INJECTION: forcing a failure. [ 393.715587][T19054] name failslab, interval 1, probability 0, space 0, times 0 [ 393.728405][T19054] CPU: 0 UID: 0 PID: 19054 Comm: +}[@ Not tainted 6.15.0-rc7-syzkaller #0 PREEMPT(voluntary) [ 393.728484][T19054] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 393.728502][T19054] Call Trace: [ 393.728511][T19054] [ 393.728521][T19054] __dump_stack+0x1d/0x30 [ 393.728763][T19054] dump_stack_lvl+0xe8/0x140 [ 393.728847][T19054] dump_stack+0x15/0x1b [ 393.728870][T19054] should_fail_ex+0x265/0x280 [ 393.728916][T19054] ? tcp_sendmsg_fastopen+0x172/0x520 [ 393.729024][T19054] should_failslab+0x8c/0xb0 [ 393.729066][T19054] __kmalloc_cache_noprof+0x4c/0x320 [ 393.729161][T19054] ? xa_load+0xb1/0xe0 [ 393.729196][T19054] tcp_sendmsg_fastopen+0x172/0x520 [ 393.729362][T19054] tcp_sendmsg_locked+0x26a5/0x28b0 [ 393.729397][T19054] ? should_fail_ex+0x30/0x280 [ 393.729494][T19054] ? avc_has_perm_noaudit+0x1b1/0x200 [ 393.729519][T19054] ? __rcu_read_unlock+0x4f/0x70 [ 393.729749][T19054] ? avc_has_perm_noaudit+0x1b1/0x200 [ 393.729841][T19054] ? avc_has_perm+0xd3/0x150 [ 393.729870][T19054] ? _raw_spin_unlock_bh+0x36/0x40 [ 393.729949][T19054] ? __pfx_tcp_sendmsg+0x10/0x10 [ 393.730032][T19054] tcp_sendmsg+0x2f/0x50 [ 393.730074][T19054] inet_sendmsg+0x76/0xd0 [ 393.730117][T19054] __sock_sendmsg+0x102/0x180 [ 393.730152][T19054] ____sys_sendmsg+0x31e/0x4e0 [ 393.730260][T19054] ___sys_sendmsg+0x17b/0x1d0 [ 393.730306][T19054] __x64_sys_sendmsg+0xd4/0x160 [ 393.730341][T19054] x64_sys_call+0x2999/0x2fb0 [ 393.730397][T19054] do_syscall_64+0xd0/0x1a0 [ 393.730422][T19054] ? clear_bhb_loop+0x40/0x90 [ 393.730444][T19054] ? clear_bhb_loop+0x40/0x90 [ 393.730527][T19054] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 393.730556][T19054] RIP: 0033:0x7fbbec7ee969 [ 393.730633][T19054] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 393.730658][T19054] RSP: 002b:00007fbbeae57038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 393.730720][T19054] RAX: ffffffffffffffda RBX: 00007fbbeca15fa0 RCX: 00007fbbec7ee969 [ 393.730738][T19054] RDX: 0000000020000015 RSI: 0000200000000300 RDI: 0000000000000005 [ 393.730755][T19054] RBP: 00007fbbeae57090 R08: 0000000000000000 R09: 0000000000000000 [ 393.730772][T19054] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 393.730791][T19054] R13: 0000000000000000 R14: 00007fbbeca15fa0 R15: 00007ffdf959c788 [ 393.730817][T19054] [ 393.991237][T19051] bond0: (slave bond_slave_1): Releasing backup interface [ 394.032022][T19051] bond_slave_1: left allmulticast mode [ 394.074244][T19051] team0: Port device team_slave_1 removed [ 394.513394][T19075] loop0: detected capacity change from 0 to 8192 [ 394.524929][T19073] loop3: detected capacity change from 0 to 8192 [ 394.603525][T19070] loop2: detected capacity change from 0 to 8192 [ 395.174955][T19080] loop3: detected capacity change from 0 to 512 [ 395.194239][T19080] EXT4-fs: Mount option(s) incompatible with ext3 [ 395.361676][T19084] loop3: detected capacity change from 0 to 2048 [ 395.500679][T19084] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 395.546047][T19084] ext4 filesystem being mounted at /302/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 395.608000][T19094] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4682'. [ 395.659726][T19084] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.4679: bg 0: block 345: padding at end of block bitmap is not set [ 395.677168][T19084] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 312 with error 117 [ 395.690097][T19084] EXT4-fs (loop3): This should not happen!! Data will be lost [ 395.690097][T19084] [ 395.869270][T13355] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 395.900950][T19111] loop3: detected capacity change from 0 to 512 [ 395.907771][T19110] loop0: detected capacity change from 0 to 2048 [ 395.928024][T19113] loop5: detected capacity change from 0 to 512 [ 395.935115][T19111] EXT4-fs (loop3): orphan cleanup on readonly fs [ 395.954073][T19110] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 395.957052][T19113] EXT4-fs (loop5): orphan cleanup on readonly fs [ 395.975514][T19110] ext4 filesystem being mounted at /352/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 395.975902][T19113] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.4688: bg 0: block 248: padding at end of block bitmap is not set [ 395.986694][T19111] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.4687: bg 0: block 248: padding at end of block bitmap is not set [ 396.015827][T19113] EXT4-fs error (device loop5): ext4_acquire_dquot:6935: comm syz.5.4688: Failed to acquire dquot type 1 [ 396.027388][T19111] EXT4-fs error (device loop3): ext4_acquire_dquot:6935: comm syz.3.4687: Failed to acquire dquot type 1 [ 396.039290][T19113] EXT4-fs (loop5): 1 truncate cleaned up [ 396.045842][T19111] EXT4-fs (loop3): 1 truncate cleaned up [ 396.046097][T19113] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 396.065480][T19111] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 396.088695][T19113] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(7) [ 396.095398][T19108] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.4686: bg 0: block 345: padding at end of block bitmap is not set [ 396.095468][T19113] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 396.111022][T19108] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 312 with error 117 [ 396.118036][T19113] vhci_hcd vhci_hcd.0: Device attached [ 396.130565][T19108] EXT4-fs (loop0): This should not happen!! Data will be lost [ 396.130565][T19108] [ 396.167931][T19113] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4688'. [ 396.177292][T19113] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4688'. [ 396.187518][T19111] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 396.194103][T19111] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 396.201875][T19111] vhci_hcd vhci_hcd.0: Device attached [ 396.215424][T19113] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended [ 396.227373][T19111] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4687'. [ 396.236585][T19111] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4687'. [ 396.261171][T19113] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 396.271874][T19118] vhci_hcd: connection closed [ 396.272021][ T12] vhci_hcd: stop threads [ 396.274520][T12583] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 396.276784][ T12] vhci_hcd: release socket [ 396.281609][T19111] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 396.290057][ T12] vhci_hcd: disconnect device [ 396.323639][ T9] vhci_hcd: vhci_device speed not set [ 396.333217][T19111] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 396.364749][T19120] vhci_hcd: connection closed [ 396.364986][ T7631] vhci_hcd: stop threads [ 396.374057][ T7631] vhci_hcd: release socket [ 396.378614][ T7631] vhci_hcd: disconnect device [ 396.383621][ T23] vhci_hcd: vhci_device speed not set [ 396.426258][T19133] loop2: detected capacity change from 0 to 8192 [ 396.460618][T19136] bond0: (slave bond_slave_0): Releasing backup interface [ 396.468978][T19136] bond_slave_0: left allmulticast mode [ 396.488220][T19136] bond0: (slave bond_slave_1): Releasing backup interface [ 396.497243][T19136] bond_slave_1: left allmulticast mode [ 396.518534][T19136] team0: Port device team_slave_1 removed [ 396.823356][T16136] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 396.887217][T19140] syzkaller0: entered promiscuous mode [ 396.892869][T19140] syzkaller0: entered allmulticast mode [ 396.899907][T13355] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 397.107549][T19149] loop3: detected capacity change from 0 to 256 [ 397.179258][T19152] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4699'. [ 397.236027][T19152] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4699'. [ 397.296730][T19156] loop1: detected capacity change from 0 to 256 [ 397.320419][T19160] wireguard0: entered promiscuous mode [ 397.334233][T19160] wireguard0: entered allmulticast mode [ 397.351040][T19159] loop0: detected capacity change from 0 to 512 [ 397.365621][T19159] EXT4-fs (loop0): orphan cleanup on readonly fs [ 397.381387][T19159] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.4702: bg 0: block 248: padding at end of block bitmap is not set [ 397.400287][T19159] __quota_error: 73 callbacks suppressed [ 397.400306][T19159] Quota error (device loop0): write_blk: dquota write failed [ 397.413861][T19159] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 397.424112][T19159] EXT4-fs error (device loop0): ext4_acquire_dquot:6935: comm syz.0.4702: Failed to acquire dquot type 1 [ 397.437833][T19159] EXT4-fs (loop0): 1 truncate cleaned up [ 397.468610][T19159] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 397.502421][T19167] loop5: detected capacity change from 0 to 2048 [ 397.520751][T19159] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 397.527706][T19159] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 397.535543][T19159] vhci_hcd vhci_hcd.0: Device attached [ 397.537509][ T3005] udevd[3005]: worker [3488] terminated by signal 33 (Unknown signal 33) [ 397.552075][ T3005] udevd[3005]: worker [3488] failed while handling '/devices/virtual/block/loop5' [ 397.568156][T19159] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4702'. [ 397.577056][T19167] EXT4-fs (loop5): failed to initialize system zone (-117) [ 397.586025][T19159] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 397.586181][T19167] EXT4-fs (loop5): mount failed [ 397.614813][T19159] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 397.634898][ T29] audit: type=1400 audit(1747616360.398:11262): avc: denied { connect } for pid=19175 comm="syz.5.4707" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 397.657854][T19170] vhci_hcd: connection closed [ 397.658181][ T5870] vhci_hcd: stop threads [ 397.667460][ T5870] vhci_hcd: release socket [ 397.672113][ T5870] vhci_hcd: disconnect device [ 397.677185][ T29] audit: type=1400 audit(1747616360.418:11263): avc: denied { write } for pid=19175 comm="syz.5.4707" path="socket:[76103]" dev="sockfs" ino=76103 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 397.794483][T19183] program syz.5.4710 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 397.808083][T19183] bridge0: entered allmulticast mode [ 397.968376][ T9] Process accounting resumed [ 398.039541][T19196] loop5: detected capacity change from 0 to 512 [ 398.054389][T19196] EXT4-fs (loop5): orphan cleanup on readonly fs [ 398.062088][T19196] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.4714: bg 0: block 248: padding at end of block bitmap is not set [ 398.100216][T19196] Quota error (device loop5): write_blk: dquota write failed [ 398.107888][T19196] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 398.118282][T19196] EXT4-fs error (device loop5): ext4_acquire_dquot:6935: comm syz.5.4714: Failed to acquire dquot type 1 [ 398.132151][T19196] EXT4-fs (loop5): 1 truncate cleaned up [ 398.139519][T19196] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 398.156781][T19196] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(7) [ 398.163490][T19196] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 398.171585][T19196] vhci_hcd vhci_hcd.0: Device attached [ 398.185501][T19196] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4714'. [ 398.194485][T19196] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4714'. [ 398.194956][T12583] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 398.213329][T19196] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended [ 398.256135][T19196] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 398.266071][T19196] Quota error (device loop5): do_check_range: Getting block 1536 out of range 0-5 [ 398.276541][T19201] vhci_hcd: connection closed [ 398.277164][ T417] vhci_hcd: stop threads [ 398.286422][ T417] vhci_hcd: release socket [ 398.291259][ T417] vhci_hcd: disconnect device [ 398.730217][ T23] Process accounting resumed [ 398.810258][T16136] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 398.902624][T19222] loop2: detected capacity change from 0 to 2048 [ 398.978161][T19222] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 399.025715][T19228] serio: Serial port ptm0 [ 399.033899][T19222] ext4 filesystem being mounted at /455/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 399.107642][T19224] program syz.5.4722 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 399.148951][T19232] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.4723: bg 0: block 345: padding at end of block bitmap is not set [ 399.168928][T19232] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 399.180807][T19224] bridge0: entered allmulticast mode [ 399.244531][T19235] loop0: detected capacity change from 0 to 256 [ 399.271743][T11793] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 399.446974][T19243] serio: Serial port ptm0 [ 399.674440][T19253] wireguard0: entered promiscuous mode [ 399.680665][T19253] wireguard0: entered allmulticast mode [ 400.055011][T19257] loop5: detected capacity change from 0 to 256 [ 400.108368][T19266] serio: Serial port ptm0 [ 400.339615][T19277] vlan2: entered allmulticast mode [ 400.356896][T19275] program syz.3.4738 