last executing test programs: 19.164502868s ago: executing program 0 (id=2604): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[], 0x48) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x6) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(0x0, r1) acct(0x0) socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, 0x0, 0x0) timer_create(0x3, 0x0, &(0x7f0000000780)=0x0) timer_settime(0x0, 0x413df92af0658268, &(0x7f0000000340)={{}, {0x0, 0x9}}, 0x0) timer_settime(r3, 0x0, &(0x7f0000000040), &(0x7f0000000140)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) syz_emit_ethernet(0xb6, &(0x7f0000001140)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xfd}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xa8, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x23, 0x4, 0x0, 0x0, 0x0, 0x68, 0x2, 0x0, 0x89, 0x0, @dev={0xac, 0x14, 0x14, 0x1}, @local, {[@noop, @generic={0x0, 0xe, "8a45d45768dc37efa0fc588a"}, @timestamp_prespec={0x44, 0xc, 0x0, 0x3, 0x0, [{@loopback}]}, @ssrr={0x89, 0xf, 0x0, [@empty, @broadcast, @multicast2]}, @timestamp_addr={0x44, 0x44, 0x0, 0x1, 0x0, [{}, {@empty}, {}, {@local}, {@loopback}, {@private}, {@multicast2, 0xfffffffd}, {@broadcast}]}, @lsrr={0x83, 0x7, 0xc1, [@dev={0xac, 0x14, 0x14, 0x28}]}]}}}}}}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000006c0)=ANY=[@ANYBLOB="380000000314010000000000000008000900020073797a310000000008004100736977001400330073797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x24048010}, 0x0) 18.916968382s ago: executing program 0 (id=2609): sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)=ANY=[@ANYBLOB="d0000000", @ANYRES16, @ANYBLOB="0100000000000000000001000000080001000000000004"], 0xd0}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000001a000100000000000000000081000000000500000000000008000f"], 0x24}}, 0x0) socket$inet6(0xa, 0x1, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r1 = open(&(0x7f0000000000)='./file0\x00', 0x200000, 0x118) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000040), &(0x7f0000000080)=0x4) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000800)='./file0\x00', 0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="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", @ANYRESHEX=0x0, @ANYRESOCT], 0x2, 0x696, &(0x7f0000000140)="$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") r2 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x2) write$binfmt_script(r2, &(0x7f0000000300)={'#! ', './file0'}, 0xb) execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) 18.829794553s ago: executing program 0 (id=2613): pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="8800000000010104000000000000000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1414bb0c0002800500010000000000080007400000000024000e80"], 0x88}}, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/vmcoreinfo', 0x22043, 0x5a) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, 0x0, 0x26, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x3, 0x0, 0x40, 0x0, 0x0, 0x200, 0x14000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0xe}, 0x0, 0x0, 0xfffffffe, 0x4a5d1d01243874a5, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x9) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r5, 0x58, &(0x7f00000002c0)}, 0x10) splice(r0, 0x0, r4, 0x0, 0xbfd1, 0x6) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) syz_emit_ethernet(0x59, &(0x7f0000000280)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}, @val={@void, {0x8100, 0x7}}, {@llc_tr={0x11, {@snap={0x0, 0x1, "8fd4", "f03e57", 0x1c, "f5984fc89d6e90a263e1493fb01db4a25dac7b2354aef1d0d2f0f05f19e5b890b6c256637a4f7d7fc2f04b7d5e9609a1e1abbb5ed28b32a587aeff578c9d"}}}}}, &(0x7f0000000080)={0x1, 0x4, [0xb95, 0x17f, 0x36b, 0x527]}) 18.732338805s ago: executing program 0 (id=2614): perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000003200)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000080)=ANY=[@ANYRESHEX=r0, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x59dc6d71776a1654, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="0203000305000000000066dd15fe4db949fc9454e4a69d0738d200000000000003001968c4d9fdec"], 0x28}, 0x1, 0x7}, 0x0) io_uring_enter(0xffffffffffffffff, 0x7a98, 0x0, 0x0, 0x0, 0x0) r3 = socket(0x10, 0x3, 0x6) socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000040)) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f00000006c0), 0x1, 0x512, &(0x7f0000000c40)="$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") bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r5) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r6, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) syz_emit_ethernet(0x4a, &(0x7f0000000640)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6000000000140600fe8000000000000000000000000000bbfe8000000000000000000000000000aa00004e2248ee98ebe15978ba33a0fb13912a75b6e5c7aeeeeaf5094cb0af571a12a2bd38b9abb63f10102fabb9e13609f538c8a4c0972058c389dc99fd24f11e78b47bdb4471b906c809bdfaac2d8283df9bc76f211085b692b8c3363e5fb055a23e4c1a55d39dc2f035da3a17ccc85a330000000000000007f0ced8ffef782a18da", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5002001190780000"], 0x0) set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x8) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000002, 0x200000005c832, 0xffffffffffffffff, 0x0) r7 = io_uring_setup(0x3eae, &(0x7f0000000080)={0x0, 0x6d33, 0x1000, 0x0, 0x4000000}) io_uring_register$IORING_REGISTER_BUFFERS(r7, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) shutdown(r4, 0x0) 18.441556649s ago: executing program 0 (id=2619): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f00000012c0)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@minixdf}]}, 0x1, 0x503, &(0x7f0000000fc0)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000500)='cpu.stat\x00', 0x275a, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x174) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000140)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x48041, 0x0) pwrite64(r1, &(0x7f0000000140)="f6", 0xffffff07, 0x8000c61) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) 17.341512665s ago: executing program 0 (id=2633): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f00000012c0)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@minixdf}]}, 0x1, 0x503, &(0x7f0000000fc0)="$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") r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x174) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000140)) setxattr$security_evm(&(0x7f0000000a80)='./file1\x00', &(0x7f0000000ac0), 0x0, 0x0, 0x1) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) 17.321013385s ago: executing program 32 (id=2633): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f00000012c0)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@minixdf}]}, 0x1, 0x503, &(0x7f0000000fc0)="$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") r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x174) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000140)) setxattr$security_evm(&(0x7f0000000a80)='./file1\x00', &(0x7f0000000ac0), 0x0, 0x0, 0x1) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) 8.025438042s ago: executing program 2 (id=2780): timer_create(0xfffffffc, 0x0, &(0x7f0000000040)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x6, 0xfe}]}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f00000002c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001540)={&(0x7f0000000240)=ANY=[@ANYBLOB="240100001600010428bd700000000000fe8000000000000000000000000000bbfc01000000000000000000000000000100040000000000000000a00000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ff02000000000000000000000000000100000000330000000a0101010000000000000000000000000000000000004e340100000000000000000000000000000004000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000a0000002bbd70000000000000000200000000000000000008000020ffffff"], 0x124}}, 0x0) 7.975376943s ago: executing program 2 (id=2781): sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)=ANY=[@ANYBLOB="d000", @ANYRES16, @ANYBLOB="0100000000000000000001000000080001000000000004000480"], 0xd0}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000001a000100000000000000000081000000000500000000000008000f"], 0x24}}, 0x0) socket$inet6(0xa, 0x1, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r1 = open(&(0x7f0000000000)='./file0\x00', 0x200000, 0x118) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000040), &(0x7f0000000080)=0x4) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000800)='./file0\x00', 0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="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", @ANYRESHEX=0x0, @ANYRESOCT], 0x2, 0x696, &(0x7f0000000140)="$eJzs3V9rG9n9x/HPyLIte5ew/H4lhJA/J0kXHJoqkrxxMCl01dHInlbSiBm52FBY0o29hMjZNkmh8c3WN/0D2yfQu970og+i0Os+i96UFpb2rtCbKXNmJEvRv3ijOLvN+2V2NTrznTnfmaPoy9iaIwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADlurVQqO2r4rZ1dM5lbC4PmlPXp3hZ1M124ObNfyUn+U6GgC2nThW+crD6f/O+6LqXPLqmQPBR09M759+79fz7X235KQl+GTrvDp8+PHt3vdvefvETsgk69+zdJud7SSjYmY4K2vJYfBX6zuuUZPwrM5sZG6fZ2PTJ1v+FFe1HHaxo39HKdIDRr7k1T3txcN15xL9hpbdWqDa/XePfblVJpw3x/OR1oScXI3fYbDb+1ZWOS1UnMXfP5j9IAr9o05uBhd3991pEkQeWXCarMCqqUKpVyuVIpb9zZvHO3VMqPNJQSTqlPIxFzf9Hia2Y+b9zAHOSS+v9XR2qooJZ2tCsz9sdVTaECNSesz/Tq//u3van9Dtb/XpW/IH03W31Rtv5fSZ9dmVT/J+RiZOwG49Y4E9pP97NoMzJ6quc60iPdV1dd7evJHPZtZK7OZS9n8LMlTy35ihTIV1NV22KyFqNNbWhDJX2kbdUVyaguXw15irSnSB159hXlKpSnqjoKFMpoTa5uyqisTW1qXUaeitpToB21tKWaqvp3HMcHemjP+/qUHNULKk8IWB4MqkzZ06T6/+PP0tdpVv8H6N3zEvX/rZG+DpbTh79MiwG+AuLs+n9QbvZmV19fRgAAAAAAYN4c+9t3x/7t/rKkWHW/4ZXedFoAAAAAAGCOHMXLuiQnuf6XdFkO1/8AAAAAAPyvcew9do6kVfuhfufkTqiX+SXAwhmkCAAAAAAAXpG98//KkhTbSSuuyjnV9T8AAAAAAPga+PXAHPv53hy7ce/P+jlJUXvZ+dM/lxUuOsft3W86h9VkTfUwixn5BECnftE5l03Uax+WJNlnrnfJyXrLJsHszzv4xcGsuf6d8IUElhYGdzAhASfpeSOfPdPnupZuci2bZ/7BUU52TdrLat1veEU3aNwrq1o9l+t4u52fPX74cynsH+fBw+5+8eNPuw9sLsdJ0/FhstPPhtLJjT8ZJ7k8s/Mt2Hsuxh3xiuq9Ln/Taq46tt9S7/gXVD3MDXY0bQBO+vylrqdjdn01jV096s+4nxx/ITn+ctEO2dDRh4vOSRblF4983EBMyKJgs7iRxtxYu6HK39Ll/ijknMK3FqRKcXQMhrKoDGYx+1w4/xo5FwNZ2IfemoFzsZ5k8edkRxOyWD9dFiMjAgBvyoEuy74LXZadxLxfhQpZ3e2Vh96b2peqO7Or+4fD1f3Z7+LYbrAg5bO/TUztpaDkHX3NsXVoKT2k/MUx7+ilrK4UNOEdvfQK1S3p648n34GUpT2SxX/iOL5Xtv3+9oWq+vuh7kb6jRqVheQU3n52+BM7AX7ik/1P9h9XKusbpQ9KpTsVLdrDyB4WRO0BAIyY/R07MyOcD3Qtjbj24B/vp0tDFe//+h8pKOpjfaquHuhW7ysEro7f6+rAxxBupVetGrhqNeffu2e/l244tqxbE6/qbC0diK30YxfV22S4Up/Err/mUQAA4Gxdn1GHx9f/wlD9v6W1NGLt4tjr7uFanl0d9y/pJ8WWZyf/4bzPBgAAbwcv/MJZ7fzKCUO//VF5c7Nc7Wx7JgzcH5jQr215xm91vNDdrra2PNMOg07gBg3TDrXs17zIRDvtdhB2TD0ITTuI/F37ze8m++r3yGtWWx3fjdoNrxp5xg1anarbMTU/ck1753sNP9r2Qrtx1PZcv+671Y4ftEwU7ISuVzQm8ryBQL/mtTp+3U8WW6Yd+s1quGd+GDR2mp6peZEb+u1OkO6w15ffqgdh0+62mI/HfV4AAIC3ztPnR4/ud7v7T15cWEkuzdOWY02IGV1Y0tPnyVV50pLPVjFHEAAAXzEnBfwUGxVeY0IAAAAAAAAAAAAAAAAAAAAAAGDE7Fv6TrmwOO5mQanf8tNzWYt+oZNbDEf242jeiZ1mIXfarVTQUnZGpwSv9Fs0Jvj4zA7w7+9K79gWpS35+fe1MmVwX8fCdw7SMzoxJlk5dtVyfyzy8//nkCw8/sOEVXEcx9M3X9ZIqi/ZaV7Sk6VXGIIzfysCcMb+GwAA//9iozFN") r2 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x2) write$binfmt_script(r2, &(0x7f0000000300)={'#! ', './file0'}, 0xb) execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) 7.716407646s ago: executing program 2 (id=2785): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="02000000040000000800000001000000"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) r3 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xfd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x0, 0x0, 0xffffffbe, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f00000001c0)='cpu>20\t&&') bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) getuid() ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x18) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000740)=ANY=[@ANYRES32=r5, @ANYBLOB="f9b01115e67a65217a0794a6c153e54fc8cb36f0def409c9eab06f880c51d70c60ae17e98c499581aef627593bc4b4b0bf5b3b6f2c78de09d43abd82d0b5a85e7f31912c1316a7b537b9a7cc60898ee32f23e8fc37e8959b6a94d3ded53f553fbd05e6ac10d11ab53df1c871e6537d8df75b733a4ed16ac3413c680053a7fa45fcbd698f201c29c8530b1fcc3e0dc8242ec8b5e09e5f626dfeb3e790ecbf66c72771554a78f59f46a2455c6d371a3bcc5da12b85ba83bf6b21d4f93695c98da93ce26115e609c126380db58e34154e442abca71fd9f558a9809d042872", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r7}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000940)=ANY=[@ANYBLOB="1800001f1a0068099b3c0000000000001860ce0000000000824d086bb22773321812000047d88038d0ab2bc78bbacd656afd2d8577391bb6698ac582e4a1a87d48c0b9e7273a63977d2850014b5be908240e01c1e7f331a3f216805a872793930fdd2fb3718d0de0ad27f4894122f7ca2bbc03e863a103f01ba1c29e9cb4a0f4e220ee9f6705b3e3c14bc542517ff4e18d3766cd4bf4dc5ca97112a2b164c115cc092a29b01abc793e6b78cba9f8c5000000", @ANYRES64=r0, @ANYBLOB="0000000000000000b703000000000000850000000c0000009400000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000001800000000001f00000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xa5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r8}, 0x10) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, @perf_config_ext={0x0, 