last executing test programs: 3.020478935s ago: executing program 3 (id=1830): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000d00)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r2, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) 2.947432041s ago: executing program 1 (id=1832): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b708000000003b6f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0x8}, 0x18) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x3000003, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) read$msr(0xffffffffffffffff, 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r2, 0x4004743d, 0x110e22fff6) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000140)={0x2001}) close(r1) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r5, &(0x7f0000000080), 0x10) listen(r5, 0x0) accept4$llc(r5, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000080), 0x1, 0x553, &(0x7f0000001080)="$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") creat(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10) creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xec) creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000340), r6) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000380), r6) ioctl$LOOP_CTL_REMOVE(r7, 0x4c81, 0x0) 2.911788443s ago: executing program 4 (id=1834): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2008002, &(0x7f0000000080), 0x1, 0x55c, &(0x7f00000006c0)="$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") r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ppoll(&(0x7f0000000000)=[{r0, 0x211}], 0x1, 0x0, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0), 0x4) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) memfd_secret(0x80000) socket$nl_netfilter(0x10, 0x3, 0xc) bind$bt_hci(r2, 0x0, 0x0) socket(0x10, 0x3, 0x0) ftruncate(0xffffffffffffffff, 0x1ff) r3 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(0x0, r3) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r4 = memfd_create(&(0x7f00000003c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,U\xb1]*\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3S\xef}\xfd\x12\xbc:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec=\x9e\xc3\xfd\x85d\x0fl5\xf3\xbe\" 6\r<\xea\x8dz\xcf6\x99\x91\xear8p\xaaR\xd5\xa6\xab#N>\x9a\xdf\xea\x009\xfbB\xc1\xd0_\xc0\'Z\xeb\xd8\xaf\xf0\'J\xe2\xff\xe5x*;(p\xf7p\xce\xbb\xa7\xfe\x04\xd0t\x81\x1a\x1b?m/\x1ex\xf8\x88^\xbaU\xb9\xa6\xab\x8d\a\xa6\"\xd9\x13\xeb\xe2\rh\x8dsx\xaa!\xd5Q\xf8\xce*\x95\x0es\xfaZ\x94t\x19\xdc\xdc\xcf\x0f\x9a\xa2O>\xb9\xfc\x01\fW\xee\xffh\xbd\xb2\xb4z\xeb\x84\x13\x13u\x8f\xe2\\Z\xef\xa3\xe1c\xc5\xe6', 0x0) write$bt_hci(r4, &(0x7f0000000080)=ANY=[@ANYBLOB="01"], 0x2b) execveat(r4, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 2.602708058s ago: executing program 3 (id=1841): bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00cac6af03004000000000b7ff000000800000000000bce134be1af9b1831b1203ac9026c915adfc2d42bc19986c26d87f0a2bbdc11d774a9168285ee1969a69bac21535cb6a56372dac3f4a7478db633efc", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0e000000040000000800000010"], 0x50) socket(0x2, 0x80805, 0x2) ptrace$cont(0x1f, 0xffffffffffffffff, 0x4689, 0x8000000000000000) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="00e22df904c986e49e00"], 0x50) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080), 0x4) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@migrate={0xa0, 0x21, 0x1, 0xfffffffc, 0x0, {{@in=@private=0xa010101, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x100000}, [@migrate={0x50, 0x11, [{@in6=@ipv4={'\x00', '\xff\xff', @local}, @in6=@mcast1, @in=@private=0xa010102, @in6=@private2, 0x3c, 0x0, 0x0, 0x0, 0x2, 0x2}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0xc}, 0x0) rt_tgsigqueueinfo(0x0, 0x0, 0x10, &(0x7f0000000780)={0x3f, 0x6008, 0x8}) bpf$TOKEN_CREATE(0x24, &(0x7f00000002c0)={0x0, r0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4882d48f}, 0x94) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x44, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x20000000, 0x4b}, 0x10, 0x0, 0x0, 0x1, 0x10000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x20042, 0x1) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r6, 0x0, 0xfffffffffffffffe}, 0x18) fallocate(r4, 0x0, 0x0, 0x8000c62) 2.058897603s ago: executing program 1 (id=1854): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x88e, &(0x7f0000000d80)={[{@mblk_io_submit}, {@dioread_nolock}, {@bh}, {@errors_continue}, {@nouid32}, {@quota}, {@nogrpid}]}, 0x3, 0x445, &(0x7f0000000800)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='io_uring_defer\x00', r0}, 0x18) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) fdatasync(r0) r1 = socket$inet_udp(0x2, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="05000000050000000200000004"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a000000010000003f00000040"], 0x48) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000010900010073797a30000000003c000000090a010400000000000000000700001008000a40000000000900020073797a31000000000900010073797a300000000008000540000000258c0000000c0a01030000000000000000070000080900020073797a31000000000900010073797a3000000000600003805c0000800800034000000001"], 0x110}}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b703000000000000850000000400000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000300)='tlb_flush\x00', r4}, 0x10) syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) sendmsg$TIPC_NL_NET_GET(r0, &(0x7f0000000680)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000540)={&(0x7f00000010c0)=ANY=[@ANYBLOB="9802", @ANYRES16, @ANYBLOB="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"], 0x298}, 0x1, 0x0, 0x0, 0x4004011}, 0x40000) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffd}, [@call={0x85, 0x0, 0x0, 0xb2}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0) keyctl$KEYCTL_CAPABILITIES(0x1f, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_usb_connect$hid(0x2, 0x0, 0x0, 0x0) 2.057600053s ago: executing program 4 (id=1855): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14, 0x0, 0x20, 0x70bd29, 0x3}, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000020000001c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x15c, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in6=@rand_addr=' \x01\x00', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x4e21, 0x2, 0x0, 0x0, 0x0, 0x6c, 0x0, 0xee00}, {@in6=@private1, 0xfe, 0x32}, @in=@multicast2, {0x0, 0x0, 0x0, 0x9, 0xffffffff00000001, 0x0, 0x80000001, 0x543}, {0x4, 0x7fffffffffffffff, 0x0, 0x1}, {}, 0x70bd2c, 0x3500, 0xa, 0x0, 0x0, 0x50}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "210466d38547aa140db9a200000000c538c7cb7a"}}, @offload={0xc, 0x1c, {r3, 0x3}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2000) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000200100000102"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x18) r6 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x3}, 0x8) sendto$inet6(r6, &(0x7f0000000000)="aa", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x6}, 0x3}, 0x1c) socket$inet6(0xa, 0x5, 0x400) r7 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18020000000000020000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0xfffffffffffffd09}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={r9, r8, 0x25, 0x2}, 0x14) syz_emit_ethernet(0x3e, &(0x7f0000000140)=ANY=[], 0x0) shutdown(r6, 0x1) 1.873180688s ago: executing program 4 (id=1860): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r0}, 0x18) symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f00000017c0)='./file0\x00') syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f00000005c0)={[{@nolazytime}, {@jqfmt_vfsold}, {@journal_path={'journal_path', 0x3d, './file0/../file0'}}, {@noquota}, {@nodioread_nolock}, {@journal_checksum}, {@data_err_abort}], [{@seclabel}]}, 0x3, 0x473, &(0x7f0000000640)="$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") 1.71995455s ago: executing program 4 (id=1862): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d000000181100", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b7"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_xfrm(r0, 0x0, 0x20004040) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0xf, &(0x7f0000000900)=@ringbuf={{}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x2e}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1) r2 = memfd_secret(0x80000) syz_emit_ethernet(0x194, &(0x7f00000003c0)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x15e, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80, [{0x0, 0x4, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad"}, {0x0, 0x1, "000000050000"}, {0x5, 0x17, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731"}, {0x0, 0x7, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551"}, {0x0, 0x4, "5e14f0e7e72d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a"}, {0x3}]}}}}}}, 0x0) fcntl$setlease(r2, 0x400, 0x0) close(r2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000010004b240000000000007a00c40d0000", @ANYRES32=0x0, @ANYBLOB="408800000000000018001280080001"], 0x38}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) 1.620222868s ago: executing program 4 (id=1863): bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000001280)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) ioprio_set$pid(0x2, 0x0, 0x0) 1.616505109s ago: executing program 3 (id=1864): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b708000000003b6f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0x8}, 0x18) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x3000003, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) read$msr(0xffffffffffffffff, 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r2, 0x4004743d, 0x110e22fff6) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000140)={0x2001}) close(r1) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r5, &(0x7f0000000080), 0x10) listen(r5, 0x0) accept4$llc(r5, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000080), 0x1, 0x553, &(0x7f0000001080)="$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") creat(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10) creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xec) creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000340), r6) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000380), r6) ioctl$LOOP_CTL_REMOVE(r7, 0x4c81, 0x0) 1.610888119s ago: executing program 0 (id=1865): socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) pwrite64(r0, &(0x7f0000000080)='3', 0x1, 0x0) 1.60609531s ago: executing program 4 (id=1866): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000d00)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket$netlink(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r3, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000005c0)=ANY=[@ANYRESHEX=r0, @ANYRESOCT=r3, @ANYBLOB="0cdd1ff972dae5673cd32332499f8308206b12d757a0100de9a05d853d394c55f771dd47353d1a26ea217f9db6566a7309379d2004378832befed5202e2097f4e3fbbd9fd5b3f47a67b632b2a2bf27d1cf803c66c5d16c1e1a894153ded1b71918500319e2df27f1d681ed144ac3e00cc21ab1a79d5cfa72ffb2656ab80e7819f2"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x101000, 0x2) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0d030000000000000000130000001c000980080002"], 0x30}}, 0x800) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x80, 0x0) r8 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) write$selinux_validatetrans(r8, &(0x7f0000000300)={'system_u:object_r:restorecond_var_run_t:s0', 0x20, 'system_u:object_r:groupadd_exec_t:s0', 0x20, 0x2, 0x20, '/usr/lib/telepathy/mission-control-5\x00'}, 0x8a) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r9}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r10}, 0x10) r11 = syz_io_uring_setup(0x5c2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x4}, &(0x7f0000000300)=0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r12, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r12, r13, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x1e, 0x0, 0x0, 0x3, &(0x7f0000000280)={0x0, 0x989680}}) io_uring_enter(r11, 0x6e2, 0x3900, 0x1, 0x0, 0xe00) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x2}) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079d}) socketpair(0x1, 0x1, 0x1, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r7, 0x400454cd, 0x30a) ioctl$PERF_EVENT_IOC_SET_FILTER(r14, 0x8914, &(0x7f0000000080)) 1.547280894s ago: executing program 0 (id=1867): ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xf57f}}, './file0\x00'}) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8d8000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELOBJ={0x20, 0x14, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x48}, 0x1, 0x0, 0x0, 0x48000}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x0, 0xc, &(0x7f00000004c0)=ANY=[@ANYRESOCT=r2, @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r4 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x401}}, &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x40, '\x00', r5, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x102}, 0x94) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0xe, 0xb}}}, 0x24}}, 0x800) r10 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000100)={r6, r11, 0x25, 0x0, @void}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r12}, 0x10) close(0xffffffffffffffff) unshare(0x40000000) 1.298597894s ago: executing program 0 (id=1868): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xb, &(0x7f00000004c0)=ANY=[], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000002401000001"], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000001280)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000840)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c}}]}, 0x4c}}, 0x0) 1.279646346s ago: executing program 0 (id=1869): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x88e, &(0x7f0000000d80)={[{@mblk_io_submit}, {@dioread_nolock}, {@bh}, {@errors_continue}, {@nouid32}, {@quota}, {@nogrpid}]}, 0x3, 0x445, &(0x7f0000000800)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='io_uring_defer\x00', r0}, 0x18) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) fdatasync(r0) r1 = socket$inet_udp(0x2, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="05000000050000000200000004"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a000000010000003f00000040"], 0x48) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000010900010073797a30000000003c000000090a010400000000000000000700001008000a40000000000900020073797a31000000000900010073797a300000000008000540000000258c0000000c0a01030000000000000000070000080900020073797a31000000000900010073797a3000000000600003805c0000800800034000000001"], 0x110}}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b703000000000000850000000400000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000300)='tlb_flush\x00', r4}, 0x10) syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) sendmsg$TIPC_NL_NET_GET(r0, &(0x7f0000000680)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000540)={&(0x7f00000010c0)=ANY=[@ANYBLOB="9802", @ANYRES16, @ANYBLOB="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"], 0x298}, 0x1, 0x0, 0x0, 0x4004011}, 0x40000) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffd}, [@call={0x85, 0x0, 0x0, 0xb2}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0) keyctl$KEYCTL_CAPABILITIES(0x1f, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_usb_connect$hid(0x2, 0x0, 0x0, 0x0) 985.39356ms ago: executing program 2 (id=1873): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000070000000300000048"], 0x48) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000240), &(0x7f0000000280)=r1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sys_enter\x00', r1}, 0x18) pwrite64(0xffffffffffffffff, &(0x7f0000000140)='2', 0x155c2, 0x8000c64) 935.748774ms ago: executing program 2 (id=1874): socket(0x1e, 0x4, 0xc) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) gettid() r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000006c0), 0x2000) read(r0, &(0x7f0000000200)=""/209, 0x128) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x2bd, @tick=0x5}) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000740)={0xfffffffb, 0x2, 0x1, 'queue0\x00'}) vmsplice(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f00000002c0)}, {&(0x7f00000001c0)="2d2a71261177cf1a", 0x8}], 0x2, 0x2) 934.520134ms ago: executing program 1 (id=1875): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket(0x10, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000020000001c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x15c, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in6=@rand_addr=' \x01\x00', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x4e21, 0x2, 0x0, 0x0, 0x0, 0x6c, 0x0, 0xee00}, {@in6=@private1, 0xfe, 0x32}, @in=@multicast2, {0x0, 0x0, 0x0, 0x9, 0xffffffff00000001, 0x0, 0x80000001, 0x543}, {0x4, 0x7fffffffffffffff, 0x0, 0x1}, {}, 0x70bd2c, 0x3500, 0xa, 0x0, 0x0, 0x50}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "210466d38547aa140db9a200000000c538c7cb7a"}}, @offload={0xc, 0x1c, {r3, 0x3}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2000) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000200100000102"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x18) r7 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r7, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x3}, 0x8) sendto$inet6(r7, &(0x7f0000000000)="aa", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x6}, 0x3}, 0x1c) socket$inet6(0xa, 0x5, 0x400) r8 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18020000000000020000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0xfffffffffffffd09}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={r10, r9, 0x25, 0x2}, 0x14) syz_emit_ethernet(0x3e, &(0x7f0000000140)=ANY=[], 0x0) shutdown(r7, 0x1) 873.135989ms ago: executing program 1 (id=1876): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x6, &(0x7f0000000640)=0x8) preadv(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) getpid() fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r0}, 