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 400.371244][T19275] bridge0: entered allmulticast mode [ 400.654614][T19294] loop3: detected capacity change from 0 to 8192 [ 400.827396][T19301] loop2: detected capacity change from 0 to 8192 [ 400.926646][T19308] serio: Serial port ptm0 [ 401.045165][T19313] __nla_validate_parse: 4 callbacks suppressed [ 401.045231][T19313] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4748'. [ 401.180476][T19319] loop0: detected capacity change from 0 to 512 [ 401.194589][T19319] EXT4-fs: Mount option(s) incompatible with ext3 [ 401.217821][T19319] netlink: 'syz.0.4750': attribute type 10 has an invalid length. [ 401.271886][T19319] syz_tun: entered promiscuous mode [ 401.290679][T19319] syz_tun: entered allmulticast mode [ 401.298013][T19319] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 401.441566][T19329] loop0: detected capacity change from 0 to 2048 [ 401.492292][T19329] EXT4-fs (loop0): failed to initialize system zone (-117) [ 401.499745][T19329] EXT4-fs (loop0): mount failed [ 401.600741][T19326] program syz.1.4754 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 401.638242][T19326] bridge0: entered allmulticast mode [ 401.693373][T19339] loop5: detected capacity change from 0 to 8192 [ 401.740552][ T29] audit: type=1326 audit(1747616364.498:11264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19343 comm="syz.2.4759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbec7ee969 code=0x7ffc0000 [ 401.764640][ T29] audit: type=1326 audit(1747616364.498:11265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19343 comm="syz.2.4759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbec7ee969 code=0x7ffc0000 [ 401.810531][ T29] audit: type=1326 audit(1747616364.548:11266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19343 comm="syz.2.4759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbbec7ee969 code=0x7ffc0000 [ 401.895859][T19350] serio: Serial port ptm0 [ 401.907565][T19348] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4761'. [ 401.943434][T19348] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4761'. [ 401.960246][T19352] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4760'. [ 402.010737][T19356] loop2: detected capacity change from 0 to 512 [ 402.019582][T19356] EXT4-fs: Mount option(s) incompatible with ext3 [ 402.063238][T19356] netlink: 'syz.2.4763': attribute type 10 has an invalid length. [ 402.074311][T19356] syz_tun: entered allmulticast mode [ 402.080527][T19356] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 402.161932][T19361] loop1: detected capacity change from 0 to 2048 [ 402.185577][T19361] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 402.197925][T19361] ext4 filesystem being mounted at /259/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 402.197957][T19365] loop2: detected capacity change from 0 to 2048 [ 402.256149][T19365] EXT4-fs (loop2): failed to initialize system zone (-117) [ 402.266701][T19365] EXT4-fs (loop2): mount failed [ 402.335077][T19371] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.4765: bg 0: block 345: padding at end of block bitmap is not set [ 402.358154][T19371] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 402.411084][T14015] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 402.445578][T19373] bond0: (slave syz_tun): Releasing backup interface [ 402.466746][T19373] syz_tun: left allmulticast mode [ 402.497427][T19376] loop1: detected capacity change from 0 to 512 [ 402.505702][T19377] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4768'. [ 402.539637][T19376] EXT4-fs (loop1): orphan cleanup on readonly fs [ 402.581836][T19376] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.4769: bg 0: block 248: padding at end of block bitmap is not set [ 402.607632][T19376] __quota_error: 8 callbacks suppressed [ 402.607691][T19376] Quota error (device loop1): write_blk: dquota write failed [ 402.620993][T19376] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 402.631057][T19376] EXT4-fs error (device loop1): ext4_acquire_dquot:6935: comm syz.1.4769: Failed to acquire dquot type 1 [ 402.643310][T19382] vlan2: entered allmulticast mode [ 402.652174][T19376] EXT4-fs (loop1): 1 truncate cleaned up [ 402.677443][T19376] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 402.684218][T19376] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 402.691673][T19376] vhci_hcd vhci_hcd.0: Device attached [ 402.712674][T19376] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4769'. [ 402.740452][T19376] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 402.763167][T19379] program syz.3.4770 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 402.774252][T19376] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 402.783984][T19383] vhci_hcd: connection closed [ 402.784401][ T12] vhci_hcd: stop threads [ 402.794204][ T12] vhci_hcd: release socket [ 402.798732][ T12] vhci_hcd: disconnect device [ 402.883293][T19387] loop0: detected capacity change from 0 to 8192 [ 402.927409][T19393] wireguard0: entered promiscuous mode [ 402.933226][T19393] wireguard0: entered allmulticast mode [ 403.015916][T19397] loop0: detected capacity change from 0 to 2048 [ 403.046136][T19397] ext4 filesystem being mounted at /366/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 403.101162][T19397] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.4774: bg 0: block 345: padding at end of block bitmap is not set [ 403.116853][T19397] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 312 with error 117 [ 403.129943][T19397] EXT4-fs (loop0): This should not happen!! Data will be lost [ 403.129943][T19397] [ 403.368914][T19414] loop1: detected capacity change from 0 to 2048 [ 403.419234][T19414] ext4 filesystem being mounted at /261/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 403.494773][T19414] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.4779: bg 0: block 345: padding at end of block bitmap is not set [ 403.509954][T19414] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 312 with error 117 [ 403.522679][T19414] EXT4-fs (loop1): This should not happen!! Data will be lost [ 403.522679][T19414] [ 403.745146][T19426] program syz.1.4783 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 403.838803][T19433] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4785'. [ 403.865085][T19433] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4785'. [ 404.069684][T19436] loop2: detected capacity change from 0 to 512 [ 404.077581][T19436] EXT4-fs: Mount option(s) incompatible with ext3 [ 404.100636][ T29] audit: type=1326 audit(1747616366.848:11275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19437 comm="syz.1.4787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f781dcfe969 code=0x7ffc0000 [ 404.136699][ T29] audit: type=1326 audit(1747616366.848:11276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19437 comm="syz.1.4787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f781dcfe969 code=0x7ffc0000 [ 404.161276][ T29] audit: type=1326 audit(1747616366.848:11277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19437 comm="syz.1.4787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f781dcfe969 code=0x7ffc0000 [ 404.185521][ T29] audit: type=1326 audit(1747616366.848:11278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19437 comm="syz.1.4787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f781dcfe969 code=0x7ffc0000 [ 404.209396][ T29] audit: type=1326 audit(1747616366.848:11279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19437 comm="syz.1.4787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f781dcfe969 code=0x7ffc0000 [ 404.233516][ T29] audit: type=1326 audit(1747616366.858:11280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19437 comm="syz.1.4787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f781dcfe969 code=0x7ffc0000 [ 404.263104][T19440] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4788'. [ 404.282638][T19443] loop1: detected capacity change from 0 to 512 [ 404.312966][ T10] Process accounting resumed [ 404.325587][T19440] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4788'. [ 404.346228][T19443] EXT4-fs (loop1): orphan cleanup on readonly fs [ 404.366595][T19443] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.4789: bg 0: block 248: padding at end of block bitmap is not set [ 404.398909][T19443] Quota error (device loop1): write_blk: dquota write failed [ 404.406684][T19443] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 404.417076][T19443] EXT4-fs error (device loop1): ext4_acquire_dquot:6935: comm syz.1.4789: Failed to acquire dquot type 1 [ 404.433310][T19443] EXT4-fs (loop1): 1 truncate cleaned up [ 404.450052][T19449] loop3: detected capacity change from 0 to 8192 [ 404.450394][ T10] Process accounting resumed [ 404.462588][T19443] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 404.469293][T19443] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 404.477364][T19443] vhci_hcd vhci_hcd.0: Device attached [ 404.503480][T19459] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 404.534034][T19459] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 404.554105][T19456] vhci_hcd: connection closed [ 404.554358][ T51] vhci_hcd: stop threads [ 404.563686][ T51] vhci_hcd: release socket [ 404.568989][ T51] vhci_hcd: disconnect device [ 404.591277][T19466] loop0: detected capacity change from 0 to 2048 [ 404.646152][T19466] loop0: p1 < > p3 [ 404.657100][T19466] loop0: p3 size 134217728 extends beyond EOD, truncated [ 404.726261][ T5061] udevd[5061]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 404.734142][ T6636] udevd[6636]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 404.820009][T19470] program syz.0.4795 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 404.838943][T19470] bridge0: entered allmulticast mode [ 404.975168][T19461] loop2: detected capacity change from 0 to 256 [ 405.026557][T19475] vlan2: entered allmulticast mode [ 405.247700][T19479] loop0: detected capacity change from 0 to 2048 [ 405.326516][T19479] ext4 filesystem being mounted at /373/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 405.347728][T19481] loop5: detected capacity change from 0 to 2048 [ 405.422262][T19481] ext4 filesystem being mounted at /170/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 405.454859][T19089] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 345: padding at end of block bitmap is not set [ 405.617130][T19490] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.4798: bg 0: block 345: padding at end of block bitmap is not set [ 405.644112][T19490] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 405.820651][T19498] loop0: detected capacity change from 0 to 8192 [ 405.853297][T19500] loop1: detected capacity change from 0 to 8192 [ 406.235101][ T1038] Process accounting resumed [ 406.328737][T19503] loop1: detected capacity change from 0 to 256 [ 406.334005][T19512] loop2: detected capacity change from 0 to 512 [ 406.361852][T19512] EXT4-fs (loop2): orphan cleanup on readonly fs [ 406.372930][T19512] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.4807: bg 0: block 248: padding at end of block bitmap is not set [ 406.389197][T19512] EXT4-fs error (device loop2): ext4_acquire_dquot:6935: comm syz.2.4807: Failed to acquire dquot type 1 [ 406.403146][T19512] EXT4-fs (loop2): 1 truncate cleaned up [ 406.416224][T19512] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 406.424383][T19512] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 406.432924][T19512] vhci_hcd vhci_hcd.0: Device attached [ 406.440827][T19512] __nla_validate_parse: 3 callbacks suppressed [ 406.440844][T19512] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4807'. [ 406.461110][T19512] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 406.493955][T19512] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 406.512429][T19514] vhci_hcd: connection closed [ 406.512930][ T51] vhci_hcd: stop threads [ 406.523202][ T51] vhci_hcd: release socket [ 406.529427][ T51] vhci_hcd: disconnect device [ 406.860224][T19542] bond0: (slave syz_tun): Releasing backup interface [ 406.884694][T19542] syz_tun: left allmulticast mode [ 406.909757][T19540] loop1: detected capacity change from 0 to 8192 [ 406.983816][T19542] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4817'. [ 406.994419][T19542] team0: Mode changed to "loadbalance" [ 407.135402][T11793] EXT4-fs unmount: 13 callbacks suppressed [ 407.135421][T11793] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 407.340624][T19553] loop5: detected capacity change from 0 to 8192 [ 407.911033][T19563] netlink: 196 bytes leftover after parsing attributes in process `syz.1.4823'. [ 408.058676][T19565] loop1: detected capacity change from 0 to 8192 [ 408.209919][T19571] wireguard1: entered promiscuous mode [ 408.215846][T19571] wireguard1: entered allmulticast mode [ 408.250712][T19570] loop5: detected capacity change from 0 to 8192 [ 408.570175][T19582] serio: Serial port ptm0 [ 408.660566][T19585] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4830'. [ 408.726743][T19590] loop0: detected capacity change from 0 to 512 [ 408.763699][T19590] EXT4-fs: Mount option(s) incompatible with ext3 [ 408.794340][T19590] netlink: 'syz.0.4831': attribute type 10 has an invalid length. [ 