last executing test programs: 3.008019888s ago: executing program 1 (id=5357): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r3, 0x0, 0x4}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x0, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000170000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7"], 0x0, 0xffffffff}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='syzkaller\x00'}, 0x27) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000080)={[{@usrquota}, {@noblock_validity}, {@bh}, {@max_batch_time={'max_batch_time', 0x3d, 0x8c9}}, {@debug}, {@discard}]}, 0x1, 0x609, &(0x7f0000000f80)="$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") syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x41, &(0x7f0000000880)={[{@nouser_xattr}, {@nodiscard}, {@usrjquota}, {@grpjquota}, {@grpjquota}, {@minixdf}, {@quota}, {@noload}, {@block_validity}]}, 0x64, 0x51c, &(0x7f0000001740)="$eJzs3c9rJFkdAPBvdbpjMpOZZNWDLrj+2JXMoNOdbNzd4GFdQfS0oK73MSadENJJh3RndxIWN4N/gCCigie9eBH8AwRZ8OJRhAU9KyqK6IwevDgl1V2dmWS6O5mZnnQ2/flAdb2qV1Xf9zqp6npVj6oARtYnIuK1iLiXpun1iJjO5xfyIQ7aQ7bc3TtvL2dDEmn6xj+TSPJ5nW0l+fhyvtpERHz9KxHfSh6O29jb31iq1ao7+XSlubldaezt31jfXFqrrlW3FhbmX158ZfGlxbmB1PNKRLz6pb/+4Ls/+/Krv/rsW3+6+fdr386KNZXnP1iPR1RsfU50z2xXvXQkO1th5zGDnUfFVg1zk92WGHtozu2nXCYAALrLzvE/GBGfiojrMR1j+eksAAAAcHGkX5iKsSQi7W68x3wAAADgfaTQ6gObFMp5X4CpKBTK5XYf3g/HpUKt3mh+ZrW+u7XS7is7E6XC6nqtOpf3FZ6JUpJNz7fS96dfPDa9EBHPRMT3pydb0+Xlem1l2Bc/AAAAYERcPtb+/890u/0PAAAAXDAzwy4AAAAA8NRp/wMAAMDFp/0PAAAAF9pXX389G9LO+69X3tzb3ai/eWOl2tgob+4ul5frO9vltXp9rfXMvs2Ttler17c/F1u7tyrNaqNZaezt39ys7241b673ekM2AAAA8LQ98/F3/5BExMHnJ1tDZvx0q55yMeC8Kh6mknzcZbf+49X2+C9nVCjgTIwNuwDA0BSHXQBgaErDLgAwdMkJ+T077/w2H39ysOUBAAAGb/ajve//F/quedA/Gzj37MQwutz/h9HVuv9/2p68ThbgQik5A4CR98T3/0+Upo9UIAAAYOCmWkNSKOeX96aiUCiXI660XgtQSlbXa9W5iLgaEb+fLn0gm55vrZmc2GYAAAAAAAAAAAAAAAAAAAAAAAAAANrSNIkUAAAAuNAiCn9Lft1+lv/s9AtTx68PjCf/nY78FaFv/fiNH95aajZ35rP5/zqc3/xRPv/FYVzBAAAAgJHwSC/w77TTO+14AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABiku3feXu4MJyz6ziDj/uOLETHTLX4xJlrjiShFxKV/J1F8YL0kIsYGEH8y+/hIt/hJVqzDkN3iTw4g/sHtvvFjJv8WusW/PID4MMrezY4/rx3b/44cWLrvf8WII9OPq/fxLw6Pf2M99v8rp4zx7Hu/qPSMfzvi2WL3408nftIj/vOnjP/Nb+zv98pLfxIx2/X3JzkSq9Lc3K409vZvrG8urVXXqlsLC/MvL76y+NLiXGV1vVbNP7vG+N7HfnmvX/0v9Yg/06f+VyPihVPW/3/v3brzoXay1C3+tefz+Encj/+bn+ZLPBy/kP/2fTpPZ/mznfRBO/2g537+u+f61X+lR/1P+vtf61/t8U7i+te+8+f+iwIAZ6mxt7+xVKtVdy5sImuln4NiSOSJ8XP0X/fOQDeYpmma7VNPsJ0kzsPX0koM+8gEAAAM2v2T/mGXBAAAAAAAAAAAAAAAAAAAAEbXWTxO7HjMg8NUMohHaAMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADMT/AwAA//+VPdXC") bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0}, &(0x7f0000000200), &(0x7f0000000340)=r3}, 0x20) setsockopt$inet_buf(r2, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf", 0xb5) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x12, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 2.513333728s ago: executing program 0 (id=5360): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000180)={'#! ', './file0', [{0x20, 'syzkaller\x00'}, {0x20, '{,$}/'}, {0x20, '^#+'}, {0x20, 'kfree\x00'}, {0x20, '-('}, {}, {0x20, 'syzkaller\x00'}], 0xa, "950590ff4ebc24e621b95059761f7cc6aa4212d2066552cc35aae04037e81a5ea3b56d4205d277aca6b6ab78bc8d1861a978d1cf59d4f9652639f412cacdcea1abeeb39b217ec4"}, 0x7d) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) symlink(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'hsr0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000000)={r3, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x10) sendmsg$nl_route_sched(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xa}, {0x0, 0x6}, {0x13}}}, 0x24}, 0x1, 0x0, 0x0, 0x24004000}, 0x20044810) 2.507623138s ago: executing program 3 (id=5361): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05000000040000009900000001"], 0x48) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xb, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000180)='sched_switch\x00', r1}, 0x18) r2 = open(&(0x7f0000001b80)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f00000001c0)=0x20000088) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="020000000400000008"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3}, 0x4) syz_io_uring_setup(0xe4c, &(0x7f0000000380)={0x0, 0x5f39, 0x0, 0x0, 0x40002bc}, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.current\x00', 0x275a, 0x0) r5 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$netlink(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000c80)={'ip6gre0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001240)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x4000000, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0xffff, 0xffff}, {0xc}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x7, 0x0, 0x1fc, 0x0, 0xfffffc80, 0x0, 0x6, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x7, 0x0, 0x8, 0x1, 0x3f, 0x0, 0x0, 0x2, 0xffffffff, 0x2, 0xc00, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x80002, 0x0, 0x1000, 0xfffffffc, 0x0, 0x0, 0x0, 0x9, 0x0, 0x4000, 0x0, 0x0, 0xfffffffe, 0x6, 0x0, 0x0, 0x272, 0xb, 0xfffffffd, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0xe, 0x0, 0x2, 0xfffffffd, 0x0, 0x80007, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x0, 0xb97, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x5e, 0x6, 0x8, 0x0, 0x0, 0x1, 0x3, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x4, 0x0, 0x0, 0xffffffff, 0xffff8000, 0x0, 0xffffffff, 0x1, 0x0, 0x9, 0x0, 0x0, 0x8, 0x6, 0x9, 0x0, 0x0, 0x0, 0x0, 0x4cc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5, 0x0, 0x2000000, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb6, 0x0, 0x1, 0x0, 0x7, 0x0, 0x0, 0xffffffff, 0xffff, 0x0, 0x0, 0xb3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x9, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, 0x0, 0x0, 0x0, 0x13, 0x0, 0x0, 0xd79, 0x0, 0x0, 0x0, 0xaa, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4, 0x7, 0x102, 0x0, 0x8, 0xfffffffd, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x6, 0x8, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe6]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x1, 0x0, 0x0, 0x0, 0x0, 0x6}, {0xff, 0x2, 0x3, 0x0, 0x19, 0x40000000}, 0x0, 0x7f, 0x2}}]}}]}, 0x45c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff00000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=r7, @ANYRES32, @ANYBLOB="00000000000000000004100000000000"], 0x50) getsockopt$PNPIPE_ENCAP(0xffffffffffffffff, 0x113, 0x1, &(0x7f0000000440), &(0x7f00000004c0)=0x4) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000300)={'\x00', 0x1f, 0x401, 0x500000, 0x7fff, 0x4, 0xffffffffffffffff}) ptrace$poke(0x5, r8, &(0x7f0000000200), 0x6) close(r5) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000)={0x0, 0x3}, 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0xffffffa0}, 0x48) 2.319348213s ago: executing program 1 (id=5362): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r2, 0x0) connect$unix(r1, &(0x7f0000000640)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r2, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000004080)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r3], 0x18}}], 0x1, 0x0) 2.23431412s ago: executing program 0 (id=5363): socket$nl_route(0x10, 0x3, 0x0) epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f7535f7866907dc0200000000000000ae669e17fd6587d452d6453559c3421eed73d56615fe6c54c3b3ffe1b4ce25d7c983c044c03bf3a48dfe47ec9dd6c091c30b93bfae76d9ebacd3ed3e26e7a23129d6606fd28a69989d552af6bda9df2c3af36effff9af2551ce896165127cb3f011a7d06602e2fc40848228567ffb400000000003ed38ae89d24e1cebfba2f87925bfacba83109751fe6c05405d027edd68149ee99eef6a6992308a4fc0b7c70bc677d6dd4aed4af7500d7900a820b6347184e9a217b5614cd50cbe43a1ed2526814bc0000e9e086ce48e90defb6670c3df2624f56da648d28ad0a97aec7291c25447c106a99893e10db21901eb397b2f5fd71400fa7a050fbbef9e326ea27e513e96068fd1e8a43e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e49ee52b59d13182e1f24ed200ada10eb1affb87ba55b2d72078e9f40b4ae7d01000000d11cd22c35d32940000088dde499000000fdffffff00000000000f000000ef0000000000000000000000000c52f4ebd2c893bb97a068bd10734a83584898eccb26f7b789cfc4cd995fa3e11a5c74c85404e2df3ad37b729ac83b0dcb4f48f3c3356b9997fc455a17690b6f7f9ccbe4b1701941b18aba6b16455a66c3b84b138efc20a546d3d5227e23b03f2a834391ade2ff3e93ee296c4082ee73e7c353312c9d75711ce1623e9c54bdff59d2a69dcb7d84c235b23a4480c2461b405cfd1a38992f295ad3adc94cd07c850d1ce6d0b2fea02c24e9280333152fb794e4ddea02017a6c139b50101caecaf2abc0847a1ff2f7fc3c2b99a96fc4275ad107274e2934a87a4ddcdb112754ca5bdec0ead14b6c0f19a43a2f05c7f0be31491eb8c9ff68236c8600040000000000000000000066e034c81c3cab64e4fc8dc55ce0ada18dcbf31c6e82893add3bee3e10fc873d1d922b0877cbcd95b839d3059d5140a1f742f6e75741e39e5cb6a193e06a1043375b0f61b5d4e17c81baa31b924d84f224baf1221c15fa12313ffbfa7c2730309f66705b71e6205e7cbf3643561eabb9a63fcd604d5cc27e1317ad94cf438d71873e540be16b6ca205081173bd03c4754fc4674812daab482fd390a1c903b5d28a1eb247b5837d7603b92495d5c569f6433c3fca5206cb0000003fdbbd3892c52c2e7612e05de32322e980a3d69931e2c9312dd517c96f2ee90362476ed853c4c9b7d4ebf13cbaa795860e92a3d7d004f2c491db38eb769f094d5d48b262cc35c40682138cf13a49aa9f27abec00002f01ba1251aaf2385416ca719300"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) ppoll(&(0x7f0000000500)=[{}], 0x1, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x20040884}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f00000000c0)='cpu.stat\x00', 0x275a, 0x0) preadv(r3, &(0x7f0000000100), 0xa, 0x0, 0x0) 1.86696331s ago: executing program 4 (id=5365): open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x0, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000200)=0x1d37, 0x4) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000100)={0x1, &(0x7f00000001c0)=[{0x6, 0x4a, 0x6, 0x6}]}, 0x10) syz_emit_ethernet(0x82, &(0x7f0000000100)={@multicast, @empty, @val={@val={0x88a8, 0x0, 0x0, 0x2}}, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "5f1060", 0x44, 0x2f, 0x0, @private0, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x100}, {}, {0xa888, 0x88be, 0x86ddffff}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7}}}}}}}}}, 0x0) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @local}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) recvmsg$can_raw(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000080)=""/188, 0xbc}], 0x2, &(0x7f00000014c0)=""/252, 0xfc}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="d800000026000186"], 0xd8}, 0x1, 0x0, 0x0, 0x4004041}, 0x20004440) r4 = open(&(0x7f0000000440)='./bus\x00', 0x185102, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) pwritev2(r4, &(0x7f0000000640)=[{0x0}], 0x1, 0x3, 0x6, 0x6) 1.86278099s ago: executing program 2 (id=5366): setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000080), 0x0) dup(0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e20, @rand_addr=0x64010100}]}, &(0x7f0000000100)=0x10) r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x1, &(0x7f0000000780)=[{0x200000000006, 0xf, 0x6, 0x7ffc1ffb}]}) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000", @ANYRES32=r3], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r4, 0x2007ffc) sendfile(r4, r4, 0x0, 0x800000009) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1000000000004) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x6c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast2}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x5}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x3}]}, 0x6c}}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) 1.717409512s ago: executing program 4 (id=5367): setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000080), 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) dup(r0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)}, &(0x7f0000000100)=0x10) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000200), 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x1, &(0x7f0000000780)=[{0x200000000006, 0xf, 0x6, 0x7ffc1ffb}]}) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB], 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000", @ANYRES32=r4], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000540)={{r4}, &(0x7f0000000480)=0x20, 0x0}, 0x20) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f00000003c0)={[{@errors_remount}, {@nouid32}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@block_validity}, {@dioread_lock}], [{@fowner_lt}]}, 0x10, 0x439, &(0x7f0000002380)="$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") r5 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r5, 0x2007ffc) sendfile(r5, r5, 0x0, 0x800000009) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x43, 0x0) sendfile(r6, 0xffffffffffffffff, 0x0, 0x1000000000004) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x6c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast2}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x5}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x3}]}, 0x6c}}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) 1.546523886s ago: executing program 2 (id=5368): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r1, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=@setlink={0x3c, 0x13, 0x1, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, r4}, @IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}]}, 0x3c}}, 0x0) r5 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r5, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='\x00\x00\x00\x00\x00') openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) close(0xffffffffffffffff) 1.479453411s ago: executing program 3 (id=5369): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r2, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r4}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(r0, 0x0, 0x24040840) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x149a82, 0x0) write$UHID_CREATE2(r5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) 1.423972506s ago: executing program 0 (id=5370): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES64=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x94) socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{}, &(0x7f0000000000), &(0x7f0000000080)}, 0x20) recvmsg$unix(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0x33fe0}], 0x1, 0x0, 0x0, 0x300}, 0x0) 1.209134813s ago: executing program 1 (id=5371): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x1, 0x401, 0x20005, 0x800, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mount$cgroup(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000001c0), 0x2010042, &(0x7f00000009c0)={[], [{@dont_measure}]}) getpgrp(0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f00000000c0)) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000080)={[{@resuid}, {@noblock_validity}, {@bh}, {@max_batch_time={'max_batch_time', 0x3d, 0x8c9}}, {@grpquota}, {@inlinecrypt}]}, 0x6, 0x5fc, &(0x7f0000000300)="$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") ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(0xffffffffffffffff, &(0x7f0000000040)={@val={0x0, 0x800}, @val={0x712ccdc180898042, 0x5, 0xe, 0xffff, 0x14, 0x6}, @mpls={[], @llc={@llc={0x80, 0x4, 'u', "3e3ffa3e78eeee6daf55080c2e19c21ed0541f"}}}}, 0x24) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf4a31accbe1ba0777cfbf6ae77256da82f6184b8a34f9015cc99e570000002b21c90b000000000000721a5dbb56a3d9e16e7c2179c9b5b24722944820e624fc5b17d0822ca4232c98a9936ba722475ca5", 0x72}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b700c9e37eed5653ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d33330e2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb00"/135, 0xfca6}, {&(0x7f0000001400)="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", 0xa91}], 0x3}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00'}, 0x9) r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc4}, &(0x7f0000000100)={0x0, "de442bfc7910e10ac69ac014b0fa7807b11d2c99ed1f40d47a6edb3367b5cc888e1fd5102ae2d3d05f251f8d49025ceab4152b6e6d87cd6088e97a9d06d29143"}, 0x48, 0xffffffffffffffff) keyctl$chown(0x4, r0, 0xee01, 0xee00) keyctl$chown(0x4, r0, 0x0, 0x0) 1.191389824s ago: executing program 4 (id=5372): syz_io_uring_setup(0x10b, &(0x7f00000004c0)={0x0, 0xd736, 0x8, 0x3, 0xbffffffa}, &(0x7f00000003c0)=0x0, &(0x7f0000000340)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, 0x0, 0x0, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bind$rds(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(0xffffffffffffffff, 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000), 0x1000002, 0x0) r3 = dup(r2) ioctl$SG_SET_DEBUG(0xffffffffffffffff, 0x227e, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x40542, 0x0) ftruncate(r4, 0xee72) sendfile(r3, r4, 0x0, 0x8000fffffffe) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000180)=0x19) 1.182636355s ago: executing program 2 (id=5373): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xc94284a3061bb7fe, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) r2 = socket$igmp6(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r2, 0x29, 0x22, &(0x7f0000000000)={{0xa, 0x0, 0x101, @loopback, 0xa39}, {0xa, 0xfffe, 0xfffffffd, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x4}, 0x1000, {[0x6, 0x0, 0xffffffff, 0xfffffefb, 0x0, 0x1, 0x2]}}, 0x5c) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r3 = syz_io_uring_setup(0xa4d, &(0x7f0000000480)={0x0, 0x0, 0x80, 0x1, 0x24f}, &(0x7f00000000c0)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2c, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000180)) ioctl$SG_IO(r6, 0x2285, &(0x7f0000000400)={0x53, 0xfffffffffffffffb, 0x6, 0x3, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000300)="be8170b1be97", 0x0, 0x200000, 0x0, 0x0, 0x0}) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_LINKAT={0x27, 0x8, 0x0, 0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='./file0\x00', 0xffffffffffffffff, 0x0, 0x1}) io_uring_enter(r3, 0x47bc, 0x2000, 0x0, 0x0, 0x0) 981.999311ms ago: executing program 2 (id=5374): bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000005c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000d8d60b007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 864.727661ms ago: executing program 3 (id=5375): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$packet(0x11, 0x3, 0x300) gettid() r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_FEATURES_GET(r2, 0x0, 0x20040000) r3 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r3, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) syz_genetlink_get_family_id$team(0x0, r2) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r4, 0xc0f85403, 0x0) 862.765801ms ago: executing program 4 (id=5376): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000140)={{r0}, &(0x7f0000000100), &(0x7f00000000c0)='%pI4 \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) ioctl$KDGKBMETA(0xffffffffffffffff, 0x4bfa, 0x0) r2 = add_key$keyring(&(0x7f0000000300), &(0x7f0000000340)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key$fscrypt_provisioning(&(0x7f0000000000), &(0x7f00000001c0)={'syz', 