0x10) timerfd_create(0x8, 0x0) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbac, &(0x7f00000017c0)="$eJzs3M1rXOUaAPDnnEy+c5v0crn3tggGpCqK07QpFbpqXYsKunDZmExKyPTDJIIJXaR1ry5EXBSkf4Lg3m5cCS7qQutfUMQiRTdtFyNnPtKxk5nGdGaOSX8/eHPe97wn8zxPTmfOe2BOA3hqTWc/0ohDEXE2iZis708jYqjaG4nYrB13/+7l+awlUam8/VsSSUTcu3t5vvFaSX07Xh+MRMTN15L490etcVfXN5bnyuXSSn18dO38paOr6xuvLJ2fO1c6V7pwYvbVE7MnZ2e7WOvtS+998cwPbzx/9frHM29+fuC7JE7HRH2uuY5umY7prb9Js0JEzHU7WE4G6vU015kUckwIAICO0qY13H9jMgbi4eJtMr79MdfkAAAAgK6oDERUAAAAgH0ucf8PAAAA+1zjewD37l6eb7R8v5HQX3fORMRUrf7G8821mUJsVrcjMRgRY78n0fxYa1L7tSc2nUX6+vtS1qJHzyF3snklIv6/3flPqvVPVZ/ibq0/jYiZLsSffmS8l+o/3YX4edcPwNPpxpnahaz1+pdurX9im+tfYZtr127kff1rrP/ut6z/HtY/0Gb999YOYxx+8NLNdnPN6793P/l5IYufbZ+oqL/hzpWIw4Xt6k+26k/a1H92hzHG529fazeX1Z/V22j9rr9yPeJIdTXXWn9D0un/Jzq6uFQuzdR+bvP66yc7x28+/1nL4jfuBfohO/9jsbvzf2mHMab+9+uhdnOPrz/9ZSh5p9obqu/5cG5tbeVYxFDyeuv+451zaRzTeI2s/hef6/z+367+7DNhs/53yP71XKlvs/HVR2KOHzn+1e7r762s/oVdnv9Pdxjjy2+uvd9uLu/6AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANgb0oiYiCQtbvXTtFiMGI+I/8RYWr64uvby4sUPLixkcxFTMZguLpVLMxExWRsn2fhYtf9wfPyR8WxEHIyIzyZHq+Pi/MXyQt7FAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsGU8IiYiSYsRkUbEH5NpWizmnRUAAADQdVN5JwAAAAD0nPt/AAAA2P9a7v8LfxmN9DMXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9qWDz964lUTE5qnRassM1ecGc80M6LV0Z4eN9ToPoP8G8k4AyE2hqV+pVCo5pgL0mXt8IHnM/EjbmeGu5wIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAP9cLh27cSiJi89RotWWG6nODuWYG9FqadwJAbgY6TSaP3QHsYYW8EwBy4x4fqK3sH1RqWudH2v7m8BNHBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGDvmKi2JC1GRFrtp2mxGPGviJiKwWRxqVyaiYgDEfHT5OBwNj6Wd9IAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB03er6xvJcuVxa0dHR6WJnNPoWa7T+Zm5zzHD7qQ6dnD+YAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADIxer6xvJcuVxaWc07EwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACBvq+sby3Plcmmlh528awQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID9/BgAA///GyAmy") mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) 840.506882ms ago: executing program 1 (id=1877): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100), 0x4) r1 = syz_io_uring_setup(0x2f90, &(0x7f0000000180)={0x0, 0xc474, 0x3850, 0x2, 0x200004}, &(0x7f0000000100), &(0x7f0000000140)) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000002c0)='./file0\x00', 0x10, &(0x7f0000000600), 0x1, 0x59d, &(0x7f0000001100)="$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") r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000500)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f00000005c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000540)={&(0x7f00000016c0)=ANY=[@ANYBLOB="f0110000", @ANYRES16=r3, @ANYBLOB="000425bd7000fbdbdf258900000008000300", @ANYRES32=r4, @ANYBLOB="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"], 0x11f0}, 0x1, 0x0, 0x0, 0x24000003}, 0x4000) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1e, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0xb10, 0x7}, 0x0, 0x2, 0xfffff7f0, 0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r6 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x96, 0x1, 0x0, 0x0, 0x0, 0x0, 0xa120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x40082406, &(0x7f0000000900)='cpu<02||!') bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000000000000000000004b84ffec850000006d000000850000002a00000095"], &(0x7f0000000340)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r7}, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000003e000701fcfffffff6dbdf25017c0000080003"], 0x1c}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000080)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="b60a0000ff77c32071cc0000000061114800010000a9b35c4f846f9f120000002008000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffc42}, 0x58) utime(&(0x7f0000000080)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) chmod(&(0x7f0000000340)='./file1\x00', 0x0) r9 = epoll_create(0xaf2) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r1, &(0x7f0000000080)={0xe000200f}) 770.660188ms ago: executing program 1 (id=1878): bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00cac6af03004000000000b7ff000000800000000000bce134be1af9b1831b1203ac9026c915adfc2d42bc19986c26d87f0a2bbdc11d774a9168285ee1969a69bac21535cb6a56372dac3f4a7478db633efc", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0e000000040000000800000010"], 0x50) socket(0x2, 0x80805, 0x2) ptrace$cont(0x1f, 0xffffffffffffffff, 0x4689, 0x8000000000000000) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="00e22df904c986e49e00"], 0x50) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080), 0x4) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@migrate={0xa0, 0x21, 0x1, 0xfffffffc, 0x0, {{@in=@private=0xa010101, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x100000}, [@migrate={0x50, 0x11, [{@in6=@ipv4={'\x00', '\xff\xff', @local}, @in6=@mcast1, @in=@private=0xa010102, @in6=@private2, 0x3c, 0x0, 0x0, 0x0, 0x2, 0x2}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0xc}, 0x0) rt_tgsigqueueinfo(0x0, 0x0, 0x10, &(0x7f0000000780)={0x3f, 0x6008, 0x8}) bpf$TOKEN_CREATE(0x24, &(0x7f00000002c0)={0x0, r0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4882d48f}, 0x94) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x44, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x20000000, 0x4b}, 0x10, 0x0, 0x0, 0x1, 0x10000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x20042, 0x1) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) fallocate(r4, 0x0, 0x0, 0x8000c62) 711.296482ms ago: executing program 3 (id=1879): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xb, &(0x7f00000004c0)=ANY=[], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000002401000001"], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000001280)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000840)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c}}]}, 0x4c}}, 0x0) 668.256406ms ago: executing program 3 (id=1880): bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000001280)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) ioprio_set$pid(0x2, 0x0, 0x0) 651.509167ms ago: executing program 3 (id=1881): ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xf57f}}, './file0\x00'}) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8d8000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELOBJ={0x20, 0x14, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x48}, 0x1, 0x0, 0x0, 0x48000}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x0, 0xc, &(0x7f00000004c0)=ANY=[@ANYRESOCT=r2, @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r4 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x401}}, &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x40, '\x00', r5, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x102}, 0x94) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0xe, 0xb}}}, 0x24}}, 0x800) r10 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000100)={r6, r11, 0x25, 0x0, @void}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r12}, 0x10) statx(r0, &(0x7f0000000440)='./file0\x00', 0x400, 0x7ff, &(0x7f00000005c0)) unshare(0x40000000) 462.901442ms ago: executing program 0 (id=1882): unshare(0x60600) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) 390.080148ms ago: executing program 0 (id=1883): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000005c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) readv(r4, &(0x7f0000001340)=[{&(0x7f00000001c0)=""/144, 0x90}], 0x1) readv(r4, &(0x7f0000001240)=[{&(0x7f0000000040)=""/73, 0x49}], 0x1) 83.043013ms ago: executing program 2 (id=1884): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000800000000000000000001811", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000046c0)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x8000000, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x2, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x40000000, 0x1000, 0x2, 0x0, 0x0, 0x8000002, 0x0, 0x7e150a0b, 0x0, 0x5, 0x0, 0x0, 0x0, 0x4, 0x0, 0x100000, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x10000, 0x5d2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x800000, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0xfffffffd, 0x0, 0x1007, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x3, 0x0, 0x1, 0x8, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, 0x9, 0x0, 0x0, 0x7, 0xfbfffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x3, 0x0, 0x0, 0x4fd, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x7e98263b, 0x9, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd2d1, 0x0, 0x0, 0xb2e, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0xff, 0x1000, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x6, 0xc3f3, 0x1, 0x0, 0x800, 0x9, 0x800, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0xfffffffe, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0xfffffffd, 0x0, 0x0, 0xd819ac9, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffffffff, 0x0, 0x0, 0x80000001, 0x0, 0x10, 0x20, 0x4, 0x400000b2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x8, 0x100, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x1, 0x4, 0xfffffffe, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, 0x20000040, 0xffffffff, 0x400, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0xaaf0]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x3, 0x0, 0x0, 0x0, 0xc0000001}, {0x3, 0x0, 0xb, 0x0, 0x0, 0xffffffff}, 0x7, 0x10, 0x2000000}}]}}]}, 0x45c}}, 0x0) 82.221403ms ago: executing program 2 (id=1885): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x11, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1802000000c3"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x6b, '\x00', 0x0, @fallback, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60e}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) symlink(&(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') readlink(&(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000540)=""/4073, 0x100e) 64.972975ms ago: executing program 2 (id=1886): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d000000181100", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b7"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_xfrm(r0, 0x0, 0x20004040) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0xf, &(0x7f0000000900)=@ringbuf={{}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x2e}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1) r2 = memfd_secret(0x80000) syz_emit_ethernet(0x194, &(0x7f00000003c0)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x15e, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80, [{0x0, 0x4, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad"}, {0x0, 0x1, "000000050000"}, {0x5, 0x17, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731"}, {0x0, 0x7, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551"}, {0x0, 0x4, "5e14f0e7e72d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a"}, {0x3}]}}}}}}, 0x0) fcntl$setlease(r2, 0x400, 0x0) close(r2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000010004b240000000000007a00c40d0000", @ANYRES32=0x0, @ANYBLOB="408800000000000018001280080001"], 0x38}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) 0s ago: executing program 2 (id=1887): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x6, &(0x7f0000000640)=0x8) preadv(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) getpid() fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r0}, 0x10) timerfd_create(0x8, 0x0) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbac, &(0x7f00000017c0)="$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") mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) kernel console output (not intermixed with test programs): 400 audit(1754992442.448:11002): avc: denied { ioctl } for pid=7045 comm="syz.1.1327" path="/dev/ppp" dev="devtmpfs" ino=140 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 103.332872][ T29] audit: type=1400 audit(1754992442.458:11003): avc: denied { write } for pid=7045 comm="syz.1.1327" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 103.355806][ T29] audit: type=1400 audit(1754992442.508:11004): avc: denied { create } for pid=7045 comm="syz.1.1327" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 103.375308][ T29] audit: type=1400 audit(1754992442.508:11005): avc: denied { bind } for pid=7045 comm="syz.1.1327" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 103.474806][ T7052] loop3: detected capacity change from 0 to 512 [ 103.483762][ T7052] journal_path: Lookup failure for './file0/../file0' [ 103.490553][ T7052] EXT4-fs: error: could not find journal device path [ 103.498035][ T7047] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.522846][ T7047] __nla_validate_parse: 5 callbacks suppressed [ 103.522859][ T7047] netlink: 204 bytes leftover after parsing attributes in process `syz.1.1327'. [ 103.641216][ T7057] loop2: detected capacity change from 0 to 4096 [ 103.655514][ T7057] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.672343][ T7057] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 103.727752][ T7063] loop3: detected capacity change from 0 to 1024 [ 103.737611][ T7063] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.1331: Failed to acquire dquot type 0 [ 103.749956][ T7063] EXT4-fs error (device loop3): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 103.770244][ T7065] loop0: detected capacity change from 0 to 1024 [ 103.777760][ T7063] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #13: comm syz.3.1331: corrupted inode contents [ 103.793728][ T7065] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.806389][ T7063] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #13: comm syz.3.1331: mark_inode_dirty error [ 103.824269][ T7063] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #13: comm syz.3.1331: corrupted inode contents [ 103.838525][ T7063] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #13: comm syz.3.1331: mark_inode_dirty error [ 103.851284][ T7063] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #13: comm syz.3.1331: corrupted inode contents [ 103.864209][ T7063] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 103.874310][ T7063] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #13: comm syz.3.1331: corrupted inode contents [ 103.887385][ T7063] EXT4-fs error (device loop3): ext4_truncate:4666: inode #13: comm syz.3.1331: mark_inode_dirty error [ 103.900298][ T7063] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 103.922258][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.933185][ T7063] EXT4-fs (loop3): 1 truncate cleaned up [ 103.940414][ T7063] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.081680][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.481136][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.636232][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.645706][ T7072] loop0: detected capacity change from 0 to 1024 [ 104.671865][ T7072] EXT4-fs: Ignoring removed orlov option [ 104.689679][ T7072] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.714329][ T7075] loop1: detected capacity change from 0 to 1024 [ 104.722757][ T7078] netlink: 'syz.3.1337': attribute type 4 has an invalid length. [ 104.745006][ T7075] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.1336: Failed to acquire dquot type 0 [ 104.778847][ T7075] EXT4-fs error (device loop1): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 104.795653][ T7078] vhci_hcd: invalid port number 96 [ 104.800794][ T7078] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 104.828795][ T7075] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #13: comm syz.1.1336: corrupted inode contents [ 104.871033][ T7075] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #13: comm syz.1.1336: mark_inode_dirty error [ 104.912009][ T7075] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #13: comm syz.1.1336: corrupted inode contents [ 104.958840][ T7075] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #13: comm syz.1.1336: mark_inode_dirty error [ 104.998238][ T7075] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #13: comm syz.1.1336: corrupted inode contents [ 105.044690][ T7083] loop3: detected capacity change from 0 to 4096 [ 105.051882][ T7075] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 105.066731][ T7083] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.081737][ T7075] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #13: comm syz.1.1336: corrupted inode contents [ 105.105506][ T7083] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 105.124080][ T7075] EXT4-fs error (device loop1): ext4_truncate:4666: inode #13: comm syz.1.1336: mark_inode_dirty error [ 105.140863][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.151571][ T7075] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 105.161590][ T7075] EXT4-fs (loop1): 1 truncate cleaned up [ 105.167756][ T7075] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.301374][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.910116][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.920156][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.927003][ T7095] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 105.937579][ T7093] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1340'. [ 105.940854][ T7095] SELinux: security_context_str_to_sid (tmpfs) failed with errno=-22 [ 105.962142][ T7093] loop0: detected capacity change from 0 to 512 [ 106.012151][ T7093] EXT4-fs error (device loop0): ext4_get_branch:178: inode #11: block 4294967295: comm syz.0.1340: invalid block [ 106.052943][ T7093] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.1340: invalid indirect mapped block 4294967295 (level 1) [ 106.068731][ T7093] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.1340: invalid indirect mapped block 4294967295 (level 1) [ 106.085318][ T7093] EXT4-fs (loop0): 2 truncates cleaned up [ 106.091993][ T7093] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.134770][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.412572][ T7125] loop0: detected capacity change from 0 to 512 [ 