408.798290][T19592] netlink: 196 bytes leftover after parsing attributes in process `syz.5.4832'. [ 408.818651][T19590] syz_tun: entered allmulticast mode [ 408.834635][T19590] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 408.953688][T19580] loop2: detected capacity change from 0 to 256 [ 409.182399][T19609] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4837'. [ 409.206642][T19609] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4837'. [ 409.307260][T19616] loop2: detected capacity change from 0 to 2048 [ 409.321270][T19618] loop0: detected capacity change from 0 to 512 [ 409.330669][T19618] EXT4-fs: Mount option(s) incompatible with ext3 [ 409.340142][T19616] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 409.358097][T19616] ext4 filesystem being mounted at /484/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 409.432668][T19625] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4843'. [ 409.565465][T19625] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4843'. [ 409.579309][T19633] serio: Serial port ptm0 [ 409.585841][T19616] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.4840: bg 0: block 345: padding at end of block bitmap is not set [ 409.601476][T19616] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 312 with error 117 [ 409.614708][T19616] EXT4-fs (loop2): This should not happen!! Data will be lost [ 409.614708][T19616] [ 409.668110][T19636] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4848'. [ 409.788639][T11793] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 409.862834][T19649] wireguard1: entered promiscuous mode [ 409.868780][T19649] wireguard1: entered allmulticast mode [ 410.002687][ T29] kauditd_printk_skb: 10 callbacks suppressed [ 410.002708][ T29] audit: type=1326 audit(1747616372.758:11289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19661 comm="syz.3.4857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb41635e969 code=0x7ffc0000 [ 410.042111][ T29] audit: type=1326 audit(1747616372.758:11290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19661 comm="syz.3.4857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb41635e969 code=0x7ffc0000 [ 410.066432][ T29] audit: type=1326 audit(1747616372.758:11291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19661 comm="syz.3.4857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb41635e969 code=0x7ffc0000 [ 410.091797][ T29] audit: type=1326 audit(1747616372.758:11292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19661 comm="syz.3.4857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb41635e969 code=0x7ffc0000 [ 410.116388][ T29] audit: type=1326 audit(1747616372.758:11293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19661 comm="syz.3.4857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb41635e969 code=0x7ffc0000 [ 410.141435][ T29] audit: type=1326 audit(1747616372.758:11294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19661 comm="syz.3.4857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fb41635e969 code=0x7ffc0000 [ 410.166391][ T29] audit: type=1326 audit(1747616372.768:11295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19661 comm="syz.3.4857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb41635e969 code=0x7ffc0000 [ 410.190860][ T29] audit: type=1326 audit(1747616372.768:11296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19661 comm="syz.3.4857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb41635e969 code=0x7ffc0000 [ 410.200702][T19669] loop3: detected capacity change from 0 to 512 [ 410.277459][T19674] serio: Serial port ptm0 [ 410.286663][T19671] loop5: detected capacity change from 0 to 512 [ 410.294657][T19671] EXT4-fs: Mount option(s) incompatible with ext3 [ 410.308300][T19647] loop2: detected capacity change from 0 to 256 [ 410.316569][T19669] EXT4-fs (loop3): orphan cleanup on readonly fs [ 410.325593][T19671] netlink: 'syz.5.4860': attribute type 10 has an invalid length. [ 410.345575][T19671] syz_tun: entered allmulticast mode [ 410.352027][T19671] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 410.378758][T19669] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.4858: bg 0: block 248: padding at end of block bitmap is not set [ 410.397184][T19669] Quota error (device loop3): write_blk: dquota write failed [ 410.405409][T19669] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 410.416771][T19669] EXT4-fs error (device loop3): ext4_acquire_dquot:6935: comm syz.3.4858: Failed to acquire dquot type 1 [ 410.450953][T19682] loop1: detected capacity change from 0 to 2048 [ 410.465129][T19669] EXT4-fs (loop3): 1 truncate cleaned up [ 410.474455][T19669] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 410.516597][T19682] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 410.547257][T19682] ext4 filesystem being mounted at /282/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 410.572975][T19667] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 410.580029][T19667] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 410.587635][T19667] vhci_hcd vhci_hcd.0: Device attached [ 410.664150][T19667] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 410.692171][T19696] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.4862: bg 0: block 345: padding at end of block bitmap is not set [ 410.713708][T19696] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 410.896680][T19667] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 410.913862][T19687] vhci_hcd: connection closed [ 410.970280][ T417] vhci_hcd: stop threads [ 410.979778][ T417] vhci_hcd: release socket [ 410.984627][ T417] vhci_hcd: disconnect device [ 411.134878][ T10] vhci_hcd: vhci_device speed not set [ 411.194715][T14015] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 411.427221][T13355] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 411.464426][ T3393] Process accounting resumed [ 411.541345][T19714] loop2: detected capacity change from 0 to 2048 [ 411.567830][T19711] loop3: detected capacity change from 0 to 2048 [ 411.582684][T19714] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 411.605408][T19714] ext4 filesystem being mounted at /487/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 411.605453][T19717] serio: Serial port ptm0 [ 411.626698][ T6636] loop3: p1 < > p3 [ 411.633255][ T6636] loop3: p3 size 134217728 extends beyond EOD, truncated [ 411.655240][T19711] loop3: p1 < > p3 [ 411.659869][T19711] loop3: p3 size 134217728 extends beyond EOD, truncated [ 411.663030][T19723] loop1: detected capacity change from 0 to 2048 [ 411.725084][T19723] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 411.740253][T19723] ext4 filesystem being mounted at /284/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 411.768292][T19714] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.4873: bg 0: block 345: padding at end of block bitmap is not set [ 411.786749][T19714] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 312 with error 117 [ 411.788997][T19717] __nla_validate_parse: 11 callbacks suppressed [ 411.789019][T19717] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4874'. [ 411.799835][T19714] EXT4-fs (loop2): This should not happen!! Data will be lost [ 411.799835][T19714] [ 411.841017][ T5061] udevd[5061]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 411.864969][ T6636] udevd[6636]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 411.902248][T19723] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.4875: bg 0: block 345: padding at end of block bitmap is not set [ 411.907565][ T5061] udevd[5061]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 411.918482][ T6636] udevd[6636]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 411.942339][T19723] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 312 with error 117 [ 411.955577][T19723] EXT4-fs (loop1): This should not happen!! Data will be lost [ 411.955577][T19723] [ 411.981847][T11793] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 412.139854][T14015] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 412.247180][T19753] loop1: detected capacity change from 0 to 8192 [ 412.329977][T19755] loop2: detected capacity change from 0 to 8192 [ 412.345568][T19762] loop3: detected capacity change from 0 to 512 [ 412.357855][T19762] EXT4-fs (loop3): orphan cleanup on readonly fs [ 412.368200][T19762] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.4888: bg 0: block 248: padding at end of block bitmap is not set [ 412.384162][T19762] EXT4-fs error (device loop3): ext4_acquire_dquot:6935: comm syz.3.4888: Failed to acquire dquot type 1 [ 412.406973][T19762] EXT4-fs (loop3): 1 truncate cleaned up [ 412.437917][T19762] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 412.459575][T19762] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 412.467070][T19762] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 412.475551][T19762] vhci_hcd vhci_hcd.0: Device attached [ 412.484072][T19762] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4888'. [ 412.493726][T19762] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4888'. [ 412.507920][T19762] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 412.554604][T19762] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 412.581679][T19765] vhci_hcd: connection closed [ 412.583852][ T5870] vhci_hcd: stop threads [ 412.593278][ T5870] vhci_hcd: release socket [ 412.598043][ T5870] vhci_hcd: disconnect device [ 412.653629][ T10] vhci_hcd: vhci_device speed not set [ 413.014056][T19777] loop5: detected capacity change from 0 to 2048 [ 413.051694][T19777] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 413.067642][T19777] ext4 filesystem being mounted at /197/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 413.094403][T13355] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 413.171032][T19777] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.4892: bg 0: block 345: padding at end of block bitmap is not set [ 413.181445][T19781] loop3: detected capacity change from 0 to 2048 [ 413.188451][T19777] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 312 with error 117 [ 413.206405][T19777] EXT4-fs (loop5): This should not happen!! Data will be lost [ 413.206405][T19777] [ 413.249504][T19781] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 413.263280][T19781] ext4 filesystem being mounted at /335/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 413.332726][ T3393] Process accounting resumed [ 413.363282][T19781] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.4893: bg 0: block 345: padding at end of block bitmap is not set [ 413.399779][T16136] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 413.432214][T19781] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 312 with error 117 [ 413.445563][T19781] EXT4-fs (loop3): This should not happen!! Data will be lost [ 413.445563][T19781] [ 413.493642][T19796] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4898'. [ 413.632789][T19807] loop2: detected capacity change from 0 to 512 [ 413.646657][T13355] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 413.671088][T19807] EXT4-fs (loop2): orphan cleanup on readonly fs [ 413.695328][T19796] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4898'. [ 413.717640][T19783] loop1: detected capacity change from 0 to 256 [ 413.725622][T19807] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.4903: bg 0: block 248: padding at end of block bitmap is not set [ 413.793915][T19807] EXT4-fs error (device loop2): ext4_acquire_dquot:6935: comm syz.2.4903: Failed to acquire dquot type 1 [ 413.821589][T19810] loop3: detected capacity change from 0 to 512 [ 413.851394][T19807] EXT4-fs (loop2): 1 truncate cleaned up [ 413.891001][T19810] EXT4-fs (loop3): orphan cleanup on readonly fs [ 413.906269][T19807] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 413.928056][T19816] loop0: detected capacity change from 0 to 8192 [ 413.938367][T19810] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.4900: bg 0: block 248: padding at end of block bitmap is not set [ 413.961759][ T3005] udevd[3005]: worker [6636] terminated by signal 33 (Unknown signal 33) [ 413.966861][T19810] EXT4-fs error (device loop3): ext4_acquire_dquot:6935: comm syz.3.4900: Failed to acquire dquot type 1 [ 413.972605][T19807] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 413.986833][T19810] EXT4-fs (loop3): 1 truncate cleaned up [ 413.991285][T19807] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 413.998315][T19810] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 414.004603][T19807] vhci_hcd vhci_hcd.0: Device attached [ 414.023382][ T3005] udevd[3005]: worker [6636] failed while handling '/devices/virtual/block/loop0' [ 414.050973][T19810] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 414.057834][T19810] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 414.066320][T19810] vhci_hcd vhci_hcd.0: Device attached [ 414.074105][T19807] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4903'. [ 414.084268][T19807] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4903'. [ 414.096890][T19810] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4900'. [ 414.109513][T19810] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 414.125087][T19810] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 