0x1}, 0x18208, 0x2, 0x0, 0x0, 0x1000, 0x0, 0x3}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r9 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_misc(r9, &(0x7f0000000240), 0xfffffecc) write$binfmt_format(r6, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000ec0)=ANY=[@ANYBLOB="1e0000000000000005000000ef00000004000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000008c"], 0x50) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x4, 0x7fe4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 2.68722986s ago: executing program 2 (id=2800): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000050000000000000000000024000a20000000000a1f000000000000000000010000000900010073797a300000000058000000030a0104000000000000000001000000090003803d2175fbe782c2002c00048008000240172af2e40800014000000003080002401c791e7108000240423930ce08000140000000030900010073797a300000000088000000060a010400000000000000000100000008000b400000000014000480100001800b0001006e756d67656e00000900010073797a30000000004c00048048000180080001"], 0x122}}, 0x4008090) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000580)='sched_switch\x00', r1}, 0x10) 2.282980236s ago: executing program 2 (id=2871): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x400000, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) r2 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000000)="89", 0x1) 2.168132338s ago: executing program 2 (id=2873): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x0) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000200)=0x7ffffffc) close(r1) r2 = syz_open_dev$usbfs(&(0x7f0000000340), 0x206, 0x8401) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x1}, 0x8002, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r5, {}, {}, {0x8, 0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x8881}, 0x0) ioctl$USBDEVFS_BULK(r2, 0x5523, 0x0) 1.546943317s ago: executing program 3 (id=2883): timer_create(0xfffffffc, 0x0, &(0x7f0000000040)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x6, 0xfe}]}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f00000002c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001540)={&(0x7f0000000240)=ANY=[@ANYBLOB="240100001600010428bd700000000000fe8000000000000000000000000000bbfc01000000000000000000000000000100040000000000000000a00000000000", @ANYRES32=0x0, @ANYBLOB="ff02000000000000000000000000000100000000330000000a0101010000000000000000000000000000000000004e340100000000000000000000000000000004000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000a0000002bbd70000000000000000200000000000000000008000020ffffffdf2c0027cc"], 0x124}}, 0x0) 1.528017177s ago: executing program 3 (id=2884): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x400000, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) r2 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000000)="89", 0x1) 1.480438648s ago: executing program 3 (id=2885): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f00000012c0)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001500)={&(0x7f0000000000)='kfree\x00', r0, 0x0, 0x1}, 0x18) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@minixdf}]}, 0x1, 0x503, &(0x7f0000000fc0)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x174) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000140)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x48041, 0x0) pwrite64(r2, &(0x7f0000000140)="f6", 0xffffff07, 0x8000c61) ioctl$EXT4_IOC_MIGRATE(r1, 0x6609) 1.011141835s ago: executing program 4 (id=2898): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r1}, 0x10) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r2, 0x402, 0x8000001f) close_range(r2, 0xffffffffffffffff, 0x0) 1.002272185s ago: executing program 4 (id=2900): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004885}, 0x4054) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x2, 0x80805, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r4, 0x400454c9, 0x1) ioctl$TUNGETVNETHDRSZ(r4, 0x800454d7, &(0x7f0000001280)) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r3, 0x84, 0x19, 0x0, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="8b332cbd96562361000005"], 0x1c}}, 0x0) getrlimit(0x5, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r7}, 0x10) write$selinux_user(0xffffffffffffffff, 0x0, 0x0) r8 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0xb0, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r9, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x80, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x8001]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x24, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}, {0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x9}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x2c2a1f44}]}]}]}}]}, 0xb0}}, 0x0) 973.274546ms ago: executing program 5 (id=2901): bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket$inet6(0x10, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="09000000070000000080000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r1, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000600)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000d0039000000000000b4a518110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r3}, 0x10) sendto$inet6(r0, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) 940.273446ms ago: executing program 1 (id=2902): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) 939.521786ms ago: executing program 3 (id=2903): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet(0x2, 0x5, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={0x0, r1}, 0x18) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x18) r3 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r3, 0x0, 0x4, &(0x7f0000000000)="89", 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000040)="2e00000011008188040f80ec59acbc0413a1f8480b0000005e140602000000000e0027001000000002800000121f", 0x2e}], 0x1}, 0x0) 873.757987ms ago: executing program 1 (id=2904): r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000340)={'wg0\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="78030000", @ANYRES16=r2, @ANYBLOB="37040000000000000000010000005c03088030000080060005000000000024000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b39223400008004000980060005000080000024000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b3922f4020080cc02098034000080060001000200000008000200ac1414aa0500030003000000060001000200000008000200640101010500030000000000a0000080060001000a00000014000200000000000000000000000000000000000500030003000000060001000a00000014000200000000000000000000000000000000010500030001000000060001000200000008000200ac1414bb0500030002000000060001000200000008000200e00000010500030000000000060001000a00000014000200fe80000000000000000000000000003305000300020000001c000080060001000200000008000200ac1414bb050003000200000028000080060001000a00000014000200fc000000000000000000000000000001050003000000000034000080060001000200000008000200ac1414bb0500030003000000060001000200000008000204e0000002050003000000000088000080060001000a00000014000200ff0100000000000000000000000000010500030003000000060001000a00000014000200fe80000000000000000000000000002e0500030003000000060001000a00000014000200fe8000000000000000000000000000aa0500030001000000060001000200000008000200e00000020500030001000000f4000080060001000a00000014000200fe80000000000000000000000000002f0500030003000000060001000a00000014000200fe8000000000000000000000000000bb0500030000000000060001000200000008000200e00000010500030001000000060001000a00000014000200200100000000000000000000000000010500030001000000060001000200000008000200ac1414300500030000000000060001000200000008000200ac1e00010500030002000000060001000200000008000200000000000500030003000000060001000a00000014000200fc010000000000000000000000000000050003000200000024000100000000000000000000000000000000000000000000000000000000000000000008000100", @ANYRES32=r4], 0x378}}, 0x0) writev(r0, 0x0, 0x0) 873.452737ms ago: executing program 5 (id=2905): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001680)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x81, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x3, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) (fail_nth: 6) socket$inet6_sctp(0xa, 0x1, 0x84) 873.282237ms ago: executing program 1 (id=2906): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000012c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x20000009, 0x0, &(0x7f0000000240)={0x0, 0x0, 0xfffc, 0x360}, 0x8, 0x7, 0x80, 0x0, 0x1, 0x101, 0x0}) ioctl$USBDEVFS_REAPURBNDELAY(r1, 0x4008550d, 0x0) 626.78281ms ago: executing program 5 (id=2907): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x122}}, 0x4008090) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000580)='sched_switch\x00', r1}, 0x10) 611.71364ms ago: executing program 4 (id=2908): openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x200000}, 0x1c) (async) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="6800000010000100"/20, @ANYRES32, @ANYBLOB="0000000000000000480012800e0001006970366772657461700000003400028008000100", @ANYRES32, @ANYBLOB="14000600fe800000000000000000000000000015140007"], 0x68}}, 0x0) (async) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0) (async) sendto$inet6(r0, &(0x7f00000001c0)='O', 0x1, 0x80, &(0x7f0000000280)={0xa, 0x0, 0x0, @private2}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close(r2) (async) r3 = socket(0x40000000015, 0x5, 0x0) (async) r4 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xc002) r5 = memfd_create(0x0, 0x0) pwritev(r5, &(0x7f00000000c0)=[{&(0x7f0000000680)='P', 0x1}], 0x1, 0x800004, 0x0) (async) sendfile(r4, r4, 0x0, 0x24002deb) ioctl$LOOP_CLR_FD(r4, 0x4c01) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000500000002"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0xc, &(0x7f0000000180)=ANY=[@ANYRES8=r3, @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x18) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) (async) msync(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1) (async) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x6, 0x9, 0x82, 0x9}]}) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB="2f9e3f891402f03e1f1a2285a3b244a8b28bf41c171608ae04d9750c54d63b3028a19871019f3cad38400f81e3e5e9a819bd6836c1196e389741bc89cb769f073509761b149b34ffa19a6b2431c3ed1331ed8db3306095b9605d19266da666947cbfdd9752cf455438e315b8d9019212e1544ef0a7ca00"/131, @ANYRESHEX=r8, @ANYBLOB=',\x00']) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000002000000000000000000000d0205000000000000010000050000000000839a9d"], 0x0, 0x3e, 0x0, 0xa, 0xfffffffd, 0x0, @void, @value}, 0x28) (async) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r9}, 0x18) r10 = socket$nl_generic(0x10, 0x3, 0x10) (async) r11 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(r10, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x1c, r11, 0x1, 0x0, 0x0, {{}, {0x0, 0x6}}}, 0x1c}}, 0x0) (async) shutdown(r0, 0x1) 604.007171ms ago: executing program 5 (id=2909): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0, 0x0, 0x2}, 0x18) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001540)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001640)={r0, 0xe0, &(0x7f0000001540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000340)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000380), &(0x7f0000001400)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x30, &(0x7f0000001440)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000001480), &(0x7f00000014c0), 0x8, 0x9e, 0x8, 0x8, &(0x7f0000001500)}}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001680)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x81, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x3, 0x0, @void, @value, @void, @value}, 0x50) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x50, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) 568.426421ms ago: executing program 4 (id=2910): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r1}, 0x10) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r2, 0x402, 0x8000001f) close_range(r2, 0xffffffffffffffff, 0x0) 567.914151ms ago: executing program 5 (id=2911): getresuid(&(0x7f0000000040), &(0x7f0000000100), &(0x7f0000000180)) (fail_nth: 2) 228.303646ms ago: executing program 1 (id=2912): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r1, 0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, 0x0, 0x20044890) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000f80)={0x0, 0x0, 0x0}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) lsm_get_self_attr(0x66, 0x0, &(0x7f00000010c0), 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='rss_stat\x00', r6}, 0x10) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r7, 0x0) ftruncate(r7, 0xc17a) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@ipv6_newrule={0x50, 0x20, 0x1, 0x70bd30, 0x25dfdbff, {0xa, 0x14, 0x10, 0x74, 0x9, 0x0, 0x0, 0x7, 0x10013}, [@FRA_SRC={0x14, 0x2, @loopback}, @FRA_DST={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x1f}}, @FIB_RULE_POLICY=@FRA_UID_RANGE={0xc, 