106.420372][ T7125] journal_path: Lookup failure for './file0/../file0' [ 106.427188][ T7125] EXT4-fs: error: could not find journal device path [ 106.441640][ T7127] loop4: detected capacity change from 0 to 4096 [ 106.452020][ T7127] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.467621][ T7127] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 106.485654][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.520975][ T7131] loop0: detected capacity change from 0 to 4096 [ 106.530576][ T7131] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.553869][ T7130] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 106.573650][ T7134] loop4: detected capacity change from 0 to 1024 [ 106.581132][ T7134] EXT4-fs: Ignoring removed bh option [ 106.586711][ T7134] EXT4-fs: inline encryption not supported [ 106.587081][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.593742][ T7134] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 106.614616][ T7134] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 2: comm syz.4.1355: lblock 2 mapped to illegal pblock 2 (length 1) [ 106.630536][ T7134] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 48: comm syz.4.1355: lblock 0 mapped to illegal pblock 48 (length 1) [ 106.636438][ T7137] 9pnet_fd: Insufficient options for proto=fd [ 106.650188][ T7134] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.1355: Failed to acquire dquot type 0 [ 106.662863][ T7134] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 106.674237][ T7134] EXT4-fs error (device loop4): ext4_evict_inode:254: inode #11: comm syz.4.1355: mark_inode_dirty error [ 106.677358][ T7139] netlink: 14593 bytes leftover after parsing attributes in process `syz.0.1357'. [ 106.686180][ T7134] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 106.705204][ T7134] EXT4-fs (loop4): 1 orphan inode deleted [ 106.729453][ T12] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:0: lblock 1 mapped to illegal pblock 1 (length 1) [ 106.745110][ T12] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:0: Failed to release dquot type 0 [ 106.758790][ T7134] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 106.808077][ T7145] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7145 comm=syz.2.1361 [ 106.822112][ T7145] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1361'. [ 106.903022][ T7157] loop3: detected capacity change from 0 to 512 [ 106.905569][ T7152] loop1: detected capacity change from 0 to 1024 [ 106.910594][ T7157] journal_path: Lookup failure for './file0/../file0' [ 106.923571][ T7157] EXT4-fs: error: could not find journal device path [ 106.953008][ T7152] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.1364: Failed to acquire dquot type 0 [ 106.978885][ T7162] loop3: detected capacity change from 0 to 1024 [ 106.984339][ T7163] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1367'. [ 106.989457][ T7162] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.1366: Failed to acquire dquot type 0 [ 106.995350][ T7152] EXT4-fs error (device loop1): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 107.007135][ T7162] EXT4-fs error (device loop3): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 107.020358][ T7152] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #13: comm syz.1.1364: corrupted inode contents [ 107.036900][ T7162] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #13: comm syz.3.1366: corrupted inode contents [ 107.050322][ T7152] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #13: comm syz.1.1364: mark_inode_dirty error [ 107.060799][ T7162] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #13: comm syz.3.1366: mark_inode_dirty error [ 107.071387][ T7152] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #13: comm syz.1.1364: corrupted inode contents [ 107.082898][ T7162] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #13: comm syz.3.1366: corrupted inode contents [ 107.095368][ T7152] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #13: comm syz.1.1364: mark_inode_dirty error [ 107.107081][ T7162] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #13: comm syz.3.1366: mark_inode_dirty error [ 107.118975][ T7152] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #13: comm syz.1.1364: corrupted inode contents [ 107.128691][ T7162] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #13: comm syz.3.1366: corrupted inode contents [ 107.141392][ T7152] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 107.153575][ T7162] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 107.161986][ T7152] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #13: comm syz.1.1364: corrupted inode contents [ 107.169749][ T7162] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #13: comm syz.3.1366: corrupted inode contents [ 107.181988][ T7152] EXT4-fs error (device loop1): ext4_truncate:4666: inode #13: comm syz.1.1364: mark_inode_dirty error [ 107.194052][ T7162] EXT4-fs error (device loop3): ext4_truncate:4666: inode #13: comm syz.3.1366: mark_inode_dirty error [ 107.206611][ T7152] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 107.217742][ T7162] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 107.237733][ T7162] EXT4-fs (loop3): 1 truncate cleaned up [ 107.262200][ T7152] EXT4-fs (loop1): 1 truncate cleaned up [ 107.333184][ T7168] loop2: detected capacity change from 0 to 4096 [ 107.356047][ T7168] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 107.631089][ T7178] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1373'. [ 107.640135][ T7178] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1373'. [ 107.745823][ T29] kauditd_printk_skb: 336 callbacks suppressed [ 107.745839][ T29] audit: type=1400 audit(1754992447.038:11331): avc: denied { prog_load } for pid=7184 comm="syz.4.1374" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 107.771311][ T29] audit: type=1400 audit(1754992447.038:11332): avc: denied { bpf } for pid=7184 comm="syz.4.1374" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 107.829379][ T29] audit: type=1400 audit(1754992447.088:11333): avc: denied { perfmon } for pid=7184 comm="syz.4.1374" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 107.850967][ T29] audit: type=1400 audit(1754992447.088:11334): avc: denied { prog_run } for pid=7184 comm="syz.4.1374" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 107.870072][ T29] audit: type=1400 audit(1754992447.118:11335): avc: denied { read write } for pid=3302 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 107.894478][ T29] audit: type=1400 audit(1754992447.118:11336): avc: denied { open } for pid=3302 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 107.918753][ T29] audit: type=1400 audit(1754992447.118:11337): avc: denied { ioctl } for pid=3302 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=101 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 107.977832][ T29] audit: type=1326 audit(1754992447.258:11338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7188 comm="syz.1.1375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d8689ebe9 code=0x7ffc0000 [ 108.001449][ T29] audit: type=1326 audit(1754992447.258:11339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7188 comm="syz.1.1375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3d8689ebe9 code=0x7ffc0000 [ 108.025055][ T29] audit: type=1400 audit(1754992447.268:11340): avc: denied { map_create } for pid=7188 comm="syz.1.1375" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 108.069561][ T7192] loop0: detected capacity change from 0 to 512 [ 108.076832][ T7192] journal_path: Lookup failure for './file0/../file0' [ 108.083670][ T7192] EXT4-fs: error: could not find journal device path [ 108.413790][ T7193] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1376'. [ 108.422881][ T7193] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1376'. [ 108.436432][ T7203] loop3: detected capacity change from 0 to 1024 [ 108.487709][ T7203] netlink: 204 bytes leftover after parsing attributes in process `syz.3.1380'. [ 108.685122][ T7210] loop4: detected capacity change from 0 to 4096 [ 108.715665][ T7210] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 108.830000][ T7215] loop4: detected capacity change from 0 to 1024 [ 108.842613][ T7215] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.1384: Failed to acquire dquot type 0 [ 108.872918][ T7213] loop1: detected capacity change from 0 to 4096 [ 108.894057][ T7213] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 108.907629][ T7215] EXT4-fs error (device loop4): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 108.924027][ T7215] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #13: comm syz.4.1384: corrupted inode contents [ 108.940967][ T7215] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #13: comm syz.4.1384: mark_inode_dirty error [ 108.953584][ T7215] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #13: comm syz.4.1384: corrupted inode contents [ 108.975542][ T7219] loop0: detected capacity change from 0 to 1024 [ 108.984441][ T7215] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #13: comm syz.4.1384: mark_inode_dirty error [ 109.000339][ T7219] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.1385: Failed to acquire dquot type 0 [ 109.013792][ T7215] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #13: comm syz.4.1384: corrupted inode contents [ 109.015135][ T7222] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7222 comm=syz.1.1386 [ 109.026735][ T7219] EXT4-fs error (device loop0): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 109.053182][ T7215] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 109.053554][ T7219] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #13: comm syz.0.1385: corrupted inode contents [ 109.065182][ T7215] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #13: comm syz.4.1384: corrupted inode contents [ 109.074981][ T7219] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #13: comm syz.0.1385: mark_inode_dirty error [ 109.094101][ T7223] __nla_validate_parse: 2 callbacks suppressed [ 109.094115][ T7223] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1386'. [ 109.112331][ T7215] EXT4-fs error (device loop4): ext4_truncate:4666: inode #13: comm syz.4.1384: mark_inode_dirty error [ 109.123453][ T7219] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #13: comm syz.0.1385: corrupted inode contents [ 109.135938][ T7215] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 109.144812][ T7219] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #13: comm syz.0.1385: mark_inode_dirty error [ 109.159823][ T7215] EXT4-fs (loop4): 1 truncate cleaned up [ 109.163746][ T7219] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #13: comm syz.0.1385: corrupted inode contents [ 109.190845][ T7219] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem [ 109.204025][ T7219] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #13: comm syz.0.1385: corrupted inode contents [ 109.216738][ T7219] EXT4-fs error (device loop0): ext4_truncate:4666: inode #13: comm syz.0.1385: mark_inode_dirty error [ 109.227951][ T7219] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem [ 109.238187][ T7219] EXT4-fs (loop0): 1 truncate cleaned up [ 109.270928][ T7227] netlink: 14593 bytes leftover after parsing attributes in process `syz.1.1388'. [ 109.506172][ T7243] loop1: detected capacity change from 0 to 1024 [ 109.521932][ T7243] EXT4-fs: Ignoring removed bh option [ 109.532360][ T7243] EXT4-fs: inline encryption not supported [ 109.539115][ T7243] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 109.541319][ T7249] netlink: 14593 bytes leftover after parsing attributes in process `syz.2.1396'. [ 109.586768][ T7243] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 2: comm syz.1.1394: lblock 2 mapped to illegal pblock 2 (length 1) [ 109.601088][ T7243] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 48: comm syz.1.1394: lblock 0 mapped to illegal pblock 48 (length 1) [ 109.616650][ T7243] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.1394: Failed to acquire dquot type 0 [ 109.628771][ T7243] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 109.639285][ T7243] EXT4-fs error (device loop1): ext4_evict_inode:254: inode #11: comm syz.1.1394: mark_inode_dirty error [ 109.652158][ T7243] EXT4-fs warning (device loop1): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 109.662857][ T7243] EXT4-fs (loop1): 1 orphan inode deleted [ 109.675144][ T3419] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:7: lblock 1 mapped to illegal pblock 1 (length 1) [ 109.690541][ T3419] EXT4-fs error (device loop1): ext4_release_dquot:6969: comm kworker/u8:7: Failed to release dquot type 0 [ 109.703484][ T7243] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 109.708454][ T7240] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1393'. [ 109.720838][ T7240] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1393'. [ 109.772695][ T7258] loop1: detected capacity change from 0 to 1024 [ 109.783548][ T7258] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.1398: Failed to acquire dquot type 0 [ 109.795644][ T7258] EXT4-fs error (device loop1): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 109.810400][ T7258] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #13: comm syz.1.1398: corrupted inode contents [ 109.823012][ T7258] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #13: comm syz.1.1398: mark_inode_dirty error [ 109.835023][ T7258] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #13: comm syz.1.1398: corrupted inode contents [ 109.846337][ T7263] loop0: detected capacity change from 0 to 512 [ 109.848326][ T7258] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #13: comm syz.1.1398: mark_inode_dirty error [ 109.855285][ T7263] ext4: Unknown parameter 'delalloc.dax' [ 109.865658][ T7258] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #13: comm syz.1.1398: corrupted inode contents [ 109.882323][ T7258] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 109.891822][ T7258] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #13: comm syz.1.1398: corrupted inode contents [ 109.904368][ T7258] EXT4-fs error (device loop1): ext4_truncate:4666: inode #13: comm syz.1.1398: mark_inode_dirty error [ 109.916299][ T7258] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 109.926451][ T7258] EXT4-fs (loop1): 1 truncate cleaned up [ 110.127955][ T7279] loop1: detected capacity change from 0 to 1024 [ 110.141813][ T7279] loop9: detected capacity change from 0 to 7 [ 110.149093][ T7279] Buffer I/O error on dev loop9, logical block 0, async page read [ 110.159707][ T7279] Buffer I/O error on dev loop9, logical block 0, async page read [ 110.167554][ T7279] loop9: unable to read partition table [ 110.173409][ T7279] loop_reread_partitions: partition scan of loop9 (þ被xüŸÑø éÚ¬§½dG¤´à–ƒÝ¡¯ â·û [ 110.173409][ T7279] ) failed (rc=-5) [ 110.202975][ T7287] netlink: 14593 bytes leftover after parsing attributes in process `syz.1.1406'. [ 110.228016][ T7288] loop3: detected capacity change from 0 to 1024 [ 110.235535][ T7288] EXT4-fs: Ignoring removed bh option [ 110.241316][ T7288] EXT4-fs: inline encryption not supported [ 110.247788][ T7288] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 110.262004][ T7288] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 2: comm syz.3.1405: lblock 2 mapped to illegal pblock 2 (length 1) [ 110.276395][ T7288] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 48: comm syz.3.1405: lblock 0 mapped to illegal pblock 48 (length 1) [ 110.290987][ T7288] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.1405: Failed to acquire dquot type 0 [ 110.302802][ T7288] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 110.313498][ T7288] EXT4-fs error (device loop3): ext4_evict_inode:254: inode #11: comm syz.3.1405: mark_inode_dirty error [ 110.326230][ T7288] EXT4-fs warning (device loop3): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 110.336507][ T7288] EXT4-fs (loop3): 1 orphan inode deleted [ 110.352635][ T1818] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:6: lblock 1 mapped to illegal pblock 1 (length 1) [ 110.367009][ T1818] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u8:6: Failed to release dquot type 0 [ 110.431572][ T7296] FAULT_INJECTION: forcing a failure. [ 110.431572][ T7296] name failslab, interval 1, probability 0, space 0, times 0 [ 110.444228][ T7296] CPU: 1 UID: 0 PID: 7296 Comm: syz.4.1408 Not tainted 6.17.0-rc1-syzkaller-00004-g53e760d89498 #0 PREEMPT(voluntary) [ 110.444258][ T7296] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 110.444268][ T7296] Call Trace: [ 110.444274][ T7296] [ 110.444283][ T7296] __dump_stack+0x1d/0x30 [ 110.444306][ T7296] dump_stack_lvl+0xe8/0x140 [ 110.444326][ T7296] dump_stack+0x15/0x1b [ 110.444363][ T7296] should_fail_ex+0x265/0x280 [ 110.444381][ T7296] should_failslab+0x8c/0xb0 [ 110.444401][ T7296] kmem_cache_alloc_lru_noprof+0x55/0x310 [ 110.444428][ T7296] ? shmem_alloc_inode+0x34/0x50 [ 110.444527][ T7296] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 110.444545][ T7296] shmem_alloc_inode+0x34/0x50 [ 110.444585][ T7296] alloc_inode+0x3d/0x170 [ 110.444605][ T7296] new_inode+0x1d/0xe0 [ 110.444629][ T7296] shmem_get_inode+0x244/0x750 [ 110.444649][ T7296] __shmem_file_setup+0x113/0x210 [ 110.444705][ T7296] shmem_file_setup+0x3b/0x50 [ 110.444737][ T7296] __se_sys_memfd_create+0x2c3/0x590 [ 110.444756][ T7296] __x64_sys_memfd_create+0x31/0x40 [ 110.444772][ T7296] x64_sys_call+0x2abe/0x2ff0 [ 110.444804][ T7296] do_syscall_64+0xd2/0x200 [ 110.444830][ T7296] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 110.444885][ T7296] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 110.444905][ T7296] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.444923][ T7296] RIP: 0033:0x7fb2c02bebe9 [ 110.444936][ T7296] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 110.444988][ T7296] RSP: 002b:00007fb2bece4e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 110.445008][ T7296] RAX: ffffffffffffffda RBX: 00000000000004fa RCX: 00007fb2c02bebe9 [ 110.445022][ T7296] RDX: 00007fb2bece4ef0 RSI: 0000000000000000 