last executing test programs: 8.713360509s ago: executing program 0 (id=131): socket$packet(0x11, 0x2, 0x300) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r0, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x1, 0x353a, 0x1}}, 0x20) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa1780c206050086dd6018232500102c"], 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0xffffffffffffff62, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) 8.540097893s ago: executing program 0 (id=135): bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000850000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r3}, 0x10) connect$unix(r2, &(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x18) 8.510994625s ago: executing program 0 (id=136): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180), &(0x7f0000000200), 0x3, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r1}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)) 8.482143337s ago: executing program 0 (id=137): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x11) mount(0x0, &(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000000)='binfmt_misc\x00', 0xc00, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000240)='./file0/../file0\x00') pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f00000000c0)='./file0/../file0\x00') 8.462027139s ago: executing program 0 (id=138): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="73686f72746e616d653d77696e39352c73686f72746e616d653d77696e6e742c756e695f786c6174653d302c756e695f786c6174653d312c757466383d312c757466383d312c646973636172642c757466383d302c756e695f786c6174653d302c666c7573682c73686f72746e616d653d6d697865642c73686f72746e616d653d6c6f7765722c646f733178666c6f7070792c73686f72746e616d653d77696e6e742c73686f72746e616d653d6c6f7765722c757466382c0014697a7960fb374b723f64329787434c6c9f891d2e309efaf1d4e529e1ba0f697fedffb095592bc19d5a8f8141ee9bf46262f3a2b1452bf206c0e2ae8a465e6e1be6eeb5d588035a24458d476fc1f9a234cdc4ba352a4185614ce67df4870bff796357ee95fffb99cde9"], 0xfe, 0x2b7, &(0x7f0000001340)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000740)='./file1\x00', 0x183042, 0x15) pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xe7c) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r0, 0x0) ftruncate(r1, 0x7) 8.289906893s ago: executing program 0 (id=147): r0 = socket$inet(0x2, 0x5, 0x0) close(0x3) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet(r1, &(0x7f0000000d00)=[{{&(0x7f0000000040)={0x2, 0x4e21, @rand_addr=0x64010101}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000080)='e', 0x1}], 0x1}}, {{&(0x7f0000000880)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10, &(0x7f0000000a80)=[{&(0x7f00000008c0)='K', 0x1}], 0x1}}], 0x2, 0x4000) shutdown(r1, 0x1) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x7d, &(0x7f0000000000)=@assoc_value, &(0x7f0000000140)=0x8) 8.254336786s ago: executing program 32 (id=147): r0 = socket$inet(0x2, 0x5, 0x0) close(0x3) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet(r1, &(0x7f0000000d00)=[{{&(0x7f0000000040)={0x2, 0x4e21, @rand_addr=0x64010101}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000080)='e', 0x1}], 0x1}}, {{&(0x7f0000000880)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10, &(0x7f0000000a80)=[{&(0x7f00000008c0)='K', 0x1}], 0x1}}], 0x2, 0x4000) shutdown(r1, 0x1) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x7d, &(0x7f0000000000)=@assoc_value, &(0x7f0000000140)=0x8) 6.791552464s ago: executing program 1 (id=196): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000180)="10030600e0ff020004004788aa96a13bb100001100007fca1a00", 0x10608, 0x0, &(0x7f0000000140)={0x11, 0x0, r2}, 0x14) 6.725624069s ago: executing program 1 (id=201): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0xf, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb325c, 0x280c}}, 0xfffffffffffffe4b}, 0x1, 0x0, 0x0, 0x600}, 0x20000000) write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x8029, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x0, 0x0, 0x28, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2, 0x0, 0x700}, @generic={0x0, 0x2, "d58838000391"}]}}}}}}, 0xfd6c) 6.579257811s ago: executing program 1 (id=206): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) memfd_create(0x0, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='setgroups\x00') close_range(r2, 0xffffffffffffffff, 0x0) 6.537213064s ago: executing program 1 (id=208): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") creat(&(0x7f0000000300)='./bus\x00', 0x0) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x3, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000000000000c00002000", "036c47c6e150d448000000000000be335263bdbcef549ba197fce47ddfdd753abd950e00002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00", [0x4]}) mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2200020, 0x0) 6.174296294s ago: executing program 1 (id=212): socket$packet(0x11, 0x2, 0x300) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, @perf_config_ext={0x8, 0x6}, 0x120, 0x10000, 0x33f8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) setrlimit(0xe, 0x0) 5.694241292s ago: executing program 1 (id=229): r0 = socket$nl_rdma(0x10, 0x3, 0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x4}, 0x18) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x38, 0x1403, 0x1, 0x70bd2c, 0x25dfdbfc, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) 5.694080732s ago: executing program 33 (id=229): r0 = socket$nl_rdma(0x10, 0x3, 0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x4}, 0x18) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x38, 0x1403, 0x1, 0x70bd2c, 0x25dfdbfc, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) 2.73261078s ago: executing program 6 (id=330): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4dd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r2}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000003e000701fcfffffffddbdf25047c0000100036800c00020007009300000000000c0001"], 0x30}, 0x1, 0x0, 0x0, 0x8080}, 0x4080) 2.61757543s ago: executing program 6 (id=332): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000080)='kfree\x00', r3, 0x0, 0xffffffffffffffff}, 0x18) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)=ANY=[@ANYRES32=r5, @ANYRES32=r4, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r5}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) recvmsg$unix(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0x33fe0}], 0x1}, 0x0) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x4000002}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r7 = bpf$PROG_LOAD(0x5, 0x0, 0x8f9d4f0ad2bdda23) r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000000)='kfree\x00', r7, 0x0, 0x1000000000000}, 0x18) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r9, 0xffffffffffffffff, 0xfffffffffffffc01, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000740)=ANY=[@ANYRESDEC=r10, @ANYBLOB="1de9e821dfde7439d938d3b4df831ec002b06dc01a96e43e16adde1477984e0cbd8136d6cd8d58c2e08cce8909c07e93556bbf4eb33ff6a69bd74ec6b0e9e4f6bbcbc69a592bffce81c8f3355dac09cfe6ac1db5f7c04e3289ce1448cb03220df0c22b0536f385c7ee0263bd8217da64ccba068b6a6878a6c128023df73dd0f26cf6baf0e36550e619e7d06e6f833bf0b28820", @ANYBLOB="6e77f9b6b8276c49d817228a240ed20603b709a0c6f07830fa8eb4e8938fc3655e7f5074921f7fd162be970000000000df", @ANYRES16=0x0, @ANYRES64=r6, @ANYRESOCT=r8, @ANYBLOB, @ANYRES16=r8, @ANYRES16=0x0], 0x0, 0x28, 0x0, 0x5, 0x1ff}, 0x28) r11 = msgget$private(0x0, 0x790) msgsnd(r11, &(0x7f0000000d00)=ANY=[@ANYRES8], 0x401, 0x0) r12 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_flowlabel\x00') ioctl$PPPIOCSPASS(r12, 0x40107447, &(0x7f0000000280)={0x6, &(0x7f0000000100)=[{0x1, 0x4, 0x9, 0x2}, {0x20, 0x2, 0xd1, 0xbe}, {0x80, 0x2, 0xd, 0x3}, {0xfffd, 0x7, 0x9, 0x7d}, {0x2, 0x3, 0xff, 0x4}, {0x196, 0xc7, 0xfd, 0xf}]}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, &(0x7f0000000000)=0x2) chmod(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x14a) r13 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r13, &(0x7f0000001240)=""/102400, 0x200000, 0x0) ioctl$BTRFS_IOC_START_SYNC(r7, 0x80089418, &(0x7f0000000080)) 1.791015386s ago: executing program 6 (id=354): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) mkdirat(0xffffffffffffffff, &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='map_files\x00') fchdir(r1) sendmmsg$unix(r0, &(0x7f00000013c0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000080)=@abs={0x1, 0x30, 0x4e30}, 0x6e, 0x0}}], 0x2, 0x40008004) 1.772883378s ago: executing program 6 (id=355): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000900)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100), 0xfffffd9d) sendfile(r0, r1, 0x0, 0x8000002b) 1.552449755s ago: executing program 3 (id=357): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000480)=ANY=[], &(0x7f0000000440)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_read_part_table(0x60d, &(0x7f0000002200)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./file1\x00', 0x105042, 0x1db) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) writev(r0, &(0x7f0000000140)=[{0x0}], 0x1) 1.481098651s ago: executing program 4 (id=361): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0b00000008000000070000000900000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000ff0f00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r1}, 0x10) unshare(0x2c060000) unshare(0x2c020400) 1.422196246s ago: executing program 4 (id=362): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000080), 0x64, 0x50a, &(0x7f0000000200)="$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") r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff02000000000000000000000000000100"], 0xfdef) 1.387199579s ago: executing program 3 (id=363): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000b00), 0x1, 0x55f, &(0x7f0000000580)="$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") lsetxattr$trusted_overlay_upper(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000180), &(0x7f0000000240)=ANY=[], 0x361, 0x0) lsetxattr$security_ima(&(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000200)=ANY=[], 0x9, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000cc0)={0x11, 0x15, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@exit, @tail_call], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x3, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000540)={0x3, 0x7, 0xfffffff9, 0x2}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x81}, 0x94) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file1\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="0200000001000000000000000400000000000000100000000000000020"], 0x24, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000480)=ANY=[], 0xfe37, 0x0) 1.112315721s ago: executing program 4 (id=365): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x3800480, &(0x7f0000002200), 0x45, 0x786, &(0x7f00000007c0)="$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") creat(&(0x7f0000000100)='./bus\x00', 0x110) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000540)='./bus\x00', 0x40100, 0x1ad) preadv2(r0, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x2, 0x0, 0x0, 0x0) 1.025068168s ago: executing program 3 (id=366): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000080)='kfree\x00', r3, 0x0, 0xffffffffffffffff}, 0x18) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)=ANY=[@ANYRES32=r5, @ANYRES32=r4, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r5}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) recvmsg$unix(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0x33fe0}], 0x1}, 