414.136492][T19807] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 414.148730][T19823] vhci_hcd: connection closed [ 414.149163][ T31] vhci_hcd: stop threads [ 414.165308][ T31] vhci_hcd: release socket [ 414.171340][ T31] vhci_hcd: disconnect device [ 414.185665][T19807] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 414.198723][T19820] vhci_hcd: connection closed [ 414.199003][ T5870] vhci_hcd: stop threads [ 414.203927][ T36] vhci_hcd: vhci_device speed not set [ 414.204710][ T5870] vhci_hcd: release socket [ 414.219832][ T5870] vhci_hcd: disconnect device [ 414.263651][ T36] usb 5-1: new full-speed USB device number 12 using vhci_hcd [ 414.272328][ T36] usb 5-1: enqueue for inactive port 0 [ 414.278404][ T36] usb 5-1: enqueue for inactive port 0 [ 414.284424][ T36] usb 5-1: enqueue for inactive port 0 [ 414.290354][T19832] loop0: detected capacity change from 0 to 512 [ 414.299452][T19832] EXT4-fs: Mount option(s) incompatible with ext3 [ 414.312056][T19832] netlink: 'syz.0.4908': attribute type 10 has an invalid length. [ 414.353982][ T36] vhci_hcd: vhci_device speed not set [ 414.373845][T19837] bond0: (slave syz_tun): Releasing backup interface [ 414.383039][T19837] syz_tun: left allmulticast mode [ 414.467516][T19838] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4910'. [ 414.478692][T19838] team0: Unable to change to the same mode the team is in [ 414.660404][T13355] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 414.696599][T19843] loop5: detected capacity change from 0 to 2048 [ 414.717216][T19843] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 414.741222][T19843] ext4 filesystem being mounted at /201/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 414.753719][T11793] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 414.814136][T19843] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.4913: bg 0: block 345: padding at end of block bitmap is not set [ 414.830647][T19843] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 312 with error 117 [ 414.845450][T19843] EXT4-fs (loop5): This should not happen!! Data will be lost [ 414.845450][T19843] [ 414.888180][T16136] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 415.023198][ T3385] Process accounting resumed [ 415.112486][T19850] loop3: detected capacity change from 0 to 256 [ 415.172489][T19868] loop5: detected capacity change from 0 to 2048 [ 415.240394][T19869] loop2: detected capacity change from 0 to 8192 [ 415.268097][T19868] loop5: p1 < > p3 [ 415.284418][T19868] loop5: p3 size 134217728 extends beyond EOD, truncated [ 415.464284][ T3005] loop5: p1 < > p3 [ 415.474105][ T3005] loop5: p3 size 134217728 extends beyond EOD, truncated [ 415.485780][T19879] loop1: detected capacity change from 0 to 512 [ 415.507765][T19879] EXT4-fs (loop1): orphan cleanup on readonly fs [ 415.517873][T13446] udevd[13446]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 415.529540][T13451] udevd[13451]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 415.549169][T19882] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4923'. [ 415.564302][T19879] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.4922: bg 0: block 248: padding at end of block bitmap is not set [ 415.615540][T19879] __quota_error: 9 callbacks suppressed [ 415.615560][T19879] Quota error (device loop1): write_blk: dquota write failed [ 415.628852][T19879] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 415.639045][T19879] EXT4-fs error (device loop1): ext4_acquire_dquot:6935: comm syz.1.4922: Failed to acquire dquot type 1 [ 415.660613][T19879] EXT4-fs (loop1): 1 truncate cleaned up [ 415.673995][T13451] udevd[13451]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 415.695040][ T5061] udevd[5061]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 415.724998][T19879] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 415.728122][T19884] loop5: detected capacity change from 0 to 512 [ 415.753619][T19879] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 415.760295][T19879] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 415.767814][T19879] vhci_hcd vhci_hcd.0: Device attached [ 415.779123][T19879] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 415.789533][T19884] EXT4-fs (loop5): orphan cleanup on readonly fs [ 415.800495][T19884] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.4925: bg 0: block 248: padding at end of block bitmap is not set [ 415.895993][T19879] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 415.904879][T19884] Quota error (device loop5): write_blk: dquota write failed [ 415.912595][T19884] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 415.924112][T19884] EXT4-fs error (device loop5): ext4_acquire_dquot:6935: comm syz.5.4925: Failed to acquire dquot type 1 [ 415.935522][T19886] vhci_hcd: connection closed [ 415.938787][ T5870] vhci_hcd: stop threads [ 415.949035][ T5870] vhci_hcd: release socket [ 415.953698][ T36] vhci_hcd: vhci_device speed not set [ 415.959423][ T5870] vhci_hcd: disconnect device [ 415.965955][T19884] EXT4-fs (loop5): 1 truncate cleaned up [ 415.982949][T19884] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 416.006357][T19884] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(7) [ 416.013470][T19884] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 416.021333][T19884] vhci_hcd vhci_hcd.0: Device attached [ 416.027685][ T36] usb 3-1: new full-speed USB device number 14 using vhci_hcd [ 416.035774][ T36] usb 3-1: enqueue for inactive port 0 [ 416.041450][ T36] usb 3-1: enqueue for inactive port 0 [ 416.050747][ T36] usb 3-1: enqueue for inactive port 0 [ 416.062645][T19884] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended [ 416.094048][T19884] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 416.107771][T19884] Quota error (device loop5): do_check_range: Getting block 1536 out of range 0-5 [ 416.119214][T19894] program syz.3.4927 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 416.119726][T19895] vhci_hcd: connection closed [ 416.120090][ T51] vhci_hcd: stop threads [ 416.120102][ T51] vhci_hcd: release socket [ 416.120126][ T51] vhci_hcd: disconnect device [ 416.130331][T19894] bridge0: entered allmulticast mode [ 416.146787][T19903] loop0: detected capacity change from 0 to 2048 [ 416.151770][ T36] vhci_hcd: vhci_device speed not set [ 416.185870][T19903] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 416.201246][T19903] ext4 filesystem being mounted at /401/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 416.233316][T12583] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 416.328432][T19915] loop3: detected capacity change from 0 to 2048 [ 416.356035][T19915] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 416.369755][T19915] ext4 filesystem being mounted at /343/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 416.385166][T19915] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.4932: bg 0: block 345: padding at end of block bitmap is not set [ 416.402336][T19915] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 416.456913][T14015] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 416.488424][T13355] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 416.520299][ T23] Process accounting resumed [ 416.614884][T19911] loop0: detected capacity change from 0 to 256 [ 416.621627][T19928] loop1: detected capacity change from 0 to 512 [ 416.656364][T19928] EXT4-fs (loop1): orphan cleanup on readonly fs [ 416.656779][T16136] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 416.685238][T19928] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.4934: bg 0: block 248: padding at end of block bitmap is not set [ 416.742636][T19928] Quota error (device loop1): write_blk: dquota write failed [ 416.750711][T19928] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 416.762526][T19928] EXT4-fs error (device loop1): ext4_acquire_dquot:6935: comm syz.1.4934: Failed to acquire dquot type 1 [ 416.798978][T19928] EXT4-fs (loop1): 1 truncate cleaned up [ 416.820140][T19928] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 416.844669][T19936] loop0: detected capacity change from 0 to 2048 [ 416.875677][T19936] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 416.892013][T19936] ext4 filesystem being mounted at /403/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 416.908893][T19928] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 416.916110][T19928] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 416.924855][T19928] vhci_hcd vhci_hcd.0: Device attached [ 416.934199][T19928] __nla_validate_parse: 6 callbacks suppressed [ 416.934219][T19928] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4934'. [ 416.950264][T19928] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4934'. [ 416.970499][T19928] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 416.984608][T19928] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 416.984785][T19936] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.4937: bg 0: block 345: padding at end of block bitmap is not set [ 417.008679][T19936] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 312 with error 117 [ 417.021787][T19936] EXT4-fs (loop0): This should not happen!! Data will be lost [ 417.021787][T19936] [ 417.035807][T19928] Quota error (device loop1): do_check_range: Getting block 1536 out of range 0-5 [ 417.083624][T19941] vhci_hcd: connection closed [ 417.084762][ T52] vhci_hcd: stop threads [ 417.095617][ T52] vhci_hcd: release socket [ 417.100491][ T52] vhci_hcd: disconnect device [ 417.208080][T12583] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 417.240040][T19946] loop3: detected capacity change from 0 to 8192 [ 417.362099][T19951] program syz.2.4941 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 417.383392][T19951] bridge0: entered allmulticast mode [ 417.715938][T14015] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 417.773298][T19955] program syz.0.4942 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 417.789577][T19958] loop2: detected capacity change from 0 to 8192 [ 417.834672][T19966] loop1: detected capacity change from 0 to 512 [ 417.865370][T19966] EXT4-fs (loop1): orphan cleanup on readonly fs [ 417.918599][T19966] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.4947: bg 0: block 248: padding at end of block bitmap is not set [ 417.947894][T19976] loop3: detected capacity change from 0 to 2048 [ 417.963076][T19966] Quota error (device loop1): write_blk: dquota write failed [ 417.970805][T19966] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 417.980827][T19966] EXT4-fs error (device loop1): ext4_acquire_dquot:6935: comm syz.1.4947: Failed to acquire dquot type 1 [ 418.002013][T19966] EXT4-fs (loop1): 1 truncate cleaned up [ 418.024383][T19966] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 418.048031][T19976] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 418.060816][T19966] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 418.060848][T19966] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 418.060882][T19966] vhci_hcd vhci_hcd.0: Device attached [ 418.062913][T19966] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4947'. [ 418.069780][T19976] ext4 filesystem being mounted at /346/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 418.075297][T19966] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4947'. [ 418.118856][T19966] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 418.145944][T19966] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 418.154554][T19990] netlink: 196 bytes leftover after parsing attributes in process `syz.2.4953'. [ 418.194619][T19982] vhci_hcd: connection closed [ 418.194883][ T5870] vhci_hcd: stop threads [ 418.204184][ T5870] vhci_hcd: release socket [ 418.208634][ T5870] vhci_hcd: disconnect device [ 418.230630][T19993] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.4949: bg 0: block 345: padding at end of block bitmap is not set [ 418.245599][ T3393] vhci_hcd: vhci_device speed not set [ 418.250344][T19992] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4954'. [ 418.251690][T19985] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4950'. [ 418.272345][T19993] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 418.274769][T19985] team0: Unable to change to the same mode the team is in [ 418.310691][T19994] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4954'. [ 418.383366][T13355] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 418.408192][T19999] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4956'. [ 418.705364][T14015] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 418.819572][T20012] program syz.1.4960 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 418.835522][T20012] bridge0: entered allmulticast mode [ 418.917906][T20016] vlan2: entered allmulticast mode [ 419.018992][ T36] Process accounting resumed [ 419.321930][T20040] loop3: detected capacity change from 0 to 512 [ 419.340245][T20040] EXT4-fs (loop3): orphan cleanup on readonly fs [ 419.358075][T20040] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.4969: bg 0: block 248: padding at end of block bitmap is not set [ 419.374624][T20040] EXT4-fs error (device loop3): ext4_acquire_dquot:6935: comm syz.3.4969: Failed to acquire dquot type 1 [ 419.425510][T20040] EXT4-fs (loop3): 1 truncate cleaned