RDI: 00007fb2c03427e8 [ 110.445035][ T7296] RBP: 00002000000005c0 R08: 00007fb2bece4bb7 R09: 00007fb2bece4e40 [ 110.445048][ T7296] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000000 [ 110.445069][ T7296] R13: 00007fb2bece4ef0 R14: 00007fb2bece4eb0 R15: 00002000000001c0 [ 110.445086][ T7296] [ 110.955926][ T7303] loop1: detected capacity change from 0 to 4096 [ 111.105757][ T7309] syz.0.1413 uses obsolete (PF_INET,SOCK_PACKET) [ 111.333129][ T3303] EXT4-fs error (device loop3): __ext4_get_inode_loc:4861: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 111.374462][ T7321] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 111.391591][ T3303] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 111.422848][ T3303] EXT4-fs error (device loop3): ext4_quota_off:7217: inode #3: comm syz-executor: mark_inode_dirty error [ 111.480834][ T7323] loop0: detected capacity change from 0 to 512 [ 111.504080][ T7323] journal_path: Lookup failure for './file0/../file0' [ 111.510984][ T7323] EXT4-fs: error: could not find journal device path [ 112.334537][ T7303] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 112.635731][ T7340] loop3: detected capacity change from 0 to 1024 [ 112.642566][ T7340] EXT4-fs: Ignoring removed bh option [ 112.652342][ T7340] EXT4-fs: inline encryption not supported [ 112.668807][ T7340] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 112.684073][ T7342] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 112.701295][ T7340] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 2: comm syz.3.1424: lblock 2 mapped to illegal pblock 2 (length 1) [ 112.729773][ T7340] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 48: comm syz.3.1424: lblock 0 mapped to illegal pblock 48 (length 1) [ 112.769487][ T7340] __quota_error: 604 callbacks suppressed [ 112.769503][ T7340] Quota error (device loop3): v2_write_file_info: Can't write info structure [ 112.784163][ T7340] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.1424: Failed to acquire dquot type 0 [ 112.847110][ T7340] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 112.897238][ T7340] EXT4-fs error (device loop3): ext4_evict_inode:254: inode #11: comm syz.3.1424: mark_inode_dirty error [ 112.925121][ T7340] EXT4-fs warning (device loop3): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 112.956483][ T7340] EXT4-fs (loop3): 1 orphan inode deleted [ 113.511755][ T7352] loop1: detected capacity change from 0 to 4096 [ 113.526243][ T29] audit: type=1400 audit(1754992452.818:11932): avc: denied { write } for pid=7353 comm="syz.0.1430" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 113.602348][ T29] audit: type=1400 audit(1754992452.858:11933): avc: denied { mount } for pid=7353 comm="syz.0.1430" name="/" dev="ramfs" ino=17158 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 113.632167][ T7356] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7356 comm=syz.0.1430 [ 113.893620][ T29] audit: type=1400 audit(1754992453.188:11934): avc: denied { read write } for pid=7357 comm="syz.2.1431" name="uhid" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 113.917206][ T29] audit: type=1400 audit(1754992453.188:11935): avc: denied { open } for pid=7357 comm="syz.2.1431" path="/dev/uhid" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 113.994632][ T7359] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 113.994632][ T7359] The task syz.2.1431 (7359) triggered the difference, watch for misbehavior. [ 114.328447][ T1818] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:6: lblock 1 mapped to illegal pblock 1 (length 1) [ 114.343725][ T1818] Quota error (device loop3): remove_tree: Can't read quota data block 1 [ 114.352270][ T1818] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u8:6: Failed to release dquot type 0 [ 114.375827][ T7352] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 114.388191][ T3303] EXT4-fs error (device loop3): __ext4_get_inode_loc:4861: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 114.402057][ T3303] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 114.412021][ T3303] EXT4-fs error (device loop3): ext4_quota_off:7217: inode #3: comm syz-executor: mark_inode_dirty error [ 114.598348][ T29] audit: type=1400 audit(1754992453.888:11936): avc: denied { create } for pid=7367 comm="syz.0.1435" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 114.632327][ T29] audit: type=1326 audit(1754992453.888:11937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7369 comm="syz.1.1434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d8689ebe9 code=0x7ffc0000 [ 114.655988][ T29] audit: type=1326 audit(1754992453.888:11938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7369 comm="syz.1.1434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=424 compat=0 ip=0x7f3d8689ebe9 code=0x7ffc0000 [ 114.679558][ T29] audit: type=1326 audit(1754992453.888:11939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7369 comm="syz.1.1434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d8689ebe9 code=0x7ffc0000 [ 114.709451][ T7376] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1437'. [ 114.737856][ T7380] loop4: detected capacity change from 0 to 1024 [ 114.742262][ T7382] loop0: detected capacity change from 0 to 1024 [ 114.746678][ T7380] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.1439: Failed to acquire dquot type 0 [ 114.751110][ T7382] EXT4-fs: Ignoring removed bh option [ 114.764578][ T7380] EXT4-fs error (device loop4): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 114.782330][ T7382] EXT4-fs: inline encryption not supported [ 114.790429][ T7380] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #13: comm syz.4.1439: corrupted inode contents [ 114.809704][ T7382] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 114.823631][ T7382] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 2: comm syz.0.1440: lblock 2 mapped to illegal pblock 2 (length 1) [ 114.830579][ T7380] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #13: comm syz.4.1439: mark_inode_dirty error [ 114.838351][ T7382] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 48: comm syz.0.1440: lblock 0 mapped to illegal pblock 48 (length 1) [ 114.864883][ T7380] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #13: comm syz.4.1439: corrupted inode contents [ 114.865387][ T7382] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.1440: Failed to acquire dquot type 0 [ 114.888783][ T7382] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 114.899184][ T7380] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #13: comm syz.4.1439: mark_inode_dirty error [ 114.910946][ T7382] EXT4-fs error (device loop0): ext4_evict_inode:254: inode #11: comm syz.0.1440: mark_inode_dirty error [ 114.911591][ T7380] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #13: comm syz.4.1439: corrupted inode contents [ 114.934569][ T7380] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 114.934652][ T7382] EXT4-fs warning (device loop0): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 114.955296][ T7382] EXT4-fs (loop0): 1 orphan inode deleted [ 114.962487][ T7380] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #13: comm syz.4.1439: corrupted inode contents [ 114.978128][ T57] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:4: lblock 1 mapped to illegal pblock 1 (length 1) [ 114.992217][ T7380] EXT4-fs error (device loop4): ext4_truncate:4666: inode #13: comm syz.4.1439: mark_inode_dirty error [ 115.004642][ T7380] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 115.011831][ T57] EXT4-fs error (device loop0): ext4_release_dquot:6969: comm kworker/u8:4: Failed to release dquot type 0 [ 115.014084][ T7380] EXT4-fs (loop4): 1 truncate cleaned up [ 115.027387][ T7382] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 115.122051][ T7395] loop2: detected capacity change from 0 to 4096 [ 115.140495][ T7395] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 115.144776][ T7401] loop4: detected capacity change from 0 to 512 [ 115.158690][ T7401] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 115.168190][ T7402] loop0: detected capacity change from 0 to 1024 [ 115.177354][ T7402] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.1444: Failed to acquire dquot type 0 [ 115.190829][ T7402] EXT4-fs error (device loop0): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 115.206097][ T7402] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #13: comm syz.0.1444: corrupted inode contents [ 115.218477][ T7402] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #13: comm syz.0.1444: mark_inode_dirty error [ 115.230013][ T7402] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #13: comm syz.0.1444: corrupted inode contents [ 115.242222][ T7402] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #13: comm syz.0.1444: mark_inode_dirty error [ 115.246625][ T7402] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #13: comm syz.0.1444: corrupted inode contents [ 115.266055][ T7402] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem [ 115.275793][ T7402] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #13: comm syz.0.1444: corrupted inode contents [ 115.288828][ T7402] EXT4-fs error (device loop0): ext4_truncate:4666: inode #13: comm syz.0.1444: mark_inode_dirty error [ 115.300967][ T7402] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem [ 115.320387][ T7402] EXT4-fs (loop0): 1 truncate cleaned up [ 115.420365][ T7418] loop0: detected capacity change from 0 to 512 [ 115.427369][ T7418] journal_path: Lookup failure for './file0/../file0' [ 115.434314][ T7418] EXT4-fs: error: could not find journal device path [ 115.458766][ T7421] FAULT_INJECTION: forcing a failure. [ 115.458766][ T7421] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 115.461548][ T7422] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7422 comm=syz.0.1454 [ 115.472214][ T7421] CPU: 1 UID: 0 PID: 7421 Comm: syz.1.1453 Not tainted 6.17.0-rc1-syzkaller-00004-g53e760d89498 #0 PREEMPT(voluntary) [ 115.472376][ T7421] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 115.472388][ T7421] Call Trace: [ 115.472396][ T7421] [ 115.472404][ T7421] __dump_stack+0x1d/0x30 [ 115.472426][ T7421] dump_stack_lvl+0xe8/0x140 [ 115.472445][ T7421] dump_stack+0x15/0x1b [ 115.472496][ T7421] should_fail_ex+0x265/0x280 [ 115.472527][ T7421] should_fail+0xb/0x20 [ 115.472545][ T7421] should_fail_usercopy+0x1a/0x20 [ 115.472567][ T7421] _copy_from_iter+0xcf/0xe40 [ 115.472606][ T7421] ? __build_skb_around+0x1a0/0x200 [ 115.472637][ T7421] ? __alloc_skb+0x223/0x320 [ 115.472669][ T7421] netlink_sendmsg+0x471/0x6b0 [ 115.472691][ T7421] ? __pfx_netlink_sendmsg+0x10/0x10 [ 115.472718][ T7421] __sock_sendmsg+0x145/0x180 [ 115.472788][ T7421] ____sys_sendmsg+0x31e/0x4e0 [ 115.472813][ T7421] ___sys_sendmsg+0x17b/0x1d0 [ 115.472847][ T7421] __x64_sys_sendmsg+0xd4/0x160 [ 115.472873][ T7421] x64_sys_call+0x191e/0x2ff0 [ 115.472893][ T7421] do_syscall_64+0xd2/0x200 [ 115.472918][ T7421] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 115.473004][ T7421] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 115.473036][ T7421] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.473057][ T7421] RIP: 0033:0x7f3d8689ebe9 [ 115.473072][ T7421] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 115.473089][ T7421] RSP: 002b:00007f3d852ff038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 115.473186][ T7421] RAX: ffffffffffffffda RBX: 00007f3d86ac5fa0 RCX: 00007f3d8689ebe9 [ 115.473199][ T7421] RDX: 0000000000008000 RSI: 0000200000000840 RDI: 0000000000000004 [ 115.473212][ T7421] RBP: 00007f3d852ff090 R08: 0000000000000000 R09: 0000000000000000 [ 115.473275][ T7421] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 115.473287][ T7421] R13: 00007f3d86ac6038 R14: 00007f3d86ac5fa0 R15: 00007ffd68502ad8 [ 115.473307][ T7421] [ 115.498550][ T7424] loop2: detected capacity change from 0 to 1024 [ 115.512453][ T7422] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1454'. [ 115.603972][ T7424] netlink: 204 bytes leftover after parsing attributes in process `syz.2.1451'. [ 116.003224][ T7451] netlink: 14593 bytes leftover after parsing attributes in process `syz.3.1463'. [ 116.189026][ T7463] loop3: detected capacity change from 0 to 1024 [ 116.242537][ T7466] netlink: 204 bytes leftover after parsing attributes in process `syz.0.1467'. [ 116.279871][ T7468] loop2: detected capacity change from 0 to 1024 [ 116.288513][ T7468] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.1468: Failed to acquire dquot type 0 [ 116.300411][ T7468] EXT4-fs error (device loop2): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 116.315005][ T7468] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #13: comm syz.2.1468: corrupted inode contents [ 116.327310][ T7468] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #13: comm syz.2.1468: mark_inode_dirty error [ 116.338816][ T7468] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #13: comm syz.2.1468: corrupted inode contents [ 116.350882][ T7468] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #13: comm syz.2.1468: mark_inode_dirty error [ 116.362332][ T7468] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #13: comm syz.2.1468: corrupted inode contents [ 116.374509][ T7468] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 116.383206][ T7468] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #13: comm syz.2.1468: corrupted inode contents [ 116.395281][ T7468] EXT4-fs error (device loop2): ext4_truncate:4666: inode #13: comm syz.2.1468: mark_inode_dirty error [ 116.406643][ T7468] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 116.415983][ T7468] EXT4-fs (loop2): 1 truncate cleaned up [ 116.519146][ T7471] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7471 comm=syz.2.1469 [ 116.532042][ T7471] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1469'. [ 116.855420][ T7484] loop4: detected capacity change from 0 to 512 [ 116.862276][ T7484] EXT4-fs: Ignoring removed mblk_io_submit option [ 116.869020][ T7484] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 116.880651][ T7484] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e016c018, mo2=0002] [ 116.888718][ T7484] System zones: 1-12 [ 116.893440][ T7484] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 116.907538][ T7484] EXT4-fs (loop4): 1 truncate cleaned up [ 116.933827][ T7487] loop3: detected capacity change from 0 to 1024 [ 116.940614][ T7487] EXT4-fs: Ignoring removed bh option [ 116.946430][ T7487] EXT4-fs: inline encryption not supported [ 116.952910][ T7487] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 116.955627][ T7489] netlink: 14593 bytes leftover after parsing attributes in process `syz.4.1476'. [ 116.965954][ T7487] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 2: comm syz.3.1475: lblock 2 mapped to illegal pblock 2 (length 1) [ 116.989357][ T7487] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 48: comm syz.3.1475: lblock 0 mapped to illegal pblock 48 (length 1) [ 117.009513][ T7487] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.1475: Failed to acquire dquot type 0 [ 117.028728][ T7487] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 117.043485][ T7487] EXT4-fs error (device loop3): ext4_evict_inode:254: inode #11: comm syz.3.1475: mark_inode_dirty error [ 117.061850][ T7487] EXT4-fs warning (device loop3): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 117.076410][ T7487] EXT4-fs (loop3): 1 orphan inode deleted [ 117.112844][ T1818] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:6: lblock 1 mapped to illegal pblock 1 (length 1) [ 117.139722][ T1818] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u8:6: Failed to release dquot type 0 [ 117.163564][ T7487] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 117.447356][ T7503] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7503 comm=syz.4.1481 [ 117.464718][ T7503] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1481'. [ 117.476056][ T7508] FAULT_INJECTION: forcing a failure. [ 117.476056][ T7508] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 117.489179][ T7508] CPU: 1 UID: 0 PID: 7508 Comm: syz.2.1483 Not tainted 6.17.0-rc1-syzkaller-00004-g53e760d89498 #0 PREEMPT(voluntary) [ 117.489210][ T7508] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 117.489221][ T7508] Call Trace: [ 117.489267][ T7508] [ 117.489275][ T7508] __dump_stack+0x1d/0x30 [ 117.489403][ T7508] dump_stack_lvl+0xe8/0x140 [ 117.489420][ T7508] dump_stack+0x15/0x1b [ 117.489485][ T7508] should_fail_ex+0x265/0x280 [ 117.489586][ T7508] should_fail+0xb/0x20 [ 117.489604][ T7508] should_fail_usercopy+0x1a/0x20 [ 117.489626][ T7508] _copy_to_user+0x20/0xa0 [ 117.489662][ T7508] simple_read_from_buffer+0xb5/0x130 [ 117.489710][ T7508] proc_fail_nth_read+0x10e/0x150 [ 117.489732][ T7508] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 117.489754][ T7508] vfs_read+0x1a8/0x770 [ 117.489775][ T7508] ? __rcu_read_unlock+0x4f/0x70 [ 117.489854][ T7508] ? __fget_files+0x184/0x1c0 [ 117.489876][ T7508] ksys_read+0xda/0x1a0 [ 117.489937][ T7508] __x64_sys_read+0x40/0x50 [ 117.489957][ T7508] x64_sys_call+0x27bc/0x2ff0 [ 117.490014][ T7508] do_syscall_64+0xd2/0x200 [ 117.490044][ T7508] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 117.490119][ T7508] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 117.490143][ T7508] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.490213][ T7508] RIP: 0033:0x7f3e625fd5fc [ 117.490258][ T7508] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 117.490319][ T7508] RSP: 002b:00007f3e6105f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 117.490340][ T7508] RAX: ffffffffffffffda RBX: 00007f3e62825fa0 RCX: 00007f3e625fd5fc [ 117.490353][ T7508] RDX: 000000000000000f RSI: 00007f3e6105f0a0 RDI: 0000000000000003 [ 117.490366][ T7508] RBP: 00007f3e6105f090 R08: 0000000000000000 R09: 0000000000000000 [ 117.490379][ T7508] R10: 000000000000002a R11: 0000000000000246 R12: 0000000000000001 [ 117.490392][ T7508] R13: 00007f3e62826038 R14: 00007f3e62825fa0 R15: 00007ffda228b8f8 [ 117.490412][ T7508] [ 117.782250][ T7512] netlink: 'syz.2.1484': attribute type 7 has an invalid