0x0) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x4000002}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r7 = bpf$PROG_LOAD(0x5, 0x0, 0x8f9d4f0ad2bdda23) r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000000)='kfree\x00', r7, 0x0, 0x1000000000000}, 0x18) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r9, 0xffffffffffffffff, 0xfffffffffffffc01, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000740)=ANY=[@ANYRESDEC=r10, @ANYBLOB="1de9e821dfde7439d938d3b4df831ec002b06dc01a96e43e16adde1477984e0cbd8136d6cd8d58c2e08cce8909c07e93556bbf4eb33ff6a69bd74ec6b0e9e4f6bbcbc69a592bffce81c8f3355dac09cfe6ac1db5f7c04e3289ce1448cb03220df0c22b0536f385c7ee0263bd8217da64ccba068b6a6878a6c128023df73dd0f26cf6baf0e36550e619e7d06e6f833bf0b28820", @ANYBLOB="6e77f9b6b8276c49d817228a240ed20603b709a0c6f07830fa8eb4e8938fc3655e7f5074921f7fd162be970000000000df", @ANYRES16=0x0, @ANYRES64=r6, @ANYRESOCT=r8, @ANYBLOB, @ANYRES16=r8, @ANYRES16=0x0], 0x0, 0x28, 0x0, 0x5, 0x1ff}, 0x28) r11 = msgget$private(0x0, 0x790) msgsnd(r11, &(0x7f0000000d00)=ANY=[@ANYRES8], 0x401, 0x0) r12 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_flowlabel\x00') ioctl$PPPIOCSPASS(r12, 0x40107447, &(0x7f0000000280)={0x6, &(0x7f0000000100)=[{0x1, 0x4, 0x9, 0x2}, {0x20, 0x2, 0xd1, 0xbe}, {0x80, 0x2, 0xd, 0x3}, {0xfffd, 0x7, 0x9, 0x7d}, {0x2, 0x3, 0xff, 0x4}, {0x196, 0xc7, 0xfd, 0xf}]}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, &(0x7f0000000000)=0x2) chmod(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x14a) r13 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r13, &(0x7f0000001240)=""/102400, 0x200000, 0x0) ioctl$BTRFS_IOC_START_SYNC(r7, 0x80089418, &(0x7f0000000080)) 926.636236ms ago: executing program 5 (id=367): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000007d000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r0, 0x0, 0x1}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) close(r1) 762.043449ms ago: executing program 5 (id=368): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80a, &(0x7f0000000940), 0x1, 0x7ab, &(0x7f0000000980)="$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") syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x88a, &(0x7f00000001c0)={[{@usrquota}, {@usrjquota, 0x22}, {@data_ordered}, {@noload}, {@noinit_itable}, {@grpjquota, 0x22}, {@init_itable}, {@jqfmt_vfsold}, {@noblock_validity}]}, 0xfe, 0x44e, &(0x7f0000000900)="$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") syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0x61, &(0x7f00000001c0)=ANY=[], 0x1, 0x0, &(0x7f0000000000)) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) 761.935319ms ago: executing program 4 (id=369): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x210000, &(0x7f0000000280)={[{@user_xattr}, {@noquota}, {@dioread_nolock}, {@jqfmt_vfsv1}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x70}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7b1}}, {@stripe={'stripe', 0x3d, 0x20}}, {@bsdgroups}, {@max_batch_time={'max_batch_time', 0x3d, 0x3fe}}, {@user_xattr}, {@noinit_itable}]}, 0x3, 0x583, &(0x7f0000000800)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000d80)='./file1\x00', 0x143042, 0x0) pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x104) fallocate(r1, 0x8, 0x4000, 0x4000) 715.292383ms ago: executing program 2 (id=370): r0 = socket$igmp6(0xa, 0x3, 0x2) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000005c0)={@dev={0xfe, 0x80, '\x00', 0x40}, @remote, @remote, 0x3, 0x2, 0x5, 0x400, 0xb7, 0xc20022, r2}) syz_emit_ethernet(0x82, &(0x7f0000000040)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x80}, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x48, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, '\x00', 0x0, 0x0, 0x0, @private1, @private2, [@hopopts={0x3a, 0x1, '\x00', [@calipso={0x7, 0x8, {0x0, 0x0, 0x0, 0x80}}]}]}}}}}}}, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd603000bb00282b00fc020000000000000000000000000000fe8000000000000000000000000000aa"], 0x0) 713.228663ms ago: executing program 6 (id=371): bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x9, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, @cgroup_sock=0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x9fc}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r1}, &(0x7f00000007c0), &(0x7f0000000640)=r0}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r1}, &(0x7f0000000240), &(0x7f0000000280)='%pS \x00'}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000001380)={r1, &(0x7f00000004c0)}, 0x20) 677.796866ms ago: executing program 2 (id=372): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x7ffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = timerfd_create(0x8, 0x0) read(r1, &(0x7f00000000c0)=""/252, 0xfc) timerfd_settime(r1, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 655.534817ms ago: executing program 6 (id=373): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, 0x0, 0x0) 577.396104ms ago: executing program 2 (id=374): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000480)=ANY=[], &(0x7f0000000440)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_read_part_table(0x60d, &(0x7f0000002200)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./file1\x00', 0x105042, 0x1db) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) writev(r0, &(0x7f0000000140)=[{0x0}], 0x1) 546.333896ms ago: executing program 5 (id=375): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1b, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r1}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d00)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @counter={{0xc}, @void}}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xd0}}, 0x0) 501.17991ms ago: executing program 5 (id=376): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000080), 0x64, 0x50a, &(0x7f0000000200)="$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") r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff02000000000000000000000000000100"], 0xfdef) 407.534347ms ago: executing program 2 (id=377): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000240), 0x1, 0x4bf, &(0x7f0000000540)="$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") setgroups(0x0, 0x0) getgroups(0x1, &(0x7f0000000080)=[0xee00]) setresgid(r0, r0, 0xffffffffffffffff) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_access\x00', &(0x7f0000000040)={{}, {}, [], {0x4, 0x1}}, 0x24, 0x0) 325.101564ms ago: executing program 2 (id=378): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f00000002c0)={[{@barrier}, {@nodioread_nolock}, {@noquota}, {@barrier}, {@auto_da_alloc}, {@nodioread_nolock}]}, 0x1, 0x599, &(0x7f0000001280)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000740)='./file1\x00', 0x183042, 0x15) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xe7c) ftruncate(r0, 0x7) pwrite64(r0, &(0x7f0000000040)="9f", 0x1, 0x1) 315.520465ms ago: executing program 4 (id=388): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1b, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r1}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d00)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @counter={{0xc}, @void}}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xd0}}, 0x0) 263.906039ms ago: executing program 5 (id=379): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x3800480, &(0x7f0000002200), 0x45, 0x786, &(0x7f00000007c0)="$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") creat(&(0x7f0000000100)='./bus\x00', 0x110) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000540)='./bus\x00', 0x40100, 0x1ad) preadv2(r0, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x2, 0x0, 0x0, 0x0) 263.658099ms ago: executing program 4 (id=380): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400000bb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b702000000000000850000008400"], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYRES8=r2, @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000800000000"], 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000010900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000025940000000c0a01030000000000000000070000080900020073797a31000000000900010073797a30000000006800038064000080080003400000000258000b802c0001800a0001006c696d69740000001c0002800c00014000000000000000030c0002400000000000000010140001"], 0x118}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x58, &(0x7f00000001c0)=0x0) io_submit(r8, 0x0, 0x0) write(r6, 0x0, 0x0) recvmmsg$unix(r6, &(0x7f00000031c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x180, 0x0) connect$unix(r7, &(0x7f0000000100)=@abs={0x0, 0x0, 0x4e22}, 0x6e) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001700)={&(0x7f0000000080)='kmem_cache_free\x00', r9}, 0x10) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000400000000000000000000850000005000000085000000d000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r10}, 0xe) r11 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000400)=[{0x6, 0x1, 0x2, 0x7fff7ffc}]}) socket$inet6_sctp(0xa, 0x1, 0x84) close_range(r11, 0xffffffffffffffff, 0x0) waitid(0x0, 0x0, 0x0, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000700)='kfree\x00', r1}, 0x18) r12 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) r14 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r14, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r13, @ANYBLOB='\b\x00\n\x00', @ANYRESOCT], 0xb4}}, 0x0) 65.614005ms ago: executing program 3 (id=381): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000007d000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r0, 0x0, 0x1}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) close(r1) 48.090476ms ago: executing program 2 (id=382): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000900)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100), 0xfffffd9d) sendfile(r0, r1, 0x0, 0x8000002b) 35.257927ms ago: executing program 3 (id=383): r0 = socket$igmp6(0xa, 0x3, 0x2) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000005c0)={@dev={0xfe, 0x80, '\x00', 0x40}, @remote, @remote, 0x3, 0x2, 0x5, 0x400, 0xb7, 0xc20022, r2}) syz_emit_ethernet(0x82, &(0x7f0000000040)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x80}, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x48, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, '\x00', 0x0, 0x0, 0x0, @private1, @private2, [@hopopts={0x3a, 0x1, '\x00', [@calipso={0x7, 0x8, {0x0, 0x0, 0x0, 0x80}}]}]}}}}}}}, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd603000bb00282b00fc020000000000000000000000000000fe8000000000000000000000000000aa"], 0x0) 1.580971ms ago: executing program 3 (id=384): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80a, &(0x7f0000000940), 0x1, 0x7ab, &(0x7f0000000980)="$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") syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x88a, &(0x7f00000001c0)={[{@usrquota}, {@usrjquota, 0x22}, {@data_ordered}, {@noload}, {@noinit_itable}, {@grpjquota, 0x22}, {@init_itable}, {@jqfmt_vfsold}, {@noblock_validity}]}, 0xfe, 0x44e, &(0x7f0000000900)="$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") syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0x61, &(0x7f00000001c0)=ANY=[], 0x1, 0x0, &(0x7f0000000000)) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) 0s ago: executing program 5 (id=385): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x7ffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = timerfd_create(0x8, 0x0) read(r1, &(0x7f00000000c0)=""/252, 0xfc) timerfd_settime(r1, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.202' (ED25519) to the list of known hosts. [ 23.226730][ T29] audit: type=1400 