0x14, {0x0, 0xffffffffffffffff}}]}, 0x50}}, 0x0) recvmsg(r8, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x60ae0}], 0x318, 0x0, 0xdb0, 0xf5ffffff}, 0x3f01) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="01000000010000000500080001"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r10}, &(0x7f00000002c0), &(0x7f0000000300)}, 0x20) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) 212.832526ms ago: executing program 5 (id=2913): bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002a20702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47a, @void, @value}, 0x94) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002a20702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47a, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) (async) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000003c0), 0x3) getsockopt$bt_hci(r2, 0x11a, 0x3, 0x0, &(0x7f0000000140)) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="e7336e2ec308ed264265db269697626eca12d44ad5aafb22534c3cf53eac643f126ac6314f6aba2b8fa4870b7817bf8600f60ccfa16109235172af0390be4f99da7ce088d15b42bb29fffd1bd502a9ac881658fe9acc1a85f65642652ad9f8cfd35270fa922e1abc310d4cfa0e90ea0c3b700dc5539058842fd76e8c651534fa3c3bfbea5b87b5896f8ac783a5d828360f5c146eb80e24e885b754cc85a6fd2f2a8f4018999296fc0f27bd2a4f1a2dfe4e60cc7207a2266443b32fe8edde", @ANYRES64=r0, @ANYRESHEX=r1, @ANYBLOB="714f17032fd4e716a62e873889186b1fad257410cb5698fce9a4a70316b06b5388bfa767dd8adfb47d3cc6495890a5c48b72c14163c4ce2d18fdfd6842ae1c73addf9bf6ab1832538d3601fcfc2d80d1bc76e8fa6a9ebe61982e1f03475a62ce18b6b31ba4038e0493bdb7f38a4929bf724baffce1573f1be5b4d204d98b05d3a302686a2c3b411d8aae6226f1f30598b55e66dfe374798b223ba21ca7c7d3"], 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x10000000000000) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x10000000000000) 212.437826ms ago: executing program 4 (id=2914): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f00000012c0)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001500)={&(0x7f0000000000)='kfree\x00', r0, 0x0, 0x1}, 0x18) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@minixdf}]}, 0x1, 0x503, &(0x7f0000000fc0)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x174) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000140)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x48041, 0x0) pwrite64(r2, &(0x7f0000000140)="f6", 0xffffff07, 0x8000c61) ioctl$EXT4_IOC_MIGRATE(r1, 0x6609) 86.246989ms ago: executing program 1 (id=2915): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) 82.018479ms ago: executing program 3 (id=2916): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='track_foreign_dirty\x00', r1}, 0x18) r2 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/rt_acct\x00') r3 = socket(0x18, 0x4, 0x0) connect$pppoe(r3, &(0x7f0000000100)={0x18, 0x0, {0x2, @broadcast, 'tunl0\x00'}}, 0x1e) sendfile(r3, r2, 0x0, 0x8) ioctl$EVIOCGREP(r2, 0x80084503, &(0x7f0000000080)=""/94) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) io_getevents(0x0, 0x4, 0x0, 0x0, 0x0) io_destroy(0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r5}, 0x10) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x0, 0x0, 0xff, 0x3, 0x600}, 0x21) getresuid(&(0x7f0000000040), &(0x7f0000000100), &(0x7f0000000180)) 1.87669ms ago: executing program 3 (id=2917): syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000200)='./file0\x00', 0x800, &(0x7f0000000240)=ANY=[@ANYRES8=0x0, @ANYRES16, @ANYRES16, @ANYRES16], 0x1, 0x378, &(0x7f00000007c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x103042, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xe7c) fsync(r0) 1.32235ms ago: executing program 1 (id=2918): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004885}, 0x4054) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x2, 0x80805, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r4, 0x400454c9, 0x1) ioctl$TUNGETVNETHDRSZ(r4, 0x800454d7, &(0x7f0000001280)) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r3, 0x84, 0x19, 0x0, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="8b332cbd96562361000005"], 0x1c}}, 0x0) getrlimit(0x5, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r7}, 0x10) write$selinux_user(0xffffffffffffffff, 0x0, 0x0) socket$inet(0x10, 0x3, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0xb0, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, 0x0, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x80, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x8001]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x24, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}, {0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x9}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x2c2a1f44}]}]}]}}]}, 0xb0}}, 0x0) 0s ago: executing program 4 (id=2919): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[], 0x122}}, 0x4008090) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000580)='sched_switch\x00', r1}, 0x10) kernel console output (not intermixed with test programs): [T10559] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #19: comm syz.3.2481: corrupted inode contents [ 187.660878][T10566] netlink: 'syz.4.2482': attribute type 1 has an invalid length. [ 187.673717][T10559] EXT4-fs error (device loop3): ext4_dirty_inode:6459: inode #19: comm syz.3.2481: mark_inode_dirty error [ 187.696196][T10559] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #19: comm syz.3.2481: corrupted inode contents [ 187.766216][T10559] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2991: inode #19: comm syz.3.2481: mark_inode_dirty error [ 187.781130][T10559] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2994: inode #19: comm syz.3.2481: mark inode dirty (error -117) [ 187.807578][T10559] EXT4-fs warning (device loop3): ext4_evict_inode:274: xattr delete (err -117) [ 187.827506][T10574] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2487'. [ 187.852987][T10574] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2487'. [ 187.881266][T10574] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2487'. [ 187.916037][T10579] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 187.925230][T10574] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2487'. [ 188.022789][T10572] loop4: detected capacity change from 0 to 1024 [ 188.046737][T10572] EXT4-fs: Ignoring removed bh option [ 188.055829][T10574] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2487'. [ 188.067646][T10572] EXT4-fs: inline encryption not supported [ 188.078075][T10572] EXT4-fs: Ignoring removed i_version option [ 188.078971][T10592] loop1: detected capacity change from 0 to 512 [ 188.095322][T10574] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2487'. [ 188.107081][T10572] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 188.132739][T10592] ext4 filesystem being mounted at /377/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 188.258349][T10572] EXT4-fs error (device loop4): ext4_map_blocks:816: inode #3: block 1: comm syz.4.2486: lblock 1 mapped to illegal pblock 1 (length 1) [ 188.298512][T10572] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.2486: Failed to acquire dquot type 0 [ 188.332370][T10572] EXT4-fs error (device loop4): ext4_free_blocks:6587: comm syz.4.2486: Freeing blocks not in datazone - block = 0, count = 4096 [ 188.388422][T10572] EXT4-fs error (device loop4): ext4_read_inode_bitmap:139: comm syz.4.2486: Invalid inode bitmap blk 0 in block_group 0 [ 188.408167][ T4374] EXT4-fs error (device loop4): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:35: lblock 1 mapped to illegal pblock 1 (length 1) [ 188.411936][T10572] EXT4-fs error (device loop4) in ext4_free_inode:361: Corrupt filesystem [ 188.449539][T10572] EXT4-fs (loop4): 1 orphan inode deleted [ 188.460066][ T4374] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:35: Failed to release dquot type 0 [ 188.752416][T10651] loop2: detected capacity change from 0 to 164 [ 188.770494][T10653] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10653 comm=syz.4.2486 [ 188.772094][T10624] loop1: detected capacity change from 0 to 1024 [ 188.804785][T10624] EXT4-fs: Ignoring removed bh option [ 188.811109][T10651] syz.2.2498: attempt to access beyond end of device [ 188.811109][T10651] loop2: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 188.823262][T10624] EXT4-fs: inline encryption not supported [ 188.829367][T10651] syz.2.2498: attempt to access beyond end of device [ 188.829367][T10651] loop2: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 188.839659][T10624] EXT4-fs: Ignoring removed i_version option [ 188.992252][T10624] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 189.038347][T10687] loop4: detected capacity change from 0 to 512 [ 189.063309][T10624] EXT4-fs error (device loop1): ext4_map_blocks:816: inode #3: block 1: comm syz.1.2494: lblock 1 mapped to illegal pblock 1 (length 1) [ 189.091027][T10687] ext4 filesystem being mounted at /482/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 189.091919][T10624] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.2494: Failed to acquire dquot type 0 [ 189.121255][T10695] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 189.136921][T10624] EXT4-fs error (device loop1): ext4_free_blocks:6587: comm syz.1.2494: Freeing blocks not in datazone - block = 0, count = 4096 [ 189.154361][T10687] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #19: comm syz.4.2500: corrupted inode contents [ 189.167472][T10624] EXT4-fs error (device loop1): ext4_read_inode_bitmap:139: comm syz.1.2494: Invalid inode bitmap blk 0 in block_group 0 [ 189.195364][ T4380] EXT4-fs error (device loop1): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:41: lblock 1 mapped to illegal pblock 1 (length 1) [ 189.212908][T10687] EXT4-fs error (device loop4): ext4_dirty_inode:6459: inode #19: comm syz.4.2500: mark_inode_dirty error [ 189.213115][ T4380] EXT4-fs error (device loop1): ext4_release_dquot:6969: comm kworker/u8:41: Failed to release dquot type 0 [ 189.241300][T10687] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #19: comm syz.4.2500: corrupted inode contents [ 189.257236][T10624] EXT4-fs error (device loop1) in ext4_free_inode:361: Corrupt filesystem [ 189.268547][T10687] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2991: inode #19: comm syz.4.2500: mark_inode_dirty error [ 189.288701][T10701] loop2: detected capacity change from 0 to 512 [ 189.315024][T10624] EXT4-fs (loop1): 1 orphan inode deleted [ 189.323202][T10687] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2994: inode #19: comm syz.4.2500: mark inode dirty (error -117) [ 189.345193][T10702] SELinux: ebitmap: truncated map [ 189.350387][T10701] ext4 filesystem being mounted at /545/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 189.353170][T10702] SELinux: failed to load policy [ 189.388167][T10687] EXT4-fs warning (device loop4): ext4_evict_inode:274: xattr delete (err -117) [ 189.398301][T10706] netlink: 196 bytes leftover after parsing attributes in process `syz.0.2505'. [ 189.511332][T10713] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2507'. [ 189.528813][T10711] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 189.556348][T10713] wireguard4: entered promiscuous mode [ 189.562096][T10713] wireguard4: entered allmulticast mode [ 189.568635][T10624] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10624 comm=syz.1.2494 [ 189.643334][T10718] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 189.787376][T10721] SELinux: ebitmap: truncated map [ 189.855075][T10721] SELinux: failed to load policy [ 189.920606][ T29] kauditd_printk_skb: 59 callbacks suppressed [ 189.920666][ T29] audit: type=1400 audit(1748620716.840:2693): avc: denied { append } for pid=10730 comm="syz.0.2514" name="vsock" dev="devtmpfs" ino=257 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 189.955972][ T29] audit: type=1400 audit(1748620716.850:2694): avc: denied { accept } for pid=10732 comm="syz.2.2516" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 189.983829][T10736] SELinux: ebitmap: truncated map [ 189.989886][T10736] SELinux: failed to load policy [ 190.019344][T10739] loop0: detected capacity change from 0 to 512 [ 190.032429][ T29] audit: type=1326 audit(1748620716.960:2695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10727 comm="syz.4.2513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3e67be969 code=0x7ffc0000 [ 190.060606][ T29] audit: type=1326 audit(1748620716.960:2696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10727 comm="syz.4.2513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3e67be969 code=0x7ffc0000 [ 190.091542][ T29] audit: type=1326 audit(1748620716.960:2697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10727 comm="syz.4.2513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd3e67be969 code=0x7ffc0000 [ 190.118818][ T29] audit: type=1326 audit(1748620716.960:2698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10727 comm="syz.4.2513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3e67be969 