length. [ 117.786311][ T29] kauditd_printk_skb: 285 callbacks suppressed [ 117.786325][ T29] audit: type=1326 audit(1754992457.068:12213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7504 comm="syz.1.1482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f3d8689ebe9 code=0x7ffc0000 [ 117.819963][ T29] audit: type=1400 audit(1754992457.078:12215): avc: denied { create } for pid=7511 comm="syz.2.1484" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 117.839750][ T29] audit: type=1400 audit(1754992457.068:12214): avc: denied { open } for pid=7504 comm="syz.1.1482" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 117.859080][ T29] audit: type=1400 audit(1754992457.078:12216): avc: denied { kernel } for pid=7504 comm="syz.1.1482" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 117.881786][ T29] audit: type=1400 audit(1754992457.088:12217): avc: denied { read } for pid=7511 comm="syz.2.1484" name="rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 117.904961][ T29] audit: type=1400 audit(1754992457.088:12218): avc: denied { open } for pid=7511 comm="syz.2.1484" path="/dev/rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 117.928704][ T29] audit: type=1400 audit(1754992457.088:12219): avc: denied { ioctl } for pid=7511 comm="syz.2.1484" path="/dev/rtc0" dev="devtmpfs" ino=244 ioctlcmd=0x7014 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 117.954074][ T29] audit: type=1400 audit(1754992457.178:12220): avc: denied { read write } for pid=3301 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 117.978443][ T29] audit: type=1400 audit(1754992457.178:12221): avc: denied { open } for pid=3301 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 118.002660][ T29] audit: type=1400 audit(1754992457.178:12222): avc: denied { ioctl } for pid=3301 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=102 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 118.088188][ T7523] netlink: 14593 bytes leftover after parsing attributes in process `syz.4.1488'. [ 118.182682][ T7527] loop4: detected capacity change from 0 to 512 [ 118.230585][ T7531] loop2: detected capacity change from 0 to 4096 [ 118.250939][ T7531] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 118.326491][ T7550] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 118.336082][ T7552] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1499'. [ 118.434139][ T7564] syzkaller0: entered promiscuous mode [ 118.439713][ T7564] syzkaller0: entered allmulticast mode [ 118.542947][ T7574] syz.2.1504 (7574) used obsolete PPPIOCDETACH ioctl [ 118.561601][ T7574] loop2: detected capacity change from 0 to 512 [ 118.568741][ T7574] journal_path: Lookup failure for './file0/../file0' [ 118.575611][ T7574] EXT4-fs: error: could not find journal device path [ 118.586440][ T7574] binfmt_misc: register: failed to install interpreter file ./file2 [ 118.716140][ T7583] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 119.335561][ T7616] FAULT_INJECTION: forcing a failure. [ 119.335561][ T7616] name failslab, interval 1, probability 0, space 0, times 0 [ 119.348313][ T7616] CPU: 0 UID: 0 PID: 7616 Comm: syz.2.1524 Not tainted 6.17.0-rc1-syzkaller-00004-g53e760d89498 #0 PREEMPT(voluntary) [ 119.348338][ T7616] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 119.348350][ T7616] Call Trace: [ 119.348356][ T7616] [ 119.348365][ T7616] __dump_stack+0x1d/0x30 [ 119.348385][ T7616] dump_stack_lvl+0xe8/0x140 [ 119.348435][ T7616] dump_stack+0x15/0x1b [ 119.348451][ T7616] should_fail_ex+0x265/0x280 [ 119.348472][ T7616] should_failslab+0x8c/0xb0 [ 119.348495][ T7616] __kmalloc_node_track_caller_noprof+0xa4/0x410 [ 119.348522][ T7616] ? security_context_to_sid_core+0x69/0x3b0 [ 119.348594][ T7616] kmemdup_nul+0x36/0xc0 [ 119.348614][ T7616] security_context_to_sid_core+0x69/0x3b0 [ 119.348629][ T7616] security_context_str_to_sid+0x33/0x40 [ 119.348640][ T7616] sel_write_validatetrans+0x247/0x370 [ 119.348699][ T7616] ? __pfx_sel_write_validatetrans+0x10/0x10 [ 119.348762][ T7616] vfs_write+0x269/0x960 [ 119.348844][ T7616] ? __rcu_read_unlock+0x4f/0x70 [ 119.348900][ T7616] ? __fget_files+0x184/0x1c0 [ 119.348915][ T7616] ksys_write+0xda/0x1a0 [ 119.348928][ T7616] __x64_sys_write+0x40/0x50 [ 119.348940][ T7616] x64_sys_call+0x27fe/0x2ff0 [ 119.349017][ T7616] do_syscall_64+0xd2/0x200 [ 119.349032][ T7616] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 119.349045][ T7616] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 119.349082][ T7616] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.349094][ T7616] RIP: 0033:0x7f3e625febe9 [ 119.349103][ T7616] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 119.349159][ T7616] RSP: 002b:00007f3e6105f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 119.349171][ T7616] RAX: ffffffffffffffda RBX: 00007f3e62825fa0 RCX: 00007f3e625febe9 [ 119.349178][ T7616] RDX: 000000000000008a RSI: 0000200000000300 RDI: 0000000000000008 [ 119.349236][ T7616] RBP: 00007f3e6105f090 R08: 0000000000000000 R09: 0000000000000000 [ 119.349243][ T7616] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 119.349250][ T7616] R13: 00007f3e62826038 R14: 00007f3e62825fa0 R15: 00007ffda228b8f8 [ 119.349261][ T7616] [ 119.508029][ T7617] syzkaller0: entered promiscuous mode [ 119.570003][ T7617] syzkaller0: entered allmulticast mode [ 119.765564][ T7624] loop2: detected capacity change from 0 to 1024 [ 119.772649][ T7624] EXT4-fs: Ignoring removed bh option [ 119.778246][ T7624] EXT4-fs: inline encryption not supported [ 119.784751][ T7624] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 119.797506][ T7624] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 2: comm syz.2.1526: lblock 2 mapped to illegal pblock 2 (length 1) [ 119.811777][ T7624] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 48: comm syz.2.1526: lblock 0 mapped to illegal pblock 48 (length 1) [ 119.826127][ T7624] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.1526: Failed to acquire dquot type 0 [ 119.837487][ T7624] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 119.847485][ T7624] EXT4-fs error (device loop2): ext4_evict_inode:254: inode #11: comm syz.2.1526: mark_inode_dirty error [ 119.858946][ T7624] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 119.869585][ T7624] EXT4-fs (loop2): 1 orphan inode deleted [ 119.877442][ T1818] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:6: lblock 1 mapped to illegal pblock 1 (length 1) [ 119.893136][ T1818] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:6: Failed to release dquot type 0 [ 119.905316][ T7624] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 119.930709][ T7628] __nla_validate_parse: 5 callbacks suppressed [ 119.930719][ T7628] netlink: 14593 bytes leftover after parsing attributes in process `syz.2.1527'. [ 120.012808][ T7638] loop3: detected capacity change from 0 to 4096 [ 120.024365][ T7638] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 120.119608][ T7647] loop3: detected capacity change from 0 to 1024 [ 120.150588][ T7647] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.1534: Failed to acquire dquot type 0 [ 120.176042][ T7650] loop4: detected capacity change from 0 to 512 [ 120.186792][ T7647] EXT4-fs error (device loop3): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 120.204008][ T7652] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 120.212345][ T7650] journal_path: Lookup failure for './file0/../file0' [ 120.219131][ T7650] EXT4-fs: error: could not find journal device path [ 120.238345][ T7647] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #13: comm syz.3.1534: corrupted inode contents [ 120.281792][ T7647] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #13: comm syz.3.1534: mark_inode_dirty error [ 120.295298][ T7647] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #13: comm syz.3.1534: corrupted inode contents [ 120.310285][ T7658] netlink: 14593 bytes leftover after parsing attributes in process `syz.0.1540'. [ 120.323906][ T7647] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #13: comm syz.3.1534: mark_inode_dirty error [ 120.335864][ T7647] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #13: comm syz.3.1534: corrupted inode contents [ 120.348260][ T7647] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 120.348516][ T7647] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #13: comm syz.3.1534: corrupted inode contents [ 120.357306][ T7647] EXT4-fs error (device loop3): ext4_truncate:4666: inode #13: comm syz.3.1534: mark_inode_dirty error [ 120.366893][ T7647] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 120.391219][ T7647] EXT4-fs (loop3): 1 truncate cleaned up [ 120.504019][ T7679] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 120.538224][ T7685] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7685 comm=syz.3.1552 [ 120.552745][ T7685] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1552'. [ 120.769046][ T7693] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1555'. [ 120.779215][ T7693] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 120.897300][ T7700] loop2: detected capacity change from 0 to 1024 [ 120.908372][ T7700] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.1558: Failed to acquire dquot type 0 [ 120.920642][ T7700] EXT4-fs error (device loop2): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 120.935307][ T7700] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #13: comm syz.2.1558: corrupted inode contents [ 120.947531][ T7700] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #13: comm syz.2.1558: mark_inode_dirty error [ 120.959111][ T7700] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #13: comm syz.2.1558: corrupted inode contents [ 120.971214][ T7700] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #13: comm syz.2.1558: mark_inode_dirty error [ 120.982691][ T7700] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #13: comm syz.2.1558: corrupted inode contents [ 120.995282][ T7700] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 121.004181][ T7700] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #13: comm syz.2.1558: corrupted inode contents [ 121.016275][ T7700] EXT4-fs error (device loop2): ext4_truncate:4666: inode #13: comm syz.2.1558: mark_inode_dirty error [ 121.027551][ T7700] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 121.037143][ T7700] EXT4-fs (loop2): 1 truncate cleaned up [ 121.165635][ T7705] openvswitch: netlink: Message has 6 unknown bytes. [ 121.183978][ T7709] loop4: detected capacity change from 0 to 128 [ 121.193557][ T7709] syz.4.1562 (7709): attempted to duplicate a private mapping with mremap. This is not supported. [ 121.224048][ T7709] FAULT_INJECTION: forcing a failure. [ 121.224048][ T7709] name failslab, interval 1, probability 0, space 0, times 0 [ 121.236723][ T7709] CPU: 1 UID: 0 PID: 7709 Comm: syz.4.1562 Not tainted 6.17.0-rc1-syzkaller-00004-g53e760d89498 #0 PREEMPT(voluntary) [ 121.236763][ T7709] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 121.236770][ T7709] Call Trace: [ 121.236775][ T7709] [ 121.236780][ T7709] __dump_stack+0x1d/0x30 [ 121.236793][ T7709] dump_stack_lvl+0xe8/0x140 [ 121.236804][ T7709] dump_stack+0x15/0x1b [ 121.236817][ T7709] should_fail_ex+0x265/0x280 [ 121.236830][ T7709] should_failslab+0x8c/0xb0 [ 121.236910][ T7709] __kmalloc_node_track_caller_noprof+0xa4/0x410 [ 121.236927][ T7709] ? sidtab_sid2str_get+0xa0/0x130 [ 121.236940][ T7709] kmemdup_noprof+0x2b/0x70 [ 121.237065][ T7709] sidtab_sid2str_get+0xa0/0x130 [ 121.237077][ T7709] security_sid_to_context_core+0x1eb/0x2e0 [ 121.237150][ T7709] security_sid_to_context+0x27/0x40 [ 121.237169][ T7709] selinux_lsmprop_to_secctx+0x67/0xf0 [ 121.237189][ T7709] security_lsmprop_to_secctx+0x43/0x80 [ 121.237252][ T7709] audit_log_task_context+0x77/0x190 [ 121.237295][ T7709] audit_log_task+0xf4/0x250 [ 121.237311][ T7709] audit_seccomp+0x61/0x100 [ 121.237363][ T7709] ? __seccomp_filter+0x68c/0x10d0 [ 121.237375][ T7709] __seccomp_filter+0x69d/0x10d0 [ 121.237387][ T7709] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 121.237402][ T7709] ? vfs_write+0x7e8/0x960 [ 121.237483][ T7709] ? __rcu_read_unlock+0x4f/0x70 [ 121.237495][ T7709] ? __fget_files+0x184/0x1c0 [ 121.237510][ T7709] __secure_computing+0x82/0x150 [ 121.237539][ T7709] syscall_trace_enter+0xcf/0x1e0 [ 121.237585][ T7709] do_syscall_64+0xac/0x200 [ 121.237647][ T7709] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 121.237659][ T7709] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 121.237673][ T7709] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.237685][ T7709] RIP: 0033:0x7fb2c02bebe9 [ 121.237774][ T7709] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 121.237856][ T7709] RSP: 002b:00007fb2bed27038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 121.237868][ T7709] RAX: ffffffffffffffda RBX: 00007fb2c04e5fa0 RCX: 00007fb2c02bebe9 [ 121.237875][ T7709] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000007 [ 121.237904][ T7709] RBP: 00007fb2bed27090 R08: 0000000000000000 R09: 0000000000000000 [ 121.237910][ T7709] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 121.237917][ T7709] R13: 00007fb2c04e6038 R14: 00007fb2c04e5fa0 R15: 00007ffc9f9cf2a8 [ 121.237928][ T7709] [ 121.238395][ T7709] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1562'. [ 121.255115][ T7713] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7713 comm=syz.2.1563 [ 121.399792][ T7719] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1563'. [ 121.687599][ T7730] loop2: detected capacity change from 0 to 1024 [ 121.733634][ T7730] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.1570: Failed to acquire dquot type 0 [ 121.760391][ T7730] EXT4-fs error (device loop2): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 121.783165][ T7730] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #13: comm syz.2.1570: corrupted inode contents [ 121.810262][ T7730] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #13: comm syz.2.1570: mark_inode_dirty error [ 121.825582][ T7730] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #13: comm syz.2.1570: corrupted inode contents [ 121.839147][ T7730] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #13: comm syz.2.1570: mark_inode_dirty error [ 121.851945][ T7730] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #13: comm syz.2.1570: corrupted inode contents [ 121.866643][ T7730] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 121.876119][ T7730] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #13: comm syz.2.1570: corrupted inode contents [ 121.899872][ T7730] EXT4-fs error (device loop2): ext4_truncate:4666: inode #13: comm syz.2.1570: mark_inode_dirty error [ 121.912272][ T7730] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 121.923718][ T7730] EXT4-fs (loop2): 1 truncate cleaned up [ 122.629851][ T7772] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1586'. [ 122.692488][ T7773] loop3: detected capacity change from 0 to 4096 [ 122.734125][ T7770] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 122.770619][ T7785] loop4: detected capacity change from 0 to 1024 [ 122.779889][ T7784] loop2: detected capacity change from 0 to 1024 [ 122.803093][ T7784] __quota_error: 661 callbacks suppressed [ 122.803113][ T7784] Quota error (device loop2): do_check_range: Getting block 64 out of range 1-5 [ 122.812516][ T29] audit: type=1400 audit(1754992462.098:12874): avc: denied { create } for pid=7791 comm="syz.0.1594" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 122.818077][ T7784] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 122.848327][ T7784] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.1591: Failed to acquire dquot type 0 [ 122.866711][ T29] audit: type=1400 audit(1754992462.158:12875): avc: denied { prog_run } for pid=7792 comm="syz.1.1595" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 122.868498][ T7784] EXT4-fs error (device loop2): mb_free_blocks:2017: group 0, [ 122.885980][ T29] audit: type=1400 audit(1754992462.158:12876): avc: denied { read } for pid=7792 comm="syz.1.1595" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 122.893623][ T7784] inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 122.894001][ T7784] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #13: comm syz.2.1591: corrupted inode contents [ 122.916871][ T29] audit: type=1400 audit(1754992462.158:12877): avc: denied { open } for pid=7792 comm="syz.1.1595" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 122.961705][ T29] audit: type=1400 audit(1754992462.158:12878): avc: denied { ioctl } for pid=7792 comm="syz.1.1595" path="/dev/ppp" dev="devtmpfs" ino=140 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 122.998916][ T29] audit: type=1400 audit(1754992462.158:12879): avc: denied { write } for pid=7792 comm="syz.1.1595" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 122.999541][ T7784] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #13: comm syz.2.1591: mark_inode_dirty error [ 123.021979][ T29] audit: type=1400 audit(1754992462.238:12880): avc: denied { wake_alarm } for pid=7791 comm="syz.0.1594" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 123.041260][ T7784] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #13: comm syz.2.1591: corrupted inode contents [ 123.054570][ T29] audit: type=1400 audit(1754992462.268:12881): avc: denied { remount } for pid=7791 comm="syz.0.1594" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 123.094240][ T7784] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #13: comm syz.2.1591: mark_inode_dirty error [ 123.106113][ T7784] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #13: comm syz.2.1591: corrupted inode contents [ 123.124944][ T7803] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1597'. [ 123.134793][ T7784] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 123.144739][ T7784] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #13: comm syz.2.1591: corrupted inode contents [ 123.160737][ T7784] EXT4-fs error (device loop2): ext4_truncate:4666: inode #13: comm syz.2.1591: mark_inode_dirty error [ 123.172980][ T7805] loop3: detected capacity change from 