audit(1755984228.139:62): avc: denied { mounton } for pid=3292 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 23.227539][ T3292] cgroup: Unknown subsys name 'net' [ 23.249445][ T29] audit: type=1400 audit(1755984228.139:63): avc: denied { mount } for pid=3292 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 23.276766][ T29] audit: type=1400 audit(1755984228.169:64): avc: denied { unmount } for pid=3292 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 23.429893][ T3292] cgroup: Unknown subsys name 'cpuset' [ 23.435974][ T3292] cgroup: Unknown subsys name 'rlimit' [ 23.545417][ T29] audit: type=1400 audit(1755984228.459:65): avc: denied { setattr } for pid=3292 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 23.568746][ T29] audit: type=1400 audit(1755984228.459:66): avc: denied { create } for pid=3292 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 23.578232][ T3294] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 23.589214][ T29] audit: type=1400 audit(1755984228.459:67): avc: denied { write } for pid=3292 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 23.618245][ T29] audit: type=1400 audit(1755984228.459:68): avc: denied { read } for pid=3292 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 23.625369][ T3292] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 23.638489][ T29] audit: type=1400 audit(1755984228.469:69): avc: denied { mounton } for pid=3292 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 23.671900][ T29] audit: type=1400 audit(1755984228.469:70): avc: denied { mount } for pid=3292 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 23.695191][ T29] audit: type=1400 audit(1755984228.519:71): avc: denied { relabelto } for pid=3294 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 24.778838][ T3302] chnl_net:caif_netlink_parms(): no params data found [ 24.843121][ T3312] chnl_net:caif_netlink_parms(): no params data found [ 24.864152][ T3301] chnl_net:caif_netlink_parms(): no params data found [ 24.892471][ T3307] chnl_net:caif_netlink_parms(): no params data found [ 24.918557][ T3302] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.925641][ T3302] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.932846][ T3302] bridge_slave_0: entered allmulticast mode [ 24.939221][ T3302] bridge_slave_0: entered promiscuous mode [ 24.950144][ T3303] chnl_net:caif_netlink_parms(): no params data found [ 24.961104][ T3302] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.968139][ T3302] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.975243][ T3302] bridge_slave_1: entered allmulticast mode [ 24.981513][ T3302] bridge_slave_1: entered promiscuous mode [ 25.019387][ T3312] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.026438][ T3312] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.033627][ T3312] bridge_slave_0: entered allmulticast mode [ 25.040112][ T3312] bridge_slave_0: entered promiscuous mode [ 25.059261][ T3302] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 25.068383][ T3312] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.075586][ T3312] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.082764][ T3312] bridge_slave_1: entered allmulticast mode [ 25.089269][ T3312] bridge_slave_1: entered promiscuous mode [ 25.104504][ T3302] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 25.121654][ T3301] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.128818][ T3301] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.135932][ T3301] bridge_slave_0: entered allmulticast mode [ 25.142396][ T3301] bridge_slave_0: entered promiscuous mode [ 25.170373][ T3301] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.177553][ T3301] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.185612][ T3301] bridge_slave_1: entered allmulticast mode [ 25.192003][ T3301] bridge_slave_1: entered promiscuous mode [ 25.207769][ T3312] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 25.217737][ T3302] team0: Port device team_slave_0 added [ 25.223516][ T3303] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.230765][ T3303] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.238001][ T3303] bridge_slave_0: entered allmulticast mode [ 25.244454][ T3303] bridge_slave_0: entered promiscuous mode [ 25.254625][ T3307] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.261710][ T3307] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.268761][ T3307] bridge_slave_0: entered allmulticast mode [ 25.275203][ T3307] bridge_slave_0: entered promiscuous mode [ 25.282294][ T3312] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 25.291821][ T3302] team0: Port device team_slave_1 added [ 25.301973][ T3303] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.309009][ T3303] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.316197][ T3303] bridge_slave_1: entered allmulticast mode [ 25.323134][ T3303] bridge_slave_1: entered promiscuous mode [ 25.333588][ T3307] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.340763][ T3307] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.347852][ T3307] bridge_slave_1: entered allmulticast mode [ 25.354259][ T3307] bridge_slave_1: entered promiscuous mode [ 25.379393][ T3301] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 25.398506][ T3312] team0: Port device team_slave_0 added [ 25.404532][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 25.411509][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 25.437402][ T3302] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 25.453471][ T3301] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 25.463579][ T3307] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 25.477599][ T3312] team0: Port device team_slave_1 added [ 25.483584][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 25.490547][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 25.516515][ T3302] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 25.530529][ T3303] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 25.540410][ T3307] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 25.550253][ T3303] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 25.581784][ T3301] team0: Port device team_slave_0 added [ 25.591795][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 25.598732][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 25.624718][ T3312] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 25.635761][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 25.642729][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 25.668666][ T3312] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 25.685470][ T3301] team0: Port device team_slave_1 added [ 25.695116][ T3303] team0: Port device team_slave_0 added [ 25.701783][ T3303] team0: Port device team_slave_1 added [ 25.714768][ T3307] team0: Port device team_slave_0 added [ 25.721241][ T3307] team0: Port device team_slave_1 added [ 25.748718][ T3301] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 25.755744][ T3301] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 25.781738][ T3301] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 25.792804][ T3301] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 25.799770][ T3301] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 25.825793][ T3301] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 25.847186][ T3302] hsr_slave_0: entered promiscuous mode [ 25.853136][ T3302] hsr_slave_1: entered promiscuous mode [ 25.859322][ T3307] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 25.866292][ T3307] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 25.892219][ T3307] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 25.903689][ T3307] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 25.910659][ T3307] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 25.936571][ T3307] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 25.955360][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 25.962324][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 25.988353][ T3303] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 26.006467][ T3312] hsr_slave_0: entered promiscuous mode [ 26.012379][ T3312] hsr_slave_1: entered promiscuous mode [ 26.018187][ T3312] debugfs: 'hsr0' already exists in 'hsr' [ 26.023922][ T3312] Cannot create hsr debugfs directory [ 26.044834][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 26.051812][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.077769][ T3303] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 26.102495][ T3301] hsr_slave_0: entered promiscuous mode [ 26.108491][ T3301] hsr_slave_1: entered promiscuous mode [ 26.114407][ T3301] debugfs: 'hsr0' already exists in 'hsr' [ 26.120149][ T3301] Cannot create hsr debugfs directory [ 26.154119][ T3307] hsr_slave_0: entered promiscuous mode [ 26.160109][ T3307] hsr_slave_1: entered promiscuous mode [ 26.165981][ T3307] debugfs: 'hsr0' already exists in 'hsr' [ 26.171715][ T3307] Cannot create hsr debugfs directory [ 26.185817][ T3303] hsr_slave_0: entered promiscuous mode [ 26.191828][ T3303] hsr_slave_1: entered promiscuous mode [ 26.197592][ T3303] debugfs: 'hsr0' already exists in 'hsr' [ 26.203317][ T3303] Cannot create hsr debugfs directory [ 26.367187][ T3302] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 26.375866][ T3302] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 26.386167][ T3302] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 26.397437][ T3302] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 26.408552][ T3312] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 26.417149][ T3312] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 26.426956][ T3312] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 26.438122][ T3312] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 26.467588][ T3301] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 26.476307][ T3301] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 26.489503][ T3301] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 26.498288][ T3301] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 26.538268][ T3303] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 26.546950][ T3303] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 26.559562][ T3303] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 26.568477][ T3303] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 26.588140][ T3302] 8021q: adding VLAN 0 to HW filter on device bond0 [ 26.606508][ T3307] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 26.614834][ T3307] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 26.623974][ T3307] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 26.632493][ T3307] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 26.653992][ T3302] 8021q: adding VLAN 0 to HW filter on device team0 [ 26.669954][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.677000][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.694115][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.701238][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.718668][ T3312] 8021q: adding VLAN 0 to HW filter on device bond0 [ 26.742339][ T3301] 8021q: adding VLAN 0 to HW filter on device bond0 [ 26.771052][ T3301] 8021q: adding VLAN 0 to HW filter on device team0 [ 26.778858][ T3312] 8021q: adding VLAN 0 to HW filter on device team0 [ 26.798928][ T3307] 8021q: adding VLAN 0 to HW filter on device bond0 [ 26.811696][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.818807][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.829675][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.836762][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.846483][ T3303] 8021q: adding VLAN 0 to HW filter on device bond0 [ 26.858171][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.865294][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.893957][ T3307] 8021q: adding VLAN 0 to HW filter on device team0 [ 26.905614][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.912675][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.933206][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.940277][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.952132][ T3303] 8021q: adding VLAN 0 to HW filter on device team0 [ 26.965669][ T3312] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 26.976077][ T3312] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 26.996862][ T3302] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 27.006601][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.013711][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.022608][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.029675][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.042848][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.050006][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.080049][ T3301] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 27.160945][ T3312] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 27.218324][ T3303] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 27.234347][ T3307] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 27.242523][ T3302] veth0_vlan: entered promiscuous mode [ 27.270013][ T3302] veth1_vlan: entered promiscuous mode [ 27.305033][ T3302] veth0_macvtap: entered promiscuous mode [ 27.321000][ T3302] veth1_macvtap: entered promiscuous mode [ 27.342355][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 27.349929][ T3301] veth0_vlan: entered promiscuous mode [ 27.371524][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 27.389986][ T3301] veth1_vlan: entered promiscuous mode [ 27.402398][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.416447][ T3303] veth0_vlan: entered promiscuous mode [ 27.430962][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.440333][ T3312] veth0_vlan: entered promiscuous mode [ 27.448254][ T3312] veth1_vlan: entered promiscuous mode [ 27.454605][ T3307] veth0_vlan: entered promiscuous mode [ 27.462373][ T3303] veth1_vlan: entered promiscuous mode [ 27.468376][ T3307] veth1_vlan: entered promiscuous mode [ 27.477892][ T3301] veth0_macvtap: entered promiscuous mode [ 27.484483][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.493662][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.513605][ T3301] veth1_macvtap: entered promiscuous mode [ 27.529087][ T3312] veth0_macvtap: entered promiscuous mode [ 27.546096][ T3302] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 27.553201][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 27.568753][ T3307] veth0_macvtap: entered promiscuous mode [ 27.584221][ T3307] veth1_macvtap: entered promiscuous mode [ 27.593760][ T3470] loop0: detected capacity change from 0 to 128 [ 27.604379][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 27.613153][ T3312] veth1_macvtap: entered promiscuous mode [ 27.622627][ T3303] veth0_macvtap: entered promiscuous mode [ 27.634179][ T51] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.644744][ T51] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.656341][ T3303] veth1_macvtap: entered promiscuous mode [ 27.662576][ T3470] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 27.666051][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 27.670487][ T3470] FAT-fs (loop0): Filesystem has been set read-only [ 27.685619][ T3470] syz.0.1: attempt to access beyond end of device [ 27.685619][ T3470] loop0: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 27.689095][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 27.706674][ T3470] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 27.710215][ T3307] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 27.714599][ T3470] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 27.733647][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 27.740989][ T51] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.756173][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 27.772381][ T51] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.792943][ T3307] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 27.805046][ T51] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.828285][ T51] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.906838][ T51] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.934028][ T51] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.943900][ T51] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.953448][ T51] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.964860][ T51] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.977492][ T51] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.981988][ T3483] syz.3.4 uses obsolete (PF_INET,SOCK_PACKET) [ 28.000295][ T51] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.018449][ T51] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.028430][ T51] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.037791][ T51] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.074471][ T3490] vhci_hcd: invalid port number 85 [ 28.079652][ T3490] vhci_hcd: default hub control req: 0501 v0005 i0055 l0 [ 28.180008][ T3503] syzkaller0: refused to change device tx_queue_len [ 28.207636][ T3508] loop3: detected capacity change from 0 to 512 [ 28.221241][ T3508] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 28.235994][ T3508] ext4 filesystem being mounted at /3/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 28.239375][ T29] kauditd_printk_skb: 51 callbacks suppressed [ 28.239387][ T29] audit: type=1400 audit(1755984233.159:123): avc: denied { mount } for pid=3507 comm="syz.3.17" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 28.274066][ T29] audit: type=1400 audit(1755984233.159:124): avc: denied { create } for pid=3507 comm="syz.3.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 28.293351][ T29] audit: type=1400 audit(1755984233.159:125): avc: denied { write open } for pid=3507 comm="syz.3.17" path=2F332F6275732F233138202864656C6574656429 dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 28.318855][ T29] audit: type=1400 audit(1755984233.219:126): avc: denied { unmount } for pid=3303 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 28.339019][ T29] audit: type=1400 audit(1755984233.239:127): avc: denied { create } for pid=3512 comm="syz.4.18" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 28.359061][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 28.388785][ T29] audit: type=1400 audit(1755984233.299:128): avc: denied { create } for pid=3514 comm="syz.4.20" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 28.412741][ T29] audit: type=1400 audit(1755984233.329:129): avc: denied { write } for pid=3514 comm="syz.4.20" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 28.433780][ T29] audit: type=1400 audit(1755984233.329:130): avc: denied { ioctl } for pid=3514 comm="syz.4.20" path="socket:[3981]" dev="sockfs" ino=3981 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 28.458174][ T29] audit: type=1400 audit(1755984233.349:131): avc: denied { bind } for pid=3514 comm="syz.4.20" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 28.478417][ T3519] loop3: detected capacity change from 0 to 8192 [ 28.484583][ T29] audit: type=1400 audit(1755984233.349:132): avc: denied { write } for pid=3514 comm="syz.4.20" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 28.508037][ T3521] loop0: detected capacity change from 0 to 256 [ 28.890456][ T3560] loop3: detected capacity change from 0 to 1024 [ 28.903323][ T3560] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 28.915706][ T3560] ext4 filesystem being mounted at /8/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 28.929033][ T3560] TCP: tcp_parse_options: Illegal window scaling value 149 > 14 received [ 28.948755][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 28.967121][ T3564] loop4: detected capacity change from 0 to 256 [ 28.976166][ T3569] loop3: detected capacity change from 0 to 1024 [ 28.988729][ T3569] ======================================================= [ 28.988729][ T3569] WARNING: The mand mount option has been deprecated and [ 28.988729][ T3569] and is ignored by this kernel. Remove the mand [ 28.988729][ T3569] option from the mount to silence this warning. [ 28.988729][ T3569] ======================================================= [ 28.993632][ T3564] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 29.033713][ T3564] FAT-fs (loop4): Filesystem has been set read-only [ 29.037386][ T3569] EXT4-fs: inline encryption not supported [ 29.046437][ T3569] EXT4-fs: Ignoring removed bh option [ 29.071018][ T3569] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 29.098686][ T3569] EXT4-fs error (device loop3): mb_free_blocks:2017: group 0, inode 18: block 305:freeing already freed block (bit 19); block bitmap corrupt. [ 29.113541][ T3569] EXT4-fs (loop3): Remounting filesystem read-only [ 29.134439][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 29.156869][ T3577] loop2: detected capacity change from 0 to 128 [ 29.178222][ T3577] syz.2.46: attempt to access beyond end of device [ 29.178222][ T3577] loop2: rw=2049, sector=154, nr_sectors = 8 limit=128 [ 29.192638][ T3577] syz.2.46: attempt to access beyond end of device [ 29.192638][ T3577] loop2: rw=2049, sector=160, nr_sectors = 2 limit=128 [ 29.205952][ T3577] Buffer I/O error on dev loop2, logical block 80, lost async page write [ 29.209820][ T3579] netlink: 'syz.4.47': attribute type 1 has an invalid length. [ 29.221992][ T3579] netlink: 'syz.4.47': attribute type 6 has an invalid length. [ 29.223725][ T3577] syz.2.46: attempt to access beyond end of device [ 29.223725][ T3577] loop2: rw=2049, sector=162, nr_sectors = 8 limit=128 [ 29.229557][ T3579] netlink: 'syz.4.47': attribute type 3 has an invalid length. [ 29.229570][ T3579] netlink: 24 bytes leftover after parsing attributes in process `syz.4.47'. [ 29.251097][ T3577] syz.2.46: attempt to access beyond end of device [ 29.251097][ T3577] loop2: rw=2049, sector=168, nr_sectors = 2 limit=128 [ 29.272385][ T3577] Buffer I/O error on dev loop2, logical block 84, lost async page write [ 29.282471][ T3577] syz.2.46: attempt to access beyond end of device [ 29.282471][ T3577] loop2: rw=2049, sector=186, nr_sectors = 8 limit=128 [ 29.308874][ T3577] syz.2.46: attempt to access beyond end of device [ 29.308874][ T3577] loop2: rw=2049, sector=192, nr_sectors = 2 limit=128 [ 29.322192][ T3577] Buffer I/O error on dev loop2, logical block 96, lost async page write [ 29.332293][ T3577] syz.2.46: attempt to access beyond end of device [ 29.332293][ T3577] loop2: rw=2049, sector=194, nr_sectors = 8 limit=128 [ 29.353525][ T3577] syz.2.46: attempt to access beyond end of device [ 29.353525][ T3577] loop2: rw=2049, sector=200, nr_sectors = 2 limit=128 [ 29.366852][ T3577] Buffer I/O error on dev loop2, logical block 100, lost async page write [ 29.376346][ T3577] syz.2.46: attempt to access beyond end of device [ 29.376346][ T3577] loop2: rw=2049, sector=218, nr_sectors = 8 limit=128 [ 29.415206][ T3577] Buffer I/O error on dev loop2, logical block 112, lost async page write [ 29.430173][ T3577] Buffer I/O error on dev loop2, logical block 116, lost async page write [ 29.457020][ T3577] Buffer I/O error on dev loop2, logical block 88, lost async page write [ 29.471212][ T3606] loop0: detected capacity change from 0 to 512 [ 29.483634][ T3577] Buffer