up [ 419.433112][T20040] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 419.450451][T20040] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 419.457249][T20040] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 419.465074][T20040] vhci_hcd vhci_hcd.0: Device attached [ 419.472875][T20040] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4969'. [ 419.500753][T20040] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 419.533725][T20040] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 419.544702][T20043] vhci_hcd: connection closed [ 419.545161][ T5870] vhci_hcd: stop threads [ 419.554617][ T5870] vhci_hcd: release socket [ 419.559267][ T5870] vhci_hcd: disconnect device [ 419.670510][T20047] loop2: detected capacity change from 0 to 8192 [ 420.064366][T13355] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 420.297291][T20065] vlan2: entered allmulticast mode [ 420.331123][T20060] program syz.3.4972 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 420.403455][T20072] wireguard0: entered promiscuous mode [ 420.409658][T20072] wireguard0: entered allmulticast mode [ 420.444683][ T1038] Process accounting resumed [ 421.339504][T20094] loop2: detected capacity change from 0 to 8192 [ 421.472553][T20106] loop1: detected capacity change from 0 to 512 [ 421.479837][T20106] EXT4-fs: Mount option(s) incompatible with ext3 [ 421.515163][T20106] netlink: 'syz.1.4985': attribute type 10 has an invalid length. [ 421.558883][T20106] syz_tun: entered allmulticast mode [ 421.582140][T20106] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 422.007127][T20117] loop1: detected capacity change from 0 to 8192 [ 422.745028][T20138] loop3: detected capacity change from 0 to 8192 [ 422.783183][T20141] loop1: detected capacity change from 0 to 2048 [ 422.805599][T20141] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 422.819341][T20141] ext4 filesystem being mounted at /310/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 422.837136][T20136] __nla_validate_parse: 6 callbacks suppressed [ 422.837154][T20136] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4996'. [ 422.854304][T20136] team0: Mode changed to "loadbalance" [ 422.897912][T20141] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.4998: bg 0: block 345: padding at end of block bitmap is not set [ 422.913053][T20141] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 312 with error 117 [ 422.925912][T20141] EXT4-fs (loop1): This should not happen!! Data will be lost [ 422.925912][T20141] [ 422.991459][T14015] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 423.034681][T20146] loop1: detected capacity change from 0 to 2048 [ 423.045279][T20146] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 423.057796][T20146] ext4 filesystem being mounted at /311/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 423.107522][T20146] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.4999: bg 0: block 345: padding at end of block bitmap is not set [ 423.122737][T20146] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 312 with error 117 [ 423.135460][T20146] EXT4-fs (loop1): This should not happen!! Data will be lost [ 423.135460][T20146] [ 423.173301][T14015] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 423.207151][T20150] netlink: 196 bytes leftover after parsing attributes in process `syz.1.5000'. [ 423.414135][T20154] program syz.1.5002 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 423.671474][T20174] loop3: detected capacity change from 0 to 512 [ 423.681045][T20174] EXT4-fs (loop3): orphan cleanup on readonly fs [ 423.689545][T20174] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.5008: bg 0: block 248: padding at end of block bitmap is not set [ 423.704615][T20174] __quota_error: 11 callbacks suppressed [ 423.704628][T20174] Quota error (device loop3): write_blk: dquota write failed [ 423.718000][T20174] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 423.728302][T20174] EXT4-fs error (device loop3): ext4_acquire_dquot:6935: comm syz.3.5008: Failed to acquire dquot type 1 [ 423.740710][T20174] EXT4-fs (loop3): 1 truncate cleaned up [ 423.747826][T20174] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 423.766083][T20174] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 423.772683][T20174] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 423.780259][T20174] vhci_hcd vhci_hcd.0: Device attached [ 423.787877][T20174] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5008'. [ 423.796906][T20174] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5008'. [ 423.809997][T20174] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 423.824000][T20174] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 423.833302][T20174] Quota error (device loop3): do_check_range: Getting block 1536 out of range 0-5 [ 423.843388][T20178] vhci_hcd: connection closed [ 423.843876][ T12] vhci_hcd: stop threads [ 423.853229][ T12] vhci_hcd: release socket [ 423.857751][ T12] vhci_hcd: disconnect device [ 423.978655][T20182] loop1: detected capacity change from 0 to 2048 [ 423.996530][T20182] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 424.009724][T20182] ext4 filesystem being mounted at /316/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 424.052077][T20182] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.5009: bg 0: block 345: padding at end of block bitmap is not set [ 424.067073][T20182] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 312 with error 117 [ 424.080080][T20182] EXT4-fs (loop1): This should not happen!! Data will be lost [ 424.080080][T20182] [ 424.128723][T14015] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 424.242939][T20190] netlink: 196 bytes leftover after parsing attributes in process `syz.0.5011'. [ 424.365018][T13355] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 425.054081][T20206] loop5: detected capacity change from 0 to 8192 [ 425.161851][T20208] vlan2: entered allmulticast mode [ 425.577929][T20211] program syz.0.5018 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 425.840242][T20233] loop1: detected capacity change from 0 to 512 [ 425.865810][T20233] EXT4-fs (loop1): orphan cleanup on readonly fs [ 425.878545][T20233] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.5025: bg 0: block 248: padding at end of block bitmap is not set [ 425.894312][T20233] Quota error (device loop1): write_blk: dquota write failed [ 425.902281][T20233] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 425.912393][T20233] EXT4-fs error (device loop1): ext4_acquire_dquot:6935: comm syz.1.5025: Failed to acquire dquot type 1 [ 425.918513][T20237] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5026'. [ 425.925971][T20233] EXT4-fs (loop1): 1 truncate cleaned up [ 425.952687][T20233] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 425.981090][T20233] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 425.987920][T20233] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 425.995683][T20233] vhci_hcd vhci_hcd.0: Device attached [ 426.004088][T20233] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5025'. [ 426.013247][T20233] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5025'. [ 426.039533][T20237] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5026'. [ 426.074098][T20240] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 426.104981][T20240] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 426.124916][T20233] Quota error (device loop1): do_check_range: Getting block 1536 out of range 0-5 [ 426.147733][T20238] vhci_hcd: connection closed [ 426.161942][ T5870] vhci_hcd: stop threads [ 426.172292][ T5870] vhci_hcd: release socket [ 426.177519][ T5870] vhci_hcd: disconnect device [ 426.206976][ T36] vhci_hcd: vhci_device speed not set [ 426.487008][T20251] serio: Serial port ptm0 [ 426.563653][T20253] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5038'. [ 426.662089][T14015] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 426.720369][T20260] loop5: detected capacity change from 0 to 2048 [ 426.732884][T20263] loop1: detected capacity change from 0 to 2048 [ 426.742258][T20260] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 426.759931][T20260] ext4 filesystem being mounted at /225/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 426.785896][T20263] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 426.805482][T20263] ext4 filesystem being mounted at /323/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 426.817396][T20260] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.5032: bg 0: block 345: padding at end of block bitmap is not set [ 426.832888][T20260] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 312 with error 117 [ 426.845921][T20260] EXT4-fs (loop5): This should not happen!! Data will be lost [ 426.845921][T20260] [ 426.857645][T20263] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.5030: bg 0: block 345: padding at end of block bitmap is not set [ 426.874521][T20263] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 426.898247][T16136] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 426.922915][T14015] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 426.984315][T20274] loop1: detected capacity change from 0 to 2048 [ 427.004224][T20274] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 427.030566][T20274] ext4 filesystem being mounted at /325/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 427.087837][T14015] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 427.178918][T20279] serio: Serial port ptm1 [ 427.345643][T20290] loop0: detected capacity change from 0 to 512 [ 427.368632][T20290] EXT4-fs (loop0): orphan cleanup on readonly fs [ 427.379777][T20290] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.5041: bg 0: block 248: padding at end of block bitmap is not set [ 427.396833][T20290] Quota error (device loop0): write_blk: dquota write failed [ 427.404416][T20290] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 427.414576][T20290] EXT4-fs error (device loop0): ext4_acquire_dquot:6935: comm syz.0.5041: Failed to acquire dquot type 1 [ 427.483130][T20290] EXT4-fs (loop0): 1 truncate cleaned up [ 427.492514][T20290] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 427.510118][T20290] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 427.516739][T20290] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 427.524357][T20290] vhci_hcd vhci_hcd.0: Device attached [ 427.564279][T20290] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 427.591104][T20304] loop3: detected capacity change from 0 to 2048 [ 427.591077][T20301] loop2: detected capacity change from 0 to 8192 [ 427.606352][T20290] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 427.615785][T20308] Quota error (device loop0): do_check_range: Getting block 1536 out of range 0-5 [ 427.626970][T20304] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 427.633626][T20298] vhci_hcd: connection closed [ 427.640049][ T51] vhci_hcd: stop threads [ 427.641882][T20304] ext4 filesystem being mounted at /367/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 427.645076][ T51] vhci_hcd: release socket [ 427.645090][ T51] vhci_hcd: disconnect device [ 427.713500][T20304] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.5045: bg 0: block 345: padding at end of block bitmap is not set [ 427.728504][T20304] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 312 with error 117 [ 427.741667][T20304] EXT4-fs (loop3): This should not happen!! Data will be lost [ 427.741667][T20304] [ 427.834635][T20312] tc_dump_action: action bad kind [ 427.859596][T13355] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 427.892348][T20314] loop3: detected capacity change from 0 to 2048 [ 427.905161][T20315] loop2: detected capacity change from 0 to 128 [ 427.919703][T20314] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 427.932624][T20314] ext4 filesystem being mounted at /368/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 427.974912][T20314] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.5047: bg 0: block 345: padding at end of block bitmap is not set [ 427.991807][T20314] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 312 with error 117 [ 428.004597][T20314] EXT4-fs (loop3): This should not happen!! Data will be lost [ 428.004597][T20314] [ 428.063023][T13355] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 428.096409][T20321] loop3: detected capacity change from 0 to 2048 [ 428.125431][T20321] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 428.145208][T20321] ext4 filesystem being mounted at /369/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 428.180052][T12583] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 428.706777][T20343] serio: Serial port ptm0 [ 428.801034][T20346] loop3: detected capacity change from 0 to 8192 [ 429.345008][T20353] bond0: (slave syz_tun): Releasing backup interface [ 429.354554][T20353] syz_tun: left allmulticast mode [ 429.582661][T20356] wireguard0: entered promiscuous mode [ 429.588639][T20356] wireguard0: entered allmulticast mode [ 429.758677][T20362] loop3: detected capacity change from 0 to 512 [ 429.771762][T20362] EXT4-fs (loop3): orphan cleanup on readonly fs [ 429.818531][T20362] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.5059: bg 0: block 248: padding