code=0x7ffc0000 [ 190.148811][ T29] audit: type=1326 audit(1748620716.960:2699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10727 comm="syz.4.2513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3e67be969 code=0x7ffc0000 [ 190.181349][ T29] audit: type=1326 audit(1748620717.020:2700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10727 comm="syz.4.2513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd3e67be969 code=0x7ffc0000 [ 190.211127][ T29] audit: type=1326 audit(1748620717.020:2701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10727 comm="syz.4.2513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3e67be969 code=0x7ffc0000 [ 190.215318][T10747] vhci_hcd: invalid port number 96 [ 190.239359][ T29] audit: type=1326 audit(1748620717.020:2702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10727 comm="syz.4.2513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3e67be969 code=0x7ffc0000 [ 190.245651][T10747] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 190.254185][T10741] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10741 comm=syz.2.2518 [ 190.305733][T10749] loop4: detected capacity change from 0 to 164 [ 190.305899][T10739] ext4 filesystem being mounted at /455/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 190.325581][T10749] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 190.369506][T10739] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #19: comm syz.0.2517: corrupted inode contents [ 190.386785][T10739] EXT4-fs error (device loop0): ext4_dirty_inode:6459: inode #19: comm syz.0.2517: mark_inode_dirty error [ 190.424703][T10739] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #19: comm syz.0.2517: corrupted inode contents [ 190.474465][T10760] loop2: detected capacity change from 0 to 1024 [ 190.484505][T10739] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2991: inode #19: comm syz.0.2517: mark_inode_dirty error [ 190.504826][T10760] EXT4-fs: Ignoring removed nobh option [ 190.510899][T10760] EXT4-fs: Ignoring removed nobh option [ 190.524804][T10739] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2994: inode #19: comm syz.0.2517: mark inode dirty (error -117) [ 190.539270][T10760] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 190.564608][T10760] EXT4-fs error (device loop2): ext4_get_journal_inode:5796: comm syz.2.2524: inode #4294967295: comm syz.2.2524: iget: illegal inode # [ 190.580160][T10739] EXT4-fs warning (device loop0): ext4_evict_inode:274: xattr delete (err -117) [ 190.599338][T10758] loop1: detected capacity change from 0 to 1024 [ 190.606652][T10760] EXT4-fs (loop2): no journal found [ 190.613105][T10760] EXT4-fs (loop2): can't get journal size [ 190.623248][T10758] EXT4-fs: Ignoring removed bh option [ 190.630997][T10758] EXT4-fs: inline encryption not supported [ 190.639770][T10758] EXT4-fs: Ignoring removed i_version option [ 190.653551][T10758] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 190.686966][T10760] EXT4-fs (loop2): failed to initialize system zone (-22) [ 190.694579][T10760] EXT4-fs (loop2): mount failed [ 190.732997][ T3326] EXT4-fs unmount: 55 callbacks suppressed [ 190.733024][ T3326] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.765947][T10758] EXT4-fs error (device loop1): ext4_map_blocks:816: inode #3: block 1: comm syz.1.2523: lblock 1 mapped to illegal pblock 1 (length 1) [ 190.801367][T10768] loop0: detected capacity change from 0 to 512 [ 190.821000][T10758] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.2523: Failed to acquire dquot type 0 [ 190.840540][T10758] EXT4-fs error (device loop1): ext4_free_blocks:6587: comm syz.1.2523: Freeing blocks not in datazone - block = 0, count = 4096 [ 190.842922][T10768] EXT4-fs (loop0): 1 truncate cleaned up [ 190.879311][T10770] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 190.881576][T10768] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 190.924913][T10758] EXT4-fs error (device loop1): ext4_read_inode_bitmap:139: comm syz.1.2523: Invalid inode bitmap blk 0 in block_group 0 [ 190.980818][ T4352] EXT4-fs error (device loop1): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:13: lblock 1 mapped to illegal pblock 1 (length 1) [ 190.996212][T10758] EXT4-fs error (device loop1) in ext4_free_inode:361: Corrupt filesystem [ 191.019195][ T4352] EXT4-fs error (device loop1): ext4_release_dquot:6969: comm kworker/u8:13: Failed to release dquot type 0 [ 191.033065][T10758] EXT4-fs (loop1): 1 orphan inode deleted [ 191.120202][ T3326] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.154479][T10758] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 191.175044][T10779] vhci_hcd: invalid port number 96 [ 191.175062][T10779] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 191.313910][T10784] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 191.326267][T10758] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.341933][T10761] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10761 comm=syz.1.2523 [ 191.481850][T10795] SELinux: failed to load policy [ 191.516812][T10800] loop2: detected capacity change from 0 to 512 [ 191.529823][T10793] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10793 comm=syz.0.2534 [ 191.559032][T10800] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 191.575245][T10802] loop1: detected capacity change from 0 to 512 [ 191.583135][T10800] ext4 filesystem being mounted at /556/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 191.598592][T10802] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 191.619645][T10802] ext4 filesystem being mounted at /385/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 191.674151][T10800] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #19: comm syz.2.2536: corrupted inode contents [ 191.687540][T10800] EXT4-fs error (device loop2): ext4_dirty_inode:6459: inode #19: comm syz.2.2536: mark_inode_dirty error [ 191.716915][T10800] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #19: comm syz.2.2536: corrupted inode contents [ 191.718120][T10802] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #18: comm syz.1.2537: corrupted inode contents [ 191.746313][T10800] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2991: inode #19: comm syz.2.2536: mark_inode_dirty error [ 191.760802][T10800] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2994: inode #19: comm syz.2.2536: mark inode dirty (error -117) [ 191.777976][T10802] EXT4-fs error (device loop1): ext4_dirty_inode:6459: inode #18: comm syz.1.2537: mark_inode_dirty error [ 191.803087][T10800] EXT4-fs warning (device loop2): ext4_evict_inode:274: xattr delete (err -117) [ 191.804251][T10802] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #18: comm syz.1.2537: corrupted inode contents [ 191.838100][T10813] loop4: detected capacity change from 0 to 1024 [ 191.865643][T10813] EXT4-fs: Ignoring removed nobh option [ 191.873031][T10813] EXT4-fs: Ignoring removed nobh option [ 191.874876][T10802] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2991: inode #18: comm syz.1.2537: mark_inode_dirty error [ 191.886012][T10813] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 191.908032][ T3328] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.919605][T10813] EXT4-fs error (device loop4): ext4_get_journal_inode:5796: comm syz.4.2540: inode #4294967295: comm syz.4.2540: iget: illegal inode # [ 191.935145][T10813] EXT4-fs (loop4): no journal found [ 191.936861][T10815] vhci_hcd: invalid port number 96 [ 191.940897][T10813] EXT4-fs (loop4): can't get journal size [ 191.946730][T10815] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 191.961077][T10813] EXT4-fs (loop4): failed to initialize system zone (-22) [ 191.969207][T10802] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2994: inode #18: comm syz.1.2537: mark inode dirty (error -117) [ 191.991380][T10813] EXT4-fs (loop4): mount failed [ 192.001781][T10802] EXT4-fs warning (device loop1): ext4_evict_inode:274: xattr delete (err -117) [ 192.105472][T10828] sctp: [Deprecated]: syz.2.2544 (pid 10828) Use of int in maxseg socket option. [ 192.105472][T10828] Use struct sctp_assoc_value instead [ 192.159020][T10830] FAULT_INJECTION: forcing a failure. [ 192.159020][T10830] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 192.173946][T10830] CPU: 1 UID: 0 PID: 10830 Comm: syz.4.2545 Not tainted 6.15.0-syzkaller-08486-gf66bc387efbe #0 PREEMPT(voluntary) [ 192.174112][T10830] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 192.174127][T10830] Call Trace: [ 192.174209][T10830] [ 192.174219][T10830] __dump_stack+0x1d/0x30 [ 192.174243][T10830] dump_stack_lvl+0xe8/0x140 [ 192.174266][T10830] dump_stack+0x15/0x1b [ 192.174287][T10830] should_fail_ex+0x265/0x280 [ 192.174426][T10830] should_fail+0xb/0x20 [ 192.174462][T10830] should_fail_usercopy+0x1a/0x20 [ 192.174485][T10830] strncpy_from_user+0x25/0x230 [ 192.174585][T10830] ? kmem_cache_alloc_noprof+0x186/0x310 [ 192.174619][T10830] ? getname_flags+0x80/0x3b0 [ 192.174651][T10830] getname_flags+0xae/0x3b0 [ 192.174680][T10830] vfs_fstatat+0x43/0x170 [ 192.174704][T10830] __se_sys_newfstatat+0x55/0x260 [ 192.174873][T10830] ? __fget_files+0x184/0x1c0 [ 192.174897][T10830] ? fput+0x8f/0xc0 [ 192.174928][T10830] ? ksys_write+0x192/0x1a0 [ 192.175015][T10830] __x64_sys_newfstatat+0x55/0x70 [ 192.175045][T10830] x64_sys_call+0x2c22/0x2fb0 [ 192.175142][T10830] do_syscall_64+0xd2/0x200 [ 192.175176][T10830] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 192.175248][T10830] ? clear_bhb_loop+0x40/0x90 [ 192.175272][T10830] ? clear_bhb_loop+0x40/0x90 [ 192.175293][T10830] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.175313][T10830] RIP: 0033:0x7fd3e67be969 [ 192.175388][T10830] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 192.175406][T10830] RSP: 002b:00007fd3e4e27038 EFLAGS: 00000246 ORIG_RAX: 0000000000000106 [ 192.175425][T10830] RAX: ffffffffffffffda RBX: 00007fd3e69e5fa0 RCX: 00007fd3e67be969 [ 192.175438][T10830] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffffffffff9c [ 192.175503][T10830] RBP: 00007fd3e4e27090 R08: 0000000000000000 R09: 0000000000000000 [ 192.175538][T10830] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 192.175586][T10830] R13: 0000000000000001 R14: 00007fd3e69e5fa0 R15: 00007ffde91b11c8 [ 192.175612][T10830] [ 192.439274][ T4914] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.471535][T10834] __nla_validate_parse: 4 callbacks suppressed [ 192.471552][T10834] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2548'. [ 192.487816][T10834] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2548'. [ 192.552689][T10834] wireguard10: entered promiscuous mode [ 192.559307][T10834] wireguard10: entered allmulticast mode [ 192.644883][T10844] vhci_hcd: invalid port number 96 [ 192.650268][T10844] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 192.683764][T10840] loop1: detected capacity change from 0 to 1024 [ 192.710398][T10840] EXT4-fs: Ignoring removed bh option [ 192.732356][T10851] netlink: 'syz.4.2553': attribute type 39 has an invalid length. [ 192.744527][T10840] EXT4-fs: inline encryption not supported [ 192.750560][T10840] EXT4-fs: Ignoring removed i_version option [ 192.800072][T10840] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 192.827232][T10861] netlink: 208 bytes leftover after parsing attributes in process `syz.0.2557'. [ 192.842576][T10859] loop3: detected capacity change from 0 to 512 [ 192.860559][T10840] EXT4-fs error (device loop1): ext4_map_blocks:816: inode #3: block 1: comm syz.1.2547: lblock 1 mapped to illegal pblock 1 (length 1) [ 192.885294][T10864] netlink: 'syz.4.2558': attribute type 39 has an invalid length. [ 192.896582][T10840] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.2547: Failed to acquire dquot type 0 [ 192.926487][T10859] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 192.932912][T10866] loop0: detected capacity change from 0 to 512 [ 192.940889][T10840] EXT4-fs error (device loop1): ext4_free_blocks:6587: comm syz.1.2547: Freeing blocks not in datazone - block = 0, count = 4096 [ 192.977916][T10866] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 192.992715][T10859] ext4 filesystem being mounted at /563/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 193.007031][T10840] EXT4-fs error (device loop1): ext4_read_inode_bitmap:139: comm syz.1.2547: Invalid inode bitmap blk 0 in block_group 0 [ 193.034537][T10870] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2560'. [ 193.034927][ T4352] EXT4-fs error (device loop1): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:13: lblock 1 mapped to illegal pblock 1 (length 1) [ 193.054539][T10870] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2560'. [ 193.073805][T10840] EXT4-fs error (device loop1) in ext4_free_inode:361: Corrupt filesystem [ 193.106091][T10840] EXT4-fs (loop1): 1 orphan inode deleted [ 193.112539][T10840] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 193.127532][ T4352] EXT4-fs error (device loop1): ext4_release_dquot:6969: comm kworker/u8:13: Failed to