I/O error on dev loop2, logical block 92, lost async page write [ 29.492750][ T3577] Buffer I/O error on dev loop2, logical block 120, lost async page write [ 29.502789][ T3577] Buffer I/O error on dev loop2, logical block 124, lost async page write [ 29.520294][ T3606] EXT4-fs error (device loop0): ext4_iget_extra_inode:5104: inode #15: comm syz.0.52: corrupted in-inode xattr: invalid ea_ino [ 29.534142][ T3606] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.52: couldn't read orphan inode 15 (err -117) [ 29.547376][ T3606] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 29.581994][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 29.663646][ T3623] loop0: detected capacity change from 0 to 2048 [ 29.686574][ T3626] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 29.731876][ T3623] loop0: p1 < > p4 [ 29.743337][ T3623] loop0: p4 size 8388608 extends beyond EOD, truncated [ 29.772083][ T3636] loop3: detected capacity change from 0 to 2048 [ 29.833632][ T3636] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 29.916330][ T3652] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 29.929522][ T3652] vhci_hcd: default hub control req: 2314 v0008 i0002 l0 [ 29.946719][ T3651] loop4: detected capacity change from 0 to 1024 [ 30.012474][ T3651] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 30.072457][ T3651] EXT4-fs error (device loop4): ext4_xattr_set_entry:1660: inode #15: comm syz.4.71: corrupted xattr entries [ 30.086587][ T3664] loop0: detected capacity change from 0 to 512 [ 30.094553][ T3651] EXT4-fs error (device loop4): ext4_xattr_block_set:2210: inode #15: comm syz.4.71: bad block 113 [ 30.133041][ T3636] syz.3.65 (3636) used greatest stack depth: 10912 bytes left [ 30.141196][ T3664] EXT4-fs (loop0): orphan cleanup on readonly fs [ 30.157433][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 30.181469][ T3664] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.74: bg 0: block 248: padding at end of block bitmap is not set [ 30.201277][ T3664] EXT4-fs error (device loop0): ext4_acquire_dquot:6937: comm syz.0.74: Failed to acquire dquot type 1 [ 30.225783][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 30.253629][ T3670] mmap: syz.4.77 (3670) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 30.274885][ T3664] EXT4-fs (loop0): 1 truncate cleaned up [ 30.291382][ T3664] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 30.517735][ T3664] syz.0.74 (3664) used greatest stack depth: 9552 bytes left [ 30.525947][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 30.615078][ T3689] loop0: detected capacity change from 0 to 2048 [ 30.717932][ T3693] loop3: detected capacity change from 0 to 512 [ 30.743747][ T3689] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 30.766250][ T3693] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 30.791427][ T3696] loop4: detected capacity change from 0 to 1024 [ 30.822750][ T3302] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 30.839743][ T3693] EXT4-fs (loop3): orphan cleanup on readonly fs [ 30.848259][ T3696] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 30.859409][ T3302] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 30.860809][ T3696] ext4 filesystem being mounted at /30/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 30.882380][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 30.894454][ T3696] EXT4-fs error (device loop4): ext4_map_blocks:814: inode #15: block 3: comm syz.4.87: lblock 3 mapped to illegal pblock 3 (length 3) [ 30.921051][ T3693] EXT4-fs error (device loop3): ext4_acquire_dquot:6937: comm syz.3.86: Failed to acquire dquot type 1 [ 30.965755][ T3696] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 30.978079][ T3696] EXT4-fs (loop4): This should not happen!! Data will be lost [ 30.978079][ T3696] [ 30.993899][ T3693] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.86: bg 0: block 40: padding at end of block bitmap is not set [ 31.012393][ T3700] EXT4-fs error (device loop4): ext4_ext_remove_space:2955: inode #15: comm syz.4.87: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 31.040608][ T3693] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 31.055978][ T3703] netlink: 332 bytes leftover after parsing attributes in process `syz.0.89'. [ 31.065663][ T3700] EXT4-fs error (device loop4) in ext4_setattr:6071: Corrupt filesystem [ 31.080186][ T3693] EXT4-fs (loop3): 1 truncate cleaned up [ 31.096258][ T3693] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 31.108816][ T3696] EXT4-fs error (device loop4): ext4_map_blocks:814: inode #15: comm syz.4.87: lblock 0 mapped to illegal pblock 0 (length 1) [ 31.143424][ T3707] loop2: detected capacity change from 0 to 512 [ 31.145479][ T3696] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 31.150197][ T3707] EXT4-fs: Ignoring removed nobh option [ 31.162115][ T3696] EXT4-fs (loop4): This should not happen!! Data will be lost [ 31.162115][ T3696] [ 31.229824][ T3707] EXT4-fs error (device loop2): ext4_orphan_get:1392: inode #15: comm syz.2.90: iget: bad i_size value: 38620345925642 [ 31.255168][ T3707] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.90: couldn't read orphan inode 15 (err -117) [ 31.285822][ T3713] loop0: detected capacity change from 0 to 2048 [ 31.293476][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.311675][ T3707] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 31.333800][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 31.357700][ T3715] loop3: detected capacity change from 0 to 764 [ 31.398383][ T3715] rock: directory entry would overflow storage [ 31.404740][ T3715] rock: sig=0x5245, size=8, remaining=5 [ 31.420459][ T3713] loop0: unable to read partition table [ 31.426299][ T3713] loop0: partition table beyond EOD, truncated [ 31.432494][ T3713] loop_reread_partitions: partition scan of loop0 () failed (rc=-5) [ 31.473129][ T3723] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=3723 comm=syz.3.98 [ 31.668399][ T3752] loop3: detected capacity change from 0 to 512 [ 31.678629][ T3752] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 31.691725][ T3752] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 31.705366][ T3752] EXT4-fs (loop3): 1 truncate cleaned up [ 31.764017][ T3752] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 31.867424][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.971966][ T3781] netlink: 28 bytes leftover after parsing attributes in process `syz.3.122'. [ 31.981047][ T3781] netlink: 28 bytes leftover after parsing attributes in process `syz.3.122'. [ 32.028876][ T588] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm kworker/u8:5: bg 0: block 5: invalid block bitmap [ 32.053549][ T588] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 32.066128][ T588] EXT4-fs (loop2): This should not happen!! Data will be lost [ 32.066128][ T588] [ 32.075806][ T588] EXT4-fs (loop2): Total free blocks count 0 [ 32.081820][ T588] EXT4-fs (loop2): Free/Dirty block details [ 32.087709][ T588] EXT4-fs (loop2): free_blocks=0 [ 32.092668][ T588] EXT4-fs (loop2): dirty_blocks=16008 [ 32.098034][ T588] EXT4-fs (loop2): Block reservation details [ 32.104098][ T588] EXT4-fs (loop2): i_reserved_data_blocks=16008 [ 32.147676][ T588] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 2048 with error 28 [ 32.204955][ T3791] vlan0: entered allmulticast mode [ 32.210121][ T3791] veth0_vlan: entered allmulticast mode [ 32.384863][ T3796] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 32.392691][ T3796] SELinux: failed to load policy [ 32.588896][ T3806] loop2: detected capacity change from 0 to 512 [ 32.597106][ T3806] EXT4-fs: Ignoring removed oldalloc option [ 32.612352][ T3806] EXT4-fs error (device loop2): ext4_xattr_inode_iget:433: comm syz.2.134: Parent and EA inode have the same ino 15 [ 32.626925][ T3806] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 32.641077][ T3806] EXT4-fs error (device loop2): ext4_xattr_inode_iget:433: comm syz.2.134: Parent and EA inode have the same ino 15 [ 32.653934][ T3806] EXT4-fs (loop2): 1 orphan inode deleted [ 32.661366][ T3806] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 32.688606][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.762393][ T3827] netlink: 96 bytes leftover after parsing attributes in process `syz.1.144'. [ 32.851491][ T31] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 32.931687][ T31] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 33.013015][ T31] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 33.029181][ T3864] capability: warning: `syz.2.159' uses 32-bit capabilities (legacy support in use) [ 33.074776][ T3870] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 33.084666][ T31] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 33.086099][ T3870] vhci_hcd: default hub control req: 2314 v0008 i0002 l0 [ 33.115870][ T3844] chnl_net:caif_netlink_parms(): no params data found [ 33.154992][ T3844] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.162360][ T3844] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.169567][ T3844] bridge_slave_0: entered allmulticast mode [ 33.175890][ T3844] bridge_slave_0: entered promiscuous mode [ 33.184586][ T3844] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.191803][ T3844] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.199042][ T3844] bridge_slave_1: entered allmulticast mode [ 33.205581][ T3844] bridge_slave_1: entered promiscuous mode [ 33.226441][ T3844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 33.240700][ T3844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 33.257527][ C1] vcan0: j1939_tp_rxtimer: 0xffff888119d67000: rx timeout, send abort [ 33.265721][ C1] vcan0: j1939_tp_rxtimer: 0xffff888119d67400: rx timeout, send abort [ 33.274011][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888119d67000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 33.288298][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888119d67400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 33.303458][ T31] bridge_slave_1: left allmulticast mode [ 33.309114][ T31] bridge_slave_1: left promiscuous mode [ 33.314901][ T31] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.330536][ T31] bridge_slave_0: left allmulticast mode [ 33.336319][ T31] bridge_slave_0: left promiscuous mode [ 33.342307][ T31] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.345409][ T3889] loop1: detected capacity change from 0 to 128 [ 33.410226][ T29] kauditd_printk_skb: 136 callbacks suppressed [ 33.410308][ T29] audit: type=1400 audit(1755984238.329:265): avc: denied { read write } for pid=3893 comm="syz.3.170" name="virtual_nci" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 33.433682][ T3895] bio_check_eod: 20 callbacks suppressed [ 33.433696][ T3895] syz.1.168: attempt to access beyond end of device [ 33.433696][ T3895] loop1: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 33.439936][ T29] audit: type=1400 audit(1755984238.329:266): avc: denied { open } for pid=3893 comm="syz.3.170" path="/dev/virtual_nci" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 33.458994][ T3895] syz.1.168: attempt to access beyond end of device [ 33.458994][ T3895] loop1: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 33.499933][ T3895] syz.1.168: attempt to access beyond end of device [ 33.499933][ T3895] loop1: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 33.529404][ T3895] syz.1.168: attempt to access beyond end of device [ 33.529404][ T3895] loop1: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 33.554347][ T3895] syz.1.168: attempt to access beyond end of device [ 33.554347][ T3895] loop1: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 