at end of block bitmap is not set [ 429.842734][T20366] loop5: detected capacity change from 0 to 2048 [ 429.856136][T20362] Quota error (device loop3): write_blk: dquota write failed [ 429.863883][T20362] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 429.874124][T20362] EXT4-fs error (device loop3): ext4_acquire_dquot:6935: comm syz.3.5059: Failed to acquire dquot type 1 [ 429.886389][T20362] EXT4-fs (loop3): 1 truncate cleaned up [ 429.902075][T20362] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 429.908655][T20362] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 429.916315][T20362] vhci_hcd vhci_hcd.0: Device attached [ 429.924717][T20366] ext4 filesystem being mounted at /233/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 429.924861][T20362] __nla_validate_parse: 3 callbacks suppressed [ 429.924888][T20362] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5059'. [ 429.950912][T20362] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5059'. [ 429.970659][T20362] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 429.988248][T20362] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 430.009939][T20362] Quota error (device loop3): do_check_range: Getting block 1536 out of range 0-5 [ 430.024390][T20367] vhci_hcd: connection closed [ 430.025013][ T51] vhci_hcd: stop threads [ 430.034275][ T51] vhci_hcd: release socket [ 430.038735][ T51] vhci_hcd: disconnect device [ 430.093646][ T3385] vhci_hcd: vhci_device speed not set [ 430.099988][ T29] audit: type=1326 audit(1747616392.858:11305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20376 comm="syz.0.5063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1e085e969 code=0x7ffc0000 [ 430.124278][ T29] audit: type=1326 audit(1747616392.858:11306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20376 comm="syz.0.5063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1e085e969 code=0x7ffc0000 [ 430.148825][ T29] audit: type=1326 audit(1747616392.858:11307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20376 comm="syz.0.5063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7fe1e085e969 code=0x7ffc0000 [ 430.172925][ T29] audit: type=1326 audit(1747616392.868:11308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20378 comm="syz.0.5063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe1e0891225 code=0x7ffc0000 [ 430.197516][ T29] audit: type=1326 audit(1747616392.868:11309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20376 comm="syz.0.5063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1e085e969 code=0x7ffc0000 [ 430.221226][ T29] audit: type=1326 audit(1747616392.868:11310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20376 comm="syz.0.5063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1e085e969 code=0x7ffc0000 [ 430.245124][ T29] audit: type=1326 audit(1747616392.868:11311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20376 comm="syz.0.5063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=234 compat=0 ip=0x7fe1e085e969 code=0x7ffc0000 [ 430.585131][T20385] loop0: detected capacity change from 0 to 8192 [ 431.156937][T20394] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5067'. [ 431.166130][T20394] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5067'. [ 431.515424][T20401] loop1: detected capacity change from 0 to 512 [ 431.548982][T20401] EXT4-fs: Mount option(s) incompatible with ext3 [ 431.631212][T20401] netlink: 'syz.1.5070': attribute type 10 has an invalid length. [ 431.814745][T20404] tc_dump_action: action bad kind [ 431.915130][T20407] loop0: detected capacity change from 0 to 128 [ 432.109492][T20406] program syz.1.5072 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 432.150038][T20406] bridge0: entered allmulticast mode [ 432.538047][T20420] loop1: detected capacity change from 0 to 512 [ 432.582555][T20420] EXT4-fs: Mount option(s) incompatible with ext3 [ 432.620164][T20420] netlink: 'syz.1.5075': attribute type 10 has an invalid length. [ 432.778889][T20422] serio: Serial port ptm0 [ 432.924154][T20433] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5076'. [ 433.188587][T20436] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5079'. [ 433.197789][T20436] team0: Unable to change to the same mode the team is in [ 433.261393][T20439] loop0: detected capacity change from 0 to 2048 [ 433.320903][T20439] ext4 filesystem being mounted at /424/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 433.870024][T20448] loop1: detected capacity change from 0 to 512 [ 433.928274][T20448] EXT4-fs (loop1): orphan cleanup on readonly fs [ 433.937498][T20448] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.5083: bg 0: block 248: padding at end of block bitmap is not set [ 433.955410][T20448] EXT4-fs error (device loop1): ext4_acquire_dquot:6935: comm syz.1.5083: Failed to acquire dquot type 1 [ 433.967955][T20448] EXT4-fs (loop1): 1 truncate cleaned up [ 433.984395][T20448] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 433.991043][T20448] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 433.998546][T20448] vhci_hcd vhci_hcd.0: Device attached [ 434.018740][T20448] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5083'. [ 434.027759][T20448] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5083'. [ 434.042355][T20450] loop5: detected capacity change from 0 to 256 [ 434.090537][T20448] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 434.114958][T20448] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 434.127627][T20451] vhci_hcd: connection closed [ 434.129243][ T5870] vhci_hcd: stop threads [ 434.138847][ T5870] vhci_hcd: release socket [ 434.144507][ T5870] vhci_hcd: disconnect device [ 434.193763][ T3385] vhci_hcd: vhci_device speed not set [ 434.338670][T20454] Process accounting resumed [ 434.442652][T20467] loop0: detected capacity change from 0 to 2048 [ 434.476871][T20467] ext4 filesystem being mounted at /428/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 434.588140][T20467] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.5089: bg 0: block 345: padding at end of block bitmap is not set [ 434.606193][T20467] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 312 with error 117 [ 434.619356][T20467] EXT4-fs (loop0): This should not happen!! Data will be lost [ 434.619356][T20467] [ 434.634159][T20472] netlink: 60 bytes leftover after parsing attributes in process `syz.5.5090'. [ 434.654453][T20472] team0: Mode changed to "loadbalance" [ 434.660779][T20474] loop2: detected capacity change from 0 to 2048 [ 434.696778][T20474] ext4 filesystem being mounted at /521/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 434.718846][T20474] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.5091: bg 0: block 345: padding at end of block bitmap is not set [ 434.726021][T20478] loop1: detected capacity change from 0 to 512 [ 434.741668][T20474] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 434.762941][T20478] EXT4-fs: Mount option(s) incompatible with ext3 [ 434.804512][T20478] netlink: 'syz.1.5092': attribute type 10 has an invalid length. [ 434.860431][T20484] loop2: detected capacity change from 0 to 512 [ 434.884964][T20484] EXT4-fs (loop2): orphan cleanup on readonly fs [ 434.896890][T20484] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.5095: bg 0: block 248: padding at end of block bitmap is not set [ 434.915434][T20484] __quota_error: 44 callbacks suppressed [ 434.915450][T20484] Quota error (device loop2): write_blk: dquota write failed [ 434.929509][T20484] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 434.939689][T20484] EXT4-fs error (device loop2): ext4_acquire_dquot:6935: comm syz.2.5095: Failed to acquire dquot type 1 [ 434.969441][T20484] EXT4-fs (loop2): 1 truncate cleaned up [ 434.993897][T20484] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 435.000580][T20484] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 435.008179][T20484] vhci_hcd vhci_hcd.0: Device attached [ 435.015251][ T29] audit: type=1326 audit(1747616397.778:11354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20497 comm="syz.1.5101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f781dcfe969 code=0x7ffc0000 [ 435.039167][ T29] audit: type=1326 audit(1747616397.778:11355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20497 comm="syz.1.5101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f781dcfe969 code=0x7ffc0000 [ 435.063937][T20484] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5095'. [ 435.073832][T20496] loop0: detected capacity change from 0 to 2048 [ 435.084633][T20484] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 435.098107][ T29] audit: type=1326 audit(1747616397.778:11356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20497 comm="syz.1.5101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f781dcfe969 code=0x7ffc0000 [ 435.122292][ T29] audit: type=1326 audit(1747616397.778:11357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20501 comm="syz.1.5101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f781dd31225 code=0x7ffc0000 [ 435.147385][ T29] audit: type=1326 audit(1747616397.778:11358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20497 comm="syz.1.5101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f781dcfe969 code=0x7ffc0000 [ 435.172835][ T29] audit: type=1326 audit(1747616397.778:11359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20497 comm="syz.1.5101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=234 compat=0 ip=0x7f781dcfe969 code=0x7ffc0000 [ 435.174698][T20484] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 435.197425][ T29] audit: type=1326 audit(1747616397.778:11360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20497 comm="syz.1.5101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f781dcfe969 code=0x7ffc0000 [ 435.230447][ T29] audit: type=1326 audit(1747616397.778:11361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20497 comm="syz.1.5101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f781dcfe969 code=0x7ffc0000 [ 435.237270][T20496] ext4 filesystem being mounted at /431/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 435.278511][T20504] loop1: detected capacity change from 0 to 2048 [ 435.298487][T20499] vhci_hcd: connection closed [ 435.299495][ T1581] vhci_hcd: stop threads [ 435.308867][ T1581] vhci_hcd: release socket [ 435.313511][ T1581] vhci_hcd: disconnect device [ 435.353648][ T1038] vhci_hcd: vhci_device speed not set [ 435.360910][T20504] ext4 filesystem being mounted at /341/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 435.390242][T20504] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.5103: bg 0: block 345: padding at end of block bitmap is not set [ 435.408920][T20504] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 435.411530][T20496] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.5100: bg 0: block 345: padding at end of block bitmap is not set [ 435.432833][T20518] loop3: detected capacity change from 0 to 512 [ 435.440278][T20496] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 312 with error 117 [ 435.453172][T20496] EXT4-fs (loop0): This should not happen!! Data will be lost [ 435.453172][T20496] [ 435.476531][T20518] EXT4-fs (loop3): orphan cleanup on readonly fs [ 435.490121][T20518] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.5105: bg 0: block 248: padding at end of block bitmap is not set [ 435.508566][T20518] EXT4-fs error (device loop3): ext4_acquire_dquot:6935: comm syz.3.5105: Failed to acquire dquot type 1 [ 435.522075][T20518] EXT4-fs (loop3): 1 truncate cleaned up [ 435.538657][T20522] vlan2: entered allmulticast mode [ 435.560299][T20518] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 435.566955][T20518] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 435.574634][T20518] vhci_hcd vhci_hcd.0: Device attached [ 435.583219][T20523] vhci_hcd: connection closed [ 435.583294][ T1581] vhci_hcd: stop threads [ 435.592620][ T1581] vhci_hcd: release socket [ 435.597124][ T1581] vhci_hcd: disconnect device [ 435.651662][T20528] loop0: detected capacity change from 0 to 2048 [ 435.675770][T20528] ext4 filesystem being mounted at /433/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 435.689400][T20534] wireguard0: entered promiscuous mode [ 435.690492][T20528] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.5108: bg 0: block 345: padding at end of block bitmap is not set [ 435.695375][T20534] wireguard0: entered allmulticast mode [ 435.710792][T20528] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 435.906739][T20544] loop1: detected capacity change from 0 to 8192 [ 436.125173][ T36] Process accounting resumed [ 436.135002][T20559] loop2: detected capacity change from 0 to 512 [ 436.173359][T20559] EXT4-fs (loop2): orphan cleanup on readonly fs [ 436.196001][T20569] wireguard0: entered promiscuous mode [ 436.201814][T20569] wireguard0: entered allmulticast mode [ 436.214423][T20559] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.5118: bg 0: block 248: padding at end of block bitmap is not set [ 436.231690][T20567] serio: Serial port ptm0 [ 436.259957][T20559] EXT4-fs error (device loop2): ext4_acquire_dquot:6935: comm syz.2.5118: Failed to acquire dquot type 1 [ 436.272620][T20559] EXT4-fs (loop2): 1 truncate cleaned up [ 