0 to 1024 [ 123.182551][ T7805] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.1598: Failed to acquire dquot type 0 [ 123.189957][ T7784] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 123.194520][ T7805] EXT4-fs error (device loop3): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 123.213908][ T7784] EXT4-fs (loop2): 1 truncate cleaned up [ 123.217567][ T7805] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #13: comm syz.3.1598: corrupted inode contents [ 123.235969][ T7805] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #13: comm syz.3.1598: mark_inode_dirty error [ 123.247721][ T7805] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #13: comm syz.3.1598: corrupted inode contents [ 123.259944][ T7805] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #13: comm syz.3.1598: mark_inode_dirty error [ 123.271512][ T7805] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #13: comm syz.3.1598: corrupted inode contents [ 123.283625][ T7805] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 123.293092][ T7805] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #13: comm syz.3.1598: corrupted inode contents [ 123.305287][ T7805] EXT4-fs error (device loop3): ext4_truncate:4666: inode #13: comm syz.3.1598: mark_inode_dirty error [ 123.318618][ T7805] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 123.334462][ T7805] EXT4-fs (loop3): 1 truncate cleaned up [ 123.513446][ T7820] loop3: detected capacity change from 0 to 1024 [ 123.525911][ T7820] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.1604: Failed to acquire dquot type 0 [ 123.527933][ T7825] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7825 comm=syz.0.1606 [ 123.553646][ T7825] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1606'. [ 123.560679][ T7820] EXT4-fs error (device loop3): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 123.578873][ T7820] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #13: comm syz.3.1604: corrupted inode contents [ 123.598501][ T7820] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #13: comm syz.3.1604: mark_inode_dirty error [ 123.611131][ T7820] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #13: comm syz.3.1604: corrupted inode contents [ 123.625820][ T7828] 9pnet_fd: Insufficient options for proto=fd [ 123.635965][ T7830] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1608'. [ 123.655985][ T7820] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #13: comm syz.3.1604: mark_inode_dirty error [ 123.687966][ T7820] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #13: comm syz.3.1604: corrupted inode contents [ 123.723484][ T7836] loop4: detected capacity change from 0 to 1024 [ 123.724439][ T7820] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 123.745134][ T7820] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #13: comm syz.3.1604: corrupted inode contents [ 123.758306][ T7820] EXT4-fs error (device loop3): ext4_truncate:4666: inode #13: comm syz.3.1604: mark_inode_dirty error [ 123.776014][ T7820] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 123.778720][ T7836] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.1611: Failed to acquire dquot type 0 [ 123.789536][ T7820] EXT4-fs (loop3): 1 truncate cleaned up [ 123.809446][ T7836] EXT4-fs error (device loop4): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 123.839367][ T7836] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #13: comm syz.4.1611: corrupted inode contents [ 123.876246][ T7836] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #13: comm syz.4.1611: mark_inode_dirty error [ 123.934569][ T7836] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #13: comm syz.4.1611: corrupted inode contents [ 123.977288][ T7836] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #13: comm syz.4.1611: mark_inode_dirty error [ 123.996608][ T7836] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #13: comm syz.4.1611: corrupted inode contents [ 124.011167][ T7836] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 124.020516][ T7836] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #13: comm syz.4.1611: corrupted inode contents [ 124.059861][ T7836] EXT4-fs error (device loop4): ext4_truncate:4666: inode #13: comm syz.4.1611: mark_inode_dirty error [ 124.095784][ T7836] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 124.115387][ T7836] EXT4-fs (loop4): 1 truncate cleaned up [ 124.194332][ T7856] loop2: detected capacity change from 0 to 4096 [ 124.203243][ T7860] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7860 comm=syz.3.1621 [ 124.259491][ T7856] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 124.483957][ T7877] loop4: detected capacity change from 0 to 1024 [ 124.492105][ T7877] EXT4-fs: Mount option(s) incompatible with ext3 [ 124.605465][ T7885] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 124.658979][ T7893] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7893 comm=syz.0.1634 [ 124.666417][ T7891] loop4: detected capacity change from 0 to 4096 [ 124.682435][ T7891] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 125.034998][ T7907] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 125.178032][ T7932] loop4: detected capacity change from 0 to 1024 [ 125.188954][ T7932] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.1652: Failed to acquire dquot type 0 [ 125.192404][ T7935] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 125.202540][ T7932] EXT4-fs error (device loop4): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 125.222917][ T7932] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #13: comm syz.4.1652: corrupted inode contents [ 125.236917][ T7932] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #13: comm syz.4.1652: mark_inode_dirty error [ 125.249105][ T7932] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #13: comm syz.4.1652: corrupted inode contents [ 125.263264][ T7932] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #13: comm syz.4.1652: mark_inode_dirty error [ 125.274741][ T7932] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #13: comm syz.4.1652: corrupted inode contents [ 125.286991][ T7932] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 125.295787][ T7932] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #13: comm syz.4.1652: corrupted inode contents [ 125.309399][ T7932] EXT4-fs error (device loop4): ext4_truncate:4666: inode #13: comm syz.4.1652: mark_inode_dirty error [ 125.321405][ T7932] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 125.330943][ T7932] EXT4-fs (loop4): 1 truncate cleaned up [ 125.417497][ T7953] loop3: detected capacity change from 0 to 1024 [ 125.443068][ T7953] EXT4-fs: Ignoring removed bh option [ 125.452968][ T7953] EXT4-fs: inline encryption not supported [ 125.459547][ T7953] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 125.490846][ T7953] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 2: comm syz.3.1660: lblock 2 mapped to illegal pblock 2 (length 1) [ 125.491707][ T7959] __nla_validate_parse: 6 callbacks suppressed [ 125.491720][ T7959] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1672'. [ 125.512194][ T7961] loop4: detected capacity change from 0 to 1024 [ 125.527652][ T7953] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 48: comm syz.3.1660: lblock 0 mapped to illegal pblock 48 (length 1) [ 125.542627][ T7961] EXT4-fs: Ignoring removed bh option [ 125.549472][ T7961] EXT4-fs: inline encryption not supported [ 125.557161][ T7953] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.1660: Failed to acquire dquot type 0 [ 125.563405][ T7961] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 125.582431][ T7961] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 2: comm syz.4.1662: lblock 2 mapped to illegal pblock 2 (length 1) [ 125.584213][ T7953] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 125.598742][ T7961] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 48: comm syz.4.1662: lblock 0 mapped to illegal pblock 48 (length 1) [ 125.621087][ T7961] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.1662: Failed to acquire dquot type 0 [ 125.632955][ T7961] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 125.643360][ T7953] EXT4-fs error (device loop3): ext4_evict_inode:254: inode #11: comm syz.3.1660: mark_inode_dirty error [ 125.645289][ T7961] EXT4-fs error (device loop4): ext4_evict_inode:254: inode #11: comm syz.4.1662: mark_inode_dirty error [ 125.666990][ T7953] EXT4-fs warning (device loop3): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 125.668153][ T7961] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 125.688206][ T7961] EXT4-fs (loop4): 1 orphan inode deleted [ 125.694641][ T7961] EXT4-fs mount: 82 callbacks suppressed [ 125.694655][ T7961] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 125.707060][ T7953] EXT4-fs (loop3): 1 orphan inode deleted [ 125.712941][ T12] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:0: lblock 1 mapped to illegal pblock 1 (length 1) [ 125.735703][ T12] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:0: Failed to release dquot type 0 [ 125.751111][ T12] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:0: lblock 1 mapped to illegal pblock 1 (length 1) [ 125.762411][ T7953] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 125.785711][ T12] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u8:0: Failed to release dquot type 0 [ 125.800157][ T7961] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 125.831291][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.857491][ T7953] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 125.897245][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.897338][ T7978] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 125.937478][ T7980] loop4: detected capacity change from 0 to 1024 [ 125.955861][ T7980] EXT4-fs: Ignoring removed bh option [ 125.962819][ T7980] EXT4-fs: inline encryption not supported [ 125.969426][ T7980] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 125.988337][ T7980] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 2: comm syz.4.1671: lblock 2 mapped to illegal pblock 2 (length 1) [ 126.002695][ T7984] loop3: detected capacity change from 0 to 1024 [ 126.009986][ T7980] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 48: comm syz.4.1671: lblock 0 mapped to illegal pblock 48 (length 1) [ 126.014313][ T7987] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 126.028124][ T7980] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.1671: Failed to acquire dquot type 0 [ 126.044734][ T7984] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.1670: Failed to acquire dquot type 0 [ 126.056790][ T7980] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 126.068832][ T7984] EXT4-fs error (device loop3): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 126.069021][ T7980] EXT4-fs error (device loop4): ext4_evict_inode:254: inode #11: comm syz.4.1671: mark_inode_dirty error [ 126.095693][ T7980] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 126.105946][ T7980] EXT4-fs (loop4): 1 orphan inode deleted [ 126.112279][ T7980] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 126.114428][ T7991] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1675'. [ 126.125028][ T7984] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #13: comm syz.3.1670: corrupted inode contents [ 126.145650][ T3419] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:7: lblock 1 mapped to illegal pblock 1 (length 1) [ 126.167092][ T3419] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:7: Failed to release dquot type 0 [ 126.180443][ T7984] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #13: comm syz.3.1670: mark_inode_dirty error [ 126.192672][ T7984] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #13: comm syz.3.1670: corrupted inode contents [ 126.207064][ T7984] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #13: comm syz.3.1670: mark_inode_dirty error [ 126.209513][ T7980] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 126.233865][ T7984] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #13: comm syz.3.1670: corrupted inode contents [ 126.250498][ T7984] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 126.261085][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.273032][ T7984] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #13: comm syz.3.1670: corrupted inode contents [ 126.290544][ T7996] loop2: detected capacity change from 0 to 1024 [ 126.297041][ T7984] EXT4-fs error (device loop3): ext4_truncate:4666: inode #13: comm syz.3.1670: mark_inode_dirty error [ 126.311127][ T7984] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 126.319776][ T7996] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.1677: Failed to acquire dquot type 0 [ 126.333434][ T7996] EXT4-fs error (device loop2): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 126.348138][ T7996] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #13: comm syz.2.1677: corrupted inode contents [ 126.360147][ T7984] EXT4-fs (loop3): 1 truncate cleaned up [ 126.361333][ T7996] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #13: comm syz.2.1677: mark_inode_dirty error [ 126.372283][ T7984] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 126.389774][ T7996] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #13: comm syz.2.1677: corrupted inode contents [ 126.396662][ T8002] loop4: detected capacity change from 0 to 1024 [ 126.408458][ T8002] EXT4-fs: Ignoring removed bh option [ 126.414011][ T8002] EXT4-fs: inline encryption not supported [ 126.420378][ T7996] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #13: comm syz.2.1677: mark_inode_dirty error [ 126.432721][ T8002] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 126.432848][ T7996] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #13: comm syz.2.1677: corrupted inode contents [ 126.456239][ T7996] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 126.465121][ T7996] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #13: comm syz.2.1677: corrupted inode contents [ 126.479103][ T8002] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 2: comm syz.4.1678: lblock 2 mapped to illegal pblock 2 (length 1) [ 126.493906][ T8002] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 48: comm syz.4.1678: lblock 0 mapped to illegal pblock 48 (length 1) [ 126.508697][ T7996] EXT4-fs error (device loop2): ext4_truncate:4666: inode #13: comm syz.2.1677: mark_inode_dirty error [ 126.530138][ T8002] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.1678: Failed to acquire dquot type 0 [ 126.542581][ T8002] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 126.542928][ T7996] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 126.552963][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.571378][ T8002] EXT4-fs error (device loop4): ext4_evict_inode:254: inode #11: comm syz.4.1678: mark_inode_dirty error [ 126.588403][ T7996] EXT4-fs (loop2): 1 truncate cleaned up [ 126.600094][ T7996] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 126.616359][ T8002] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 126.638442][ T8009] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8009 comm=syz.3.1679 [ 126.659396][ T8002] EXT4-fs (loop4): 1 orphan inode deleted [ 126.676026][ T8002] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 126.689210][ T31] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:1: lblock 1 mapped to illegal pblock 1 (length 1) [ 126.714639][ T8009] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1679'. [ 126.719471][ T31] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:1: Failed to release dquot type 0 [ 126.908902][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.944281][ T8019] loop2: detected capacity change from 0 to 1024 [ 126.954251][ T8019] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.1682: Failed to acquire dquot type 0 [ 126.966661][ T8019] EXT4-fs error (device loop2): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 126.982483][ T8019] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #13: comm syz.2.1682: corrupted inode contents [ 127.001249][ T8019] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #13: comm syz.2.1682: mark_inode_dirty error [ 127.013138][ T8019] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #13: comm syz.2.1682: corrupted inode contents [ 127.025379][ T8019] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #13: comm syz.2.1682: mark_inode_dirty error [ 127.036931][ T8019] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #13: comm syz.2.1682: corrupted inode contents [ 127.049113][ T8019] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 127.057956][ T8019] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #13: comm syz.2.1682: corrupted inode contents [ 127.070059][ T8019] EXT4-fs error (device loop2): ext4_truncate:4666: inode #13: comm syz.2.1682: mark_inode_dirty error [ 127.081901][ T8019] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 127.097905][ T8019] EXT4-fs (loop2): 1 truncate cleaned up [ 127.111497][ T8019] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 127.144674][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.154197][ T3300] EXT4-fs error (device loop4): __ext4_get_inode_loc:4861: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 127.186256][ T3300] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 127.198174][ T3300] EXT4-fs error (device loop4): ext4_quota_off:7217: inode #3: comm syz-executor: mark_inode_dirty error [ 127.233204][ T8022] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 127.291661][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.368017][ T8034] loop4: detected capacity change from 0 to 1024 [ 127.376450][ T8034] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.1690: Failed to acquire dquot type 0 [ 127.388767][ T8034] EXT4-fs error (device loop4): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 127.403928][ T8034] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #13: comm syz.4.1690: corrupted inode contents [ 127.418344][ T8034] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #13: comm syz.4.1690: mark_inode_dirty error [ 127.430092][ T8034] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #13: comm syz.4.1690: corrupted inode contents [ 127.442493][ T8034] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #13: comm syz.4.1690: mark_inode_dirty error [ 127.454519][ T8034] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #13: comm syz.4.1690: corrupted inode contents [ 127.466971][ T8034] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 127.470435][ T8037] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1691'. [ 127.476608][ T8034] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #13: comm syz.4.1690: corrupted inode contents [ 127.497923][ T8034] EXT4-fs error (device loop4): ext4_truncate:4666: inode #13: comm syz.4.1690: mark_inode_dirty error [ 127.510766][ T8034] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 127.518637][ T8044] loop2: detected capacity change from 0 to 1024 [ 127.520254][ T8034] EXT4-fs (loop4): 1 truncate cleaned up [ 127.528463][ T8044] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.1692: Failed to acquire dquot type 0 [ 127.532312][ T8034] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 127.544634][ T8044] EXT4-fs error (device loop2): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 127.571803][ T8044] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #13: comm syz.2.1692: corrupted inode contents [ 127.584099][ T8044] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #13: comm syz.2.1692: mark_inode_dirty error [ 127.595814][ T8044] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #13: comm syz.2.1692: corrupted inode contents [ 127.609108][ T8044] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #13: comm syz.2.1692: mark_inode_dirty error [ 127.620858][ T8044] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #13: comm syz.2.1692: corrupted inode contents [ 127.640854][ T8044] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 127.655128][ T8044] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #13: comm syz.2.1692: corrupted inode contents [ 127.671586][ T8044] EXT4-fs error (device loop2): ext4_truncate:4666: inode #13: comm syz.2.1692: mark_inode_dirty error [ 127.686867][ T8044] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 127.697409][ T8044] EXT4-fs (loop2): 1 truncate cleaned up [ 127.709906][ T8044] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 127.723538][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.820190][ T29] kauditd_printk_skb: 777 callbacks suppressed [ 127.820205][ T29] audit: type=1326 audit(1754992467.108:13629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8043 comm="syz.2.1692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e625febe9 code=0x7ffc0000 [ 127.858036][ T8058] loop4: detected capacity change from 0 to 4096 [ 127.899446][ T29] audit: type=1326 audit(1754992467.118:13630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8043 comm="syz.2.1692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3e625febe9 code=0x7ffc0000 [ 127.923262][ T29] audit: type=1326 audit(1754992467.118:13631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8043 comm="syz.2.1692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e625febe9 code=0x7ffc0000 [ 127.946866][ T29] audit: type=1326 audit(1754992467.118:13632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8043 comm="syz.2.1692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3e625febe9 code=0x7ffc0000 [ 127.970383][ T29] audit: type=1326 audit(1754992467.118:13633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8043 comm="syz.2.1692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e625febe9 code=0x7ffc0000 [ 127.993890][ T29] audit: type=1326 audit(1754992467.118:13634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8043 comm="syz.2.1692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f3e625febe9 code=0x7ffc0000 [ 128.017304][ T29] audit: type=1326 audit(1754992467.118:13635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8043 comm="syz.2.1692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e625febe9 code=0x7ffc0000 [ 128.040865][ T29] audit: type=1326 audit(1754992467.148:13636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8043 comm="syz.2.1692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3e625febe9 code=0x7ffc0000 [ 128.064460][ T29] audit: type=1326 audit(1754992467.158:13637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8043 comm="syz.2.1692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e625febe9 code=0x7ffc0000 [ 128.088063][ T29] audit: type=1326 audit(1754992467.158:13638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8043 comm="syz.2.1692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e625febe9 code=0x7ffc0000 [ 128.115438][ T8058] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 128.140452][ T8058] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 128.167414][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.181932][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.239687][ T8068] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 128.252499][ T8070] loop4: detected capacity change from 0 to 512 [ 128.270246][ T8070] journal_path: Lookup failure for './file0/../file0' [ 128.277119][ T8070] EXT4-fs: error: could not find journal device path [ 128.323388][ T8079] loop4: detected capacity change from 0 to 512 [ 128.353284][ T8079] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 128.369521][ T8060] loop3: detected capacity change from 0 to 512 [ 128.386307][ T8060] journal_path: Non-blockdev passed as './bus' [ 128.392568][ T8060] EXT4-fs: error: could not find journal device path [ 128.421345][ T8079] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 128.728111][ T8091] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1709'. [ 128.748279][ T8091] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 128.772634][ T8091] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 128.975809][ T8096] loop2: detected capacity change from 0 to 4096 [ 128.991639][ T8096] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 129.024925][ T8096] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 129.077662][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.117692][ T8105] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1717'. [ 129.119148][ T8109] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 129.171342][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.194710][ T8113] loop2: detected capacity change from 0 to 1024 [ 129.213996][ T8113] EXT4-fs: Ignoring removed bh option [ 129.238817][ T8113] EXT4-fs: inline encryption not supported [ 129.257857][ T8113] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 129.291217][ T8113] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 2: comm syz.2.1719: lblock 2 mapped to illegal pblock 2 (length 1) [ 129.317523][ T8113] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 48: comm syz.2.1719: lblock 0 mapped to illegal pblock 48 (length 1) [ 129.333052][ T8113] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.1719: Failed to acquire dquot type 0 [ 129.346973][ T8113] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 129.357457][ T8113] EXT4-fs error (device loop2): ext4_evict_inode:254: inode #11: comm syz.2.1719: mark_inode_dirty error [ 129.389234][ T8113] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 129.400146][ T8113] EXT4-fs (loop2): 1 orphan inode deleted [ 129.406396][ T8113] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 129.424920][ T41] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:2: lblock 1 mapped to illegal pblock 1 (length 1) [ 129.457707][ T41] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:2: Failed to release dquot type 0 [ 129.478406][ T8113] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 129.499781][ T8135] loop3: detected capacity change from 0 to 1024 [ 129.507051][ T8135] EXT4-fs: Ignoring removed bh option [ 129.513981][ T8135] EXT4-fs: inline encryption not supported [ 129.520382][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.520776][ T8135] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 129.541754][ T8136] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1724'. [ 129.542273][ T8135] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 2: comm syz.3.1727: lblock 2 mapped to illegal pblock 2 (length 1) [ 129.550863][ T8136] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1724'. [ 129.575492][ T8135] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 48: comm syz.3.1727: lblock 0 mapped to illegal pblock 48 (length 1) [ 129.590441][ T8135] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.1727: Failed to acquire dquot type 0 [ 129.602088][ T8135] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 129.612548][ T8135] EXT4-fs error (device loop3): ext4_evict_inode:254: inode #11: comm syz.3.1727: mark_inode_dirty error [ 129.626109][ T8135] EXT4-fs warning (device loop3): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 129.637331][ T8135] EXT4-fs (loop3): 1 orphan inode deleted [ 129.643865][ T8135] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 129.656526][ T31] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:1: lblock 1 mapped to illegal pblock 1 (length 1) [ 129.671075][ T31] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u8:1: Failed to release dquot type 0 [ 129.706205][ T8135] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 129.732105][ T8141] loop2: detected capacity change from 0 to 4096 [ 129.744236][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.773338][ T8141] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 129.822320][ T8141] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 129.932033][ T8153] loop3: detected capacity change from 0 to 1024 [ 129.938922][ T8153] EXT4-fs: Ignoring removed bh option [ 129.945849][ T8153] EXT4-fs: inline encryption not supported [ 129.952386][ T8153] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 129.965858][ T8153] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 2: comm syz.3.1733: lblock 2 mapped to illegal pblock 2 (length 1) [ 129.980119][ T8153] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 48: comm syz.3.1733: lblock 0 mapped to illegal pblock 48 (length 1) [ 129.994512][ T8153] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.1733: Failed to acquire dquot type 0 [ 130.006082][ T8153] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 130.015954][ T8153] EXT4-fs error (device loop3): ext4_evict_inode:254: inode #11: comm syz.3.1733: mark_inode_dirty error [ 130.036700][ T8153] EXT4-fs warning (device loop3): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 130.047441][ T8153] EXT4-fs (loop3): 1 orphan inode deleted [ 130.048240][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.053845][ T8153] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 130.074873][ T41] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:2: lblock 1 mapped to illegal pblock 1 (length 1) [ 130.091584][ T41] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u8:2: Failed to release dquot type 0 [ 130.111325][ T8153] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 130.151909][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.262023][ T8165] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8165 comm=syz.3.1738 [ 130.275971][ T8165] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1738'. [ 130.357596][ T8170] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 130.413381][ T8180] loop4: detected capacity change from 0 to 1024 [ 130.427922][ T8180] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.1745: Failed to acquire dquot type 0 [ 130.449847][ T8180] EXT4-fs error (device loop4): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 130.467113][ T8180] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #13: comm syz.4.1745: corrupted inode contents [ 130.480436][ T8180] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #13: comm syz.4.1745: mark_inode_dirty error [ 130.492290][ T8180] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #13: comm syz.4.1745: corrupted inode contents [ 130.505643][ T8180] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #13: comm syz.4.1745: mark_inode_dirty error [ 130.517808][ T8180] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #13: comm syz.4.1745: corrupted inode contents [ 130.530777][ T8180] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 130.539762][ T8180] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #13: comm syz.4.1745: corrupted inode contents [ 130.556174][ T8180] EXT4-fs error (device loop4): ext4_truncate:4666: inode #13: comm syz.4.1745: mark_inode_dirty error [ 130.577269][ T8180] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 130.587449][ T8180] EXT4-fs (loop4): 1 truncate cleaned up [ 130.594514][ T8180] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 130.611778][ T8192] loop3: detected capacity change from 0 to 1024 [ 130.633303][ T8192] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 130.733867][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.776862][ T8211] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 130.809817][ T8215] loop4: detected capacity change from 0 to 1024 [ 130.823315][ T8215] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.1759: Failed to acquire dquot type 0 [ 130.841957][ T8215] EXT4-fs error (device loop4): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 130.858096][ T8215] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #13: comm syz.4.1759: corrupted inode contents [ 130.871804][ T8215] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #13: comm syz.4.1759: mark_inode_dirty error [ 130.885075][ T8215] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #13: comm syz.4.1759: corrupted inode contents [ 130.897628][ T8215] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #13: comm syz.4.1759: mark_inode_dirty error [ 130.910123][ T8215] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #13: comm syz.4.1759: corrupted inode contents [ 130.923307][ T8215] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 130.932121][ T8215] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #13: comm syz.4.1759: corrupted inode contents [ 130.944724][ T8215] EXT4-fs error (device loop4): ext4_truncate:4666: inode #13: comm syz.4.1759: mark_inode_dirty error [ 130.956346][ T8215] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 130.965958][ T8215] EXT4-fs (loop4): 1 truncate cleaned up [ 130.973483][ T8215] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 131.048682][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.072802][ T8225] loop4: detected capacity change from 0 to 1024 [ 131.082152][ T8225] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.1763: Failed to acquire dquot type 0 [ 131.094109][ T8225] EXT4-fs error (device loop4): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 131.109092][ T8225] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #13: comm syz.4.1763: corrupted inode contents [ 131.121539][ T8225] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #13: comm syz.4.1763: mark_inode_dirty error [ 131.133255][ T8225] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #13: comm syz.4.1763: corrupted inode contents [ 131.145346][ T8225] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #13: comm syz.4.1763: mark_inode_dirty error [ 131.156845][ T8225] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #13: comm syz.4.1763: corrupted inode contents [ 131.168931][ T8225] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 131.177707][ T8225] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #13: comm syz.4.1763: corrupted inode contents [ 131.190048][ T8225] EXT4-fs error (device loop4): ext4_truncate:4666: inode #13: comm syz.4.1763: mark_inode_dirty error [ 131.201313][ T8225] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 131.210727][ T8225] EXT4-fs (loop4): 1 truncate cleaned up [ 131.216824][ T8225] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 131.285451][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.330807][ T8231] loop3: detected capacity change from 0 to 1024 [ 131.337984][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.348784][ T8231] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.1765: Failed to acquire dquot type 0 [ 131.361613][ T8231] EXT4-fs error (device loop3): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 131.385904][ T8234] loop4: detected capacity change from 0 to 1024 [ 131.392692][ T8231] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #13: comm syz.3.1765: corrupted inode contents [ 131.392896][ T8234] EXT4-fs: Ignoring removed bh option [ 131.410280][ T8234] EXT4-fs: inline encryption not supported [ 131.416636][ T8234] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 131.416648][ T8231] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #13: comm syz.3.1765: mark_inode_dirty error [ 131.439046][ T8231] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #13: comm syz.3.1765: corrupted inode contents [ 131.451872][ T8231] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #13: comm syz.3.1765: mark_inode_dirty error [ 131.464551][ T8231] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #13: comm syz.3.1765: corrupted inode contents [ 131.492585][ T8234] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 2: comm syz.4.1766: lblock 2 mapped to illegal pblock 2 (length 1) [ 131.508884][ T8234] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 48: comm syz.4.1766: lblock 0 mapped to illegal pblock 48 (length 1) [ 131.523667][ T8234] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.1766: Failed to acquire dquot type 0 [ 131.535252][ T8231] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 131.544526][ T8231] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #13: comm syz.3.1765: corrupted inode contents [ 131.566899][ T8234] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 131.576582][ T8231] EXT4-fs error (device loop3): ext4_truncate:4666: inode #13: comm syz.3.1765: mark_inode_dirty error [ 131.583833][ T8238] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1767'. [ 