release dquot type 0 [ 193.212533][T10866] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 193.251719][T10870] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2560'. [ 193.274044][T10840] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.315089][T10870] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2560'. [ 193.325690][T10838] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10838 comm=syz.1.2547 [ 193.326937][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.365401][ T3326] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.402851][T10870] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2560'. [ 193.420870][T10870] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2560'. [ 193.436848][T10881] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2562'. [ 193.461258][T10881] wireguard5: entered promiscuous mode [ 193.468550][T10881] wireguard5: entered allmulticast mode [ 193.481023][ T36] hid-generic 0000:0004:0000.0001: unknown main item tag 0x0 [ 193.489052][ T36] hid-generic 0000:0004:0000.0001: unknown main item tag 0x0 [ 193.497419][ T36] hid-generic 0000:0004:0000.0001: unknown main item tag 0x0 [ 193.505446][ T36] hid-generic 0000:0004:0000.0001: unknown main item tag 0x0 [ 193.513996][ T36] hid-generic 0000:0004:0000.0001: unknown main item tag 0x0 [ 193.524547][ T36] hid-generic 0000:0004:0000.0001: unknown main item tag 0x0 [ 193.527590][T10886] program syz.1.2564 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 193.534523][ T36] hid-generic 0000:0004:0000.0001: unknown main item tag 0x0 [ 193.553484][ T36] hid-generic 0000:0004:0000.0001: unknown main item tag 0x0 [ 193.561739][ T36] hid-generic 0000:0004:0000.0001: unknown main item tag 0x2 [ 193.569518][ T36] hid-generic 0000:0004:0000.0001: unknown main item tag 0x0 [ 193.577839][ T36] hid-generic 0000:0004:0000.0001: unknown main item tag 0x0 [ 193.583861][T10889] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 193.586513][ T36] hid-generic 0000:0004:0000.0001: unknown main item tag 0x0 [ 193.586542][ T36] hid-generic 0000:0004:0000.0001: unknown main item tag 0x0 [ 193.586569][ T36] hid-generic 0000:0004:0000.0001: unknown main item tag 0x0 [ 193.617780][ T36] hid-generic 0000:0004:0000.0001: unknown main item tag 0x0 [ 193.625723][ T36] hid-generic 0000:0004:0000.0001: unknown main item tag 0x0 [ 193.634600][ T36] hid-generic 0000:0004:0000.0001: unknown main item tag 0x0 [ 193.642528][ T36] hid-generic 0000:0004:0000.0001: unknown main item tag 0x0 [ 193.650460][ T36] hid-generic 0000:0004:0000.0001: unknown main item tag 0x0 [ 193.658084][ T36] hid-generic 0000:0004:0000.0001: unknown main item tag 0x0 [ 193.665622][ T36] hid-generic 0000:0004:0000.0001: unknown main item tag 0x0 [ 193.673521][ T36] hid-generic 0000:0004:0000.0001: unknown main item tag 0x0 [ 193.681511][ T36] hid-generic 0000:0004:0000.0001: unknown main item tag 0x0 [ 193.689309][ T36] hid-generic 0000:0004:0000.0001: unknown main item tag 0x0 [ 193.697168][ T36] hid-generic 0000:0004:0000.0001: unknown main item tag 0x0 [ 193.705115][ T36] hid-generic 0000:0004:0000.0001: unknown main item tag 0x0 [ 193.713186][ T36] hid-generic 0000:0004:0000.0001: unknown main item tag 0x0 [ 193.720924][ T36] hid-generic 0000:0004:0000.0001: unknown main item tag 0x0 [ 193.729270][ T36] hid-generic 0000:0004:0000.0001: unknown main item tag 0x0 [ 193.739079][ T36] hid-generic 0000:0004:0000.0001: unknown main item tag 0x0 [ 193.752255][ T36] hid-generic 0000:0004:0000.0001: hidraw0: HID v0.02 Device [syz0] on syz1 [ 193.796407][T10900] loop1: detected capacity change from 0 to 164 [ 193.804463][T10900] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 193.813543][T10896] vhci_hcd: invalid port number 96 [ 193.819038][T10896] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 193.827232][T10900] FAULT_INJECTION: forcing a failure. [ 193.827232][T10900] name failslab, interval 1, probability 0, space 0, times 0 [ 193.841328][T10900] CPU: 1 UID: 0 PID: 10900 Comm: syz.1.2570 Not tainted 6.15.0-syzkaller-08486-gf66bc387efbe #0 PREEMPT(voluntary) [ 193.841362][T10900] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 193.841376][T10900] Call Trace: [ 193.841382][T10900] [ 193.841463][T10900] __dump_stack+0x1d/0x30 [ 193.841486][T10900] dump_stack_lvl+0xe8/0x140 [ 193.841508][T10900] dump_stack+0x15/0x1b [ 193.841526][T10900] should_fail_ex+0x265/0x280 [ 193.841557][T10900] should_failslab+0x8c/0xb0 [ 193.841609][T10900] kmem_cache_alloc_noprof+0x50/0x310 [ 193.841639][T10900] ? getname_flags+0x80/0x3b0 [ 193.841660][T10900] ? __seccomp_filter+0x69d/0x10d0 [ 193.841683][T10900] getname_flags+0x80/0x3b0 [ 193.841778][T10900] user_path_at+0x28/0x130 [ 193.841807][T10900] do_utimes+0xd9/0x210 [ 193.841827][T10900] __x64_sys_futimesat+0xd2/0x1a0 [ 193.841879][T10900] ? syscall_trace_enter+0x102/0x1e0 [ 193.841903][T10900] x64_sys_call+0x11da/0x2fb0 [ 193.841958][T10900] do_syscall_64+0xd2/0x200 [ 193.841984][T10900] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 193.842010][T10900] ? clear_bhb_loop+0x40/0x90 [ 193.842031][T10900] ? clear_bhb_loop+0x40/0x90 [ 193.842125][T10900] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.842145][T10900] RIP: 0033:0x7f9d8e02e969 [ 193.842160][T10900] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 193.842178][T10900] RSP: 002b:00007f9d8c697038 EFLAGS: 00000246 ORIG_RAX: 0000000000000105 [ 193.842197][T10900] RAX: ffffffffffffffda RBX: 00007f9d8e255fa0 RCX: 00007f9d8e02e969 [ 193.842209][T10900] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 193.842298][T10900] RBP: 00007f9d8c697090 R08: 0000000000000000 R09: 0000000000000000 [ 193.842310][T10900] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 193.842322][T10900] R13: 0000000000000000 R14: 00007f9d8e255fa0 R15: 00007fffd1461088 [ 193.842340][T10900] [ 193.861202][T10898] loop4: detected capacity change from 0 to 128 [ 193.961152][T10903] loop2: detected capacity change from 0 to 2048 [ 194.027560][T10904] loop0: detected capacity change from 0 to 512 [ 194.100874][T10904] EXT4-fs (loop0): Invalid default hash set in the superblock [ 194.107932][T10906] loop1: detected capacity change from 0 to 164 [ 194.117921][T10898] syz.4.2569: attempt to access beyond end of device [ 194.117921][T10898] loop4: rw=2049, sector=129, nr_sectors = 8 limit=128 [ 194.134209][T10898] syz.4.2569: attempt to access beyond end of device [ 194.134209][T10898] loop4: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 194.137855][T10906] syz.1.2573: attempt to access beyond end of device [ 194.137855][T10906] loop1: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 194.150445][T10898] syz.4.2569: attempt to access beyond end of device [ 194.150445][T10898] loop4: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 194.184633][T10898] syz.4.2569: attempt to access beyond end of device [ 194.184633][T10898] loop4: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 194.184942][T10906] syz.1.2573: attempt to access beyond end of device [ 194.184942][T10906] loop1: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 194.218428][T10898] syz.4.2569: attempt to access beyond end of device [ 194.218428][T10898] loop4: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 194.221787][T10903] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 194.235229][T10909] syz.4.2569: attempt to access beyond end of device [ 194.235229][T10909] loop4: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 194.291413][T10909] syz.4.2569: attempt to access beyond end of device [ 194.291413][T10909] loop4: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 194.309355][T10898] syz.4.2569: attempt to access beyond end of device [ 194.309355][T10898] loop4: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 194.328416][T10914] loop3: detected capacity change from 0 to 512 [ 194.363896][T10914] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 194.400594][ T3328] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.442530][T10914] ext4 filesystem being mounted at /566/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 194.591628][T10914] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #19: comm syz.3.2574: corrupted inode contents [ 194.640312][T10914] EXT4-fs error (device loop3): ext4_dirty_inode:6459: inode #19: comm syz.3.2574: mark_inode_dirty error [ 194.681476][T10914] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #19: comm syz.3.2574: corrupted inode contents [ 194.699276][T10932] loop0: detected capacity change from 0 to 164 [ 194.719667][T10914] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2991: inode #19: comm syz.3.2574: mark_inode_dirty error [ 194.750856][T10914] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2994: inode #19: comm syz.3.2574: mark inode dirty (error -117) [ 194.790719][T10914] EXT4-fs warning (device loop3): ext4_evict_inode:274: xattr delete (err -117) [ 194.805289][T10941] vhci_hcd: invalid port number 96 [ 194.810745][T10941] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 194.840595][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.876364][T10943] loop0: detected capacity change from 0 to 1024 [ 194.883709][T10943] EXT4-fs: Ignoring removed nobh option [ 194.889419][T10943] EXT4-fs: Ignoring removed nobh option [ 194.898348][T10943] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 194.911552][T10943] EXT4-fs error (device loop0): ext4_get_journal_inode:5796: comm syz.0.2584: inode #4294967295: comm syz.0.2584: iget: illegal inode # [ 194.926901][T10943] EXT4-fs (loop0): no journal found [ 194.932739][T10943] EXT4-fs (loop0): can't get journal size [ 194.944181][T10950] loop2: detected capacity change from 0 to 2048 [ 194.952766][T10943] EXT4-fs (loop0): failed to initialize system zone (-22) [ 194.962175][T10943] EXT4-fs (loop0): mount failed [ 195.179389][T10954] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 195.201791][T10954] SELinux: failed to load policy [ 195.396837][T10965] loop4: detected capacity change from 0 to 128 [ 195.426288][ T29] kauditd_printk_skb: 190 callbacks suppressed [ 195.426305][ T29] audit: type=1326 audit(1748620722.360:2887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10964 comm="syz.4.2591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3e67be969 code=0x7ffc0000 [ 195.466857][T10965] netlink: 'syz.4.2591': attribute type 1 has an invalid length. [ 195.479264][ T29] audit: type=1326 audit(1748620722.360:2888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10964 comm="syz.4.2591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3e67be969 code=0x7ffc0000 [ 195.506310][ T29] audit: type=1326 audit(1748620722.400:2889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10964 comm="syz.4.2591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd3e67be969 code=0x7ffc0000 [ 195.535085][ T29] audit: type=1326 audit(1748620722.400:2890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10964 comm="syz.4.2591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3e67be969 code=0x7ffc0000 [ 195.561746][ T29] audit: type=1326 audit(1748620722.400:2891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10964 comm="syz.4.2591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3e67be969 code=0x7ffc0000 [ 195.587240][ T29] audit: type=1326 audit(1748620722.400:2892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10964 comm="syz.4.2591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd3e67be969 code=0x7ffc0000 [ 195.613055][ T29] audit: type=1326 audit(1748620722.400:2893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10964 comm="syz.4.2591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3e67be969 code=0x7ffc0000 [ 195.638644][ T29] audit: type=1326 audit(1748620722.400:2894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10964 comm="syz.4.2591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3e67be969 code=0x7ffc0000 [ 195.663506][ T29] audit: type=1326 audit(1748620722.400:2895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10964 comm="syz.4.2591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd3e67be969 code=0x7ffc0000 [ 195.683995][T10963] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10963 comm=syz.3.2590 [ 195.687714][ T29] audit: type=1326 audit(1748620722.400:2896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10964 comm="syz.4.2591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3e67be969 code=0x7ffc0000 [ 195.808467][T10981] ./cgroup: Can't lookup blockdev [ 195.815080][T10979] vhci_hcd: invalid port number 96 [ 195.820377][T10979] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 195.853810][T10987] FAULT_INJECTION: forcing a failure. [ 195.853810][T10987] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 195.867676][T10987] CPU: 1 UID: 0 PID: 10987 Comm: syz.1.2598 Not tainted 6.15.0-syzkaller-08486-gf66bc387efbe #0 PREEMPT(voluntary) [ 195.867710][T10987] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 195.867727][T10987] Call Trace: [ 195.867734][T10987] [ 195.867743][T10987] __dump_stack+0x1d/0x30 [ 