436.292548][T20559] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 436.299140][T20559] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 436.307069][T20559] vhci_hcd vhci_hcd.0: Device attached [ 436.318616][T20559] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5118'. [ 436.328232][T20559] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5118'. [ 436.352790][T20559] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 436.378455][T20581] loop5: detected capacity change from 0 to 2048 [ 436.397281][T20559] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 436.438267][T20576] vhci_hcd: connection closed [ 436.444125][ T1581] vhci_hcd: stop threads [ 436.450291][T20589] loop3: detected capacity change from 0 to 2048 [ 436.453771][ T1581] vhci_hcd: release socket [ 436.453788][ T1581] vhci_hcd: disconnect device [ 436.462836][T20581] ext4 filesystem being mounted at /247/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 436.469513][T20587] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5125'. [ 436.494467][T20581] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.5123: bg 0: block 345: padding at end of block bitmap is not set [ 436.497638][ T36] vhci_hcd: vhci_device speed not set [ 436.510104][T20581] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 436.528299][T20589] ext4 filesystem being mounted at /379/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 436.659466][T20601] loop1: detected capacity change from 0 to 512 [ 436.668581][T20601] EXT4-fs (loop1): orphan cleanup on readonly fs [ 436.676664][T20601] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.5129: bg 0: block 248: padding at end of block bitmap is not set [ 436.697540][T20601] EXT4-fs error (device loop1): ext4_acquire_dquot:6935: comm syz.1.5129: Failed to acquire dquot type 1 [ 436.732024][T20601] EXT4-fs (loop1): 1 truncate cleaned up [ 436.759719][T20601] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 436.766995][T20601] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 436.775406][T20601] vhci_hcd vhci_hcd.0: Device attached [ 436.787794][T20607] vhci_hcd: connection closed [ 436.787986][ T1581] vhci_hcd: stop threads [ 436.797632][ T1581] vhci_hcd: release socket [ 436.802139][ T1581] vhci_hcd: disconnect device [ 436.837255][T20610] loop5: detected capacity change from 0 to 8192 [ 437.039046][T20617] loop2: detected capacity change from 0 to 2048 [ 437.080416][T20617] ext4 filesystem being mounted at /528/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 437.131016][T20617] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.5134: bg 0: block 345: padding at end of block bitmap is not set [ 437.147329][T20617] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 312 with error 117 [ 437.160545][T20617] EXT4-fs (loop2): This should not happen!! Data will be lost [ 437.160545][T20617] [ 437.212080][T11793] EXT4-fs unmount: 31 callbacks suppressed [ 437.212102][T11793] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 437.263922][T20626] wireguard1: entered promiscuous mode [ 437.270006][T20626] wireguard1: entered allmulticast mode [ 437.302866][T14015] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 437.419114][T20638] vlan2: entered allmulticast mode [ 437.469248][T20643] loop0: detected capacity change from 0 to 512 [ 437.509164][T20643] EXT4-fs (loop0): orphan cleanup on readonly fs [ 437.526030][T20643] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.5143: bg 0: block 248: padding at end of block bitmap is not set [ 437.564181][T20643] EXT4-fs error (device loop0): ext4_acquire_dquot:6935: comm syz.0.5143: Failed to acquire dquot type 1 [ 437.601534][T20643] EXT4-fs (loop0): 1 truncate cleaned up [ 437.609682][T20643] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 437.628617][T20655] loop2: detected capacity change from 0 to 2048 [ 437.638072][T20643] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9) [ 437.645013][T20643] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 437.653159][T20643] vhci_hcd vhci_hcd.0: Device attached [ 437.661037][T20643] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5143'. [ 437.670575][T20643] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5143'. [ 437.673266][T20655] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 437.693310][T20655] ext4 filesystem being mounted at /532/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 437.704143][T20661] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5146'. [ 437.718298][T20655] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.5147: bg 0: block 345: padding at end of block bitmap is not set [ 437.732998][T20643] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 437.733362][T20655] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 437.765226][T20643] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 437.774991][T20657] vhci_hcd: connection closed [ 437.775208][ T52] vhci_hcd: stop threads [ 437.784383][ T52] vhci_hcd: release socket [ 437.788832][ T52] vhci_hcd: disconnect device [ 437.807933][T11793] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 437.834046][ T1038] vhci_hcd: vhci_device speed not set [ 437.875203][T20673] loop1: detected capacity change from 0 to 2048 [ 437.911363][T20673] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 437.924129][T20673] ext4 filesystem being mounted at /352/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 437.944794][T20673] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.5151: bg 0: block 345: padding at end of block bitmap is not set [ 437.963475][T20673] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 437.978501][T20678] wireguard0: entered promiscuous mode [ 437.984182][T20678] wireguard0: entered allmulticast mode [ 437.993733][T14015] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 438.200132][T20689] vlan2: entered allmulticast mode [ 438.296709][T12583] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 438.399988][T20695] loop1: detected capacity change from 0 to 2048 [ 438.413072][T20697] loop3: detected capacity change from 0 to 512 [ 438.422703][T20697] EXT4-fs: Mount option(s) incompatible with ext3 [ 438.441354][T20695] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 438.455609][T20697] netlink: 'syz.3.5160': attribute type 10 has an invalid length. [ 438.467466][T20697] syz_tun: entered promiscuous mode [ 438.489607][T20697] syz_tun: entered allmulticast mode [ 438.492802][T20695] ext4 filesystem being mounted at /356/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 438.508651][T20697] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 438.563955][T20695] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.5159: bg 0: block 345: padding at end of block bitmap is not set [ 438.574186][T20699] program syz.5.5161 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 438.597731][T20695] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 438.608294][T20699] bridge0: entered allmulticast mode [ 438.661153][T14015] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 438.719616][T20718] loop2: detected capacity change from 0 to 512 [ 438.729712][T20712] loop3: detected capacity change from 0 to 8192 [ 438.748715][T20718] EXT4-fs (loop2): orphan cleanup on readonly fs [ 438.757790][ T1038] Process accounting resumed [ 438.772861][T20718] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.5167: bg 0: block 248: padding at end of block bitmap is not set [ 438.826966][T20726] loop0: detected capacity change from 0 to 2048 [ 438.837732][T20718] EXT4-fs error (device loop2): ext4_acquire_dquot:6935: comm syz.2.5167: Failed to acquire dquot type 1 [ 438.859055][ T3005] udevd[3005]: worker [5061] terminated by signal 33 (Unknown signal 33) [ 438.883758][ T3005] udevd[3005]: worker [5061] failed while handling '/devices/virtual/block/loop3' [ 438.884263][T13451] loop0: p1 < > p3 [ 438.914662][T20718] EXT4-fs (loop2): 1 truncate cleaned up [ 438.925117][T13451] loop0: p3 size 134217728 extends beyond EOD, truncated [ 438.935545][T20726] loop0: p1 < > p3 [ 438.940403][T20718] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 438.941085][T20726] loop0: p3 size 134217728 extends beyond EOD, truncated [ 438.990758][T20718] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 438.997387][T20718] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 439.005259][T20718] vhci_hcd vhci_hcd.0: Device attached [ 439.016415][T20718] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5167'. [ 439.025567][T20718] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5167'. [ 439.041764][T20735] vlan2: entered allmulticast mode [ 439.064065][T20736] loop1: detected capacity change from 0 to 2048 [ 439.082281][T20739] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 439.086733][T20738] loop0: detected capacity change from 0 to 512 [ 439.107654][T20736] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 439.111126][T13451] udevd[13451]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 439.120347][T20738] EXT4-fs (loop0): orphan cleanup on readonly fs [ 439.138215][T13455] udevd[13455]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 439.148808][T20739] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 439.159415][T20736] ext4 filesystem being mounted at /359/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 439.163670][T20731] vhci_hcd: connection closed [ 439.173307][ T52] vhci_hcd: stop threads [ 439.182616][ T52] vhci_hcd: release socket [ 439.187210][ T52] vhci_hcd: disconnect device [ 439.203768][ T3393] vhci_hcd: vhci_device speed not set [ 439.219682][T20745] serio: Serial port ptm0 [ 439.224105][T14015] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 439.234465][T20738] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.5173: bg 0: block 248: padding at end of block bitmap is not set [ 439.251718][T20738] EXT4-fs error (device loop0): ext4_acquire_dquot:6935: comm syz.0.5173: Failed to acquire dquot type 1 [ 439.276749][T20738] EXT4-fs (loop0): 1 truncate cleaned up [ 439.293080][T20738] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 439.317565][T20738] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 439.324671][T20738] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 439.332357][T20738] vhci_hcd vhci_hcd.0: Device attached [ 439.345735][T20738] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5173'. [ 439.364001][T20750] vhci_hcd: connection closed [ 439.364264][ T52] vhci_hcd: stop threads [ 439.373364][ T52] vhci_hcd: release socket [ 439.377912][ T52] vhci_hcd: disconnect device [ 439.677523][T20762] program syz.5.5179 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 439.690043][T11793] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 439.801876][T20769] loop2: detected capacity change from 0 to 8192 [ 439.828965][ T3005] udevd[3005]: worker [13451] terminated by signal 33 (Unknown signal 33) [ 439.838237][ T3005] udevd[3005]: worker [13451] failed while handling '/devices/virtual/block/loop2' [ 439.877192][T12583] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 439.991256][T20774] loop5: detected capacity change from 0 to 8192 [ 440.025617][T20778] team0: Unable to change to the same mode the team is in [ 440.845630][T20783] bridge0: entered allmulticast mode [ 440.940816][ T3393] Process accounting resumed [ 441.086899][T20803] loop2: detected capacity change from 0 to 512 [ 441.108829][T20805] __nla_validate_parse: 2 callbacks suppressed [ 441.108846][T20805] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5192'. [ 441.154408][T20803] EXT4-fs (loop2): orphan cleanup on readonly fs [ 441.175331][T20808] vlan2: entered allmulticast mode [ 441.274265][T20803] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.5193: bg 0: block 248: padding at end of block bitmap is not set [ 441.288916][T20812] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5192'. [ 441.319243][T20803] __quota_error: 44 callbacks suppressed [ 441.319263][T20803] Quota error (device loop2): write_blk: dquota write failed [ 441.332627][T20803] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 441.342783][T20803] EXT4-fs error (device loop2): ext4_acquire_dquot:6935: comm syz.2.5193: Failed to acquire dquot type 1 [ 441.366298][T20814] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5196'. [ 441.399026][T20803] EXT4-fs (loop2): 1 truncate cleaned up [ 441.405646][T20803] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 441.417437][T20814] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5196'. [ 441.427717][T20816] wireguard1: entered promiscuous mode [ 441.433341][T20816] wireguard1: entered allmulticast mode [ 441.440868][T20803] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 441.447619][T20803] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 441.455409][T20803] vhci_hcd vhci_hcd.0: Device attached [ 441.526025][T20803] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5193'. [ 441.534974][T20803] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5193'. [ 441.565774][T20818] vhci_hcd: connection closed [ 441.565948][ T12] vhci_hcd: stop threads [ 441.575087][ T12] vhci_hcd: release socket [ 441.579804][ T12] vhci_hcd: disconnect device [ 441.643896][ T3385] vhci_hcd: vhci_device speed not set [ 441.796144][T20831] loop1: detected capacity change from 0 to 8192 [ 442.115009][T11793] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 