33.568759][ T3895] syz.1.168: attempt to access beyond end of device [ 33.568759][ T3895] loop1: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 33.582263][ T3895] syz.1.168: attempt to access beyond end of device [ 33.582263][ T3895] loop1: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 33.583453][ T3899] loop4: detected capacity change from 0 to 8192 [ 33.596036][ T3895] syz.1.168: attempt to access beyond end of device [ 33.596036][ T3895] loop1: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 33.617050][ T3895] syz.1.168: attempt to access beyond end of device [ 33.617050][ T3895] loop1: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 33.631083][ T3895] syz.1.168: attempt to access beyond end of device [ 33.631083][ T3895] loop1: rw=2049, sector=289, nr_sectors = 8 limit=128 [ 33.634548][ T29] audit: type=1400 audit(1755984238.539:267): avc: denied { override_creds } for pid=3901 comm="syz.3.172" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 33.664416][ T31] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 33.670955][ T3899] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 2074) [ 33.681734][ T3899] FAT-fs (loop4): Filesystem has been set read-only [ 33.691693][ T31] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 33.704745][ T31] bond0 (unregistering): Released all slaves [ 33.712076][ T29] audit: type=1326 audit(1755984238.619:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3903 comm="syz.3.173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06ea74ebe9 code=0x7ffc0000 [ 33.735395][ T29] audit: type=1326 audit(1755984238.619:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3903 comm="syz.3.173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f06ea74ebe9 code=0x7ffc0000 [ 33.758609][ T29] audit: type=1326 audit(1755984238.619:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3903 comm="syz.3.173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06ea74ebe9 code=0x7ffc0000 [ 33.781797][ T29] audit: type=1326 audit(1755984238.619:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3903 comm="syz.3.173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f06ea74ebe9 code=0x7ffc0000 [ 33.805079][ T29] audit: type=1326 audit(1755984238.619:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3903 comm="syz.3.173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06ea74ebe9 code=0x7ffc0000 [ 33.828277][ T29] audit: type=1326 audit(1755984238.619:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3903 comm="syz.3.173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f06ea74ebe9 code=0x7ffc0000 [ 33.851445][ T29] audit: type=1326 audit(1755984238.619:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3903 comm="syz.3.173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06ea74ebe9 code=0x7ffc0000 [ 33.875658][ T3844] team0: Port device team_slave_0 added [ 33.901294][ T3844] team0: Port device team_slave_1 added [ 33.907100][ T3906] netlink: 8 bytes leftover after parsing attributes in process `syz.4.174'. [ 33.915968][ T3906] netlink: 4 bytes leftover after parsing attributes in process `syz.4.174'. [ 33.976470][ T31] hsr_slave_0: left promiscuous mode [ 33.988505][ T31] hsr_slave_1: left promiscuous mode [ 34.004257][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 34.011875][ T31] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 34.024570][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 34.032098][ T31] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 34.046473][ T31] veth1_macvtap: left promiscuous mode [ 34.052080][ T31] veth0_macvtap: left promiscuous mode [ 34.057619][ T31] veth1_vlan: left promiscuous mode [ 34.062947][ T31] veth0_vlan: left promiscuous mode [ 34.142158][ T31] team0 (unregistering): Port device team_slave_1 removed [ 34.159383][ T31] team0 (unregistering): Port device team_slave_0 removed [ 34.192530][ T3844] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 34.199529][ T3844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 34.225514][ T3844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 34.241861][ T3921] vlan2: entered allmulticast mode [ 34.260143][ T3844] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 34.267102][ T3844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 34.293044][ T3844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 34.337913][ T3844] hsr_slave_0: entered promiscuous mode [ 34.348566][ T3844] hsr_slave_1: entered promiscuous mode [ 34.361939][ T3955] IPv4: Oversized IP packet from 127.202.26.0 [ 34.446813][ T3844] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 34.464949][ T3974] loop4: detected capacity change from 0 to 512 [ 34.472744][ T3844] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 34.495713][ T3974] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.509873][ T3844] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 34.523776][ T3844] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 34.527638][ T3974] ext4 filesystem being mounted at /43/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 34.583766][ T3974] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 34.604080][ T3988] loop1: detected capacity change from 0 to 1024 [ 34.610740][ T3988] EXT4-fs: Ignoring removed orlov option [ 34.611983][ T3986] netlink: 96 bytes leftover after parsing attributes in process `syz.2.207'. [ 34.616466][ T3988] EXT4-fs: Ignoring removed nomblk_io_submit option [ 34.633915][ T3844] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.642667][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.646295][ T3844] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.663902][ T588] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.670993][ T588] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.680295][ T3988] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.698363][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.705433][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.706081][ T3992] loop2: detected capacity change from 0 to 1024 [ 34.723608][ T3994] loop4: detected capacity change from 0 to 128 [ 34.725669][ T3844] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 34.730323][ T3994] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 34.740217][ T3844] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 34.762665][ T3992] EXT4-fs: Ignoring removed bh option [ 34.763391][ T3994] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 34.768259][ T3992] EXT4-fs: inline encryption not supported [ 34.798278][ T3992] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 34.809709][ T3992] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 34.818341][ T3992] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 2: comm syz.2.210: lblock 2 mapped to illegal pblock 2 (length 1) [ 34.832246][ T3988] loop1: detected capacity change from 1024 to 2 [ 34.836324][ T3844] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 34.849282][ T3992] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 48: comm syz.2.210: lblock 0 mapped to illegal pblock 48 (length 1) [ 34.854916][ T3997] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000. [ 34.882215][ T3992] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.210: Failed to acquire dquot type 0 [ 34.895203][ T3992] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 34.905436][ T3992] EXT4-fs error (device loop2): ext4_evict_inode:254: inode #11: comm syz.2.210: mark_inode_dirty error [ 34.917218][ T3992] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 34.927671][ T3992] EXT4-fs (loop2): 1 orphan inode deleted [ 34.934300][ T3992] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.946857][ T51] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:3: lblock 1 mapped to illegal pblock 1 (length 1) [ 34.975302][ T51] EXT4-fs error (device loop2): ext4_release_dquot:6973: comm kworker/u8:3: Failed to release dquot type 0 [ 34.995376][ T3301] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6334: Out of memory [ 35.013060][ T3992] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 35.016126][ T3844] veth0_vlan: entered promiscuous mode [ 35.027176][ T3301] buffer_io_error: 4 callbacks suppressed [ 35.027187][ T3301] Buffer I/O error on dev loop1, logical block 1, lost sync page write [ 35.044905][ T3844] veth1_vlan: entered promiscuous mode [ 35.050746][ T3301] EXT4-fs (loop1): I/O error while writing superblock [ 35.057546][ T3301] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #2: comm syz-executor: mark_inode_dirty error [ 35.076822][ T3844] veth0_macvtap: entered promiscuous mode [ 35.086719][ T3844] veth1_macvtap: entered promiscuous mode [ 35.092689][ T3301] Buffer I/O error on dev loop1, logical block 1, lost sync page write [ 35.102905][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.106402][ T3844] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.121446][ T3301] EXT4-fs (loop1): I/O error while writing superblock [ 35.128817][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.139432][ T3844] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.149986][ T3301] Buffer I/O error on dev loop1, logical block 1, lost sync page write [ 35.158270][ T3301] EXT4-fs (loop1): I/O error while writing superblock [ 35.170748][ T51] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.183663][ T3989] Buffer I/O error on dev loop1, logical block 64, lost sync page write [ 35.194189][ T51] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.208133][ T51] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.217675][ T51] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.316984][ T4046] loop4: detected capacity change from 0 to 512 [ 35.325568][ T4045] loop2: detected capacity change from 0 to 512 [ 35.341446][ T4046] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.356169][ T4046] ext4 filesystem being mounted at /50/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 35.358350][ T4051] loop3: detected capacity change from 0 to 512 [ 35.374029][ T4051] EXT4-fs: Ignoring removed orlov option [ 35.380309][ T4051] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 35.380694][ T4045] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.402259][ T4045] ext4 filesystem being mounted at /43/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 35.428551][ T31] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.462173][ T4051] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.489622][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.494466][ T4051] ext4 filesystem being mounted at /49/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 35.519365][ T31] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.569079][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.590040][ T31] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.603996][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.672017][ T31] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.745659][ T4096] netlink: 8 bytes leftover after parsing attributes in process `syz.2.245'. [ 35.807176][ T4058] chnl_net:caif_netlink_parms(): no params data found [ 35.827129][ T31] bridge_slave_1: left allmulticast mode [ 35.832851][ T31] bridge_slave_1: left promiscuous mode [ 35.838470][ T31] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.847034][ T31] bridge_slave_0: left allmulticast mode [ 35.852809][ T31] bridge_slave_0: left promiscuous mode [ 35.858418][ T31] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.867826][ T4101] loop4: detected capacity change from 0 to 8192 [ 35.899694][ T4101] FAT-fs (loop4): bogus sectors per cluster 0 [ 35.905789][ T4101] FAT-fs (loop4): Can't find a valid