131.596788][ T8238] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1767'. [ 131.606213][ T8234] EXT4-fs error (device loop4): ext4_evict_inode:254: inode #11: comm syz.4.1766: mark_inode_dirty error [ 131.619422][ T8231] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 131.638264][ T8234] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 131.649332][ T8234] EXT4-fs (loop4): 1 orphan inode deleted [ 131.660129][ T3419] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:7: lblock 1 mapped to illegal pblock 1 (length 1) [ 131.675197][ T8231] EXT4-fs (loop3): 1 truncate cleaned up [ 131.679039][ T8234] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 131.681465][ T8231] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 131.699560][ T3419] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:7: Failed to release dquot type 0 [ 131.730699][ T8239] netlink: 'syz.0.1767': attribute type 27 has an invalid length. [ 131.739256][ T8234] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 131.769170][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.808632][ T8245] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 131.962907][ T8254] loop4: detected capacity change from 0 to 4096 [ 131.984052][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.011021][ T8254] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 132.032779][ T8251] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 132.052941][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.069796][ T8260] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 132.337015][ T8280] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 132.836072][ T29] kauditd_printk_skb: 675 callbacks suppressed [ 132.836088][ T29] audit: type=1326 audit(1754992472.128:14294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8306 comm="syz.4.1793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2c02bebe9 code=0x7ffc0000 [ 132.907076][ T8309] audit: audit_backlog=65 > audit_backlog_limit=64 [ 132.907147][ T29] audit: type=1326 audit(1754992472.158:14295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8306 comm="syz.4.1793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb2c02bebe9 code=0x7ffc0000 [ 132.914083][ T8309] audit: audit_lost=5 audit_rate_limit=0 audit_backlog_limit=64 [ 132.937577][ T29] audit: type=1326 audit(1754992472.168:14296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8306 comm="syz.4.1793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2c02bebe9 code=0x7ffc0000 [ 132.945165][ T8309] audit: backlog limit exceeded [ 132.974547][ T29] audit: type=1326 audit(1754992472.178:14297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8306 comm="syz.4.1793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2c02bebe9 code=0x7ffc0000 [ 132.998177][ T29] audit: type=1326 audit(1754992472.178:14298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8306 comm="syz.4.1793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb2c02bebe9 code=0x7ffc0000 [ 133.021664][ T29] audit: type=1326 audit(1754992472.178:14299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8306 comm="syz.4.1793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2c02bebe9 code=0x7ffc0000 [ 133.045187][ T29] audit: type=1326 audit(1754992472.178:14300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8306 comm="syz.4.1793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2c02bebe9 code=0x7ffc0000 [ 133.100521][ T8318] loop3: detected capacity change from 0 to 1024 [ 133.109013][ T8320] loop4: detected capacity change from 0 to 1024 [ 133.117710][ T8320] EXT4-fs: Ignoring removed bh option [ 133.123633][ T8320] EXT4-fs: inline encryption not supported [ 133.125022][ T8318] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 133.143677][ T8320] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 133.160297][ T8326] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1796'. [ 133.171513][ T8320] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 2: comm syz.4.1798: lblock 2 mapped to illegal pblock 2 (length 1) [ 133.186954][ T8320] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 48: comm syz.4.1798: lblock 0 mapped to illegal pblock 48 (length 1) [ 133.202730][ T8320] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.1798: Failed to acquire dquot type 0 [ 133.214790][ T8320] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 133.225104][ T8329] loop2: detected capacity change from 0 to 1024 [ 133.237432][ T8320] EXT4-fs error (device loop4): ext4_evict_inode:254: inode #11: comm syz.4.1798: mark_inode_dirty error [ 133.242277][ T8329] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 133.249746][ T8320] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 133.273867][ T8333] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 133.289356][ T8320] EXT4-fs (loop4): 1 orphan inode deleted [ 133.295971][ T8320] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.311618][ T41] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:2: lblock 1 mapped to illegal pblock 1 (length 1) [ 133.313709][ T8340] netlink: 'syz.0.1803': attribute type 7 has an invalid length. [ 133.342981][ T41] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:2: Failed to release dquot type 0 [ 133.359935][ T8320] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 133.381230][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.384919][ T8347] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1806'. [ 133.401391][ T8347] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 133.732893][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.965025][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.092188][ T8400] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8400 comm=syz.0.1826 [ 134.107222][ T8400] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1826'. [ 134.204443][ T8397] loop2: detected capacity change from 0 to 1024 [ 134.223514][ T8397] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 134.267822][ T8415] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.285609][ T8417] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1831'. [ 134.329101][ T8422] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 134.353529][ T8424] loop4: detected capacity change from 0 to 512 [ 134.361636][ T8415] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.373416][ T8424] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 134.385804][ T8426] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 134.395669][ T8424] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.433956][ T8415] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.475607][ T8415] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.478654][ T8435] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1838'. [ 134.562582][ T3419] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.576551][ T12] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.587834][ T12] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.601675][ T12] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.904423][ T8452] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1843'. [ 134.933632][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.972020][ T8454] netlink: 'syz.0.1845': attribute type 7 has an invalid length. [ 135.162360][ T8469] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1852'. [ 135.201754][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.238757][ T8474] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1853'. [ 135.286445][ T8486] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8486 comm=syz.4.1855 [ 135.337212][ T8489] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 135.387927][ T8493] netlink: 'syz.1.1854': attribute type 27 has an invalid length. [ 135.408731][ T8492] loop2: detected capacity change from 0 to 1024 [ 135.439392][ T8495] loop4: detected capacity change from 0 to 512 [ 135.458479][ T8492] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.1859: Failed to acquire dquot type 0 [ 135.467098][ T8495] journal_path: Lookup failure for './file0/../file0' [ 135.476518][ T8495] EXT4-fs: error: could not find journal device path [ 135.503826][ T8493] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.511017][ T8493] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.542478][ T8492] EXT4-fs error (device loop2): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 135.578069][ T8492] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #13: comm syz.2.1859: corrupted inode contents [ 135.591637][ T8492] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #13: comm syz.2.1859: mark_inode_dirty error [ 135.613959][ T8492] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #13: comm syz.2.1859: corrupted inode contents [ 135.633881][ T8492] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #13: comm syz.2.1859: mark_inode_dirty error [ 135.651574][ T8492] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #13: comm syz.2.1859: corrupted inode contents [ 135.666385][ T8493] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 135.679248][ T8492] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 135.704787][ T8492] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #13: comm syz.2.1859: corrupted inode contents [ 135.726333][ T8493] veth0_macvtap: left allmulticast mode [ 135.733380][ T8492] EXT4-fs error (device loop2): ext4_truncate:4666: inode #13: comm syz.2.1859: mark_inode_dirty error [ 135.756856][ T8492] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 135.768373][ T8492] EXT4-fs (loop2): 1 truncate cleaned up [ 135.781726][ T8492] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 135.803471][ T31] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.819434][ T31] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.827995][ T31] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.849956][ T31] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.876243][ T8514] syzkaller0: entered promiscuous mode [ 135.881782][ T8514] syzkaller0: entered allmulticast mode [ 135.937708][ T8516] loop3: detected capacity change from 0 to 1024 [ 135.965146][ T8516] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 136.069718][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.128154][ T8531] netlink: 'syz.0.1869': attribute type 27 has an invalid length. [ 136.237217][ T8533] netlink: 'syz.2.1871': attribute type 7 has an invalid length. [ 136.547554][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.616006][ T8561] __nla_validate_parse: 7 callbacks suppressed [ 136.616020][ T8561] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1881'. [ 137.158456][ T8569] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 137.222723][ T3302] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 137.233865][ T3302] CPU: 0 UID: 0 PID: 3302 Comm: syz-executor Not tainted 6.17.0-rc1-syzkaller-00004-g53e760d89498 #0 PREEMPT(voluntary) [ 137.233898][ T3302] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 137.233911][ T3302] Call Trace: [ 137.233918][ T3302] [ 137.233926][ T3302] __dump_stack+0x1d/0x30 [ 137.233985][ T3302] dump_stack_lvl+0xe8/0x140 [ 137.234081][ T3302] dump_stack+0x15/0x1b [ 137.234098][ T3302] dump_header+0x81/0x220 [ 137.234125][ T3302] oom_kill_process+0x342/0x400 [ 137.234210][ T3302] out_of_memory+0x979/0xb80 [ 137.234244][ T3302] try_charge_memcg+0x5e6/0x9e0 [ 137.234275][ T3302] charge_memcg+0x51/0xc0 [ 137.234294][ T3302] __mem_cgroup_charge+0x28/0xb0 [ 137.234355][ T3302] filemap_add_folio+0x4e/0x1b0 [ 137.234381][ T3302] __filemap_get_folio+0x31e/0x6b0 [ 137.234490][ T3302] filemap_fault+0x41f/0xb40 [ 137.234573][ T3302] __do_fault+0xbc/0x200 [ 137.234593][ T3302] handle_mm_fault+0xf78/0x2c20 [ 137.234679][ T3302] do_user_addr_fault+0x636/0x1090 [ 137.234708][ T3302] exc_page_fault+0x62/0xa0 [ 137.234729][ T3302] asm_exc_page_fault+0x26/0x30 [ 137.234866][ T3302] RIP: 0033:0x7f3d86775c24 [ 137.234881][ T3302] Code: 85 ed 09 00 00 48 b8 db 34 b6 d7 82 de 1b 43 48 f7 a4 24 98 00 00 00 48 8b 05 78 fb e7 00 48 69 8c 24 90 00 00 00 e8 03 00 00 <8b> 78 08 48 8b 44 24 18 48 c1 ea 12 4c 8b 0d 89 fa e7 00 48 01 d1 [ 137.234896][ T3302] RSP: 002b:00007ffd68502e60 EFLAGS: 00010206 [ 137.234912][ T3302] RAX: 0000001b32c24000 RBX: 000000000000036b RCX: 0000000000021728 [ 137.234924][ T3302] RDX: 0000000001f8e436 RSI: 00007ffd68502ef0 RDI: 0000000000000001 [ 137.234935][ T3302] RBP: 00007ffd68502e9c R08: 0000000007860211 R09: 7fffffffffffffff [ 137.234947][ T3302] R10: 3fffffffffffffff R11: 0000000000000202 R12: 0000000000001388 [ 137.234957][ T3302] R13: 00000000000927c0 R14: 0000000000021677 R15: 00007ffd68502ef0 [ 137.235003][ T8575] loop2: detected capacity change from 0 to 4096 [ 137.235092][ T3302] ================================================================== [ 137.235124][ T3302] BUG: KCSAN: data-race in data_push_tail / vsnprintf [ 137.235172][ T3302] [ 137.235177][ T3302] write to 0xffffffff88e45460 of 1 bytes by task 8575 on cpu 1: [ 137.235191][ T3302] vsnprintf+0x2ce/0x890 [ 137.235218][ T3302] vscnprintf+0x41/0x90 [ 137.235232][ T3302] printk_sprint+0x30/0x2d0 [ 137.235247][ T3302] vprintk_store+0x599/0x860 [ 137.235274][ T3302] vprintk_emit+0x178/0x650 [ 137.235289][ T3302] vprintk_default+0x26/0x30 [ 137.235305][ T3302] vprintk+0x1d/0x30 [ 137.235325][ T3302] _printk+0x79/0xa0 [ 137.235348][ T3302] set_capacity_and_notify+0x14c/0x1f0 [ 137.235370][ T3302] loop_set_size+0x2e/0x70 [ 137.235386][ T3302] loop_configure+0x8d3/0xa50 [ 137.235413][ T3302] lo_ioctl+0x1e1/0x1350 [ 137.235438][ T3302] blkdev_ioctl+0x34f/0x440 [ 137.235456][ T3302] __se_sys_ioctl+0xcb/0x140 [ 137.235484][ T3302] __x64_sys_ioctl+0x43/0x50 [ 137.235511][ T3302] x64_sys_call+0x1816/0x2ff0 [ 137.235529][ T3302] do_syscall_64+0xd2/0x200 [ 137.235551][ T3302] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.235569][ T3302] [ 137.235574][ T3302] read to 0xffffffff88e45460 of 8 bytes by task 3302 on cpu 0: [ 137.235589][ T3302] data_push_tail+0xfd/0x420 [ 137.235615][ T3302] data_alloc+0xbf/0x2b0 [ 137.235638][ T3302] prb_reserve+0x808/0xaf0 [ 137.235663][ T3302] vprintk_store+0x56d/0x860 [ 137.235689][ T3302] vprintk_emit+0x178/0x650 [ 137.235705][ T3302] vprintk_default+0x26/0x30 [ 137.235720][ T3302] vprintk+0x1d/0x30 [ 137.235740][ T3302] _printk+0x79/0xa0 [ 137.235763][ T3302] __show_regs+0xf0/0x440 [ 137.235781][ T3302] show_trace_log_lvl+0x423/0x560 [ 137.235801][ T3302] __dump_stack+0x1d/0x30 [ 137.235817][ T3302] dump_stack_lvl+0xe8/0x140 [ 137.235832][ T3302] dump_stack+0x15/0x1b [ 137.235845][ T3302] dump_header+0x81/0x220 [ 137.235871][ T3302] oom_kill_process+0x342/0x400 [ 137.235897][ T3302] out_of_memory+0x979/0xb80 [ 137.235922][ T3302] try_charge_memcg+0x5e6/0x9e0 [ 137.235940][ T3302] charge_memcg+0x51/0xc0 [ 137.235955][ T3302] __mem_cgroup_charge+0x28/0xb0 [ 137.235971][ T3302] filemap_add_folio+0x4e/0x1b0 [ 137.235996][ T3302] __filemap_get_folio+0x31e/0x6b0 [ 137.236022][ T3302] filemap_fault+0x41f/0xb40 [ 137.236037][ T3302] __do_fault+0xbc/0x200 [ 137.236057][ T3302] handle_mm_fault+0xf78/0x2c20 [ 137.236076][ T3302] do_user_addr_fault+0x636/0x1090 [ 137.236103][ T3302] exc_page_fault+0x62/0xa0 [ 137.236121][ T3302] asm_exc_page_fault+0x26/0x30 [ 137.236143][ T3302] [ 137.236147][ T3302] value changed: 0x00000000fffff35b -> 0x00000000fffff30a [ 137.236157][ T3302] [ 137.236160][ T3302] Reported by Kernel Concurrency Sanitizer on: [ 137.236170][ T3302] CPU: 0 UID: 0 PID: 3302 Comm: syz-executor Not tainted 6.17.0-rc1-syzkaller-00004-g53e760d89498 #0 PREEMPT(voluntary) [ 137.236196][ T3302] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 137.236206][ T3302] ================================================================== [ 137.236240][ T3302] [ 137.236247][ T3302] memory: usage 307200kB, limit 307200kB, failcnt 644 [ 137.261115][ T8575] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 137.263987][ T3302] memory+swap: usage 308344kB, limit 9007199254740988kB, failcnt 0 [ 137.738149][ T3302] kmem: usage 307184kB, limit 9007199254740988kB, failcnt 0 [ 137.745495][ T3302] Memory cgroup stats for /syz1: [ 137.747730][ T3302] cache 0 [ 137.748496][ T8575] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 137.752827][ T3302] rss 0 [ 137.752837][ T3302] shmem 0 [ 137.752843][ T3302] mapped_file 0 [ 137.752849][ T3302] dirty 0 [ 137.752855][ T3302] writeback 0 [ 137.752861][ T3302] workingset_refault_anon 2723 [ 137.752869][ T3302] workingset_refault_file 1261 [ 137.789198][ T3302] swap 1175552 [ 137.792599][ T3302] swapcached 16384 [ 137.796402][ T3302] pgpgin 91793 [ 137.799804][ T3302] pgpgout 91789 [ 137.803241][ T3302] pgfault 114381 [ 137.806838][ T3302] pgmajfault 514 [ 137.810537][ T3302] inactive_anon 4096 [ 137.814410][ T3302] active_anon 12288 [ 137.818199][ T3302] inactive_file 0 [ 137.821862][ T3302] active_file 0 [ 137.825293][ T3302] unevictable 0 [ 137.828864][ T3302] hierarchical_memory_limit 314572800 [ 137.834230][ T3302] hierarchical_memsw_limit 9223372036854771712 [ 137.840370][ T3302] total_cache 0 [ 137.843807][ T3302] total_rss 0 [ 137.847129][ T3302] total_shmem 0 [ 137.850607][ T3302] total_mapped_file 0 [ 137.854599][ T3302] total_dirty 0 [ 137.858046][ T3302] total_writeback 0 [ 137.861845][ T3302] total_workingset_refault_anon 2723 [ 137.867100][ T3302] total_workingset_refault_file 1261 [ 137.872374][ T3302] total_swap 1175552 [ 137.876249][ T3302] total_swapcached 16384 [ 137.880485][ T3302] total_pgpgin 91793 [ 137.884498][ T3302] total_pgpgout 91789 [ 137.888490][ T3302] total_pgfault 114381 [ 137.892557][ T3302] total_pgmajfault 514 [ 137.896668][ T3302] total_inactive_anon 4096 [ 137.901077][ T3302] total_active_anon 12288 [ 137.905380][ T3302] total_inactive_file 0 [ 137.909654][ T3302] total_active_file 0 [ 137.913637][ T3302] total_unevictable 0 [ 137.917602][ T3302] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.1878,pid=8550,uid=0 [ 137.932181][ T3302] Memory cgroup out of memory: Killed process 8550 (syz.1.1878) total-vm:93764kB, anon-rss:1072kB, file-rss:22180kB, shmem-rss:128kB, UID:0 pgtables:152kB oom_score_adj:1000 [ 137.951749][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.