0x2}, &(0x7f0000000280)={0x3, 0x0, @b}, 0x48, r2) r3 = socket(0x10, 0x803, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x7c, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x50, 0x2, [@TCA_U32_SEL={0x44, 0x5, {0x5, 0xd, 0x3, 0x4, 0x13, 0x2, 0x6, 0x7ffffffa, [{0x200, 0x500, 0x3, 0x6}, {0x2, 0x2, 0x8001, 0x10}, {0x0, 0x53, 0x9, 0x1}]}}, @TCA_U32_LINK={0x8, 0x3, 0x80000000}]}}]}, 0x7c}}, 0x24040084) 822.785974ms ago: executing program 1 (id=5377): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1}}, &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x40, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r5}, 0x10) r6 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$selinux_access(r6, &(0x7f0000001a80)=ANY=[], 0x56) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x2}, 0x2}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0xe, 0xb}}}, 0x24}}, 0x800) 822.298364ms ago: executing program 3 (id=5378): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000004, 0x2, @perf_config_ext={0x1, 0x6}, 0x2, 0x0, 0x2, 0x1, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x2d) syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000500)={0x1, &(0x7f00000004c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) mknod$loop(&(0x7f00000001c0)='./file0\x00', 0x2000, 0x1) rename(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file1\x00') write$binfmt_misc(0xffffffffffffffff, &(0x7f0000001280), 0x6) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x6, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r3}, 0x18) write$char_usb(0xffffffffffffffff, 0x0, 0x0) 813.975865ms ago: executing program 4 (id=5379): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000006000000bca30000000000002403000020feffff620af8fff8ffffff71a4f2ff000000000f03000000000000e5000300000000002604fdffff02000016010000033800001d13f8ff000000007a0a30ff0000001f0f14000000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f300020000fe275daf51efd601b6bf01c8e8b1b526375ee4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff61623604000000000000006a89adaf17b0a6041bdeebdfd1f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564163427afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652d950ad31928b0b036dc2869f478341d02d0f5ad94b081fcd507acb4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101a3062cd54f9ff51d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566d674e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48153baae244e7bf573eac34b781337ad5905c6bbf1137548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a90144022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab540b8d7b4ead35a385e0b4a26b702396df7e0c1e02b88c114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb11883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcd857ab15e355713767c536cbae2f5c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ced301efeb6dc5f6a9037d2283c42efc54fa84323afc4c10eff462c8843187f1dd48ef0981000000000000ff0f40b1888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fc08001011e32f80fb60e14b9eee094277bbc170882c8890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e3f753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f983e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28ebc15edb4d91675767999d146aef7799738b292fd64bb25b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a794963342aece449a0d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b6ef9d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec035d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a881192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f9f3322405d1efd78e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf79a43746979f99f6a1527f004f1e37a3926937e84fb478199dc1020f4beb98b8074bf7df8b5e783637da740800000000000000c55a4385e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035abc46271a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db18c472dafc5569adc282928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a6a2740000000000000000000000000000000000000000000a0009dd14b38f2f4426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4100260ffcd8f1d04166d291ebcef893e1b9ccb6797d0646fe0e7274434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb0000000000000005375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10baa804a707f0a1fcbfc309381aeba191950bae71f37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d34d3757b1450fdb0a9a69f432e277f3a0386eb2bd3305c821c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cff5d6b6898335792749df7b1f51e91f8c1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200000000000000000000f296b0c1484e5f781ad26bff696b05ff0a5e2270e07618b04273bd4075ea38ab463bfa6a38e7c537498ba3e4df8dfc9e040000003c3ffad44d2a376def42e41e9fc31678257e040fa7cf32c221aaac08000000000000001a00000000000000000000173570f0c11ae694b0f7a4f9c2f6790044a357e785af6e153d5f1ea460af92c7cbbd6295afe740f5e154346d483e0d641ef02e4d5295d756e110522a7a945b93fb705b95b6aae27a8fb33732ce1da1c0b1af8eb9222a06e984ab1e6984c8bdc12360627137ab67b6b68ab08acb29a74dc36b51209cfbc87f61182bbeb2772e9d5a1ffc477179be481efe46a4ce86be0b1d8eee42a611a3d44ca450b14586ed63dd92005c79e4a8ab8a94f0c6cb4bed8594a39bd76d3ef8a7ab014e787596db796bd93a36c2880423291e3bccc86f66ba792ff4d87b3f80e5908779e51c5e9055fc5b23605cd000c723187ef09dcf4b07b06a9342f3f62ee7acddff292082c1f4d8eb9561f80873a09a1ae0c9af1121175e5600f43a1179484502009759264a5729f07c2b218fa36ba2316a99aaad0130df83d0bda1e711290f78c143ea143967b00adcd77e6ad5e48d839ea61aadb83e4d071c54691924a3830d3e7b5c198bb0ed623153590000000000000000004b985ea1702f34f2f85b168c083e810ed567e3f1979b9ed1a4bf6a10dac825c96a0828b335de445a4880bb6474157efd1a72ca46ae4cbe3ab648c9bc4867a5a4cb87d7d6d55475b34b3cb6aa9e2337d4e04a37e35109752522ac9b186ddd80c47da6a2f4ef7bb909c975520000000000000000000000219cf5c1376ab33786f6b856d354e90a2733f78f2d188057cead3480eade49d55b770fad7fa000d23da6275768810b6b2df91d3a991ea98d929d271696c258d5b735d5db11df434e7dd1b7c1ca05cea3977df564115f4ec6ffab1d2ff8a642ca50934b3fbe44b0abeba9df209566984a29dfc0466e439a94e177b3c4d5f6e92b8176b9d6ddeeeb196fa964217f88e1acc180aaa4"], &(0x7f00000001c0)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080)={0x0, 0x0, 0x7}, 0x10}, 0x1d) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x2) readv(r2, &(0x7f0000000000)=[{&(0x7f0000001300)=""/238, 0xee}], 0x1) r3 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setsig(r3, 0xa, 0x13) fcntl$setlease(r3, 0x400, 0x0) timer_create(0x0, &(0x7f00000005c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=0x0) timer_settime(r4, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) 608.522741ms ago: executing program 3 (id=5380): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$kcm(0x29, 0x2, 0x0) write$binfmt_script(r0, &(0x7f0000003300)={'#! ', './bus'}, 0xff1d) sendmsg$kcm(r0, 0x0, 0x4000000) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x8, &(0x7f0000000000), 0x1, 0x51a, &(0x7f0000001200)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000240)='./file0/file3\x00', 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r1}, 0x18) ioctl$RTC_AIE_ON(0xffffffffffffffff, 0x7001) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, 0x0) add_key$keyring(0x0, &(0x7f0000000340)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x24040084) 573.294624ms ago: executing program 0 (id=5381): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r1, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000340)={r2, r1}, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000400)='io_uring_create\x00', r2}, 0x18) io_uring_setup(0x1de0, &(0x7f00000000c0)={0x0, 0x45d6, 0x10, 0x1}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000500)=ANY=[@ANYRESOCT=r0, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r3 = socket$inet6(0x10, 0x3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x2f, 0x26, 0x9, 0x10001, 0x40, @rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7800, 0x10, 0x8000, 0xfd}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000300)={'sit0\x00', &(0x7f0000000280)={'syztnl1\x00', r5, 0x1, 0x700, 0x2, 0x6, {{0x14, 0x4, 0x1, 0x5, 0x50, 0x67, 0x0, 0x10, 0x2f, 0x0, @broadcast, @broadcast, {[@lsrr={0x83, 0x1b, 0x19, [@empty, @multicast1, @rand_addr=0x64010101, @broadcast, @multicast1, @remote]}, @lsrr={0x83, 0x1b, 0xa4, [@dev={0xac, 0x14, 0x14, 0xb}, @remote, @dev={0xac, 0x14, 0x14, 0x22}, @private=0xa010102, @empty, @loopback]}, @generic={0x89, 0x5, "df297e"}]}}}}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendto$inet6(r3, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) 460.492933ms ago: executing program 0 (id=5382): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f60000008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value=0x2000000}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_SET_FLAGS(0xffffffffffffffff, 0x0, 0x240041c0) socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000001280)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="280000002d000100fcffffff0010000008000000", @ANYRES32], 0x28}], 0x1}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 305.345365ms ago: executing program 3 (id=5383): setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000080), 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) dup(r0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)}, &(0x7f0000000100)=0x10) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000200), 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x1, &(0x7f0000000780)=[{0x200000000006, 0xf, 0x6, 0x7ffc1ffb}]}) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB], 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000", @ANYRES32=r4], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000540)={{r4}, &(0x7f0000000480)=0x20, 0x0}, 0x20) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f00000003c0)={[{@errors_remount}, {@nouid32}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@block_validity}, {@dioread_lock}], [{@fowner_lt}]}, 0x10, 0x439, &(0x7f0000002380)="$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") r5 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r5, 0x2007ffc) sendfile(r5, r5, 0x0, 0x800000009) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x43, 0x0) sendfile(r6, 0xffffffffffffffff, 0x0, 0x1000000000004) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x6c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast2}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x5}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x3}]}, 0x6c}}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) 215.988663ms ago: executing program 1 (id=5384): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x7f, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet_sctp(0x2, 0x5, 0x84) close(r1) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES64=r1, @ANYRES16=r0], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r3 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r3, 0x0, 0x480, 0x0, 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0x20000023896) close(r2) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)=0x0) timer_settime(r5, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex_waitv(&(0x7f0000001b00), 0x0, 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) 130.949279ms ago: executing program 1 (id=5385): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x8, &(0x7f0000000080)={[{@nodioread_nolock}, {@sb={'sb', 0x3d, 0x1}}]}, 0x4, 0x523, &(0x7f00000018c0)="$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") bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000840), 0x81}, 0x38) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x1, 0x0, 0x7ffc0005}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r0, 0x0, 0xffffffffffffffff}, 0x18) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x0) read$hidraw(0xffffffffffffffff, 0x0, 0x0) 126.53121ms ago: executing program 0 (id=5386): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x6, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000400)='htcp\x00', 0x44) syz_usb_connect(0x0, 0x24, 0x0, 0x0) sendmsg$ETHTOOL_MSG_WOL_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000980)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x200040c0}, 0x0) r1 = socket(0x1, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)=ANY=[@ANYRES32=r3, @ANYRES32=r2], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r3, &(0x7f0000000180), 0x0}, 0x20) bind$unix(r1, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000001680)=[{{&(0x7f0000000380)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x1, 0x0) recvmmsg(r1, &(0x7f0000000d40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000500)=""/65, 0x41}], 0x1}}], 0x2, 0x0, 0x0) socket(0x1, 0x803, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f0000000000)="240000001a005f0214f9f407000904001f000000ff020002000a00000800040001000000", 0x24) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x8, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x1400e, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x2000) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$SG_IO(r6, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x6, 0x0, @buffer={0x2, 0x41001, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x300, 0x0, 0x0, 0x0}) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r8}, 0x10) sendmsg$AUDIT_USER_TTY(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x5c, 0x464, 0x4, 0x70bd27, 0x25dfdbfd, "def06e41c0320a4ab0ed76e84f2c834744724e7ae5804aef97c3a02f18d7f1f8c9813af85634975d85349b356fdb5a012bcac3b5c279ed2d5a42d31f448dcd1c5d4a732bb9d9dd5ed0ef8f93", ["", "", "", "", "", ""]}, 0x5c}, 0x1, 0x0, 0x0, 0x4001}, 0x20000000) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d00000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r9}, 0x10) open(&(0x7f0000000240)='./file0\x00', 0x2a4c0, 0x0) 81.328384ms ago: executing program 2 (id=5387): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000001c0), 0x1, 0x553, &(0x7f0000001080)="$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") sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x800000009) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000540), 0x40000) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000", @ANYRES32=r1, @ANYBLOB, @ANYRES64=r0], 0x38}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) r3 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) lchown(&(0x7f0000003040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x0, 0x0) add_key(&(0x7f00000003c0)='dns_resolver\x00', &(0x7f0000000400)={'syz', 0x3}, &(0x7f0000000080)="00000102", 0xfffff, r3) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000180000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000f0850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r4}, 0x10) fsetxattr(r2, &(0x7f0000000000)=@known='security.selinux\x00', &(0x7f0000000080)='@\x00', 0x3c8, 0x0) 35.472898ms ago: executing program 2 (id=5388): fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) socketpair$unix(0x1, 0x2, 0x0, 0x0) close(0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000040), 0xfe, 0x4f2, &(0x7f0000000b00)="$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") socket$kcm(0x10, 0x2, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) socket(0x10, 0x80002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x1, 0x6}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) 0s ago: executing program 4 (id=5389): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4, 0x0, 0xb51b, 0x10}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001400)={0x24, 0x12, 0xa01, 0x0, 0x25dfdbfd, {0x80}, [@generic="0efde677a1e7246e5dc8838710"]}, 0x24}, 0x1, 0x0, 0x0, 0x20020000}, 0xc000) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x54, 0x0, 0x2, 0x201, 0x0, 0x0, {0x3, 0x0, 0xa}, [@CTA_EXPECT_FN={0x13, 0xb, 'callforwarding\x00'}, @CTA_EXPECT_TUPLE={0x2c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010100}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x15}}, {0x8, 0x2, @empty}}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x2400c080}, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @ipv4={'\x00', '\xff\xff', @empty}}], 0x1c) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r1, 0x8982, &(0x7f0000000040)={0x8, 'veth1_to_batadv\x00', {'rose0\x00'}, 0x6}) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000500)=@newsa={0x154, 0x10, 0x1, 0x0, 0x0, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@remote, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@private0, 0x0, 0x6c}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, {0x0, 0x40, 0xea62}, {}, {}, 0x200, 0x3506, 0xa, 0x0, 0x0, 0x40}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @encap={0x1c, 0x4, {0x0, 0x4e20, 0x4e24, @in6=@dev={0xfe, 0x80, '\x00', 0x23}}}]}, 0x154}}, 0x0) sendto$inet6(r3, &(0x7f00000004c0)="b0", 0x1, 0x0, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) kernel console output (not intermixed with test programs): es leftover after parsing attributes in process `syz.4.3923'. [ 281.552022][T19240] netlink: 196 bytes leftover after parsing attributes in process `syz.2.3934'. [ 281.597032][T19244] pimreg: entered allmulticast mode [ 281.623372][T19244] pimreg: left allmulticast mode [ 281.673451][T19257] tipc: Enabled bearer , priority 10 [ 281.746293][T19266] loop3: detected capacity change from 0 to 512 [ 281.773866][T19266] EXT4-fs error (device loop3): ext4_xattr_inode_iget:442: comm syz.3.3945: error while reading EA inode 32 err=-116 [ 281.814753][T19266] EXT4-fs (loop3): Remounting filesystem read-only [ 281.821511][T19266] EXT4-fs warning (device loop3): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 281.876486][T19266] EXT4-fs (loop3): 1 orphan inode deleted [ 281.893464][T19266] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 281.920556][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 281.982914][ T3416] IPVS: starting estimator thread 0... [ 282.008603][T19305] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3953'. [ 282.077604][T19302] IPVS: using max 2592 ests per chain, 129600 per kthread [ 282.158353][T19320] loop2: detected capacity change from 0 to 512 [ 282.165112][T19320] EXT4-fs: Ignoring removed bh option [ 282.173731][T19320] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 282.184580][T19320] EXT4-fs (loop2): 1 truncate cleaned up [ 282.190614][T19320] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 282.225877][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 282.572214][ T29] kauditd_printk_skb: 230 callbacks suppressed [ 282.572230][ T29] audit: type=1326 audit(2000000837.181:26976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19353 comm="syz.4.3975" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff2c36bebe9 code=0x0 [ 282.621188][T19355] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 282.830256][ T29] audit: type=1400 audit(2000000837.454:26977): avc: denied { getopt } for pid=19363 