FAT filesystem [ 35.930791][ T4112] netlink: 12 bytes leftover after parsing attributes in process `syz.2.252'. [ 35.963202][ T4110] loop5: detected capacity change from 0 to 2048 [ 35.984109][ T31] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 35.994769][ T4110] loop5: p1 < > p4 [ 35.999073][ T4110] loop5: p4 size 8388608 extends beyond EOD, truncated [ 36.007181][ T31] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 36.027619][ T31] bond0 (unregistering): Released all slaves [ 36.117849][ T31] hsr_slave_0: left promiscuous mode [ 36.136550][ T31] hsr_slave_1: left promiscuous mode [ 36.155834][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 36.163360][ T31] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 36.174079][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 36.181521][ T31] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 36.195038][ T4152] loop5: detected capacity change from 0 to 1024 [ 36.201637][ T31] veth1_macvtap: left promiscuous mode [ 36.207153][ T31] veth0_macvtap: left promiscuous mode [ 36.224853][ T31] veth1_vlan: left promiscuous mode [ 36.236535][ T31] veth0_vlan: left promiscuous mode [ 36.246326][ T4152] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.281162][ T4152] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 36.312081][ T4152] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 36.324347][ T4152] EXT4-fs (loop5): This should not happen!! Data will be lost [ 36.324347][ T4152] [ 36.334013][ T4152] EXT4-fs (loop5): Total free blocks count 0 [ 36.340088][ T4152] EXT4-fs (loop5): Free/Dirty block details [ 36.345967][ T4152] EXT4-fs (loop5): free_blocks=20480 [ 36.351310][ T4152] EXT4-fs (loop5): dirty_blocks=80 [ 36.356415][ T4152] EXT4-fs (loop5): Block reservation details [ 36.356567][ T4148] loop4: detected capacity change from 0 to 32768 [ 36.362431][ T4152] EXT4-fs (loop5): i_reserved_data_blocks=5 [ 36.366045][ T4160] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 4 with error 28 [ 36.372417][ T31] team0 (unregistering): Port device team_slave_1 removed [ 36.396569][ T31] team0 (unregistering): Port device team_slave_0 removed [ 36.432362][ T4148] loop4: p1 p3 < > [ 36.437145][ T4058] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.444248][ T4058] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.453017][ T4058] bridge_slave_0: entered allmulticast mode [ 36.460849][ T4058] bridge_slave_0: entered promiscuous mode [ 36.490962][ T4058] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.498024][ T4058] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.505214][ T4058] bridge_slave_1: entered allmulticast mode [ 36.514589][ T4058] bridge_slave_1: entered promiscuous mode [ 36.522740][ T4168] process 'syz.5.276' launched '/dev/fd/6' with NULL argv: empty string added [ 36.548566][ T4170] loop2: detected capacity change from 0 to 2048 [ 36.565632][ T4058] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.580398][ T4058] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.611844][ T4170] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.625527][ T4058] team0: Port device team_slave_0 added [ 36.642026][ T4058] team0: Port device team_slave_1 added [ 36.648409][ T4170] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 36.659672][ T126] nci: nci_rx_work: unknown MT 0x1 [ 36.667740][ T4058] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.674732][ T4058] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.702987][ T4058] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.715234][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.726301][ T4058] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.733352][ T4058] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.759402][ T4058] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.798169][ T4058] hsr_slave_0: entered promiscuous mode [ 36.805324][ T4058] hsr_slave_1: entered promiscuous mode [ 36.813547][ T4058] debugfs: 'hsr0' already exists in 'hsr' [ 36.819383][ T4058] Cannot create hsr debugfs directory [ 36.861729][ T4205] loop2: detected capacity change from 0 to 1024 [ 36.868778][ T4205] EXT4-fs (loop2): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 36.891777][ T4205] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.912657][ T4205] EXT4-fs error (device loop2): ext4_xattr_inode_iget:437: inode #11: comm syz.2.289: missing EA_INODE flag [ 36.927696][ T4205] EXT4-fs (loop2): Remounting filesystem read-only [ 36.938291][ T4211] loop5: detected capacity change from 0 to 1024 [ 36.945277][ T4211] EXT4-fs: Ignoring removed orlov option [ 36.945545][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.950993][ T4211] EXT4-fs: Ignoring removed nomblk_io_submit option [ 36.982000][ T4211] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.987365][ T4217] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 37.003024][ T4211] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.078690][ T4227] loop9: detected capacity change from 0 to 7 [ 37.085253][ T4227] Buffer I/O error on dev loop9, logical block 0, async page read [ 37.093175][ T4227] Buffer I/O error on dev loop9, logical block 0, async page read [ 37.101035][ T4227] loop9: unable to read partition table [ 37.106757][ T4227] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 37.106757][ T4227] ) failed (rc=-5) [ 37.430212][ T4058] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 37.430564][ T4234] netlink: 'syz.5.300': attribute type 1 has an invalid length. [ 37.460694][ T4058] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 37.474891][ T4058] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 37.485781][ T4058] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 37.546611][ T4256] loop3: detected capacity change from 0 to 512 [ 37.548092][ T4058] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.560964][ T4256] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 37.574556][ T4058] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.589542][ T2244] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.594827][ T4256] EXT4-fs (loop3): 1 orphan inode deleted [ 37.596640][ T2244] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.602358][ T4256] EXT4-fs (loop3): 1 truncate cleaned up [ 37.616461][ T4256] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.635608][ T2244] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.642766][ T2244] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.663057][ T4058] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 37.684004][ T4261] loop4: detected capacity change from 0 to 128 [ 37.728173][ T4058] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.736305][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.798466][ T4246] loop5: detected capacity change from 0 to 32768 [ 37.850387][ T4246] loop5: p1 p2 p3 < p5 p6 > [ 37.857896][ T4246] loop5: p2 size 16775168 extends beyond EOD, truncated [ 37.866407][ T4246] loop5: p5 start 4294970168 is beyond EOD, truncated [ 37.943209][ T4058] veth0_vlan: entered promiscuous mode [ 37.983311][ T4292] loop2: detected capacity change from 0 to 512 [ 37.983834][ T4058] veth1_vlan: entered promiscuous mode [ 38.022959][ T4292] EXT4-fs (loop2): 1 orphan inode deleted [ 38.032493][ T4292] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.046688][ T31] EXT4-fs error (device loop2): ext4_release_dquot:6973: comm kworker/u8:1: Failed to release dquot type 1 [ 38.082004][ T4058] veth0_macvtap: entered promiscuous mode [ 38.094650][ T4292] ext4 filesystem being mounted at /75/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 38.102449][ T4058] veth1_macvtap: entered promiscuous mode [ 38.161941][ T4058] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.192466][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.207621][ T4058] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.225801][ T588] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.240300][ T588] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.254305][ T31] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.289810][ T31] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.420980][ T4332] netlink: 'syz.6.330': attribute type 1 has an invalid length. [ 38.542750][ T29] kauditd_printk_skb: 158 callbacks suppressed [ 38.542765][ T29] audit: type=1326 audit(1755984243.459:429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4335 comm="syz.6.332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c1829ebe9 code=0x7ffc0000 [ 38.678335][ T29] audit: type=1326 audit(1755984243.489:430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4335 comm="syz.6.332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9c1829ebe9 code=0x7ffc0000 [ 38.701946][ T29] audit: type=1326 audit(1755984243.489:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4335 comm="syz.6.332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c1829ebe9 code=0x7ffc0000 [ 38.725233][ T29] audit: type=1326 audit(1755984243.489:432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4335 comm="syz.6.332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9c1829ebe9 code=0x7ffc0000 [ 38.748456][ T29] audit: type=1326 audit(1755984243.489:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4335 comm="syz.6.332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c1829ebe9 code=0x7ffc0000 [ 38.771867][ T29] audit: type=1326 audit(1755984243.489:434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4335 comm="syz.6.332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f9c1829ebe9 code=0x7ffc0000 [ 38.795243][ T29] audit: type=1326 audit(1755984243.489:435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4335 comm="syz.6.332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c1829ebe9 code=0x7ffc0000 [ 38.818627][ T29] audit: type=1326 audit(1755984243.489:436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4335 comm="syz.6.332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=276 compat=0 ip=0x7f9c1829ebe9 code=0x7ffc0000 [ 38.842148][ T29] audit: type=1326 audit(1755984243.489:437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4335 comm="syz.6.332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c1829ebe9 code=0x7ffc0000 [ 38.865413][ T29] audit: type=1326 audit(1755984243.489:438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4335 comm="syz.6.332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9c1829ebe9 code=0x7ffc0000 [ 39.007651][ T4358] netlink: 16 bytes leftover after parsing attributes in process `syz.3.341'. [ 39.016559][ T4358] netlink: 16 bytes leftover after parsing attributes in process `syz.3.341'. [ 39.037209][ T4358] netlink: 16 bytes leftover after parsing attributes in process `syz.3.341'. [ 39.087637][ T4370] loop5: detected capacity change from 0 to 1024 [ 39.094851][ T4370] EXT4-fs (loop5): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 39.118332][ T4358] vlan2: entered allmulticast mode [ 39.128124][ T4370] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.146527][ T4370] EXT4-fs error (device loop5): ext4_xattr_inode_iget:437: inode #11: comm syz.5.347: missing EA_INODE flag [ 39.159988][ T4370] EXT4-fs (loop5): Remounting filesystem read-only [ 39.193445][ T4380] loop2: detected capacity change from 0 to 2048 [ 39.201740][ T3844] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.216205][ T4382] loop4: detected capacity change from 0 to 2048 [ 39.224516][ T4380] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.256253][ T4386] loop5: detected capacity change from 0 to 2048 [ 39.269439][ T4390] loop3: detected capacity change from 0 to 1024 [ 39.276421][ T3307] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 39.277319][ T4382] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.291926][ T3307] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 39.315863][ T4390] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.351581][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.364033][ T4390] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 39.364668][ T4382] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 39.381588][ T4390] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 39.398735][ T4390] EXT4-fs (loop3): This should not happen!! Data will be lost [ 39.398735][ T4390] [ 39.408512][ T4390] EXT4-fs (loop3): Total free blocks count 0 [ 39.414625][ T4390] EXT4-fs (loop3): Free/Dirty block details [ 39.420552][ T4390] EXT4-fs (loop3): free_blocks=20480 [ 39.425835][ T4390] EXT4-fs (loop3): dirty_blocks=80 [ 39.431056][ T4390] EXT4-fs (loop3): Block reservation details [ 39.431656][ T4386] loop5: unable to read partition table [ 39.437076][ T4390] EXT4-fs (loop3): i_reserved_data_blocks=5 [ 39.454381][ T4399] loop2: detected capacity change from 0 to 128 [ 39.461985][ T4398] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 4 with error 28 [ 39.475064][ T4386] loop5: partition table beyond EOD, truncated [ 39.477229][ T4399] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 39.481486][ T4386] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) [ 39.497570][ T4399] FAT-fs (loop2): Filesystem has been set read-only [ 39.506089][ T4399] bio_check_eod: 106 callbacks suppressed [ 39.506105][ T4399] syz.2.353: attempt to access beyond end of device [ 39.506105][ T4399] loop2: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 39.530281][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.541994][ T4399] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 39.549979][ T4399] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 39.637278][ T4406] loop3: detected capacity change from 0 to 2048 [ 39.654684][ T4409] loop5: detected capacity change from 0 to 1024 [ 39.682606][ T4409] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 39.699843][ T4406] loop3: p1 < > p4 [ 39.706025][ T4406] loop3: p4 size 8388608 extends beyond EOD, truncated [ 39.711199][ T4409] ext4 filesystem being mounted at /39/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 39.725478][ T4416] loop4: detected capacity change from 0 to 512 [ 39.749675][ T4416] EXT4-fs (loop4): orphan cleanup on readonly fs [ 39.762311][ T4416] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.362: bg 0: block 248: padding at end of block bitmap is not set [ 39.805093][ T4419] loop3: detected capacity change from 0 to 1024 [ 39.830863][ T4416] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.362: Failed to acquire dquot type 1 [ 39.844436][ T4416] EXT4-fs (loop4): 1 truncate cleaned up [ 39.851518][ T4409] EXT4-fs error (device loop5): ext4_map_blocks:814: inode #15: block 3: comm syz.5.359: lblock 3 mapped to illegal pblock 3 (length 3) [ 39.866265][ T4416] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 39.880757][ T4409] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 39.893129][ T4409] EXT4-fs (loop5): This should not happen!! Data will be lost [ 39.893129][ T4409] [ 39.916173][ T4419] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.942110][ T4422] EXT4-fs error (device loop5): ext4_ext_remove_space:2955: inode #15: comm syz.5.359: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 39.978410][ T4419] EXT4-fs error (device loop3): ext4_xattr_set_entry:1660: inode #15: comm syz.3.363: corrupted xattr entries [ 39.996852][ T4419] EXT4-fs error (device loop3): ext4_xattr_block_set:2210: inode #15: comm syz.3.363: bad block 113 [ 40.027617][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.042391][ T4424] netlink: 16 bytes leftover after parsing attributes in process `syz.2.364'. [ 40.051364][ T4424] netlink: 16 bytes leftover after parsing attributes in process `syz.2.364'. [ 40.067193][ T4422] EXT4-fs error (device loop5) in ext4_setattr:6071: Corrupt filesystem [ 40.071320][ T4424] netlink: 16 bytes leftover after parsing attributes in process `syz.2.364'. [ 40.079121][ T4409] EXT4-fs error (device loop5): ext4_map_blocks:814: inode #15: comm syz.5.359: lblock 0 mapped to illegal pblock 0 (length 1) [ 40.109657][ T4409] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 40.121970][ T4409] EXT4-fs (loop5): This should not happen!! Data will be lost [ 40.121970][ T4409] [ 40.140714][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.145837][ T4427] loop4: detected capacity change from 0 to 2048 [ 40.170508][ T4424] vlan2: entered allmulticast mode [ 40.184030][ T4427] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.213447][ T3844] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 40.253431][ T3312] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 40.301989][ T3312] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 40.351755][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.383923][ T4436] loop5: detected capacity change from 0 to 2048 [ 40.420615][ T4436] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.442091][ T4441] loop4: detected capacity change from 0 to 1024 [ 40.470756][ T4436] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 40.489589][ T3844] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.491554][ T4441] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.518945][ T4441] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 40.535776][ T4441] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 40.548029][ T4441] EXT4-fs (loop4): This should not happen!! Data will be lost [ 40.548029][ T4441] [ 40.557814][ T4441] EXT4-fs (loop4): Total free blocks count 0 [ 40.559216][ T4457] loop2: detected capacity change from 0 to 2048 [ 40.564024][ T4441] EXT4-fs (loop4): Free/Dirty block details [ 40.571744][ T4458] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 4 with error 28 [ 40.576115][ T4441] EXT4-fs (loop4): free_blocks=20480 [ 40.576130][ T4441] EXT4-fs (loop4): dirty_blocks=80 [ 40.576210][ T4441] EXT4-fs (loop4): Block reservation details [ 40.588458][ T4458] EXT4-fs (loop4): This should not happen!! Data will be lost [ 40.588458][ T4458] [ 40.640735][ T4463] loop5: detected capacity change from 0 to 512 [ 40.648409][ T4463] EXT4-fs (loop5): orphan cleanup on readonly fs [ 40.655308][ T4463] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.376: bg 0: block 248: padding at end of block bitmap is not set [ 40.655801][ T4457] loop2: p1 < > p4 [ 40.670823][ T4463] EXT4-fs error (device loop5): ext4_acquire_dquot:6937: comm syz.5.376: Failed to acquire dquot type 1 [ 40.674059][ T4457] loop2: p4 size 8388608 extends beyond EOD, truncated [ 40.685382][ T4463] EXT4-fs (loop5): 1 truncate cleaned up [ 40.699136][ T4463] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 40.740821][ T4466] loop2: detected capacity change from 0 to 512 [ 40.761047][ T4466] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.773666][ T4466] ext4 filesystem being mounted at /90/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 40.787492][ T4466] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 40.810311][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.831039][ T4472] loop2: detected capacity change from 0 to 1024 [ 40.843159][ T4472] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 40.856125][ T4472] ext4 filesystem being mounted at /91/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 40.858583][ T4463] syz.5.376 (4463) used greatest stack depth: 9280 bytes left [ 40.873080][ T4472] EXT4-fs error (device loop2): ext4_map_blocks:814: inode #15: block 3: comm syz.2.378: lblock 3 mapped to illegal pblock 3 (length 3) [ 40.888223][ T3844] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.895038][ T4476] netlink: 16 bytes leftover after parsing attributes in process `syz.4.380'. [ 40.906165][ T4476] netlink: 16 bytes leftover after parsing attributes in process `syz.4.380'. [ 40.906280][ T4472] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 40.915247][ T4476] netlink: 16 bytes leftover after parsing attributes in process `syz.4.380'. [ 40.927384][ T4472] EXT4-fs (loop2): This should not happen!! Data will be lost [ 40.927384][ T4472] [ 40.950004][ T4480] EXT4-fs error (device loop2): ext4_ext_remove_space:2955: inode #15: comm syz.2.378: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 40.956236][ T4479] loop5: detected capacity change from 0 to 2048 [ 40.974123][ T4480] EXT4-fs error (device loop2) in ext4_setattr:6071: Corrupt filesystem [ 40.996249][ T4472] EXT4-fs error (device loop2): ext4_map_blocks:814: inode #15: comm syz.2.378: lblock 0 mapped to illegal pblock 0 (length 1) [ 41.000848][ T4479] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.011430][ T4472] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 41.033849][ T4472] EXT4-fs (loop2): This should not happen!! Data will be lost [ 41.033849][ T4472] [ 41.048165][ T4476] vlan2: entered allmulticast mode [ 41.088276][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 41.106127][ T3844] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 41.131446][ T3844] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 41.147825][ T3844] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.157873][ T3844] ================================================================== [ 41.165963][ T3844] BUG: KCSAN: data-race in __lru_add_drain_all / folio_add_lru [ 41.173516][ T3844] [ 41.175848][ T3844] read-write to 0xffff888237c25ea8 of 1 bytes by task 4490 on cpu 0: [ 41.183910][ T3844] folio_add_lru+0xa5/0x1f0 [ 41.188415][ T3844] shmem_get_folio_gfp+0x7ab/0xd60 [ 41.193536][ T3844] shmem_write_begin+0xa8/0x190 [ 41.198380][ T3844] generic_perform_write+0x181/0x490 [ 41.203657][ T3844] shmem_file_write_iter+0xc5/0xf0 [ 41.208772][ T3844] vfs_write+0x52a/0x960 [ 41.213014][ T3844] ksys_write+0xda/0x1a0 [ 41.217250][ T3844] __x64_sys_write+0x40/0x50 [ 41.221943][ T3844] x64_sys_call+0x27fe/0x2ff0 [ 41.226620][ T3844] do_syscall_64+0xd2/0x200 [ 41.231132][ T3844] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 41.237021][ T3844] [ 41.239338][ T3844] read to 0xffff888237c25ea8 of 1 bytes by task 3844 on cpu 1: [ 41.246874][ T3844] __lru_add_drain_all+0x12b/0x3f0 [ 41.251988][ T3844] lru_add_drain_all+0x10/0x20 [ 41.256753][ T3844] invalidate_bdev+0x47/0x70 [ 41.261341][ T3844] ext4_put_super+0x624/0x7d0 [ 41.266116][ T3844] generic_shutdown_super+0xe3/0x210 [ 41.271423][ T3844] kill_block_super+0x2a/0x70 [ 41.276099][ T3844] ext4_kill_sb+0x42/0x80 [ 41.280436][ T3844] deactivate_locked_super+0x72/0x1c0 [ 41.285933][ T3844] deactivate_super+0x97/0xa0 [ 41.290617][ T3844] cleanup_mnt+0x269/0x2e0 [ 41.295037][ T3844] __cleanup_mnt+0x19/0x20 [ 41.299459][ T3844] task_work_run+0x131/0x1a0 [ 41.304049][ T3844] exit_to_user_mode_loop+0xe4/0x100 [ 41.309332][ T3844] do_syscall_64+0x1d6/0x200 [ 41.313932][ T3844] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 41.319825][ T3844] [ 41.322137][ T3844] value changed: 0x0d -> 0x0e [ 41.326804][ T3844] [ 41.329126][ T3844] Reported by Kernel Concurrency Sanitizer on: [ 41.335281][ T3844] CPU: 1 UID: 0 PID: 3844 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(voluntary) [ 41.345170][ T3844] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 41.355227][ T3844] ================================================================== [ 41.365168][ T4488] loop3: detected capacity change from 0 to 2048 [ 41.394059][ T4488] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.422642][ T4488] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 41.442917][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.