442.162545][ T3393] Process accounting resumed [ 442.302905][T20843] loop5: detected capacity change from 0 to 512 [ 442.329123][T20843] EXT4-fs (loop5): orphan cleanup on readonly fs [ 442.341701][T20843] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.5204: bg 0: block 248: padding at end of block bitmap is not set [ 442.358078][T20843] Quota error (device loop5): write_blk: dquota write failed [ 442.365891][T20843] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 442.376154][T20843] EXT4-fs error (device loop5): ext4_acquire_dquot:6935: comm syz.5.5204: Failed to acquire dquot type 1 [ 442.388944][T20843] EXT4-fs (loop5): 1 truncate cleaned up [ 442.401251][T20843] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 442.420210][T20843] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(9) [ 442.427311][T20843] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 442.435056][T20843] vhci_hcd vhci_hcd.0: Device attached [ 442.441975][T20847] loop2: detected capacity change from 0 to 2048 [ 442.456028][T20843] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5204'. [ 442.465898][T20843] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5204'. [ 442.479251][T20847] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 442.498985][T20847] ext4 filesystem being mounted at /543/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 442.503926][T20843] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended [ 442.519420][T20847] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.5205: bg 0: block 345: padding at end of block bitmap is not set [ 442.538971][T20847] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 442.559411][T20843] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 442.568181][T20853] Quota error (device loop5): do_check_range: Getting block 1536 out of range 0-5 [ 442.619045][T20848] vhci_hcd: connection closed [ 442.619457][ T52] vhci_hcd: stop threads [ 442.629361][ T52] vhci_hcd: release socket [ 442.631354][T11793] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 442.633989][ T52] vhci_hcd: disconnect device [ 442.643458][ T3393] vhci_hcd: vhci_device speed not set [ 442.672901][T20862] vlan2: entered allmulticast mode [ 442.688719][T20860] loop1: detected capacity change from 0 to 2048 [ 442.704939][T20860] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 442.717898][T20860] ext4 filesystem being mounted at /366/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 442.734995][T20860] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.5207: bg 0: block 345: padding at end of block bitmap is not set [ 442.778415][T14015] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 442.800042][T20869] loop2: detected capacity change from 0 to 512 [ 442.811199][T20869] EXT4-fs (loop2): orphan cleanup on readonly fs [ 442.819158][T20869] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.5212: bg 0: block 248: padding at end of block bitmap is not set [ 442.834711][T20869] Quota error (device loop2): write_blk: dquota write failed [ 442.842309][T20869] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 442.849385][T20872] loop1: detected capacity change from 0 to 2048 [ 442.852337][T20869] EXT4-fs error (device loop2): ext4_acquire_dquot:6935: comm syz.2.5212: Failed to acquire dquot type 1 [ 442.871600][T20869] EXT4-fs (loop2): 1 truncate cleaned up [ 442.878166][T20869] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 442.894385][T20869] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 442.901095][T20869] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 442.908872][T20869] vhci_hcd vhci_hcd.0: Device attached [ 442.910417][T20872] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 442.918839][T20869] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5212'. [ 442.927447][T20872] ext4 filesystem being mounted at /367/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 442.947972][T20869] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5212'. [ 442.958614][T20872] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.5211: bg 0: block 345: padding at end of block bitmap is not set [ 442.962541][T20875] vhci_hcd: connection closed [ 442.974887][T20872] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 442.976072][ T51] vhci_hcd: stop threads [ 442.993011][ T51] vhci_hcd: release socket [ 442.997521][ T51] vhci_hcd: disconnect device [ 443.025599][T14015] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 443.083331][T20881] loop1: detected capacity change from 0 to 512 [ 443.090656][T20881] EXT4-fs: Mount option(s) incompatible with ext3 [ 443.099777][T20881] netlink: 'syz.1.5214': attribute type 10 has an invalid length. [ 443.128008][T20883] tc_dump_action: action bad kind [ 443.147302][T16136] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 443.172007][T20885] serio: Serial port ptm0 [ 443.356049][T20890] serio: Serial port ptm0 [ 443.496064][T11793] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 443.600852][T20902] loop2: detected capacity change from 0 to 8192 [ 443.855669][T20917] loop5: detected capacity change from 0 to 8192 [ 444.037519][T20927] loop3: detected capacity change from 0 to 512 [ 444.045050][T20927] EXT4-fs: Mount option(s) incompatible with ext3 [ 444.100210][T20927] netlink: 'syz.3.5226': attribute type 10 has an invalid length. [ 444.239600][ T29] audit: type=1326 audit(1747616406.988:11392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20934 comm="syz.3.5229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb41635e969 code=0x7ffc0000 [ 444.264014][ T29] audit: type=1326 audit(1747616406.988:11393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20934 comm="syz.3.5229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb41635e969 code=0x7ffc0000 [ 444.288443][ T29] audit: type=1326 audit(1747616406.988:11394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20934 comm="syz.3.5229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7fb41635e969 code=0x7ffc0000 [ 444.443382][T20940] wireguard0: entered promiscuous mode [ 444.449299][T20940] wireguard0: entered allmulticast mode [ 444.640352][T20959] tc_dump_action: action bad kind [ 444.680879][T20961] loop0: detected capacity change from 0 to 2048 [ 444.722769][T20961] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 444.738710][T20961] ext4 filesystem being mounted at /457/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 444.828732][ T10] Process accounting resumed [ 444.873068][T20975] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.5236: bg 0: block 345: padding at end of block bitmap is not set [ 444.896861][T20975] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 444.941652][T20980] loop5: detected capacity change from 0 to 2048 [ 444.984591][T13446] loop5: p1 < > p3 [ 444.989536][T13446] loop5: p3 size 134217728 extends beyond EOD, truncated [ 445.010197][T20980] loop5: p1 < > p3 [ 445.018707][T20980] loop5: p3 size 134217728 extends beyond EOD, truncated [ 445.047223][ T3005] loop5: p1 < > p3 [ 445.064593][ T3005] loop5: p3 size 134217728 extends beyond EOD, truncated [ 445.081132][T12583] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 445.162531][ T3393] Process accounting resumed [ 445.195243][T13448] udevd[13448]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 445.197803][T13446] udevd[13446]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 445.225317][T13455] udevd[13455]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 445.237448][T13446] udevd[13446]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 445.279557][T20995] loop1: detected capacity change from 0 to 2048 [ 445.306419][T20995] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 445.321378][T20995] ext4 filesystem being mounted at /377/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 445.347221][T20985] loop2: detected capacity change from 0 to 8192 [ 445.388524][T14015] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 445.698838][T21017] serio: Serial port ptm0 [ 445.705831][T21020] loop1: detected capacity change from 0 to 2048 [ 445.725545][T21020] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 445.738978][T21020] ext4 filesystem being mounted at /380/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 445.822308][T21020] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.5255: bg 0: block 345: padding at end of block bitmap is not set [ 445.855478][T21020] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 130 with error 117 [ 445.868430][T21020] EXT4-fs (loop1): This should not happen!! Data will be lost [ 445.868430][T21020] [ 445.921463][T21028] loop3: detected capacity change from 0 to 2048 [ 445.951565][T21028] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 445.975397][T14015] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 445.991694][T21028] ext4 filesystem being mounted at /404/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 446.025622][T21039] tc_dump_action: action bad kind [ 446.057996][T21028] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.5257: bg 0: block 345: padding at end of block bitmap is not set [ 446.132233][T13355] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 446.257890][T21050] loop3: detected capacity change from 0 to 512 [ 446.287789][T21050] EXT4-fs (loop3): orphan cleanup on readonly fs [ 446.353660][T21050] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.5263: bg 0: block 248: padding at end of block bitmap is not set [ 446.386930][T21050] __quota_error: 19 callbacks suppressed [ 446.386947][T21050] Quota error (device loop3): write_blk: dquota write failed [ 446.403197][T21050] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 446.414068][T21050] EXT4-fs error (device loop3): ext4_acquire_dquot:6935: comm syz.3.5263: Failed to acquire dquot type 1 [ 446.414183][ T2994] ================================================================== [ 446.434364][ T2994] BUG: KCSAN: data-race in _prb_read_valid / data_alloc [ 446.441629][ T2994] [ 446.444034][ T2994] write to 0xffffffff86885678 of 8 bytes by task 21050 on cpu 1: [ 446.451878][ T2994] data_alloc+0x271/0x2b0 [ 446.456884][ T2994] prb_reserve+0x808/0xaf0 [ 446.461709][ T2994] vprintk_store+0x56d/0x860 [ 446.466607][ T2994] vprintk_emit+0x178/0x650 [ 446.471186][ T2994] vprintk_default+0x26/0x30 [ 446.475831][ T2994] vprintk+0x1d/0x30 [ 446.475866][ T2994] _printk+0x79/0xa0 [ 446.485296][ T2994] __ext4_error+0x248/0x320 [ 446.490571][ T2994] ext4_acquire_dquot+0x1bb/0x200 [ 446.496561][ T2994] dqget+0x535/0x8d0 [ 446.500691][ T2994] __dquot_initialize+0x20c/0x7c0 [ 446.506799][ T2994] dquot_initialize+0x1a/0x30 [ 446.512039][ T2994] ext4_process_orphan+0x32/0x1c0 [ 446.517459][ T2994] ext4_orphan_cleanup+0x6a8/0xa00 [ 446.522877][ T2994] ext4_fill_super+0x3171/0x34e0 [ 446.528559][ T2994] get_tree_bdev_flags+0x28e/0x300 [ 446.534854][ T2994] get_tree_bdev+0x1f/0x30 [ 446.539390][ T2994] ext4_get_tree+0x1c/0x30 [ 446.543913][ T2994] vfs_get_tree+0x57/0x1d0 [ 446.548531][ T2994] do_new_mount+0x207/0x680 [ 446.553076][ T2994] path_mount+0x4a4/0xb20 [ 446.557626][ T2994] __se_sys_mount+0x28f/0x2e0 [ 446.562542][ T2994] __x64_sys_mount+0x67/0x80 [ 446.567160][ T2994] x64_sys_call+0xd36/0x2fb0 [ 446.571835][ T2994] do_syscall_64+0xd0/0x1a0 [ 446.576649][ T2994] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 446.582661][ T2994] [ 446.584995][ T2994] read to 0xffffffff86885678 of 16 bytes by task 2994 on cpu 0: [ 446.592770][ T2994] _prb_read_valid+0x1bc/0x920 [ 446.597587][ T2994] prb_read_valid+0x3c/0x60 [ 446.602137][ T2994] syslog_print+0x23a/0x540 [ 446.606692][ T2994] do_syslog+0x52b/0x7e0 [ 446.611139][ T2994] __x64_sys_syslog+0x41/0x50 [ 446.615868][ T2994] x64_sys_call+0x2ea0/0x2fb0 [ 446.620828][ T2994] do_syscall_64+0xd0/0x1a0 [ 446.625476][ T2994] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 446.631933][ T2994] [ 446.634600][ T2994] Reported by Kernel Concurrency Sanitizer on: [ 446.640866][ T2994] CPU: 0 UID: 0 PID: 2994 Comm: klogd Not tainted 6.15.0-rc7-syzkaller #0 PREEMPT(voluntary) [ 446.652335][ T2994] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 446.662937][ T2994] ================================================================== [ 446.691255][T21050] EXT4-fs (loop3): 1 truncate cleaned up [ 446.698679][T21050] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 446.718283][T21050] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9) [ 446.724927][T21050] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 446.732980][T21050] vhci_hcd vhci_hcd.0: Device attached [ 446.742633][T21050] __nla_validate_parse: 6 callbacks suppressed [ 446.742665][T21050] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5263'. [ 446.758173][T21050] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5263'. [ 446.772549][T21050] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 446.784000][T21050] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 446.793438][T21050] Quota error (device loop3): do_check_range: Getting block 1536 out of range 0-5 [ 446.804517][T21055] vhci_hcd: connection closed [ 446.805049][ T1581] vhci_hcd: stop threads [ 446.814535][ T1581] vhci_hcd: release socket [ 446.819083][ T1581] vhci_hcd: disconnect device [ 447.315750][T13355] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.