comm="syz.0.3979" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 282.946532][ T29] audit: type=1400 audit(2000000837.580:26978): avc: denied { create } for pid=19385 comm="syz.1.3989" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 282.968716][ T29] audit: type=1400 audit(2000000837.580:26979): avc: denied { bind } for pid=19385 comm="syz.1.3989" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 283.054306][T19402] loop1: detected capacity change from 0 to 128 [ 283.087200][ T29] audit: type=1400 audit(2000000837.727:26980): avc: denied { remount } for pid=19401 comm="syz.1.3994" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 283.169431][ T29] audit: type=1326 audit(2000000837.811:26981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19407 comm="syz.2.3997" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fba8f4aebe9 code=0x0 [ 283.281573][ T29] audit: type=1400 audit(2000000837.937:26982): avc: denied { wake_alarm } for pid=19421 comm="syz.1.4000" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 283.474269][ T29] audit: type=1400 audit(2000000838.137:26983): avc: denied { read } for pid=19450 comm="syz.1.4013" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 283.497647][ T29] audit: type=1400 audit(2000000838.137:26984): avc: denied { open } for pid=19450 comm="syz.1.4013" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 283.624079][T19469] loop1: detected capacity change from 0 to 512 [ 283.631948][T19469] EXT4-fs: Ignoring removed nomblk_io_submit option [ 283.645330][T19469] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 283.653852][T19469] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 283.670352][ T29] audit: type=1326 audit(2000000838.347:26985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19477 comm="syz.0.4026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f915a41ebe9 code=0x7ffc0000 [ 283.670964][T19469] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4183: comm syz.1.4022: Allocating blocks 41-42 which overlap fs metadata [ 283.709610][T19469] EXT4-fs (loop1): Remounting filesystem read-only [ 283.716720][T19469] EXT4-fs (loop1): 1 truncate cleaned up [ 283.722830][T19469] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 283.754464][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 283.805003][T19486] vhci_hcd: invalid port number 96 [ 283.810162][T19486] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 283.837167][T19492] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 283.892360][T19499] netlink: 'syz.0.4033': attribute type 3 has an invalid length. [ 284.014152][T19518] netlink: 'syz.1.4041': attribute type 10 has an invalid length. [ 284.022137][T19518] netlink: 'syz.1.4041': attribute type 19 has an invalid length. [ 284.271929][T19550] 9p: Unknown Cache mode or invalid value fscac [ 284.517176][T19582] raw_sendmsg: syz.4.4068 forgot to set AF_INET. Fix it! [ 284.584530][T19592] netlink: 'syz.4.4073': attribute type 21 has an invalid length. [ 284.621464][T19600] loop1: detected capacity change from 0 to 164 [ 284.626394][T19592] __nla_validate_parse: 8 callbacks suppressed [ 284.626411][T19592] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4073'. [ 284.643018][T19592] netlink: 'syz.4.4073': attribute type 1 has an invalid length. [ 284.652885][T19603] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4078'. [ 284.672429][T19603] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 284.672459][T12540] lo speed is unknown, defaulting to 1000 [ 284.672474][T12540] syz2: Port: 1 Link ACTIVE [ 284.672498][T12540] lo speed is unknown, defaulting to 1000 [ 284.761306][T19615] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 284.874794][T19629] loop1: detected capacity change from 0 to 128 [ 284.886891][T19631] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 284.895371][T19633] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4089'. [ 284.913773][T19629] FAT-fs (loop1): Directory bread(block 162) failed [ 284.923164][T19629] FAT-fs (loop1): Directory bread(block 163) failed [ 284.934004][T19629] FAT-fs (loop1): Directory bread(block 164) failed [ 284.941273][T19629] FAT-fs (loop1): Directory bread(block 165) failed [ 284.948468][T19629] FAT-fs (loop1): Directory bread(block 166) failed [ 284.987280][T19629] FAT-fs (loop1): Directory bread(block 167) failed [ 285.017035][T19629] FAT-fs (loop1): Directory bread(block 168) failed [ 285.039052][T19629] FAT-fs (loop1): Directory bread(block 169) failed [ 285.059107][T19644] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4095'. [ 285.072673][T19629] FAT-fs (loop1): Directory bread(block 162) failed [ 285.093211][T19629] FAT-fs (loop1): Directory bread(block 163) failed [ 285.104279][T19638] loop3: detected capacity change from 0 to 8192 [ 285.109244][T19629] bio_check_eod: 21194 callbacks suppressed [ 285.109261][T19629] syz.1.4088: attempt to access beyond end of device [ 285.109261][T19629] loop1: rw=3, sector=226, nr_sectors = 6 limit=128 [ 285.131513][T19629] syz.1.4088: attempt to access beyond end of device [ 285.131513][T19629] loop1: rw=2051, sector=232, nr_sectors = 2 limit=128 [ 285.173687][T19638] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 285.206115][T19650] lo speed is unknown, defaulting to 1000 [ 285.221260][T19657] loop1: detected capacity change from 0 to 512 [ 285.234543][T19657] ext4: Unknown parameter 'fowner<00000000000000000000' [ 285.294250][T19650] lo speed is unknown, defaulting to 1000 [ 285.331308][T19673] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4103'. [ 285.409005][T19676] netlink: 256 bytes leftover after parsing attributes in process `syz.3.4104'. [ 285.420283][T19650] lo speed is unknown, defaulting to 1000 [ 285.462417][T19680] tipc: Enabled bearer , priority 10 [ 285.484202][T19688] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4106'. [ 285.493447][T19688] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4106'. [ 285.502456][T19688] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4106'. [ 285.527001][T19686] loop3: detected capacity change from 0 to 1024 [ 285.569413][T19686] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 285.612339][T19688] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4106'. [ 285.651934][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 285.904030][T19738] loop2: detected capacity change from 0 to 1024 [ 285.927447][T19738] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 285.978581][T19768] loop3: detected capacity change from 0 to 128 [ 286.005405][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 286.096156][T19787] loop3: detected capacity change from 0 to 512 [ 286.113780][T19787] EXT4-fs: Ignoring removed nomblk_io_submit option [ 286.127385][T19787] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 286.136072][T19787] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 286.151353][T19796] loop1: detected capacity change from 0 to 128 [ 286.158604][T19796] FAT-fs (loop1): Directory bread(block 414) failed [ 286.165327][T19796] FAT-fs (loop1): Directory bread(block 415) failed [ 286.172092][T19796] FAT-fs (loop1): Directory bread(block 416) failed [ 286.176006][T19787] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4183: comm syz.3.4131: Allocating blocks 41-42 which overlap fs metadata [ 286.192821][T19796] FAT-fs (loop1): Directory bread(block 417) failed [ 286.193289][T19787] EXT4-fs (loop3): Remounting filesystem read-only [ 286.202216][T19796] FAT-fs (loop1): Directory bread(block 418) failed [ 286.206785][T19787] EXT4-fs (loop3): 1 truncate cleaned up [ 286.217681][T19801] hub 9-0:1.0: USB hub found [ 286.219136][T19787] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 286.223642][T19796] FAT-fs (loop1): Directory bread(block 419) failed [ 286.236878][T19801] hub 9-0:1.0: 8 ports detected [ 286.250286][T19796] FAT-fs (loop1): Directory bread(block 420) failed [ 286.257019][T19796] FAT-fs (loop1): Directory bread(block 421) failed [ 286.291716][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 286.307063][T19796] FAT-fs (loop1): Directory bread(block 414) failed [ 286.323011][T19796] FAT-fs (loop1): Directory bread(block 415) failed [ 286.339296][T19796] syz.1.4136: attempt to access beyond end of device [ 286.339296][T19796] loop1: rw=3, sector=478, nr_sectors = 2 limit=128 [ 286.352856][T19796] syz.1.4136: attempt to access beyond end of device [ 286.352856][T19796] loop1: rw=2051, sector=480, nr_sectors = 6 limit=128 [ 286.508828][T19847] loop3: detected capacity change from 0 to 512 [ 286.516805][T19847] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 286.530516][T19847] EXT4-fs (loop3): 1 truncate cleaned up [ 286.539024][T19847] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 286.565860][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 286.590987][T19857] loop1: detected capacity change from 0 to 128 [ 286.599826][T19857] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 286.628484][T19857] ext4 filesystem being mounted at /810/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 286.636641][T19868] macsec1: entered allmulticast mode [ 286.644233][T19868] veth1_macvtap: entered allmulticast mode [ 286.671498][T19866] loop3: detected capacity change from 0 to 8192 [ 286.696098][ T3301] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 286.705354][T19868] veth1_macvtap: left allmulticast mode [ 286.726384][T19877] netlink: 'syz.0.4162': attribute type 21 has an invalid length. [ 286.785257][T19888] loop3: detected capacity change from 0 to 512 [ 286.816041][T19888] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 286.829307][T19888] ext4 filesystem being mounted at /739/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 286.838772][T19908] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 286.840485][T19896] loop1: detected capacity change from 0 to 1024 [ 286.866155][T19896] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 286.900859][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 286.984600][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 287.197925][T19944] loop1: detected capacity change from 0 to 8192 [ 287.210721][T19944] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 287.283244][T19962] loop1: detected capacity change from 0 to 128 [ 287.389522][T19974] IPVS: Unknown mcast interface: hsr0 [ 287.460686][ T29] kauditd_printk_skb: 145 callbacks suppressed [ 287.460706][ T29] audit: type=1400 audit(2000000842.326:27123): avc: denied { read } for pid=19981 comm="syz.3.4191" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 287.508050][T12540] kernel write not supported for file bpf-prog (pid: 12540 comm: kworker/0:11) [ 287.533485][ T29] audit: type=1400 audit(2000000842.326:27124): avc: denied { open } for pid=19981 comm="syz.3.4191" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 287.558998][ T29] audit: type=1400 audit(2000000842.421:27125): avc: denied { create } for pid=19988 comm="syz.4.4193" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 287.603351][ T29] audit: type=1400 audit(2000000842.421:27126): avc: denied { ioctl } for pid=19981 comm="syz.3.4191" path="/dev/ppp" dev="devtmpfs" ino=140 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 287.628372][ T29] audit: type=1400 audit(2000000842.431:27127): avc: denied { connect } for pid=19988 comm="syz.4.4193" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 287.648228][ T29] audit: type=1400 audit(2000000842.442:27128): avc: denied { write } for pid=19988 comm="syz.4.4193" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 287.668031][ T29] audit: type=1400 audit(2000000842.452:27129): avc: denied { read } for pid=19988 comm="syz.4.4193" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 287.884139][ T29] audit: type=1326 audit(2000000842.767:27130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20034 comm="syz.1.4210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2059a1ebe9 code=0x7ffc0000 [ 287.916775][ T29] audit: type=1326 audit(2000000842.767:27131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20034 comm="syz.1.4210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2059a1ebe9 code=0x7ffc0000 [ 287.940551][ T29] audit: type=1326 audit(2000000842.767:27132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20034 comm="syz.1.4210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2059a1ebe9 code=0x7ffc0000 [ 288.048951][T20051] loop3: detected capacity change from 0 to 512 [ 288.060313][T20051] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 288.073036][T20051] ext4 filesystem being mounted at /754/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 288.093338][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 288.140758][T20062] loop1: detected capacity change from 0 to 512 [ 288.148203][T20062] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 288.162570][T20062] EXT4-fs (loop1): 1 truncate cleaned up [ 288.168858][T20062] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 288.192307][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 288.207591][T20072] tipc: Enabling of bearer rejected, already enabled [ 288.232151][T20074] loop1: detected capacity change from 0 to 512 [ 288.238795][T20074] EXT4-fs: Ignoring removed nomblk_io_submit option [ 288.246050][T20074] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 288.254612][T20074] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 288.270235][T20074] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4183: comm syz.1.4224: Allocating blocks 41-42 which overlap fs metadata [ 288.284183][T20074] EXT4-fs (loop1): Remounting filesystem read-only [ 288.290963][T20074] EXT4-fs (loop1): 1 truncate cleaned up [ 288.296904][T20074] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 288.318319][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 288.604975][T20101] lo speed is unknown, defaulting to 1000 [ 288.631200][T20101] lo speed is unknown, defaulting to 1000 [ 288.658631][T20101] lo speed is unknown, defaulting to 1000 [ 288.773724][T20132] loop1: detected capacity change from 0 to 512 [ 288.809559][T20132] ext4 filesystem being mounted at /839/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 288.881287][T20145] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 288.895883][T20146] loop1: detected capacity change from 0 to 512 [ 288.903020][T20146] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 288.913438][T20146] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e12c, mo2=0002] [ 288.921494][T20146] System zones: 1-12 [ 288.925869][T20146] EXT4-fs (loop1): orphan cleanup on readonly fs [ 288.932580][T20146] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.4241: bg 0: block 361: padding at end of block bitmap is not set [ 288.947153][T20146] EXT4-fs (loop1): Remounting filesystem read-only [ 288.953805][T20146] EXT4-fs (loop1): 1 truncate cleaned up [ 289.747852][T20184] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 290.124321][T20213] __nla_validate_parse: 8 callbacks suppressed [ 290.124339][T20213] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4267'. [ 290.146002][T20213] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4267'. [ 290.340163][T20243] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4281'. [ 290.521618][T20259] loop2: detected capacity change from 0 to 512 [ 290.529676][T20259] ext4: Unknown parameter 'fowner<00000000000000000000' [ 290.718236][T20280] netlink: 'syz.0.4303': attribute type 21 has an invalid length. [ 290.726281][T20280] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4303'. [ 290.736266][T20281] loop1: detected capacity change from 0 to 256 [ 290.879451][T20300] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4293'. [ 290.888657][T20300] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4293'. [ 290.901182][T20300] geneve4: entered promiscuous mode [ 290.906413][T20300] geneve4: entered allmulticast mode [ 290.913511][ T9920] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.931541][ T9920] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.953469][ T9920] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.962281][ T9920] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.210001][T20332] loop2: detected capacity change from 0 to 512 [ 291.254223][T20332] ext4 filesystem being mounted at /870/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 291.269247][T20346] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 291.317987][T20347] lo speed is unknown, defaulting to 1000 [ 291.367366][T20363] loop1: detected capacity change from 0 to 512 [ 291.385582][T20368] netlink: 52 bytes leftover after parsing attributes in process `syz.4.4324'. [ 291.403533][T20347] lo speed is unknown, defaulting to 1000 [ 291.403791][T20363] ext4 filesystem being mounted at /852/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 291.476556][T20347] lo speed is unknown, defaulting to 1000 [ 291.562862][T20397] loop2: detected capacity change from 0 to 256 [ 291.576738][T20397] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 291.709591][ T3301] EXT4-fs unmount: 7 callbacks suppressed [ 291.709611][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 291.767843][T20424] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4337'. [ 291.835983][T20430] netlink: 'syz.1.4340': attribute type 6 has an invalid length. [ 291.929737][T20441] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4338'. [ 291.960745][T20457] loop1: detected capacity change from 0 to 1024 [ 291.968262][T20457] EXT4-fs: Ignoring removed nobh option [ 291.973958][T20457] EXT4-fs: Ignoring removed bh option [ 291.993159][T20457] EXT4-fs (loop1): can't mount with data=, fs mounted w/o journal [ 292.030703][T20468] loop1: detected capacity change from 0 to 128 [ 292.051865][T20468] syz.1.4349: attempt to access beyond end of device [ 292.051865][T20468] loop1: rw=0, sector=2072, nr_sectors = 1 limit=128 [ 292.084130][ T3416] kernel write not supported for file /1993/clear_refs (pid: 3416 comm: kworker/1:4) [ 292.132939][T20485] loop2: detected capacity change from 0 to 512 [ 292.139897][T20485] EXT4-fs: Ignoring removed nomblk_io_submit option [ 292.152637][T20485] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 292.161528][T20485] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 292.176194][T20485] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4183: comm syz.2.4356: Allocating blocks 41-42 which overlap fs metadata [ 292.190833][T20492] loop3: detected capacity change from 0 to 512 [ 292.197945][T20485] EXT4-fs (loop2): Remounting filesystem read-only [ 292.205320][T20485] EXT4-fs (loop2): 1 truncate cleaned up [ 292.207249][T20492] EXT4-fs error (device loop3): ext4_xattr_inode_iget:442: comm syz.3.4359: error while reading EA inode 32 err=-116 [ 292.211321][T20485] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 292.240374][T20492] EXT4-fs (loop3): Remounting filesystem read-only [ 292.247042][T20492] EXT4-fs warning (device loop3): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 292.259304][T20492] EXT4-fs (loop3): 1 orphan inode deleted [ 292.260236][ T29] kauditd_printk_skb: 239 callbacks suppressed [ 292.260251][ T29] audit: type=1400 audit(2000000847.366:27364): avc: denied { append } for pid=20489 comm="syz.1.4358" name="001" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 292.265634][T20492] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 292.308360][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 292.318402][T20492] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 292.360125][ T29] audit: type=1326 audit(2000000847.460:27365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20513 comm="syz.2.4365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba8f4aebe9 code=0x7ffc0000 [ 292.389025][ T29] audit: type=1326 audit(2000000847.492:27366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20513 comm="syz.2.4365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba8f4aebe9 code=0x7ffc0000 [ 292.412794][ T29] audit: type=1326 audit(2000000847.492:27367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20513 comm="syz.2.4365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fba8f4aebe9 code=0x7ffc0000 [ 292.436909][ T29] audit: type=1326 audit(2000000847.492:27368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20513 comm="syz.2.4365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba8f4aebe9 code=0x7ffc0000 [ 292.460968][ T29] audit: type=1326 audit(2000000847.492:27369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20513 comm="syz.2.4365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba8f4aebe9 code=0x7ffc0000 [ 292.484884][ T29] audit: type=1326 audit(2000000847.492:27370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20513 comm="syz.2.4365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fba8f4aebe9 code=0x7ffc0000 [ 292.508561][ T29] audit: type=1326 audit(2000000847.492:27371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20513 comm="syz.2.4365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba8f4aebe9 code=0x7ffc0000 [ 292.532313][ T29] audit: type=1326 audit(2000000847.492:27372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20513 comm="syz.2.4365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba8f4aebe9 code=0x7ffc0000 [ 292.555986][ T29] audit: type=1326 audit(2000000847.492:27373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20513 comm="syz.2.4365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fba8f4aebe9 code=0x7ffc0000 [ 292.668253][T20534] loop3: detected capacity change from 0 to 512 [ 292.678600][T20534] EXT4-fs: Ignoring removed nomblk_io_submit option [ 292.686092][T20534] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 292.694709][T20534] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 292.708427][T20534] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4183: comm syz.3.4373: Allocating blocks 41-42 which overlap fs metadata [ 292.739420][T20534] EXT4-fs (loop3): Remounting filesystem read-only [ 292.747163][T20534] EXT4-fs (loop3): 1 truncate cleaned up [ 292.753533][T20534] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 292.797288][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 292.873774][T20564] lo speed is unknown, defaulting to 1000 [ 292.945978][T20573] program syz.2.4380 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 293.001886][T20564] lo speed is unknown, defaulting to 1000 [ 293.037476][T20587] syz.1.4393: attempt to access beyond end of device [ 293.037476][T20587] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 293.102119][T20564] lo speed is unknown, defaulting to 1000 [ 293.142163][T20596] 9pnet: Could not find request transport: fd0xffffffffffffffff0xffffffffffffffff [ 293.285429][T20637] netlink: 256 bytes leftover after parsing attributes in process `syz.2.4405'. [ 293.596343][T20691] syzkaller1: entered promiscuous mode [ 293.601929][T20691] syzkaller1: entered allmulticast mode [ 293.737346][T20719] lo speed is unknown, defaulting to 1000 [ 293.830080][T20719] lo speed is unknown, defaulting to 1000 [ 293.889670][T20719] lo speed is unknown, defaulting to 1000 [ 293.951547][T20762] loop1: detected capacity change from 0 to 512 [ 293.964997][T20761] loop2: detected capacity change from 0 to 128 [ 293.971491][T20762] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 294.007152][T20762] EXT4-fs error (device loop1): ext4_orphan_get:1392: inode #17: comm syz.1.4448: iget: bad i_size value: -6917529027641081756 [ 294.032233][T20762] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.4448: couldn't read orphan inode 17 (err -117) [ 294.059660][T20762] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 294.086111][T20762] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 294.130274][T20796] loop2: detected capacity change from 0 to 1024 [ 294.156051][T20796] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 294.207965][T20796] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 294.252111][T20817] netlink: 'syz.0.4460': attribute type 10 has an invalid length. [ 294.292241][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 294.536647][T20848] loop1: detected capacity change from 0 to 512 [ 294.553627][T20848] EXT4-fs: Ignoring removed nomblk_io_submit option [ 294.563163][T20848] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 294.571655][T20848] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 294.620436][T20848] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4183: comm syz.1.4474: Allocating blocks 41-42 which overlap fs metadata [ 294.649664][T20848] EXT4-fs (loop1): Remounting filesystem read-only [ 294.676744][T20848] EXT4-fs (loop1): 1 truncate cleaned up [ 294.694795][T20859] loop2: detected capacity change from 0 to 512 [ 294.702962][T20859] ext4: Unknown parameter 'fowner<00000000000000000000' [ 294.735732][T20848] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 294.839359][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 295.060778][T20870] __nla_validate_parse: 1 callbacks suppressed [ 295.060798][T20870] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4478'. [ 295.077207][T20870] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4478'. [ 295.087280][T20870] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4478'. [ 295.097380][T20870] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4478'. [ 295.276880][T20896] loop3: detected capacity change from 0 to 1024 [ 295.295946][T20893] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4486'. [ 295.308499][T20896] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 295.321351][T20896] ext4 filesystem being mounted at /788/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 295.347164][T20896] EXT4-fs error (device loop3): ext4_map_blocks:814: inode #15: comm syz.3.4489: lblock 0 mapped to illegal pblock 0 (length 1) [ 295.363495][T20896] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 295.375809][T20896] EXT4-fs (loop3): This should not happen!! Data will be lost [ 295.375809][T20896] [ 295.408643][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 295.448489][T20911] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4491'. [ 295.513321][T20923] netlink: 5 bytes leftover after parsing attributes in process `syz.0.4499'. [ 295.522780][T20923] 0ªî{X¹¦: renamed from gretap0 (while UP) [ 295.530030][T20923] 0ªî{X¹¦: entered allmulticast mode [ 295.535851][T20923] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 295.583770][T20928] lo speed is unknown, defaulting to 1000 [ 295.621941][T20928] lo speed is unknown, defaulting to 1000 [ 295.664909][T20928] lo speed is unknown, defaulting to 1000 [ 296.018016][T21004] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 296.076577][T21007] lo speed is unknown, defaulting to 1000 [ 296.149913][T21007] lo speed is unknown, defaulting to 1000 [ 296.196353][T21007] lo speed is unknown, defaulting to 1000 [ 296.359938][T21037] hub 6-0:1.0: USB hub found [ 296.372703][T21037] hub 6-0:1.0: 8 ports detected [ 296.448587][T21045] loop3: detected capacity change from 0 to 512 [ 296.472766][T21045] ext4: Unknown parameter 'fowner<00000000000000000000' [ 297.016760][T21065] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4537'. [ 297.053529][ T29] kauditd_printk_skb: 347 callbacks suppressed [ 297.053606][ T29] audit: type=1326 audit(2000001108.395:27713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21066 comm="syz.3.4539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58ecdbebe9 code=0x7ffc0000 [ 297.057628][T21067] loop3: detected capacity change from 0 to 512 [ 297.067692][ T29] audit: type=1326 audit(2000001108.395:27714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21066 comm="syz.3.4539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58ecdbebe9 code=0x7ffc0000 [ 297.113611][ T29] audit: type=1326 audit(2000001108.395:27715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21066 comm="syz.3.4539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f58ecdbebe9 code=0x7ffc0000 [ 297.137398][ T29] audit: type=1326 audit(2000001108.395:27716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21066 comm="syz.3.4539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f58ecdbec23 code=0x7ffc0000 [ 297.161068][ T29] audit: type=1326 audit(2000001108.395:27717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21066 comm="syz.3.4539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f58ecdbd69f code=0x7ffc0000 [ 297.184810][ T29] audit: type=1326 audit(2000001108.395:27718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21066 comm="syz.3.4539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f58ecdbec77 code=0x7ffc0000 [ 297.208465][ T29] audit: type=1326 audit(2000001108.395:27719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21066 comm="syz.3.4539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f58ecdbd550 code=0x7ffc0000 [ 297.232648][ T29] audit: type=1326 audit(2000001108.395:27720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21066 comm="syz.3.4539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f58ecdbe7eb code=0x7ffc0000 [ 297.256425][ T29] audit: type=1326 audit(2000001108.426:27721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21066 comm="syz.3.4539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f58ecdbd84a code=0x7ffc0000 [ 297.256679][T21067] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 297.279913][ T29] audit: type=1326 audit(2000001108.426:27722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21066 comm="syz.3.4539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f58ecdbd84a code=0x7ffc0000 [ 297.312181][T21067] EXT4-fs (loop3): orphan cleanup on readonly fs [ 297.319247][T21067] EXT4-fs warning (device loop3): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 297.334578][T21067] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 297.341895][T21067] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.4539: bg 0: block 40: padding at end of block bitmap is not set [ 297.356776][T21067] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 297.365979][T21067] EXT4-fs (loop3): 1 truncate cleaned up [ 297.372490][T21067] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 297.413866][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 298.030380][T21112] syz.1.4558 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 298.044870][T21112] CPU: 0 UID: 0 PID: 21112 Comm: syz.1.4558 Not tainted syzkaller #0 PREEMPT(voluntary) [ 298.044950][T21112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 298.044957][T21112] Call Trace: [ 298.044961][T21112] [ 298.044965][T21112] __dump_stack+0x1d/0x30 [ 298.044979][T21112] dump_stack_lvl+0xe8/0x140 [ 298.045075][T21112] dump_stack+0x15/0x1b [ 298.045089][T21112] dump_header+0x81/0x220 [ 298.045119][T21112] oom_kill_process+0x342/0x400 [ 298.045146][T21112] out_of_memory+0x979/0xb80 [ 298.045162][T21112] try_charge_memcg+0x5e6/0x9e0 [ 298.045186][T21112] obj_cgroup_charge_pages+0xa6/0x150 [ 298.045268][T21112] __memcg_kmem_charge_page+0x9f/0x170 [ 298.045284][T21112] __alloc_frozen_pages_noprof+0x188/0x360 [ 298.045339][T21112] alloc_pages_mpol+0xb3/0x250 [ 298.045356][T21112] alloc_pages_noprof+0x90/0x130 [ 298.045371][T21112] __vmalloc_node_range_noprof+0x6f2/0xe00 [ 298.045396][T21112] __kvmalloc_node_noprof+0x30f/0x4e0 [ 298.045460][T21112] ? ip_set_alloc+0x1f/0x30 [ 298.045475][T21112] ? ip_set_alloc+0x1f/0x30 [ 298.045488][T21112] ? __kmalloc_cache_noprof+0x189/0x320 [ 298.045612][T21112] ip_set_alloc+0x1f/0x30 [ 298.045703][T21112] hash_netiface_create+0x282/0x740 [ 298.045730][T21112] ? __pfx_hash_netiface_create+0x10/0x10 [ 298.045745][T21112] ip_set_create+0x3cc/0x960 [ 298.045760][T21112] ? __nla_parse+0x40/0x60 [ 298.045836][T21112] nfnetlink_rcv_msg+0x4c3/0x590 [ 298.045860][T21112] netlink_rcv_skb+0x123/0x220 [ 298.045870][T21112] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 298.045909][T21112] nfnetlink_rcv+0x16b/0x1690 [ 298.045929][T21112] ? __list_add_valid_or_report+0x38/0xe0 [ 298.045943][T21112] ? merge_sched_in+0x605/0xa60 [ 298.046006][T21112] ? rb_next+0x5c/0x80 [ 298.046164][T21112] ? visit_groups_merge+0xf7e/0xfd0 [ 298.046187][T21112] ? should_fail_ex+0x30/0x280 [ 298.046197][T21112] ? selinux_nlmsg_lookup+0x99/0x890 [ 298.046238][T21112] ? __rcu_read_unlock+0x34/0x70 [ 298.046250][T21112] ? __netlink_lookup+0x266/0x2a0 [ 298.046269][T21112] netlink_unicast+0x5bd/0x690 [ 298.046295][T21112] netlink_sendmsg+0x58b/0x6b0 [ 298.046315][T21112] ? __pfx_netlink_sendmsg+0x10/0x10 [ 298.046367][T21112] __sock_sendmsg+0x142/0x180 [ 298.046382][T21112] ____sys_sendmsg+0x31e/0x4e0 [ 298.046395][T21112] ___sys_sendmsg+0x17b/0x1d0 [ 298.046450][T21112] __x64_sys_sendmsg+0xd4/0x160 [ 298.046463][T21112] x64_sys_call+0x191e/0x2ff0 [ 298.046527][T21112] do_syscall_64+0xd2/0x200 [ 298.046539][T21112] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 298.046551][T21112] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 298.046566][T21112] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.046577][T21112] RIP: 0033:0x7f2059a1ebe9 [ 298.046676][T21112] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 298.046685][T21112] RSP: 002b:00007f2058487038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 298.046697][T21112] RAX: ffffffffffffffda RBX: 00007f2059c45fa0 RCX: 00007f2059a1ebe9 [ 298.046704][T21112] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000004 [ 298.046710][T21112] RBP: 00007f2059aa1e19 R08: 0000000000000000 R09: 0000000000000000 [ 298.046716][T21112] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 298.046722][T21112] R13: 00007f2059c46038 R14: 00007f2059c45fa0 R15: 00007ffe37f541c8 [ 298.046747][T21112] [ 298.046750][T21112] memory: usage 307200kB, limit 307200kB, failcnt 295 [ 298.253868][T21127] loop3: detected capacity change from 0 to 1024 [ 298.257307][T21112] memory+swap: usage 308028kB, limit 9007199254740988kB, failcnt 0 [ 298.257326][T21112] kmem: usage 307180kB, limit 9007199254740988kB, failcnt 0 [ 298.263104][T21127] EXT4-fs: Ignoring removed nobh option [ 298.267096][T21112] Memory cgroup stats for /syz1: [ 298.267619][T21112] cache 0 [ 298.271965][T21127] EXT4-fs: Ignoring removed bh option [ 298.278387][T21127] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 298.281568][T21112] rss 0 [ 298.442223][T21112] shmem 0 [ 298.445257][T21112] mapped_file 0 [ 298.448982][T21112] dirty 0 [ 298.452051][T21112] writeback 0 [ 298.455330][T21112] workingset_refault_anon 89 [ 298.460084][T21112] workingset_refault_file 765 [ 298.464840][T21112] swap 847872 [ 298.468598][T21112] swapcached 0 [ 298.472153][T21112] pgpgin 354813 [ 298.475624][T21112] pgpgout 354808 [ 298.479204][T21112] pgfault 327753 [ 298.482757][T21112] pgmajfault 68 [ 298.486233][T21112] inactive_anon 0 [ 298.490029][T21112] active_anon 0 [ 298.493645][T21112] inactive_file 0 [ 298.497332][T21112] active_file 20480 [ 298.501250][T21112] unevictable 0 [ 298.504735][T21112] hierarchical_memory_limit 314572800 [ 298.510255][T21112] hierarchical_memsw_limit 9223372036854771712 [ 298.516660][T21112] total_cache 0 [ 298.520437][T21112] total_rss 0 [ 298.523788][T21112] total_shmem 0 [ 298.527417][T21112] total_mapped_file 0 [ 298.531595][T21112] total_dirty 0 [ 298.535086][T21112] total_writeback 0 [ 298.538901][T21112] total_workingset_refault_anon 89 [ 298.544191][T21112] total_workingset_refault_file 765 [ 298.549584][T21112] total_swap 847872 [ 298.553581][T21112] total_swapcached 0 [ 298.557646][T21112] total_pgpgin 354813 [ 298.561664][T21112] total_pgpgout 354808 [ 298.565777][T21112] total_pgfault 327753 [ 298.569962][T21112] total_pgmajfault 68 [ 298.574091][T21112] total_inactive_anon 0 [ 298.578431][T21112] total_active_anon 0 [ 298.582464][T21112] total_inactive_file 0 [ 298.586721][T21112] total_active_file 20480 [ 298.591081][T21112] total_unevictable 0 [ 298.595098][T21112] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.1862,pid=9445,uid=0 [ 298.609776][T21112] Memory cgroup out of memory: Killed process 9445 (syz.1.1862) total-vm:100180kB, anon-rss:980kB, file-rss:24832kB, shmem-rss:0kB, UID:0 pgtables:108kB oom_score_adj:1000 [ 298.723836][ T3301] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 298.735053][ T3301] CPU: 1 UID: 0 PID: 3301 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(voluntary) [ 298.735095][ T3301] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 298.735139][ T3301] Call Trace: [ 298.735148][ T3301] [ 298.735157][ T3301] __dump_stack+0x1d/0x30 [ 298.735183][ T3301] dump_stack_lvl+0xe8/0x140 [ 298.735259][ T3301] dump_stack+0x15/0x1b [ 298.735277][ T3301] dump_header+0x81/0x220 [ 298.735312][ T3301] oom_kill_process+0x342/0x400 [ 298.735347][ T3301] out_of_memory+0x979/0xb80 [ 298.735391][ T3301] try_charge_memcg+0x5e6/0x9e0 [ 298.735418][ T3301] charge_memcg+0x51/0xc0 [ 298.735435][ T3301] __mem_cgroup_charge+0x28/0xb0 [ 298.735491][ T3301] filemap_add_folio+0x4e/0x1b0 [ 298.735524][ T3301] __filemap_get_folio+0x31e/0x6b0 [ 298.735587][ T3301] filemap_fault+0x41f/0xb40 [ 298.735612][ T3301] __do_fault+0xbc/0x200 [ 298.735651][ T3301] handle_mm_fault+0xf78/0x2c20 [ 298.735755][ T3301] do_user_addr_fault+0x636/0x1090 [ 298.735793][ T3301] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 298.735821][ T3301] exc_page_fault+0x62/0xa0 [ 298.735872][ T3301] asm_exc_page_fault+0x26/0x30 [ 298.735894][ T3301] RIP: 0033:0x7f20598f5c24 [ 298.735912][ T3301] Code: 85 ed 09 00 00 48 b8 db 34 b6 d7 82 de 1b 43 48 f7 a4 24 98 00 00 00 48 8b 05 78 fb e7 00 48 69 8c 24 90 00 00 00 e8 03 00 00 <8b> 78 08 48 8b 44 24 18 48 c1 ea 12 4c 8b 0d 89 fa e7 00 48 01 d1 [ 298.735964][ T3301] RSP: 002b:00007ffe37f54550 EFLAGS: 00010202 [ 298.735984][ T3301] RAX: 0000001b32d24000 RBX: 00000000000008f8 RCX: 00000000000497c8 [ 298.736068][ T3301] RDX: 0000000004e566c3 RSI: 00007ffe37f545e0 RDI: 0000000000000001 [ 298.736081][ T3301] RBP: 00007ffe37f5458c R08: 0000000012ad58d3 R09: 7fffffffffffffff [ 298.736094][ T3301] R10: 3fffffffffffffff R11: 0000000000000202 R12: 0000000000001388 [ 298.736109][ T3301] R13: 00000000000927c0 R14: 0000000000049750 R15: 00007ffe37f545e0 [ 298.736132][ T3301] [ 298.736151][ T3301] memory: usage 307200kB, limit 307200kB, failcnt 448 [ 298.763633][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 298.767107][ T3301] memory+swap: usage 307848kB, limit 9007199254740988kB, failcnt 0 [ 298.776168][T21149] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4572'. [ 298.780324][ T3301] kmem: usage 307144kB, limit 9007199254740988kB, failcnt 0 [ 298.963724][ T3301] Memory cgroup stats for /syz1: [ 298.966186][ T3301] cache 0 [ 298.974229][ T3301] rss 4096 [ 298.977386][ T3301] shmem 0 [ 298.980371][ T3301] mapped_file 0 [ 298.984012][ T3301] dirty 0 [ 298.987037][ T3301] writeback 0 [ 298.990390][ T3301] workingset_refault_anon 106 [ 298.995235][ T3301] workingset_refault_file 765 [ 299.000036][ T3301] swap 647168 [ 299.003413][ T3301] swapcached 20480 [ 299.007148][ T3301] pgpgin 354830 [ 299.010664][ T3301] pgpgout 354820 [ 299.014910][ T3301] pgfault 327768 [ 299.018559][ T3301] pgmajfault 79 [ 299.022100][ T3301] inactive_anon 16384 [ 299.026092][ T3301] active_anon 0 [ 299.029598][ T3301] inactive_file 0 [ 299.033320][ T3301] active_file 20480 [ 299.037173][ T3301] unevictable 0 [ 299.040680][ T3301] hierarchical_memory_limit 314572800 [ 299.046061][ T3301] hierarchical_memsw_limit 9223372036854771712 [ 299.052256][ T3301] total_cache 0 [ 299.055764][ T3301] total_rss 4096 [ 299.059401][ T3301] total_shmem 0 [ 299.062867][ T3301] total_mapped_file 0 [ 299.066896][ T3301] total_dirty 0 [ 299.070296][T21165] loop2: detected capacity change from 0 to 512 [ 299.070495][ T3301] total_writeback 0 [ 299.078965][T21165] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a846e01c, mo2=0002] [ 299.080563][ T3301] total_workingset_refault_anon 106 [ 299.088620][T21165] System zones: [ 299.093709][ T3301] total_workingset_refault_file 765 [ 299.093720][ T3301] total_swap 647168 [ 299.093727][ T3301] total_swapcached 20480 [ 299.093736][ T3301] total_pgpgin 354830 [ 299.093743][ T3301] total_pgpgout 354820 [ 299.097316][T21165] 1-12 [ 299.102511][ T3301] total_pgfault 327768 [ 299.102522][ T3301] total_pgmajfault 79 [ 299.102530][ T3301] total_inactive_anon 16384 [ 299.102538][ T3301] total_active_anon 0 [ 299.106423][T21165] [ 299.110629][ T3301] total_inactive_file 0 [ 299.110639][ T3301] total_active_file 20480 [ 299.110661][ T3301] total_unevictable 0 [ 299.110671][ T3301] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null) [ 299.115386][T21165] EXT4-fs error (device loop2): dx_probe:791: inode #2: comm syz.2.4578: Directory hole found for htree index block 0 [ 299.118920][ T3301] ,cpuset=/,mems_allowed=0,oom_memcg= [ 299.121834][T21165] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -117 [ 299.125703][ T3301] /syz1,task_memcg=/syz1 [ 299.129837][T21165] EXT4-fs error (device loop2): dx_probe:791: inode #2: comm syz.2.4578: Directory hole found for htree index block 0 [ 299.134273][ T3301] ,task=syz.1.4558,pid=21111,uid=0 [ 299.138683][T21165] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 299.140589][ T3301] Memory cgroup out of memory: Killed process 21111 (syz.1.4558) total-vm:93632kB, anon-rss:900kB, file-rss:22180kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 299.153806][T21165] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 299.320383][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 299.553772][T21198] loop1: detected capacity change from 0 to 1024 [ 299.571208][T21198] EXT4-fs: Ignoring removed nobh option [ 299.581100][T21198] EXT4-fs: Ignoring removed bh option [ 299.603521][T21198] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 299.663935][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 300.029237][T21246] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 300.118508][T21255] loop2: detected capacity change from 0 to 1024 [ 300.145420][T21255] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 300.158181][T21255] ext4 filesystem being mounted at /927/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 300.181964][T21255] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 300.212071][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 300.601578][T21290] sctp: [Deprecated]: syz.1.4627 (pid 21290) Use of int in max_burst socket option deprecated. [ 300.601578][T21290] Use struct sctp_assoc_value instead [ 300.763163][T21297] tipc: Enabled bearer , priority 0 [ 300.770570][T21297] tipc: Disabling bearer [ 300.861020][T21311] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4635'. [ 300.965276][T21329] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 301.195123][T21354] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4651'. [ 301.285048][T21366] loop2: detected capacity change from 0 to 1024 [ 301.300669][T21366] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 301.315156][T21366] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4183: comm syz.2.4654: Allocating blocks 385-513 which overlap fs metadata [ 301.331524][T21366] EXT4-fs (loop2): pa ffff88810a844460: logic 16, phys. 129, len 24 [ 301.339596][T21366] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 8 [ 301.363322][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 301.393086][T21380] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4658'. [ 301.514610][T21399] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4667'. [ 301.600310][T21423] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4674'. [ 301.609809][T21423] IPVS: Unknown mcast interface: vcan0 [ 301.708048][T21439] loop2: detected capacity change from 0 to 1024 [ 301.715026][T21439] EXT4-fs: Ignoring removed mblk_io_submit option [ 301.723510][T21439] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 301.734329][T21436] vhci_hcd: invalid port number 96 [ 301.739531][T21436] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 301.754770][T21439] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 301.790498][T21439] EXT4-fs error (device loop2): ext4_ext_check_inode:523: inode #11: comm syz.2.4680: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 301.816157][T21439] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.4680: couldn't read orphan inode 11 (err -117) [ 301.820777][ T29] kauditd_printk_skb: 163 callbacks suppressed [ 301.820792][ T29] audit: type=1326 audit(2000001113.394:27885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21454 comm="syz.0.4686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f915a41ebe9 code=0x7ffc0000 [ 301.858052][ T29] audit: type=1326 audit(2000001113.394:27886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21454 comm="syz.0.4686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f915a41ebe9 code=0x7ffc0000 [ 301.881915][ T29] audit: type=1326 audit(2000001113.394:27887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21454 comm="syz.0.4686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f915a41ebe9 code=0x7ffc0000 [ 301.905746][ T29] audit: type=1326 audit(2000001113.394:27888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21454 comm="syz.0.4686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f915a41ebe9 code=0x7ffc0000 [ 301.907972][T21439] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 301.929920][ T29] audit: type=1326 audit(2000001113.394:27889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21454 comm="syz.0.4686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f915a41ebe9 code=0x7ffc0000 [ 301.929969][ T29] audit: type=1326 audit(2000001113.394:27890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21454 comm="syz.0.4686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7f915a41ebe9 code=0x7ffc0000 [ 301.929997][ T29] audit: type=1326 audit(2000001113.394:27891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21454 comm="syz.0.4686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f915a41ebe9 code=0x7ffc0000 [ 301.992614][T21439] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.4680: Invalid block bitmap block 0 in block_group 0 [ 302.014017][ T29] audit: type=1326 audit(2000001113.394:27892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21454 comm="syz.0.4686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f915a41ebe9 code=0x7ffc0000 [ 302.030473][ T29] audit: type=1326 audit(2000001113.615:27893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21456 comm="syz.1.4687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2059a1ebe9 code=0x7ffc0000 [ 302.074955][ T29] audit: type=1326 audit(2000001113.615:27894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21456 comm="syz.1.4687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2059a1ebe9 code=0x7ffc0000 [ 302.083274][T21439] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.4680: Failed to acquire dquot type 0 [ 302.173683][T21471] loop3: detected capacity change from 0 to 512 [ 302.193901][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 302.216115][T21471] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 302.217390][T21480] loop1: detected capacity change from 0 to 1024 [ 302.237124][T21471] ext4 filesystem being mounted at /822/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 302.253000][T21480] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 302.312830][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 302.337073][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 302.575092][T21525] loop1: detected capacity change from 0 to 1024 [ 302.596925][T21525] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 302.625902][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 302.684220][T21540] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4712'. [ 302.809325][T21556] lo speed is unknown, defaulting to 1000 [ 302.845703][T21556] lo speed is unknown, defaulting to 1000 [ 302.883200][T21556] lo speed is unknown, defaulting to 1000 [ 303.060281][T21592] loop2: detected capacity change from 0 to 1024 [ 303.067082][T21592] EXT4-fs: Ignoring removed mblk_io_submit option [ 303.073696][T21592] EXT4-fs: Ignoring removed bh option [ 303.091943][T21592] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 303.141544][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 303.177391][T21602] loop2: detected capacity change from 0 to 512 [ 303.191309][T21602] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 303.201936][T21602] EXT4-fs (loop2): orphan cleanup on readonly fs [ 303.208480][T21602] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:517: comm syz.2.4725: Block bitmap for bg 0 marked uninitialized [ 303.210993][T21605] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4727'. [ 303.237147][T21602] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 303.246421][T21602] EXT4-fs (loop2): 1 orphan inode deleted [ 303.252738][T21602] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 303.276516][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 303.725675][T21624] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 303.755146][T21626] netlink: 64 bytes leftover after parsing attributes in process `syz.3.4733'. [ 303.933168][T21645] netlink: 'syz.3.4742': attribute type 4 has an invalid length. [ 303.996436][T21653] netlink: 96 bytes leftover after parsing attributes in process `syz.0.4746'. [ 304.178630][T21661] lo speed is unknown, defaulting to 1000 [ 304.276925][T21661] lo speed is unknown, defaulting to 1000 [ 304.314927][T21661] lo speed is unknown, defaulting to 1000 [ 304.338303][T21680] lo speed is unknown, defaulting to 1000 [ 304.374423][T21680] lo speed is unknown, defaulting to 1000 [ 304.441555][T21680] lo speed is unknown, defaulting to 1000 [ 304.600465][T21733] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4761'. [ 304.635356][T21733] netem: change failed [ 305.152507][T21766] loop3: detected capacity change from 0 to 512 [ 305.198520][T21766] ext4: Unknown parameter 'fowner<00000000000000000000' [ 306.114773][T21841] loop3: detected capacity change from 0 to 512 [ 306.124618][T21841] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 306.136527][T21841] EXT4-fs (loop3): orphan cleanup on readonly fs [ 306.150981][T21841] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:517: comm syz.3.4796: Block bitmap for bg 0 marked uninitialized [ 306.169950][T21841] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 306.181469][T21846] __nla_validate_parse: 3 callbacks suppressed [ 306.181490][T21846] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4801'. [ 306.188527][T21855] netlink: 332 bytes leftover after parsing attributes in process `syz.2.4809'. [ 306.206676][T21841] EXT4-fs (loop3): 1 orphan inode deleted [ 306.212824][T21841] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 306.247368][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 306.291326][T21859] loop2: detected capacity change from 0 to 512 [ 306.298099][T21859] EXT4-fs: Ignoring removed orlov option [ 306.307506][T21859] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 306.322764][T21859] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002] [ 306.335712][T21859] EXT4-fs error (device loop2): ext4_iget_extra_inode:5104: inode #15: comm syz.2.4812: corrupted in-inode xattr: e_value size too large [ 306.361238][T21872] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4814'. [ 306.372553][T21859] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.4812: couldn't read orphan inode 15 (err -117) [ 306.390865][T21872] loop3: detected capacity change from 0 to 1024 [ 306.398541][T21872] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 306.407559][T21859] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 306.420866][T21872] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 306.432488][T21872] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c840e028, mo2=0000] [ 306.447067][T21872] EXT4-fs error (device loop3): ext4_free_blocks:6696: comm syz.3.4814: Freeing blocks not in datazone - block = 0, count = 4096 [ 306.462652][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 306.469662][T21872] EXT4-fs (loop3): Remounting filesystem read-only [ 306.484913][T21882] loop1: detected capacity change from 0 to 1024 [ 306.492127][T21872] EXT4-fs (loop3): 1 orphan inode deleted [ 306.498643][T21872] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 306.525099][ T9924] EXT4-fs (loop3): Quota write (off=3072, len=1024) cancelled because transaction is not started [ 306.545905][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 306.556418][T21882] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 306.571202][T21882] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.4819: bg 0: block 280: padding at end of block bitmap is not set [ 306.586052][T21882] EXT4-fs (loop1): Remounting filesystem read-only [ 306.595382][ T29] kauditd_printk_skb: 276 callbacks suppressed [ 306.595397][ T29] audit: type=1400 audit(2000001118.415:28167): avc: denied { setattr } for pid=21881 comm="syz.1.4819" name="file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 306.640474][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 306.679231][ T29] audit: type=1326 audit(2000001118.509:28168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21905 comm="syz.1.4824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2059a1ebe9 code=0x7ffc0000 [ 306.703094][ T29] audit: type=1326 audit(2000001118.509:28169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21905 comm="syz.1.4824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2059a1ebe9 code=0x7ffc0000 [ 306.726769][ T29] audit: type=1326 audit(2000001118.509:28170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21905 comm="syz.1.4824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2059a1ebe9 code=0x7ffc0000 [ 306.750547][ T29] audit: type=1326 audit(2000001118.509:28171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21905 comm="syz.1.4824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2059a1ebe9 code=0x7ffc0000 [ 306.774292][ T29] audit: type=1326 audit(2000001118.509:28172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21905 comm="syz.1.4824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2059a1ebe9 code=0x7ffc0000 [ 306.797988][ T29] audit: type=1326 audit(2000001118.509:28173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21905 comm="syz.1.4824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2059a1ebe9 code=0x7ffc0000 [ 306.829966][T21913] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4822'. [ 306.839300][ T29] audit: type=1326 audit(2000001118.509:28174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21905 comm="syz.1.4824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2059a1ebe9 code=0x7ffc0000 [ 306.863035][ T29] audit: type=1326 audit(2000001118.509:28175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21905 comm="syz.1.4824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2059a1ebe9 code=0x7ffc0000 [ 306.886719][ T29] audit: type=1326 audit(2000001118.509:28176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21905 comm="syz.1.4824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2059a1ebe9 code=0x7ffc0000 [ 307.012227][T21921] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4827'. [ 307.325063][T21957] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4841'. [ 307.406194][T21969] loop1: detected capacity change from 0 to 512 [ 307.413232][T21969] EXT4-fs: Ignoring removed nobh option [ 307.440312][T21969] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #3: comm syz.1.4846: corrupted inode contents [ 307.452454][T21969] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #3: comm syz.1.4846: mark_inode_dirty error [ 307.464860][T21969] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #3: comm syz.1.4846: corrupted inode contents [ 307.477180][T21969] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #3: comm syz.1.4846: mark_inode_dirty error [ 307.489070][T21969] EXT4-fs error (device loop1): ext4_acquire_dquot:6937: comm syz.1.4846: Failed to acquire dquot type 0 [ 307.501224][T21969] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.4846: corrupted inode contents [ 307.513633][T21969] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #16: comm syz.1.4846: mark_inode_dirty error [ 307.525543][T21969] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.4846: corrupted inode contents [ 307.537657][T21969] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #16: comm syz.1.4846: mark_inode_dirty error [ 307.549860][T21969] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.4846: corrupted inode contents [ 307.562155][T21969] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 307.572056][T21978] lo speed is unknown, defaulting to 1000 [ 307.572189][T21969] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.4846: corrupted inode contents [ 307.590522][T21969] EXT4-fs error (device loop1): ext4_truncate:4666: inode #16: comm syz.1.4846: mark_inode_dirty error [ 307.602013][T21969] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 307.606028][T21978] lo speed is unknown, defaulting to 1000 [ 307.618081][T21969] EXT4-fs (loop1): 1 truncate cleaned up [ 307.624509][T21969] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 307.645938][T21978] lo speed is unknown, defaulting to 1000 [ 307.652025][T21969] ext4 filesystem being mounted at /940/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 307.663749][T21969] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 307.706379][T22002] loop1: detected capacity change from 0 to 512 [ 307.713621][T22002] ext4: Unknown parameter 'fowner<00000000000000000000' [ 308.031382][T22041] loop2: detected capacity change from 0 to 512 [ 308.043637][T22045] tipc: Enabling of bearer rejected, already enabled [ 308.052646][T22041] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 308.088418][T22041] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.4861: bg 0: block 4: invalid block bitmap [ 308.105892][T22041] EXT4-fs (loop2): Remounting filesystem read-only [ 308.112912][T22041] EXT4-fs (loop2): 1 truncate cleaned up [ 308.160304][T22041] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 308.187356][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 308.381987][T22065] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4866'. [ 308.601319][T22083] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 308.609971][T22082] netlink: 204 bytes leftover after parsing attributes in process `syz.4.4873'. [ 308.742018][T22092] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.4878'. [ 308.788570][T22090] lo speed is unknown, defaulting to 1000 [ 308.904366][T22098] SELinux: failed to load policy [ 308.944832][T22090] lo speed is unknown, defaulting to 1000 [ 308.962222][T22102] loop2: detected capacity change from 0 to 512 [ 309.017185][T22102] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 309.100732][T22090] lo speed is unknown, defaulting to 1000 [ 309.150517][T22102] ext4 filesystem being mounted at /988/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 309.237881][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 309.348213][T22130] loop2: detected capacity change from 0 to 2048 [ 309.360795][T22134] netlink: 29 bytes leftover after parsing attributes in process `syz.1.4884'. [ 309.419463][T22130] Alternate GPT is invalid, using primary GPT. [ 309.426078][T22130] loop2: p2 p3 p7 [ 309.507624][T22155] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 309.688291][T22160] netem: change failed [ 309.773790][T22169] nfs4: Bad value for 'source' [ 310.242748][T22188] loop1: detected capacity change from 0 to 128 [ 310.642975][T22236] loop3: detected capacity change from 0 to 128 [ 310.657581][T22236] syz.3.4917: attempt to access beyond end of device [ 310.657581][T22236] loop3: rw=2049, sector=138, nr_sectors = 112 limit=128 [ 310.684611][T22236] syz.3.4917: attempt to access beyond end of device [ 310.684611][T22236] loop3: rw=2049, sector=138, nr_sectors = 2 limit=128 [ 310.698153][T22236] Buffer I/O error on dev loop3, logical block 69, lost async page write [ 310.706920][T22236] syz.3.4917: attempt to access beyond end of device [ 310.706920][T22236] loop3: rw=2049, sector=140, nr_sectors = 2 limit=128 [ 310.720376][T22236] Buffer I/O error on dev loop3, logical block 70, lost async page write [ 310.734391][T22241] nfs4: Bad value for 'source' [ 310.789267][T22244] SELinux: Context system_u:object_r:hald_sonypic_exec_t:s0 is not valid (left unmapped). [ 311.200797][T22274] loop2: detected capacity change from 0 to 2048 [ 311.252385][T22274] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 311.366811][T22286] EXT4-fs (loop2): shut down requested (1) [ 311.413559][ T29] kauditd_printk_skb: 254 callbacks suppressed [ 311.413576][ T29] audit: type=1400 audit(2000001123.477:28429): avc: denied { create } for pid=22288 comm="syz.4.4937" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 311.459202][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 311.494952][ T29] audit: type=1326 audit(2000001123.561:28430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22294 comm="syz.2.4939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba8f4aebe9 code=0x7ffc0000 [ 311.519050][ T29] audit: type=1326 audit(2000001123.561:28431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22294 comm="syz.2.4939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba8f4aebe9 code=0x7ffc0000 [ 311.550029][ T29] audit: type=1326 audit(2000001123.614:28432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22294 comm="syz.2.4939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fba8f4aebe9 code=0x7ffc0000 [ 311.574494][ T29] audit: type=1326 audit(2000001123.614:28433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22294 comm="syz.2.4939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba8f4aebe9 code=0x7ffc0000 [ 311.598827][ T29] audit: type=1326 audit(2000001123.614:28434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22294 comm="syz.2.4939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba8f4aebe9 code=0x7ffc0000 [ 311.623782][ T29] audit: type=1326 audit(2000001123.624:28435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22294 comm="syz.2.4939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fba8f4aebe9 code=0x7ffc0000 [ 311.624153][T22295] loop2: detected capacity change from 0 to 512 [ 311.649297][ T29] audit: type=1326 audit(2000001123.624:28436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22294 comm="syz.2.4939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba8f4aebe9 code=0x7ffc0000 [ 311.649332][ T29] audit: type=1326 audit(2000001123.624:28437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22294 comm="syz.2.4939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fba8f4aebe9 code=0x7ffc0000 [ 311.711362][T22295] ext4: Unknown parameter 'fowner<00000000000000000000' [ 311.806891][T22308] lo speed is unknown, defaulting to 1000 [ 311.861304][ T29] audit: type=1326 audit(2000001123.624:28438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22294 comm="syz.2.4939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba8f4aebe9 code=0x7ffc0000 [ 311.968523][T22308] lo speed is unknown, defaulting to 1000 [ 312.047821][T22321] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 312.058637][T22308] lo speed is unknown, defaulting to 1000 [ 312.177231][T22346] __nla_validate_parse: 3 callbacks suppressed [ 312.177248][T22346] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4947'. [ 312.289885][T22356] loop3: detected capacity change from 0 to 8192 [ 312.455079][T22380] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=22380 comm=syz.1.4958 [ 312.630113][T22423] loop3: detected capacity change from 0 to 1024 [ 312.637322][T22423] EXT4-fs: Ignoring removed orlov option [ 312.646161][T22423] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 312.669697][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 312.809276][T22444] sch_fq: defrate 4294967295 ignored. [ 312.839419][T22448] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4979'. [ 312.849364][T22448] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4979'. [ 313.139594][T22457] netlink: 'syz.2.4982': attribute type 1 has an invalid length. [ 313.154367][T22457] 8021q: adding VLAN 0 to HW filter on device bond5 [ 313.166365][T22457] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4982'. [ 313.177553][T22457] bond5 (unregistering): Released all slaves [ 313.341891][T22532] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4984'. [ 313.389836][T22537] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 313.471010][T22544] loop2: detected capacity change from 0 to 512 [ 313.478913][T22544] ext4: Unknown parameter 'fowner<00000000000000000000' [ 313.695223][T22556] IPv4: Oversized IP packet from 127.202.26.0 [ 313.930918][T22567] pim6reg1: entered promiscuous mode [ 313.936358][T22567] pim6reg1: entered allmulticast mode [ 314.138496][T22587] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4999'. [ 314.308430][T22607] loop1: detected capacity change from 0 to 512 [ 314.332659][T22607] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 314.351787][T22607] ext4 filesystem being mounted at /966/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 314.365065][T22607] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #2: comm syz.1.5007: corrupted inode contents [ 314.378101][T22607] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #2: comm syz.1.5007: mark_inode_dirty error [ 314.389830][T22607] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #2: comm syz.1.5007: corrupted inode contents [ 314.403528][T22607] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #2: comm syz.1.5007: mark_inode_dirty error [ 314.434438][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 314.444126][T22616] loop3: detected capacity change from 0 to 8192 [ 314.452244][T22616] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 314.610383][T22650] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 314.677649][T22658] loop1: detected capacity change from 0 to 1024 [ 314.684946][T22658] EXT4-fs: Ignoring removed orlov option [ 314.705118][T22658] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 314.752260][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 314.884444][T22677] netlink: 'syz.0.5030': attribute type 10 has an invalid length. [ 314.926752][T22685] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5033'. [ 315.090196][T22695] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5034'. [ 315.223092][T22706] loop1: detected capacity change from 0 to 512 [ 315.237760][T22706] ext4: Unknown parameter 'fowner<00000000000000000000' [ 315.369201][T22721] netlink: 256 bytes leftover after parsing attributes in process `syz.2.5044'. [ 315.383064][T22718] lo speed is unknown, defaulting to 1000 [ 315.411109][T22721] loop2: detected capacity change from 0 to 1024 [ 315.431297][T22721] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 315.454556][T22718] lo speed is unknown, defaulting to 1000 [ 315.491807][T22718] lo speed is unknown, defaulting to 1000 [ 315.577757][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 315.638902][T22768] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5050'. [ 315.820947][T22792] loop1: detected capacity change from 0 to 512 [ 315.828264][T22793] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 315.841128][T22792] ext4: Unknown parameter 'fowner<00000000000000000000' [ 316.333929][ T29] kauditd_printk_skb: 264 callbacks suppressed [ 316.333943][ T29] audit: type=1326 audit(2000001128.645:28703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22790 comm="syz.1.5057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2059a1ebe9 code=0x7ffc0000 [ 316.369675][ T29] audit: type=1326 audit(2000001128.645:28704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22790 comm="syz.1.5057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2059a1ebe9 code=0x7ffc0000 [ 316.409219][ T29] audit: type=1326 audit(2000001128.729:28705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22808 comm="syz.0.5061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f915a41ebe9 code=0x7ffc0000 [ 316.433070][ T29] audit: type=1326 audit(2000001128.729:28706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22808 comm="syz.0.5061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f915a41ebe9 code=0x7ffc0000 [ 316.460106][ T29] audit: type=1326 audit(2000001128.781:28707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22808 comm="syz.0.5061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f915a41ebe9 code=0x7ffc0000 [ 316.484070][ T29] audit: type=1326 audit(2000001128.781:28708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22808 comm="syz.0.5061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f915a41ebe9 code=0x7ffc0000 [ 316.508687][ T29] audit: type=1326 audit(2000001128.781:28709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22808 comm="syz.0.5061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f915a41ebe9 code=0x7ffc0000 [ 316.532669][ T29] audit: type=1326 audit(2000001128.781:28710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22808 comm="syz.0.5061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f915a41ebe9 code=0x7ffc0000 [ 316.556859][ T29] audit: type=1326 audit(2000001128.781:28711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22808 comm="syz.0.5061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f915a41ebe9 code=0x7ffc0000 [ 316.580535][ T29] audit: type=1326 audit(2000001128.781:28712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22808 comm="syz.0.5061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f915a41ebe9 code=0x7ffc0000 [ 316.771144][T22822] loop3: detected capacity change from 0 to 4096 [ 316.944437][T22822] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 317.324263][T22858] pim6reg1: entered promiscuous mode [ 317.329732][T22858] pim6reg1: entered allmulticast mode [ 317.561882][T22874] loop1: detected capacity change from 0 to 512 [ 317.569035][T22874] ext4: Unknown parameter 'fowner<00000000000000000000' [ 317.875625][T22894] __nla_validate_parse: 2 callbacks suppressed [ 317.875639][T22894] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5092'. [ 317.905408][T22896] loop1: detected capacity change from 0 to 164 [ 317.913519][T22896] rock: directory entry would overflow storage [ 317.919833][T22896] rock: sig=0x66, size=4, remaining=3 [ 317.927432][T22899] tipc: Enabling of bearer rejected, already enabled [ 318.245168][T22918] Set syz1 is full, maxelem 65536 reached [ 318.534458][T22954] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 318.545122][T22950] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5111'. [ 318.653241][T22957] loop2: detected capacity change from 0 to 512 [ 318.672429][T22957] EXT4-fs warning (device loop2): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 318.687843][T22957] EXT4-fs (loop2): mount failed [ 319.453960][T22987] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5121'. [ 319.463016][T22987] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5121'. [ 319.530361][T22991] tipc: New replicast peer: 255.255.255.255 [ 319.536928][T22991] tipc: Enabled bearer , priority 10 [ 319.556102][T22987] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5121'. [ 319.603102][T22987] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5121'. [ 319.612249][T22987] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5121'. [ 319.661479][T22987] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5121'. [ 319.666731][T23005] loop3: detected capacity change from 0 to 512 [ 319.681021][T23005] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 319.691702][T23005] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a042e11c, mo2=0002] [ 319.700324][T23005] System zones: 1-12 [ 319.704551][T23005] EXT4-fs (loop3): orphan cleanup on readonly fs [ 319.713717][T23005] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.5127: bg 0: block 361: padding at end of block bitmap is not set [ 319.730783][T23005] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 319.819985][T23005] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.5127: invalid indirect mapped block 12 (level 1) [ 319.833695][T23005] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.5127: invalid indirect mapped block 2 (level 2) [ 319.847259][T23005] EXT4-fs (loop3): 1 truncate cleaned up [ 319.857594][T23005] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #2: block 5: comm syz.3.5127: lblock 0 mapped to illegal pblock 5 (length 1) [ 319.873155][T23005] EXT4-fs warning (device loop3): dx_probe:791: inode #2: lblock 0: comm syz.3.5127: error -117 reading directory block [ 319.910573][T22987] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5121'. [ 319.919628][T22987] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5121'. [ 320.040047][T23019] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 320.203762][T23029] loop1: detected capacity change from 0 to 512 [ 320.216876][T23029] EXT4-fs error (device loop1): ext4_acquire_dquot:6937: comm syz.1.5135: Failed to acquire dquot type 0 [ 320.266799][T23036] lo speed is unknown, defaulting to 1000 [ 320.313957][T23036] lo speed is unknown, defaulting to 1000 [ 320.346965][T23040] program syz.1.5136 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 320.371101][T23036] lo speed is unknown, defaulting to 1000 [ 320.400535][T23042] loop3: detected capacity change from 0 to 512 [ 320.408855][T23042] journal_path: Non-blockdev passed as './file1' [ 320.415367][T23042] EXT4-fs: error: could not find journal device path [ 320.847227][T23080] loop2: detected capacity change from 0 to 512 [ 320.860515][T23080] ext4: Unknown parameter 'fowner<00000000000000000000' [ 321.338354][ T29] kauditd_printk_skb: 421 callbacks suppressed [ 321.338370][ T29] audit: type=1326 audit(325.819:29131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23079 comm="syz.2.5144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba8f4aebe9 code=0x7ffc0000 [ 321.421749][ T29] audit: type=1326 audit(325.850:29132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23079 comm="syz.2.5144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba8f4aebe9 code=0x7ffc0000 [ 321.544056][T23106] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 321.573948][T23109] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=23109 comm=syz.2.5151 [ 321.594204][ T29] audit: type=1326 audit(326.081:29133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23110 comm="syz.0.5154" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f915a41ebe9 code=0x0 [ 321.632058][T23113] loop3: detected capacity change from 0 to 1024 [ 321.642812][T23113] EXT4-fs mount: 5 callbacks suppressed [ 321.642833][T23113] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 321.643189][T23125] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 321.672403][ T29] audit: type=1400 audit(326.165:29134): avc: denied { setopt } for pid=23126 comm="syz.2.5157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 321.801690][ T29] audit: type=1326 audit(326.291:29135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23138 comm="syz.4.5160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2c36bebe9 code=0x7ffc0000 [ 321.824729][ T29] audit: type=1326 audit(326.291:29136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23138 comm="syz.4.5160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2c36bebe9 code=0x7ffc0000 [ 321.851156][ T29] audit: type=1326 audit(326.323:29137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23138 comm="syz.4.5160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff2c36bebe9 code=0x7ffc0000 [ 321.874250][ T29] audit: type=1326 audit(326.323:29138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23138 comm="syz.4.5160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2c36bebe9 code=0x7ffc0000 [ 321.897964][ T29] audit: type=1326 audit(326.323:29139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23138 comm="syz.4.5160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2c36bebe9 code=0x7ffc0000 [ 321.921302][ T29] audit: type=1326 audit(326.323:29140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23138 comm="syz.4.5160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff2c36bebe9 code=0x7ffc0000 [ 321.958543][T23141] lo speed is unknown, defaulting to 1000 [ 321.980290][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 321.995321][T23146] loop2: detected capacity change from 0 to 164 [ 322.026482][T23141] lo speed is unknown, defaulting to 1000 [ 322.038935][T23158] loop2: detected capacity change from 0 to 512 [ 322.046995][T23158] ext4: Unknown parameter 'fowner<00000000000000000000' [ 322.066131][T23141] lo speed is unknown, defaulting to 1000 [ 322.224081][T23196] SELinux: Context system_u:object_r:src_t:s0 is not valid (left unmapped). [ 322.328382][T23202] loop3: detected capacity change from 0 to 1024 [ 322.358377][T23202] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 322.372055][T23204] lo speed is unknown, defaulting to 1000 [ 322.444821][T23204] lo speed is unknown, defaulting to 1000 [ 322.461740][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 322.483187][T23218] tipc: Enabled bearer , priority 0 [ 322.497271][T23217] tipc: Resetting bearer [ 322.523935][T23226] loop3: detected capacity change from 0 to 1024 [ 322.526221][T23217] tipc: Disabling bearer [ 322.538129][T23204] lo speed is unknown, defaulting to 1000 [ 322.549309][T23226] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 322.609855][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 322.933743][T23273] __nla_validate_parse: 6 callbacks suppressed [ 322.933772][T23273] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5178'. [ 323.089912][T23278] netlink: 32 bytes leftover after parsing attributes in process `+}[@'. [ 323.241343][T23289] netlink: 'syz.2.5182': attribute type 39 has an invalid length. [ 323.282439][T23291] loop3: detected capacity change from 0 to 512 [ 323.301017][T23291] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 323.375790][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 323.389516][T23298] loop1: detected capacity change from 0 to 128 [ 323.409843][T23298] FAT-fs (loop1): Directory bread(block 32) failed [ 323.419400][T23298] FAT-fs (loop1): Directory bread(block 33) failed [ 323.430913][T23298] FAT-fs (loop1): Directory bread(block 34) failed [ 323.496240][T23298] FAT-fs (loop1): Directory bread(block 35) failed [ 323.507685][T23298] FAT-fs (loop1): Directory bread(block 36) failed [ 323.515873][T23298] FAT-fs (loop1): Directory bread(block 37) failed [ 323.522685][T23298] FAT-fs (loop1): Directory bread(block 38) failed [ 323.529824][T23298] FAT-fs (loop1): Directory bread(block 39) failed [ 323.539755][T23298] FAT-fs (loop1): Directory bread(block 40) failed [ 323.563456][T23298] FAT-fs (loop1): Directory bread(block 41) failed [ 323.683780][T23298] FAT-fs (loop1): error, corrupted directory (invalid entries) [ 323.691472][T23298] FAT-fs (loop1): Filesystem has been set read-only [ 323.747136][T23315] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5191'. [ 323.757323][T23317] loop1: detected capacity change from 0 to 512 [ 323.764300][T23317] ext4: Unknown parameter 'fowner<00000000000000000000' [ 323.782311][T23323] loop3: detected capacity change from 0 to 128 [ 323.790511][T23323] FAT-fs (loop3): Directory bread(block 414) failed [ 323.808865][T23323] FAT-fs (loop3): Directory bread(block 415) failed [ 323.826678][T23323] FAT-fs (loop3): Directory bread(block 416) failed [ 323.843681][T23323] FAT-fs (loop3): Directory bread(block 417) failed [ 323.862596][T23323] FAT-fs (loop3): Directory bread(block 418) failed [ 323.870468][T23323] FAT-fs (loop3): Directory bread(block 419) failed [ 323.877318][T23323] FAT-fs (loop3): Directory bread(block 420) failed [ 323.885092][T23323] FAT-fs (loop3): Directory bread(block 421) failed [ 323.906086][T23323] FAT-fs (loop3): Directory bread(block 414) failed [ 323.916093][T23323] FAT-fs (loop3): Directory bread(block 415) failed [ 323.953646][T23331] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5195'. [ 324.011577][T23331] team0: entered promiscuous mode [ 324.016838][T23331] team0: entered allmulticast mode [ 324.157029][T23370] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5197'. [ 324.166027][T23370] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5197'. [ 324.306970][T23378] vxcan1: entered allmulticast mode [ 324.761505][T23389] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5204'. [ 324.854732][T23396] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5207'. [ 324.864271][T23392] loop3: detected capacity change from 0 to 512 [ 325.065972][T23432] netlink: 256 bytes leftover after parsing attributes in process `syz.1.5214'. [ 325.120161][T23442] loop1: detected capacity change from 0 to 1024 [ 325.128242][T23443] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 325.137598][T23413] ªªªªªªÿÿòÿÿÿòÿÿ: renamed from wg2 [ 325.195696][T23442] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 325.286907][T23456] loop2: detected capacity change from 0 to 1024 [ 325.327187][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 325.352789][T23456] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 325.386539][T23458] sch_fq: defrate 0 ignored. [ 325.469935][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 325.506927][T23493] tipc: Enabling of bearer rejected, already enabled [ 325.519371][T23493] tipc: Bearer : already 2 bearers with priority 10 [ 325.526914][T23493] tipc: Bearer : trying with adjusted priority [ 325.527402][T23490] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5230'. [ 325.533967][T23493] tipc: Enabling of bearer rejected, failed to enable media [ 325.671855][T23507] loop2: detected capacity change from 0 to 128 [ 325.761879][T23522] lo speed is unknown, defaulting to 1000 [ 325.791054][T23522] lo speed is unknown, defaulting to 1000 [ 325.818308][T23527] program syz.2.5238 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 325.829786][T23522] lo speed is unknown, defaulting to 1000 [ 326.083055][T23565] loop2: detected capacity change from 0 to 128 [ 326.104958][T23565] FAT-fs (loop2): Directory bread(block 32) failed [ 326.119629][T23565] FAT-fs (loop2): Directory bread(block 33) failed [ 326.130892][ T29] kauditd_printk_skb: 225 callbacks suppressed [ 326.130909][ T29] audit: type=1326 audit(330.839:29366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23552 comm="syz.0.5241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f915a41ebe9 code=0x7ffc0000 [ 326.131071][T23565] FAT-fs (loop2): Directory bread(block 34) failed [ 326.160267][ T29] audit: type=1326 audit(330.839:29367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23552 comm="syz.0.5241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f915a41ebe9 code=0x7ffc0000 [ 326.166712][T23565] FAT-fs (loop2): Directory bread(block 35) failed [ 326.166812][T23565] FAT-fs (loop2): Directory bread(block 36) failed [ 326.252841][T23565] FAT-fs (loop2): Directory bread(block 37) failed [ 326.275317][T23565] FAT-fs (loop2): Directory bread(block 38) failed [ 326.306026][T23565] FAT-fs (loop2): Directory bread(block 39) failed [ 326.316358][ T29] audit: type=1400 audit(331.049:29368): avc: denied { mount } for pid=23573 comm="syz.4.5249" name="/" dev="hugetlbfs" ino=58501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 326.326611][T23565] FAT-fs (loop2): Directory bread(block 40) failed [ 326.392987][T23565] FAT-fs (loop2): Directory bread(block 41) failed [ 326.398248][T23572] loop1: detected capacity change from 0 to 4096 [ 326.406373][ T29] audit: type=1326 audit(331.070:29369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23574 comm="syz.3.5250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58ecdbebe9 code=0x7ffc0000 [ 326.429594][ T29] audit: type=1326 audit(331.070:29370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23574 comm="syz.3.5250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58ecdbebe9 code=0x7ffc0000 [ 326.452783][ T29] audit: type=1326 audit(331.070:29371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23574 comm="syz.3.5250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f58ecdbebe9 code=0x7ffc0000 [ 326.475998][ T29] audit: type=1326 audit(331.070:29372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23574 comm="syz.3.5250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58ecdbebe9 code=0x7ffc0000 [ 326.499220][ T29] audit: type=1326 audit(331.070:29373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23574 comm="syz.3.5250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58ecdbebe9 code=0x7ffc0000 [ 326.522450][ T29] audit: type=1326 audit(331.070:29374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23574 comm="syz.3.5250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f58ecdbebe9 code=0x7ffc0000 [ 326.545561][ T29] audit: type=1326 audit(331.070:29375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23574 comm="syz.3.5250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58ecdbebe9 code=0x7ffc0000 [ 326.570257][T23580] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 326.613139][T23572] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 326.877261][T23592] lo speed is unknown, defaulting to 1000 [ 326.933921][T23597] program syz.3.5253 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 326.963300][T23592] lo speed is unknown, defaulting to 1000 [ 326.985504][T23565] FAT-fs (loop2): error, corrupted directory (invalid entries) [ 326.993193][T23565] FAT-fs (loop2): Filesystem has been set read-only [ 326.999956][T23592] lo speed is unknown, defaulting to 1000 [ 327.239714][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 327.712277][T23653] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 327.811839][T23651] ªªªªªªÿÿòÿÿÿòÿÿ: renamed from wg2 [ 327.885642][T23659] loop3: detected capacity change from 0 to 1024 [ 327.892737][T23659] EXT4-fs: Ignoring removed nobh option [ 327.898540][T23659] EXT4-fs: Ignoring removed bh option [ 327.926101][T23662] lo speed is unknown, defaulting to 1000 [ 327.932119][T23659] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 327.957891][T23662] lo speed is unknown, defaulting to 1000 [ 327.985968][T23662] lo speed is unknown, defaulting to 1000 [ 328.088982][T23690] lo speed is unknown, defaulting to 1000 [ 328.137463][T23690] lo speed is unknown, defaulting to 1000 [ 328.201862][T23694] program syz.1.5267 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 328.268370][T23690] lo speed is unknown, defaulting to 1000 [ 328.323682][T23703] __nla_validate_parse: 1 callbacks suppressed [ 328.323701][T23703] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5269'. [ 328.490256][T23730] 9pnet: p9_errstr2errno: server reported unknown error [ 328.664124][T23741] pimreg: entered allmulticast mode [ 328.685476][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 328.706083][T23741] pimreg: left allmulticast mode [ 328.745482][T23749] loop3: detected capacity change from 0 to 2368 [ 328.780602][T23755] loop1: detected capacity change from 0 to 512 [ 328.855616][T23755] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 329.000061][T23771] ªªªªªªÿÿòÿÿÿòÿÿ: renamed from wg2 [ 329.107200][T23773] netlink: 'syz.2.5280': attribute type 4 has an invalid length. [ 329.128170][T23773] netlink: 'syz.2.5280': attribute type 4 has an invalid length. [ 329.182200][ C1] TC_ACT_REPEAT abuse ? [ 329.193216][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 329.220954][T23775] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5282'. [ 329.228708][T23777] loop2: detected capacity change from 0 to 512 [ 329.278233][T23777] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 329.317105][T23777] EXT4-fs (loop2): 1 truncate cleaned up [ 329.325419][T23777] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 329.423066][T23790] loop1: detected capacity change from 0 to 4096 [ 329.433235][T23790] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 329.511509][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 329.524535][T23800] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5288'. [ 329.533613][T23800] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5288'. [ 329.554752][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 329.609474][T23809] netlink: 'syz.1.5287': attribute type 27 has an invalid length. [ 329.670215][T23812] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5290'. [ 329.736997][T23809] 8021q: adding VLAN 0 to HW filter on device  [ 329.746915][T23809] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 329.762737][ T3416] lo speed is unknown, defaulting to 1000 [ 329.768599][ T3416] syz+: Port: 1 Link ACTIVE [ 329.788291][ T3416] lo speed is unknown, defaulting to 1000 [ 329.824718][T23849] loop2: detected capacity change from 0 to 512 [ 329.840104][T23849] ext4: Unknown parameter 'fowner<00000000000000000000' [ 329.926276][T23858] tipc: Enabled bearer , priority 0 [ 329.959336][T23857] tipc: Resetting bearer [ 330.010947][ C1] TC_ACT_REPEAT abuse ? [ 330.058608][T23857] tipc: Disabling bearer [ 330.108894][T23862] ªªªªªªÿÿòÿÿÿòÿÿ: renamed from wg2 [ 330.206800][T23868] netlink: 'syz.1.5296': attribute type 10 has an invalid length. [ 330.228339][T23871] syzkaller0: entered promiscuous mode [ 330.234030][T23871] syzkaller0: entered allmulticast mode [ 330.452137][T23882] syzkaller0: entered promiscuous mode [ 330.458094][T23882] syzkaller0: entered allmulticast mode [ 330.502632][T23878] lo speed is unknown, defaulting to 1000 [ 330.506948][T23903] loop2: detected capacity change from 0 to 512 [ 330.537262][T23878] lo speed is unknown, defaulting to 1000 [ 330.541807][T23903] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 330.576262][T23878] lo speed is unknown, defaulting to 1000 [ 330.645897][T23903] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 330.656453][T23903] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 330.778204][T23932] lo speed is unknown, defaulting to 1000 [ 330.837115][T23932] lo speed is unknown, defaulting to 1000 [ 330.898419][T23932] lo speed is unknown, defaulting to 1000 [ 331.411527][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 331.434304][ T29] kauditd_printk_skb: 178 callbacks suppressed [ 331.434321][ T29] audit: type=1326 audit(336.416:29554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23960 comm="syz.0.5317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f915a41ebe9 code=0x7ffc0000 [ 331.514809][ T29] audit: type=1326 audit(336.448:29555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23960 comm="syz.0.5317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f915a41ebe9 code=0x7ffc0000 [ 331.537997][ T29] audit: type=1326 audit(336.448:29556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23960 comm="syz.0.5317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f915a41ebe9 code=0x7ffc0000 [ 331.561137][ T29] audit: type=1326 audit(336.448:29557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23960 comm="syz.0.5317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f915a41ebe9 code=0x7ffc0000 [ 331.584228][ T29] audit: type=1326 audit(336.448:29558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23960 comm="syz.0.5317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f915a41ebe9 code=0x7ffc0000 [ 331.607418][ T29] audit: type=1326 audit(336.448:29559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23960 comm="syz.0.5317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f915a41ebe9 code=0x7ffc0000 [ 331.631560][ T29] audit: type=1326 audit(336.448:29560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23960 comm="syz.0.5317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f915a41ebe9 code=0x7ffc0000 [ 331.654989][ T29] audit: type=1326 audit(336.448:29561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23960 comm="syz.0.5317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f915a41ebe9 code=0x7ffc0000 [ 331.678128][ T29] audit: type=1326 audit(336.448:29562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23960 comm="syz.0.5317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f915a41ebe9 code=0x7ffc0000 [ 331.701129][ T29] audit: type=1326 audit(336.448:29563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23960 comm="syz.0.5317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f915a41ebe9 code=0x7ffc0000 [ 331.772750][T23972] -1: renamed from syzkaller0 [ 331.792513][T23970] ªªªªªªÿÿòÿÿÿòÿÿ: renamed from wg2 [ 331.857852][T23987] netlink: 27 bytes leftover after parsing attributes in process `syz.1.5311'. [ 331.920255][T23991] IPVS: Error connecting to the multicast addr [ 331.946293][T23995] loop3: detected capacity change from 0 to 512 [ 331.954820][T23995] EXT4-fs: Ignoring removed nomblk_io_submit option [ 331.975920][T23995] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 331.984853][T23995] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c018, mo2=0002] [ 332.023973][T23995] System zones: 0-1, 15-15, 18-18, 34-34 [ 332.077118][T23995] EXT4-fs (loop3): orphan cleanup on readonly fs [ 332.115056][T23995] EXT4-fs error (device loop3): ext4_orphan_get:1392: inode #16: comm syz.3.5313: casefold flag without casefold feature [ 332.133726][T24001] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5319'. [ 332.146793][T23995] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.5313: couldn't read orphan inode 16 (err -117) [ 332.161499][T24009] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5320'. [ 332.218012][T23995] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 332.322047][T24020] loop1: detected capacity change from 0 to 512 [ 332.329869][T24020] ext4: Unknown parameter 'fowner<00000000000000000000' [ 332.347657][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 332.450548][T24034] loop3: detected capacity change from 0 to 512 [ 332.479502][T24034] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 332.750669][T23990] syz.2.5314 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 332.761889][T23990] CPU: 1 UID: 0 PID: 23990 Comm: syz.2.5314 Not tainted syzkaller #0 PREEMPT(voluntary) [ 332.762016][T23990] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 332.762029][T23990] Call Trace: [ 332.762038][T23990] [ 332.762093][T23990] __dump_stack+0x1d/0x30 [ 332.762116][T23990] dump_stack_lvl+0xe8/0x140 [ 332.762134][T23990] dump_stack+0x15/0x1b [ 332.762150][T23990] dump_header+0x81/0x220 [ 332.762235][T23990] oom_kill_process+0x342/0x400 [ 332.762271][T23990] out_of_memory+0x979/0xb80 [ 332.762310][T23990] try_charge_memcg+0x5e6/0x9e0 [ 332.762340][T23990] charge_memcg+0x51/0xc0 [ 332.762362][T23990] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 332.762449][T23990] __read_swap_cache_async+0x1df/0x350 [ 332.762485][T23990] swap_cluster_readahead+0x277/0x3e0 [ 332.762519][T23990] swapin_readahead+0xde/0x6f0 [ 332.762595][T23990] ? __filemap_get_folio+0x4f7/0x6b0 [ 332.762655][T23990] ? swap_cache_get_folio+0x77/0x200 [ 332.762693][T23990] do_swap_page+0x301/0x2430 [ 332.762720][T23990] ? finish_task_switch+0xad/0x2b0 [ 332.762751][T23990] ? __pfx_default_wake_function+0x10/0x10 [ 332.762775][T23990] handle_mm_fault+0x9a5/0x2c20 [ 332.762812][T23990] do_user_addr_fault+0x636/0x1090 [ 332.762859][T23990] ? fpregs_restore_userregs+0xe2/0x1d0 [ 332.762889][T23990] ? switch_fpu_return+0xe/0x20 [ 332.762916][T23990] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 332.763010][T23990] exc_page_fault+0x62/0xa0 [ 332.763032][T23990] asm_exc_page_fault+0x26/0x30 [ 332.763054][T23990] RIP: 0033:0x7fba8f380efe [ 332.763075][T23990] Code: e9 77 c7 12 00 0f 1f 80 00 00 00 00 48 83 c4 28 48 c7 c0 ff ff ff ff 5b 5d c3 66 90 41 57 41 56 41 55 41 54 55 53 48 83 ec 38 <80> 3d fb 10 35 00 00 89 7c 24 0c 88 54 24 10 48 89 74 24 28 0f 85 [ 332.763097][T23990] RSP: 002b:00007fff7fa8cb80 EFLAGS: 00010202 [ 332.763188][T23990] RAX: 00007fba8f6d5fa0 RBX: 00007fba8f6d5fa0 RCX: 0000000000000026 [ 332.763203][T23990] RDX: 0000000000000001 RSI: 00007fba8f6d6038 RDI: 000000000000000d [ 332.763218][T23990] RBP: 00007fba8f6d7da0 R08: 0000000000000000 R09: 0000000000000026 [ 332.763232][T23990] R10: 3fffffffffffffff R11: 0000000000000293 R12: 0000000000052751 [ 332.763261][T23990] R13: 00007fff7fa8cce0 R14: ffffffffffffffff R15: 00007fff7fa8cd00 [ 332.763358][T23990] [ 332.988001][T23990] memory: usage 307200kB, limit 307200kB, failcnt 325 [ 332.995671][T23990] memory+swap: usage 308340kB, limit 9007199254740988kB, failcnt 0 [ 333.003803][T23990] kmem: usage 307152kB, limit 9007199254740988kB, failcnt 0 [ 333.011685][T23990] Memory cgroup stats for /syz2: [ 333.020443][T23990] cache 0 [ 333.026133][T24045] loop1: detected capacity change from 0 to 2048 [ 333.028500][T23990] rss 0 [ 333.028511][T23990] shmem 0 [ 333.041622][T23990] mapped_file 0 [ 333.045106][T23990] dirty 0 [ 333.048072][T23990] writeback 28672 [ 333.051735][T23990] workingset_refault_anon 1954 [ 333.056503][T23990] workingset_refault_file 2354 [ 333.061514][T23990] swap 1167360 [ 333.064899][T23990] swapcached 28672 [ 333.068883][T23990] pgpgin 499972 [ 333.072445][T23990] pgpgout 499960 [ 333.076259][T23990] pgfault 346362 [ 333.079871][T23990] pgmajfault 283 [ 333.083608][T23990] inactive_anon 28672 [ 333.087730][T23990] active_anon 0 [ 333.091277][T23990] inactive_file 20480 [ 333.095334][T23990] active_file 0 [ 333.098876][T23990] unevictable 0 [ 333.102336][T23990] hierarchical_memory_limit 314572800 [ 333.107814][T23990] hierarchical_memsw_limit 9223372036854771712 [ 333.113989][T23990] total_cache 0 [ 333.117484][T23990] total_rss 0 [ 333.120775][T23990] total_shmem 0 [ 333.124270][T23990] total_mapped_file 0 [ 333.128260][T23990] total_dirty 0 [ 333.131766][T23990] total_writeback 28672 [ 333.136434][T23990] total_workingset_refault_anon 1954 [ 333.141830][T23990] total_workingset_refault_file 2354 [ 333.147167][T23990] total_swap 1167360 [ 333.151131][T23990] total_swapcached 28672 [ 333.155384][T23990] total_pgpgin 499972 [ 333.159353][T23990] total_pgpgout 499960 [ 333.163607][T23990] total_pgfault 346362 [ 333.167658][T23990] total_pgmajfault 283 [ 333.171702][T23990] total_inactive_anon 28672 [ 333.176912][T23990] total_active_anon 0 [ 333.181683][T23990] total_inactive_file 20480 [ 333.187036][T23990] total_active_file 0 [ 333.191952][T23990] total_unevictable 0 [ 333.196307][T23990] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.5314,pid=23990,uid=0 [ 333.213237][T23990] Memory cgroup out of memory: Killed process 23990 (syz.2.5314) total-vm:93632kB, anon-rss:944kB, file-rss:22312kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 333.232510][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 333.242952][T24049] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 333.251526][T24053] @0Ù: renamed from bond_slave_1 [ 333.272308][T24045] Alternate GPT is invalid, using primary GPT. [ 333.279333][T24045] loop1: p1 p2 p3 [ 333.321293][T24063] hsr0: entered promiscuous mode [ 333.328278][T24063] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5334'. [ 333.337972][T24063] hsr_slave_0: left promiscuous mode [ 333.344015][T24063] hsr_slave_1: left promiscuous mode [ 333.350809][T24063] hsr0 (unregistering): left promiscuous mode [ 333.552380][T24092] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=24092 comm=syz.1.5340 [ 333.572898][T24094] sch_tbf: burst 4398 is lower than device lo mtu (11337746) ! [ 333.587314][T24094] tipc: Bearer : already 2 bearers with priority 10 [ 333.595072][T24094] tipc: Bearer : trying with adjusted priority [ 333.603131][T24094] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 333.610483][T24094] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 333.617488][T24094] tipc: Enabled bearer , priority 9 [ 333.686284][T24099] loop2: detected capacity change from 0 to 1024 [ 333.693379][T24099] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 333.704468][T24099] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 333.715265][T24099] EXT4-fs error (device loop2): ext4_ext_check_inode:523: inode #2: comm syz.2.5343: pblk 0 bad header/extent: invalid eh_entries - magic f30a, entries 2, max 1(4), depth 0(0) [ 333.733282][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 333.733374][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 333.747921][T24099] EXT4-fs (loop2): no journal found [ 333.901575][T24116] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5347'. [ 333.956145][T24127] netlink: 27 bytes leftover after parsing attributes in process `syz.4.5351'. [ 333.981475][T24130] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5348'. [ 333.990834][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 333.990940][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 334.005263][T24130] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5348'. [ 334.334217][T24135] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5353'. [ 334.402237][T24141] loop3: detected capacity change from 0 to 512 [ 334.412646][T24144] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5355'. [ 334.422341][T24141] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 334.494951][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 334.502143][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 335.041815][T24155] loop1: detected capacity change from 0 to 1024 [ 335.048942][T24155] EXT4-fs: Ignoring removed bh option [ 335.054755][T24155] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 335.068098][T24155] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 335.078412][T24155] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 2: comm syz.1.5357: lblock 2 mapped to illegal pblock 2 (length 1) [ 335.093161][T24155] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 48: comm syz.1.5357: lblock 0 mapped to illegal pblock 48 (length 1) [ 335.107862][T24155] EXT4-fs error (device loop1): ext4_acquire_dquot:6937: comm syz.1.5357: Failed to acquire dquot type 0 [ 335.119623][T24155] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 335.229877][T24155] EXT4-fs error (device loop1): ext4_evict_inode:254: inode #11: comm syz.1.5357: mark_inode_dirty error [ 335.348824][T24164] hsr0: entered promiscuous mode [ 335.369249][T24155] EXT4-fs warning (device loop1): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 335.380845][T24164] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5360'. [ 335.411774][T24164] hsr_slave_0: left promiscuous mode [ 335.419138][T24155] EXT4-fs (loop1): 1 orphan inode deleted [ 335.434972][T24164] hsr_slave_1: left promiscuous mode [ 335.444672][T24155] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 335.467437][ T9918] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:47: lblock 1 mapped to illegal pblock 1 (length 1) [ 335.476064][T24164] hsr0 (unregistering): left promiscuous mode [ 335.491256][ T9918] EXT4-fs error (device loop1): ext4_release_dquot:6973: comm kworker/u8:47: Failed to release dquot type 0 [ 335.494669][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 335.510055][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 335.510843][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 335.535983][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 335.550826][ T3301] EXT4-fs error (device loop1): __ext4_get_inode_loc:4861: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 335.586166][ T3301] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 335.650700][ T3301] EXT4-fs error (device loop1): ext4_quota_off:7221: inode #3: comm syz-executor: mark_inode_dirty error [ 335.698988][T24175] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 336.053750][T24189] netlink: 180 bytes leftover after parsing attributes in process `syz.4.5365'. [ 336.077251][T24186] netlink: 180 bytes leftover after parsing attributes in process `syz.4.5365'. [ 336.253393][ T29] kauditd_printk_skb: 197 callbacks suppressed [ 336.253434][ T29] audit: type=1326 audit(341.478:29758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24187 comm="syz.2.5366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba8f4aebe9 code=0x7ffc0000 [ 336.285333][ T29] audit: type=1326 audit(341.499:29759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24187 comm="syz.2.5366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba8f4aebe9 code=0x7ffc0000 [ 336.447646][ T29] audit: type=1326 audit(341.689:29760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24202 comm="syz.0.5370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f915a41ebe9 code=0x7ffc0000 [ 336.485328][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 336.491504][ T29] audit: type=1326 audit(341.689:29761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24202 comm="syz.0.5370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f915a41ebe9 code=0x7ffc0000 [ 336.492574][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 336.516167][ T29] audit: type=1326 audit(341.689:29762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24202 comm="syz.0.5370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f915a41ebe9 code=0x7ffc0000 [ 336.546904][ T29] audit: type=1326 audit(341.689:29763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24202 comm="syz.0.5370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f915a41ebe9 code=0x7ffc0000 [ 336.570211][ T29] audit: type=1326 audit(341.689:29764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24202 comm="syz.0.5370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f915a41ebe9 code=0x7ffc0000 [ 336.593713][ T29] audit: type=1326 audit(341.689:29765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24202 comm="syz.0.5370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f915a41ebe9 code=0x7ffc0000 [ 336.616879][ T29] audit: type=1326 audit(341.689:29766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24202 comm="syz.0.5370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f915a41ebe9 code=0x7ffc0000 [ 336.640074][ T29] audit: type=1326 audit(341.689:29767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24202 comm="syz.0.5370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f915a41ebe9 code=0x7ffc0000 [ 336.729522][T24208] cgroup: Unknown subsys name 'dont_measure' [ 336.745541][T24208] loop1: detected capacity change from 0 to 1024 [ 336.752771][T24208] EXT4-fs: Ignoring removed bh option [ 336.758284][T24208] EXT4-fs: inline encryption not supported [ 336.765369][T24208] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 336.790575][T24208] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 2: comm syz.1.5371: lblock 2 mapped to illegal pblock 2 (length 1) [ 336.819026][T24208] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 48: comm syz.1.5371: lblock 0 mapped to illegal pblock 48 (length 1) [ 336.857163][T24208] EXT4-fs error (device loop1): ext4_acquire_dquot:6937: comm syz.1.5371: Failed to acquire dquot type 0 [ 336.872560][T24208] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 336.891446][T24208] EXT4-fs error (device loop1): ext4_evict_inode:254: inode #11: comm syz.1.5371: mark_inode_dirty error [ 336.903326][T24208] EXT4-fs warning (device loop1): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 336.914267][T24208] EXT4-fs (loop1): 1 orphan inode deleted [ 336.920735][T24208] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 336.953472][ T9922] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:51: lblock 1 mapped to illegal pblock 1 (length 1) [ 336.979962][ T9922] EXT4-fs error (device loop1): ext4_release_dquot:6973: comm kworker/u8:51: Failed to release dquot type 0 [ 337.041352][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 337.052857][ T3301] EXT4-fs error (device loop1): __ext4_get_inode_loc:4861: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 337.067282][ T3301] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 337.143667][ T3301] EXT4-fs error (device loop1): ext4_quota_off:7221: inode #3: comm syz-executor: mark_inode_dirty error [ 337.277999][T24246] loop3: detected capacity change from 0 to 512 [ 337.331331][T24246] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 337.436269][T24246] EXT4-fs error (device loop3): ext4_acquire_dquot:6937: comm syz.3.5380: Failed to acquire dquot type 0 [ 337.475058][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 337.482295][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 337.562301][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 337.596089][T24264] loop3: detected capacity change from 0 to 512 [ 337.603765][T24264] ext4: Unknown parameter 'fowner<00000000000000000000' [ 337.752214][T24275] loop1: detected capacity change from 0 to 512 [ 337.762127][T24278] loop2: detected capacity change from 0 to 1024 [ 337.772859][T24278] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 337.785302][T24275] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 337.820254][T24275] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 337.830403][T24275] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 337.844528][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 337.867039][ T3307] ================================================================== [ 337.875416][ T3307] BUG: KCSAN: data-race in __lru_add_drain_all / folios_put_refs [ 337.883154][ T3307] [ 337.885489][ T3307] write to 0xffff888237c25ea8 of 1 bytes by task 24264 on cpu 0: [ 337.893317][ T3307] folios_put_refs+0x285/0x2d0 [ 337.898095][ T3307] folio_batch_move_lru+0x1fd/0x230 [ 337.903330][ T3307] folio_add_lru+0x14a/0x1f0 [ 337.907950][ T3307] shmem_get_folio_gfp+0x7ab/0xd60 [ 337.913093][ T3307] shmem_write_begin+0xa8/0x190 [ 337.917952][ T3307] generic_perform_write+0x184/0x490 [ 337.923332][ T3307] shmem_file_write_iter+0xc5/0xf0 [ 337.928551][ T3307] iter_file_splice_write+0x663/0xa60 [ 337.934011][ T3307] direct_splice_actor+0x153/0x2a0 [ 337.939243][ T3307] splice_direct_to_actor+0x30f/0x680 [ 337.944819][ T3307] do_splice_direct+0xda/0x150 [ 337.949605][ T3307] do_sendfile+0x380/0x650 [ 337.954030][ T3307] __x64_sys_sendfile64+0x105/0x150 [ 337.959247][ T3307] x64_sys_call+0x2bb0/0x2ff0 [ 337.964045][ T3307] do_syscall_64+0xd2/0x200 [ 337.968569][ T3307] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 337.974473][ T3307] [ 337.976820][ T3307] read to 0xffff888237c25ea8 of 1 bytes by task 3307 on cpu 1: [ 337.984554][ T3307] __lru_add_drain_all+0x12b/0x3f0 [ 337.989759][ T3307] lru_add_drain_all+0x10/0x20 [ 337.994522][ T3307] invalidate_bdev+0x47/0x70 [ 337.999111][ T3307] ext4_put_super+0x624/0x7d0 [ 338.003799][ T3307] generic_shutdown_super+0xe6/0x210 [ 338.009106][ T3307] kill_block_super+0x2a/0x70 [ 338.014000][ T3307] ext4_kill_sb+0x42/0x80 [ 338.018357][ T3307] deactivate_locked_super+0x72/0x1c0 [ 338.023766][ T3307] deactivate_super+0x97/0xa0 [ 338.028453][ T3307] cleanup_mnt+0x269/0x2e0 [ 338.032970][ T3307] __cleanup_mnt+0x19/0x20 [ 338.037561][ T3307] task_work_run+0x131/0x1a0 [ 338.042240][ T3307] exit_to_user_mode_loop+0xe4/0x100 [ 338.047534][ T3307] do_syscall_64+0x1d6/0x200 [ 338.052131][ T3307] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 338.058130][ T3307] [ 338.060668][ T3307] value changed: 0x1f -> 0x02 [ 338.065510][ T3307] [ 338.067928][ T3307] Reported by Kernel Concurrency Sanitizer on: [ 338.074181][ T3307] CPU: 1 UID: 0 PID: 3307 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(voluntary) [ 338.084083][ T3307] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 338.094229][ T3307] ================================================================== [ 338.120936][T24294] loop2: detected capacity change from 0 to 512 [ 338.142207][T24294] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 338.150581][T24294] EXT4-fs (loop2): orphan cleanup on readonly fs [ 338.157521][T24294] EXT4-fs warning (device loop2): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 338.176117][T24294] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 338.183257][T24294] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.5388: bg 0: block 40: padding at end of block bitmap is not set [ 338.198327][T24294] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 338.208086][T24294] EXT4-fs (loop2): 1 truncate cleaned up [ 338.214047][T24294] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 338.237742][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 338.490568][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 339.455492][ C1] net_ratelimit: 2 callbacks suppressed [ 339.455507][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 339.468173][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 340.445762][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 340.452900][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 341.436240][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 341.443377][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 342.425948][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 342.433349][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 343.416610][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 343.423670][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 344.415907][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 344.423132][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 345.397004][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 345.404118][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 346.386702][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 346.394096][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 347.377414][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 347.384732][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available