195.867822][T10987] dump_stack_lvl+0xe8/0x140 [ 195.867841][T10987] dump_stack+0x15/0x1b [ 195.867862][T10987] should_fail_ex+0x265/0x280 [ 195.867903][T10987] should_fail+0xb/0x20 [ 195.867949][T10987] should_fail_usercopy+0x1a/0x20 [ 195.868006][T10987] strncpy_from_user+0x25/0x230 [ 195.868038][T10987] ? kmem_cache_alloc_noprof+0x186/0x310 [ 195.868072][T10987] ? getname_flags+0x80/0x3b0 [ 195.868098][T10987] getname_flags+0xae/0x3b0 [ 195.868128][T10987] __x64_sys_linkat+0x66/0xa0 [ 195.868168][T10987] x64_sys_call+0x2cfe/0x2fb0 [ 195.868195][T10987] do_syscall_64+0xd2/0x200 [ 195.868229][T10987] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 195.868334][T10987] ? clear_bhb_loop+0x40/0x90 [ 195.868361][T10987] ? clear_bhb_loop+0x40/0x90 [ 195.868390][T10987] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.868416][T10987] RIP: 0033:0x7f9d8e02e969 [ 195.868431][T10987] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 195.868527][T10987] RSP: 002b:00007f9d8c697038 EFLAGS: 00000246 ORIG_RAX: 0000000000000109 [ 195.868545][T10987] RAX: ffffffffffffffda RBX: 00007f9d8e255fa0 RCX: 00007f9d8e02e969 [ 195.868556][T10987] RDX: ffffffffffffffff RSI: 0000200000000000 RDI: ffffffffffffffff [ 195.868584][T10987] RBP: 00007f9d8c697090 R08: 0000000000001000 R09: 0000000000000000 [ 195.868600][T10987] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 195.868615][T10987] R13: 0000000000000000 R14: 00007f9d8e255fa0 R15: 00007fffd1461088 [ 195.868643][T10987] [ 196.106550][T10988] sctp: [Deprecated]: syz.4.2597 (pid 10988) Use of int in maxseg socket option. [ 196.106550][T10988] Use struct sctp_assoc_value instead [ 196.179762][T10985] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10985 comm=syz.2.2607 [ 196.216624][T11003] loop3: detected capacity change from 0 to 128 [ 196.259242][T11005] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 196.317361][T11010] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 196.343811][T11001] loop4: detected capacity change from 0 to 512 [ 196.351340][T11001] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 196.365855][T11001] EXT4-fs (loop4): 1 truncate cleaned up [ 196.373213][T11001] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 196.468292][T11018] loop0: detected capacity change from 0 to 164 [ 196.489776][ T3329] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.577251][T11024] vhci_hcd: invalid port number 96 [ 196.584019][T11024] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 196.627182][T11032] loop0: detected capacity change from 0 to 512 [ 196.631953][T11030] SELinux: failed to load policy [ 196.689507][T11032] EXT4-fs (loop0): 1 orphan inode deleted [ 196.708073][T11032] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 196.727695][ T4375] EXT4-fs error (device loop0): ext4_release_dquot:6969: comm kworker/u8:36: Failed to release dquot type 1 [ 196.759469][T11032] ext4 filesystem being mounted at /479/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 196.775940][T11042] loop1: detected capacity change from 0 to 512 [ 196.784573][T11042] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 196.860162][ T3326] EXT4-fs error (device loop0): ext4_readdir:264: inode #11: block 4: comm syz-executor: path /479/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=7947, rec_len=12, size=4096 fake=1 [ 196.894839][T11042] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 196.898018][ T3326] EXT4-fs error (device loop0): ext4_empty_dir:3084: inode #11: block 4: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=7947, rec_len=12, size=4096 fake=1 [ 196.910108][T11042] ext4 filesystem being mounted at /396/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 196.947903][ T3326] EXT4-fs warning (device loop0): ext4_empty_dir:3086: inode #11: comm syz-executor: directory missing '.' [ 196.962065][ T3326] EXT4-fs error (device loop0): ext4_readdir:264: inode #11: block 4: comm syz-executor: path /479/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=7947, rec_len=12, size=4096 fake=1 [ 197.005896][ T3326] EXT4-fs error (device loop0): ext4_empty_dir:3084: inode #11: block 4: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=7947, rec_len=12, size=4096 fake=1 [ 197.017297][T11025] Set syz1 is full, maxelem 65536 reached [ 197.041900][ T4914] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.058978][T11046] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11046 comm=syz.4.2618 [ 197.069727][ T3326] EXT4-fs warning (device loop0): ext4_empty_dir:3086: inode #11: comm syz-executor: directory missing '.' [ 197.094216][ T3326] EXT4-fs error (device loop0): ext4_readdir:264: inode #11: block 4: comm syz-executor: path /479/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=7947, rec_len=12, size=4096 fake=1 [ 197.118508][ T3326] EXT4-fs error (device loop0): ext4_empty_dir:3084: inode #11: block 4: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=7947, rec_len=12, size=4096 fake=1 [ 197.143687][ T3326] EXT4-fs warning (device loop0): ext4_empty_dir:3086: inode #11: comm syz-executor: directory missing '.' [ 197.159620][ T3326] EXT4-fs error (device loop0): ext4_readdir:264: inode #11: block 4: comm syz-executor: path /479/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=7947, rec_len=12, size=4096 fake=1 [ 197.187096][ T3326] EXT4-fs error (device loop0): ext4_empty_dir:3084: inode #11: block 4: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=7947, rec_len=12, size=4096 fake=1 [ 197.248500][ T3326] EXT4-fs warning (device loop0): ext4_empty_dir:3086: inode #11: comm syz-executor: directory missing '.' [ 197.261793][ T3326] EXT4-fs error (device loop0): ext4_readdir:264: inode #11: block 4: comm syz-executor: path /479/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=7947, rec_len=12, size=4096 fake=1 [ 197.295300][ T3326] EXT4-fs warning (device loop0): ext4_empty_dir:3086: inode #11: comm syz-executor: directory missing '.' [ 197.315959][ T3326] EXT4-fs warning (device loop0): ext4_empty_dir:3086: inode #11: comm syz-executor: directory missing '.' [ 197.331070][ T3326] EXT4-fs warning (device loop0): ext4_empty_dir:3086: inode #11: comm syz-executor: directory missing '.' [ 197.348861][ T3326] EXT4-fs warning (device loop0): ext4_empty_dir:3086: inode #11: comm syz-executor: directory missing '.' [ 197.362813][ T3326] EXT4-fs warning (device loop0): ext4_empty_dir:3086: inode #11: comm syz-executor: directory missing '.' [ 197.413263][ T3326] EXT4-fs warning (device loop0): ext4_empty_dir:3086: inode #11: comm syz-executor: directory missing '.' [ 197.480682][T11073] __nla_validate_parse: 31 callbacks suppressed [ 197.480700][T11073] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2628'. [ 197.658349][ T3326] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.711438][T11083] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 197.933190][T11085] siw: device registration error -23 [ 198.023432][ T4375] bridge_slave_1: left allmulticast mode [ 198.030111][ T4375] bridge_slave_1: left promiscuous mode [ 198.036330][ T4375] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.057441][ T4375] bridge_slave_0: left allmulticast mode [ 198.064172][ T4375] bridge_slave_0: left promiscuous mode [ 198.069996][ T4375] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.104159][T11089] loop2: detected capacity change from 0 to 1024 [ 198.117593][T11089] EXT4-fs: Ignoring removed nobh option [ 198.123781][T11089] EXT4-fs: Ignoring removed nobh option [ 198.136356][T11091] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2636'. [ 198.146553][T11091] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2636'. [ 198.168458][T11089] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 198.181845][T11089] EXT4-fs error (device loop2): ext4_get_journal_inode:5796: comm syz.2.2635: inode #4294967295: comm syz.2.2635: iget: illegal inode # [ 198.198684][T11089] EXT4-fs (loop2): no journal found [ 198.204175][T11089] EXT4-fs (loop2): can't get journal size [ 198.211112][T11089] EXT4-fs (loop2): failed to initialize system zone (-22) [ 198.220600][T11089] EXT4-fs (loop2): mount failed [ 198.236450][ T4375] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 198.252226][ T4375] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 198.273553][T11104] loop2: detected capacity change from 0 to 512 [ 198.282249][ T4375] bond0 (unregistering): Released all slaves [ 198.292341][T11104] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 198.308649][T11104] ext4 filesystem being mounted at /578/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 198.322679][T11091] wireguard3: entered promiscuous mode [ 198.328290][T11091] wireguard3: entered allmulticast mode [ 198.353605][T11106] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 198.370546][T11106] syzkaller0: linktype set to 270 [ 198.418559][T11123] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2644'. [ 198.429010][T11123] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2644'. [ 198.439029][T11123] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2644'. [ 198.460891][ T4375] hsr_slave_0: left promiscuous mode [ 198.473063][ T4375] hsr_slave_1: left promiscuous mode [ 198.481188][ T4375] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 198.491183][ T4375] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 198.512898][ T3328] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.533799][T11133] loop3: detected capacity change from 0 to 2048 [ 198.561293][T11133] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 198.591504][T11143] loop2: detected capacity change from 0 to 1024 [ 198.607915][T11143] EXT4-fs: Ignoring removed nobh option [ 198.613856][T11143] EXT4-fs: Ignoring removed nobh option [ 198.619844][ T4375] team0 (unregistering): Port device team_slave_1 removed [ 198.626829][T11143] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 198.639380][ T4375] team0 (unregistering): Port device team_slave_0 removed [ 198.650100][ T4380] smc: removing ib device syz! [ 198.657952][T11133] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 198.676509][T11143] EXT4-fs error (device loop2): ext4_get_journal_inode:5796: comm syz.2.2650: inode #4294967295: comm syz.2.2650: iget: illegal inode # [ 198.679068][T11133] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1314 with error 28 [ 198.706204][T11133] EXT4-fs (loop3): This should not happen!! Data will be lost [ 198.706204][T11133] [ 198.717071][T11133] EXT4-fs (loop3): Total free blocks count 0 [ 198.723490][T11133] EXT4-fs (loop3): Free/Dirty block details [ 198.723612][T11143] EXT4-fs (loop2): no journal found [ 198.732202][T11133] EXT4-fs (loop3): free_blocks=2415919104 [ 198.732224][T11133] EXT4-fs (loop3): dirty_blocks=1328 [ 198.732236][T11133] EXT4-fs (loop3): Block reservation details [ 198.732246][T11133] EXT4-fs (loop3): i_reserved_data_blocks=83 [ 198.771151][T11143] EXT4-fs (loop2): can't get journal size [ 198.791046][T11146] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11146 comm=syz.4.2645 [ 198.809655][T11143] EXT4-fs (loop2): failed to initialize system zone (-22) [ 198.825069][T11143] EXT4-fs (loop2): mount failed [ 198.886989][ T4369] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 28 [ 198.939027][T11156] netlink: 136 bytes leftover after parsing attributes in process `syz.2.2653'. [ 198.948182][T11156] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 198.989622][T11156] netlink: 344 bytes leftover after parsing attributes in process `syz.2.2653'. [ 198.999444][T11160] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2654'. [ 199.008398][T11160] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2654'. [ 199.045851][T11166] loop1: detected capacity change from 0 to 512 [ 199.067378][T11160] wireguard11: entered promiscuous mode [ 199.074825][T11160] wireguard11: entered allmulticast mode [ 199.084802][T11166] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 199.110769][T11094] chnl_net:caif_netlink_parms(): no params data found [ 199.118731][T11166] ext4 filesystem being mounted at /404/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 199.159937][T11166] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #2: comm syz.1.2656: corrupted inode contents [ 199.223886][T11175] loop4: detected capacity change from 0 to 512 [ 199.232823][T11166] EXT4-fs error (device loop1): ext4_dirty_inode:6459: inode #2: comm syz.1.2656: mark_inode_dirty error [ 199.245126][T11166] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #2: comm syz.1.2656: corrupted inode contents [ 199.263837][T11177] loop2: detected capacity change from 0 to 2048 [ 199.264806][T11175] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 199.297015][T11094] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.304753][T11178] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #2: comm syz.1.2656: corrupted inode contents [ 199.305085][T11175] ext4 filesystem being mounted at /515/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 199.318094][T11094] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.324920][T11094] bridge_slave_0: entered allmulticast mode [ 199.341442][T11178] EXT4-fs error (device loop1): ext4_dirty_inode:6459: inode #2: comm syz.1.2656: mark_inode_dirty error [ 199.346729][T11094] bridge_slave_0: entered promiscuous mode [ 199.368602][T11094] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.375602][T11178] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #2: comm syz.1.2656: corrupted inode contents [ 199.376354][T11094] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.391551][T11177] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 199.399725][T11178] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #2: comm syz.1.2656: mark_inode_dirty error [ 199.422322][T11178] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #2: comm syz.1.2656: corrupted inode contents [ 199.437734][T11094] bridge_slave_1: entered allmulticast mode [ 199.455573][T11094] bridge_slave_1: entered promiscuous mode [ 199.467170][T11178] EXT4-fs error (device loop1): ext4_dirty_inode:6459: inode #2: comm syz.1.2656: mark_inode_dirty error [ 199.481729][ T3328] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.510971][T11094] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 199.512788][T11166] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #2: comm syz.1.2656: corrupted inode contents [ 199.536393][T11094] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 199.542880][T11158] loop3: detected capacity change from 0 to 2048 [ 199.573812][T11094] team0: Port device team_slave_0 added [ 199.587008][T11094] team0: Port device team_slave_1 added [ 199.590524][T11158] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 199.614227][T11094] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 199.621882][T11094] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 199.650535][T11094] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 199.758976][ T3329] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.760120][ T4914] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.781862][T11192] SELinux: failed to load policy [ 199.792195][T11094] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 199.799792][T11094] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 199.826390][T11094] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 199.891147][T11094] hsr_slave_0: entered promiscuous mode [ 199.897837][T11094] hsr_slave_1: entered promiscuous mode [ 199.899965][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.904194][T11094] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 199.921071][T11094] Cannot create hsr debugfs directory [ 199.943735][T11197] netlink: 'syz.4.2661': attribute type 39 has an invalid length. [ 199.976043][T11195] loop1: detected capacity change from 0 to 128 [ 200.031034][T11195] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 200.058787][T11195] ext4 filesystem being mounted at /405/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 200.153018][T11195] EXT4-fs error (device loop1): dx_make_map:1296: inode #2: block 20: comm syz.1.2662: bad entry in directory: inode out of bounds - offset=988, inode=128, rec_len=36, size=1024 fake=1 [ 200.181238][T11094] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 200.191405][T11094] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 200.201777][T11195] EXT4-fs (loop1): Remounting filesystem read-only [ 200.218676][T11195] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=11195 comm=syz.1.2662 [ 200.240038][T11210] loop4: detected capacity change from 0 to 512 [ 200.247031][T11094] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 200.276444][T11094] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 200.284063][T11210] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 200.284888][ T4914] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 200.299158][T11210] ext4 filesystem being mounted at /518/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 200.318200][T11205] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11205 comm=syz.3.2663 [ 200.348079][T11215] loop1: detected capacity change from 0 to 2048 [ 200.385759][T11094] 8021q: adding VLAN 0 to HW filter on device bond0 [ 200.398118][T11094] 8021q: adding VLAN 0 to HW filter on device team0 [ 200.408723][ T4380] bridge0: port 1(bridge_slave_0) entered blocking state [ 200.416829][ T4380] bridge0: port 1(bridge_slave_0) entered forwarding state [ 200.478272][T11218] vhci_hcd: invalid port number 96 [ 200.483652][T11218] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 200.502426][T11223] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11223 comm=syz.1.2666 [ 200.508468][T11222] loop2: detected capacity change from 0 to 2048 [ 200.526403][ T4380] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.534094][ T4380] bridge0: port 2(bridge_slave_1) entered forwarding state [ 200.554749][T11222] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 200.558557][T11094] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 200.577972][T11094] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 200.615936][T11229] loop3: detected capacity change from 0 to 164 [ 200.630440][T11216] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #19: comm syz.4.2665: corrupted inode contents [ 200.648176][T11229] bio_check_eod: 9 callbacks suppressed [ 200.648193][T11229] syz.3.2670: attempt to access beyond end of device [ 200.648193][T11229] loop3: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 200.683869][T11229] syz.3.2670: attempt to access beyond end of device [ 200.683869][T11229] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 200.690715][T11216] EXT4-fs error (device loop4): ext4_dirty_inode:6459: inode #19: comm syz.4.2665: mark_inode_dirty error [ 200.734890][ T3328] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.739822][T11216] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #19: comm syz.4.2665: corrupted inode contents [ 200.756729][T11094] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 200.765890][T11216] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2991: inode #19: comm syz.4.2665: mark_inode_dirty error [ 200.790314][T11216] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2994: inode #19: comm syz.4.2665: mark inode dirty (error -117) [ 200.809908][T11216] EXT4-fs warning (device loop4): ext4_evict_inode:274: xattr delete (err -117) [ 200.832942][T11240] wireguard7: entered promiscuous mode [ 200.838562][T11240] wireguard7: entered allmulticast mode [ 200.903745][ T3329] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.958621][T11259] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 201.090134][T11094] veth0_vlan: entered promiscuous mode [ 201.127133][T11094] veth1_vlan: entered promiscuous mode [ 201.163527][T11094] veth0_macvtap: entered promiscuous mode [ 201.171420][T11094] veth1_macvtap: entered promiscuous mode [ 201.184141][T11094] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 201.189775][T11094] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 201.215067][T11271] vhci_hcd: invalid port number 96 [ 201.215083][T11271] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 201.221151][T11273] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 201.224928][T11094] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.224998][T11094] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.225031][T11094] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.225064][T11094] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.261026][T11277] loop2: detected capacity change from 0 to 512 [ 201.292384][T11277] EXT4-fs (loop2): orphan cleanup on readonly fs [ 201.292997][T11277] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.2680: bg 0: block 248: padding at end of block bitmap is not set [ 201.293237][T11277] __quota_error: 32 callbacks suppressed [ 201.293252][T11277] Quota error (device loop2): write_blk: dquota write failed [ 201.293270][T11277] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 201.293300][T11277] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.2680: Failed to acquire dquot type 1 [ 201.293812][T11277] EXT4-fs (loop2): 1 truncate cleaned up [ 201.305574][T11277] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 201.315919][T11250] syzkaller0: entered promiscuous mode [ 201.315942][T11250] syzkaller0: entered allmulticast mode [ 201.445298][ T3328] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.472913][T11287] loop1: detected capacity change from 0 to 512 [ 201.491594][T11287] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 201.491818][T11287] ext4 filesystem being mounted at /408/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 201.497714][T11291] loop3: detected capacity change from 0 to 512 [ 201.534883][T11288] loop2: detected capacity change from 0 to 512 [ 201.546527][T11288] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 201.567012][T11288] ext4 filesystem being mounted at /592/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 201.601632][T11291] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 201.625108][ T29] audit: type=1400 audit(1748620728.560:2925): avc: denied { prog_load } for pid=11283 comm="syz.5.2634" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 201.682413][ T29] audit: type=1400 audit(1748620728.570:2926): avc: denied { bpf } for pid=11283 comm="syz.5.2634" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 201.706319][ T29] audit: type=1400 audit(1748620728.570:2927): avc: denied { perfmon } for pid=11283 comm="syz.5.2634" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 201.728759][ T29] audit: type=1400 audit(1748620728.580:2928): avc: denied { prog_run } for pid=11303 comm="syz.4.2685" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 201.748692][ T29] audit: type=1400 audit(1748620728.580:2929): avc: denied { create } for pid=11303 comm="syz.4.2685" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 201.755214][T11291] ext4 filesystem being mounted at /589/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 201.768882][ T29] audit: type=1400 audit(1748620728.580:2930): avc: denied { setopt } for pid=11303 comm="syz.4.2685" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 201.802989][ T29] audit: type=1400 audit(1748620728.580:2931): avc: denied { bind } for pid=11303 comm="syz.4.2685" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 201.824149][ T29] audit: type=1400 audit(1748620728.580:2932): avc: denied { node_bind } for pid=11303 comm="syz.4.2685" saddr=172.20.20.170 src=52768 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 201.896044][T11304] nfs4: Unknown parameter '' [ 201.918934][T11285] loop5: detected capacity change from 0 to 1024 [ 201.928719][T11288] EXT4-fs error (device loop2): ext4_xattr_block_get:593: inode #15: comm syz.2.2682: corrupted xattr block 33: overlapping e_value [ 201.948948][T11285] EXT4-fs: Ignoring removed bh option [ 201.960084][T11288] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 201.974273][T11285] EXT4-fs: inline encryption not supported [ 201.982336][T11285] EXT4-fs: Ignoring removed i_version option [ 202.010982][T11288] EXT4-fs error (device loop2): ext4_xattr_block_get:593: inode #15: comm syz.2.2682: corrupted xattr block 33: overlapping e_value [ 202.026881][ T4914] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.032561][T11285] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 202.070126][T11288] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 202.084989][T11288] EXT4-fs error (device loop2): ext4_xattr_block_list:762: inode #15: comm syz.2.2682: corrupted xattr block 33: overlapping e_value [ 202.085740][T11318] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 202.135258][T11285] EXT4-fs error (device loop5): ext4_map_blocks:816: inode #3: block 1: comm syz.5.2634: lblock 1 mapped to illegal pblock 1 (length 1) [ 202.157444][T11285] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.2634: Failed to acquire dquot type 0 [ 202.180652][T11285] EXT4-fs error (device loop5): ext4_free_blocks:6587: comm syz.5.2634: Freeing blocks not in datazone - block = 0, count = 4096 [ 202.231802][T11285] EXT4-fs error (device loop5): ext4_read_inode_bitmap:139: comm syz.5.2634: Invalid inode bitmap blk 0 in block_group 0 [ 202.251979][ T4375] EXT4-fs error (device loop5): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:36: lblock 1 mapped to illegal pblock 1 (length 1) [ 202.268319][T11285] EXT4-fs error (device loop5) in ext4_free_inode:361: Corrupt filesystem [ 202.269815][T11325] loop1: detected capacity change from 0 to 1024 [ 202.287221][T11285] EXT4-fs (loop5): 1 orphan inode deleted [ 202.292862][ T4375] EXT4-fs error (device loop5): ext4_release_dquot:6969: comm kworker/u8:36: Failed to release dquot type 0 [ 202.309558][T11325] EXT4-fs: Ignoring removed nobh option [ 202.316105][T11325] EXT4-fs: Ignoring removed nobh option [ 202.331703][T11285] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 202.349389][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.350037][T11327] loop4: detected capacity change from 0 to 2048 [ 202.369701][T11325] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 202.380732][T11325] EXT4-fs error (device loop1): ext4_get_journal_inode:5796: comm syz.1.2690: inode #4294967295: comm syz.1.2690: iget: illegal inode # [ 202.405643][T11325] EXT4-fs (loop1): no journal found [ 202.408682][T11327] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 202.411306][T11325] EXT4-fs (loop1): can't get journal size [ 202.436198][T11325] EXT4-fs (loop1): failed to initialize system zone (-22) [ 202.444272][T11325] EXT4-fs (loop1): mount failed [ 202.484018][ T3328] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.503983][T11336] __nla_validate_parse: 12 callbacks suppressed [ 202.504004][T11336] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2695'. [ 202.520507][T11336] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2695'. [ 202.527211][ T3329] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.542165][T11339] loop2: detected capacity change from 0 to 128 [ 202.549827][T11341] loop1: detected capacity change from 0 to 512 [ 202.560573][T11295] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.572609][T11339] netlink: 'syz.2.2693': attribute type 1 has an invalid length. [ 202.584208][T11285] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11285 comm=syz.5.2634 [ 202.587810][T11341] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 202.614227][T11341] ext4 filesystem being mounted at /413/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 202.719329][T11354] FAULT_INJECTION: forcing a failure. [ 202.719329][T11354] name failslab, interval 1, probability 0, space 0, times 0 [ 202.734054][T11354] CPU: 1 UID: 0 PID: 11354 Comm: syz.5.2700 Not tainted 6.15.0-syzkaller-08486-gf66bc387efbe #0 PREEMPT(voluntary) [ 202.734183][T11354] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 202.734199][T11354] Call Trace: [ 202.734207][T11354] [ 202.734225][T11354] __dump_stack+0x1d/0x30 [ 202.734265][T11354] dump_stack_lvl+0xe8/0x140 [ 202.734284][T11354] dump_stack+0x15/0x1b [ 202.734302][T11354] should_fail_ex+0x265/0x280 [ 202.734337][T11354] should_failslab+0x8c/0xb0 [ 202.734361][T11354] kmem_cache_alloc_node_noprof+0x57/0x320 [ 202.734389][T11354] ? __alloc_skb+0x101/0x320 [ 202.734543][T11354] __alloc_skb+0x101/0x320 [ 202.734568][T11354] ? audit_log_start+0x365/0x6c0 [ 202.734600][T11354] audit_log_start+0x380/0x6c0 [ 202.734641][T11354] audit_seccomp+0x48/0x100 [ 202.734728][T11354] ? __seccomp_filter+0x68c/0x10d0 [ 202.734796][T11354] __seccomp_filter+0x69d/0x10d0 [ 202.734826][T11354] ? bitmap_onto+0xaf/0xd0 [ 202.734897][T11354] ? mpol_new_nodemask+0x3f/0x60 [ 202.734936][T11354] ? mpol_set_nodemask+0x1ae/0x1e0 [ 202.734969][T11354] __secure_computing+0x82/0x150 [ 202.734993][T11354] syscall_trace_enter+0xcf/0x1e0 [ 202.735088][T11354] do_syscall_64+0xac/0x200 [ 202.735127][T11354] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 202.735160][T11354] ? clear_bhb_loop+0x40/0x90 [ 202.735186][T11354] ? clear_bhb_loop+0x40/0x90 [ 202.735266][T11354] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.735287][T11354] RIP: 0033:0x7f3cc630d37c [ 202.735304][T11354] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 202.735326][T11354] RSP: 002b:00007f3cc4977030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 202.735353][T11354] RAX: ffffffffffffffda RBX: 00007f3cc6535fa0 RCX: 00007f3cc630d37c [ 202.735375][T11354] RDX: 000000000000000f RSI: 00007f3cc49770a0 RDI: 0000000000000005 [ 202.735400][T11354] RBP: 00007f3cc4977090 R08: 0000000000000000 R09: 0000000000000000 [ 202.735416][T11354] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 202.735528][T11354] R13: 0000000000000000 R14: 00007f3cc6535fa0 R15: 00007fff6762dd98 [ 202.735546][T11354] [ 202.965457][T11353] loop2: detected capacity change from 0 to 128 [ 202.978313][T11353] netlink: 'syz.2.2699': attribute type 1 has an invalid length. [ 203.012669][ T4914] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.043524][T11359] bridge0: port 3(macvlan2) entered blocking state [ 203.043565][T11359] bridge0: port 3(macvlan2) entered disabled state [ 203.043700][T11359] macvlan2: entered allmulticast mode [ 203.043718][T11359] bridge0: entered allmulticast mode [ 203.064114][T11359] macvlan2: left allmulticast mode [ 203.064139][T11359] bridge0: left allmulticast mode [ 203.092539][T11361] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 203.098512][T11363] loop5: detected capacity change from 0 to 2048 [ 203.132432][T11365] loop3: detected capacity change from 0 to 1024 [ 203.145337][T11365] EXT4-fs: Ignoring removed nobh option [ 203.145363][T11365] EXT4-fs: Ignoring removed nobh option [ 203.146121][T11365] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 203.146248][T11365] EXT4-fs error (device loop3): ext4_get_journal_inode:5796: comm syz.3.2705: inode #4294967295: comm syz.3.2705: iget: illegal inode # [ 203.146347][T11365] EXT4-fs (loop3): no journal found [ 203.146431][T11365] EXT4-fs (loop3): can't get journal size [ 203.153610][T11363] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 203.160316][T11365] EXT4-fs (loop3): failed to initialize system zone (-22) [ 203.219695][T11094] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.233794][T11365] EXT4-fs (loop3): mount failed [ 203.281101][T11381] loop1: detected capacity change from 0 to 164 [ 203.290473][T11382] loop3: detected capacity change from 0 to 1024 [ 203.303881][T11381] syz.1.2707: attempt to access beyond end of device [ 203.303881][T11381] loop1: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 203.310774][T11382] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 203.329114][T11382] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 203.348284][T11382] JBD2: no valid journal superblock found [ 203.348308][T11382] EXT4-fs (loop3): Could not load journal inode [ 203.368473][T11381] syz.1.2707: attempt to access beyond end of device [ 203.368473][T11381] loop1: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 203.401697][T11383] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2709'. [ 203.453310][T11396] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2715'. [ 203.463014][T11396] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2715'. [ 203.479144][T11399] loop5: detected capacity change from 0 to 512 [ 203.487356][T11397] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2714'. [ 203.496937][T11397] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2714'. [ 203.515195][T11397] wireguard4: entered promiscuous mode [ 203.520811][T11397] wireguard4: entered allmulticast mode [ 203.536567][T11399] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 203.554648][T11399] ext4 filesystem being mounted at /6/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 203.555813][T11396] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2715'. [ 203.577127][T11396] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2715'. [ 203.598087][T11412] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 203.625870][T11396] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2715'. [ 203.669147][T11415] SELinux: failed to load policy [ 203.725043][T11418] FAULT_INJECTION: forcing a failure. [ 203.725043][T11418] name failslab, interval 1, probability 0, space 0, times 0 [ 203.738464][T11418] CPU: 0 UID: 0 PID: 11418 Comm: syz.1.2719 Not tainted 6.15.0-syzkaller-08486-gf66bc387efbe #0 PREEMPT(voluntary) [ 203.738494][T11418] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 203.738508][T11418] Call Trace: [ 203.738517][T11418] [ 203.738585][T11418] __dump_stack+0x1d/0x30 [ 203.738612][T11418] dump_stack_lvl+0xe8/0x140 [ 203.738669][T11418] dump_stack+0x15/0x1b [ 203.738760][T11418] should_fail_ex+0x265/0x280 [ 203.738841][T11418] should_failslab+0x8c/0xb0 [ 203.738872][T11418] kmem_cache_alloc_noprof+0x50/0x310 [ 203.738903][T11418] ? getname_flags+0x80/0x3b0 [ 203.738927][T11418] getname_flags+0x80/0x3b0 [ 203.738949][T11418] __se_sys_move_mount+0x16d/0x440 [ 203.738998][T11418] __x64_sys_move_mount+0x67/0x80 [ 203.739121][T11418] x64_sys_call+0x1f00/0x2fb0 [ 203.739146][T11418] do_syscall_64+0xd2/0x200 [ 203.739180][T11418] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 203.739239][T11418] ? clear_bhb_loop+0x40/0x90 [ 203.739261][T11418] ? clear_bhb_loop+0x40/0x90 [ 203.739294][T11418] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.739321][T11418] RIP: 0033:0x7f9d8e02e969 [ 203.739389][T11418] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 203.739462][T11418] RSP: 002b:00007f9d8c697038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ad [ 203.739480][T11418] RAX: ffffffffffffffda RBX: 00007f9d8e255fa0 RCX: 00007f9d8e02e969 [ 203.739538][T11418] RDX: ffffffffffffff9c RSI: 0000000000000000 RDI: ffffffffffffffff [ 203.739555][T11418] RBP: 00007f9d8c697090 R08: 0000000000000000 R09: 0000000000000000 [ 203.739570][T11418] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 203.739621][T11418] R13: 0000000000000000 R14: 00007f9d8e255fa0 R15: 00007fffd1461088 [ 203.739644][T11418] [ 203.946751][T11094] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.035769][T11435] wireguard0: entered promiscuous mode [ 204.041340][T11435] wireguard0: entered allmulticast mode [ 204.073355][T11436] lo speed is unknown, defaulting to 1000 [ 204.101925][T11436] lo speed is unknown, defaulting to 1000 [ 204.124748][T11436] lo speed is unknown, defaulting to 1000 [ 204.132413][T11436] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 204.141693][T11441] loop3: detected capacity change from 0 to 128 [ 204.145064][T11436] lo speed is unknown, defaulting to 1000 [ 204.155209][T11436] lo speed is unknown, defaulting to 1000 [ 204.161898][T11436] lo speed is unknown, defaulting to 1000 [ 204.168711][T11436] lo speed is unknown, defaulting to 1000 [ 204.175503][T11436] lo speed is unknown, defaulting to 1000 [ 204.214099][T11441] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 204.238527][T11455] loop1: detected capacity change from 0 to 512 [ 204.248283][T11441] ext4 filesystem being mounted at /599/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 204.302491][T11455] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 204.320215][T11455] ext4 filesystem being mounted at /421/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 204.336913][T11441] EXT4-fs error (device loop3): dx_make_map:1296: inode #2: block 20: comm syz.3.2729: bad entry in directory: inode out of bounds - offset=988, inode=128, rec_len=36, size=1024 fake=1 [ 204.357776][T11441] EXT4-fs (loop3): Remounting filesystem read-only [ 204.368897][T11441] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=11441 comm=syz.3.2729 [ 204.460527][ T3315] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 204.550678][ T4371] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.593808][T11476] loop4: detected capacity change from 0 to 128 [ 204.602763][ T4371] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.609684][T11476] netlink: 'syz.4.2738': attribute type 1 has an invalid length. [ 204.660018][T11485] loop4: detected capacity change from 0 to 128 [ 204.668881][ T4371] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.688483][T11468] lo speed is unknown, defaulting to 1000 [ 204.727759][ T4371] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.777635][T11487] lo speed is unknown, defaulting to 1000 [ 204.828490][T11468] chnl_net:caif_netlink_parms(): no params data found [ 204.857101][T11491] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11491 comm=syz.4.2743 [ 204.913554][T11468] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.920920][T11468] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.928283][T11468] bridge_slave_0: entered allmulticast mode [ 204.945309][T11468] bridge_slave_0: entered promiscuous mode [ 204.965399][ T4371] bridge_slave_1: left allmulticast mode [ 204.971287][ T4371] bridge_slave_1: left promiscuous mode [ 204.977139][ T4371] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.992434][ T4371] bridge_slave_0: left allmulticast mode [ 204.998292][ T4371] bridge_slave_0: left promiscuous mode [ 205.004004][ T4371] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.007538][T11504] loop4: detected capacity change from 0 to 512 [ 205.026351][T11504] ext4 filesystem being mounted at /536/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 205.088466][T11509] SELinux: failed to load policy [ 205.140160][ T4371] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 205.154561][ T4371] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 205.166668][ T4371] bond0 (unregistering): Released all slaves [ 205.180514][T11468] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.180992][T11498] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 205.189765][T11468] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.193799][T11468] bridge_slave_1: entered allmulticast mode [ 205.217630][T11468] bridge_slave_1: entered promiscuous mode [ 205.251383][ T4371] IPVS: stopping backup sync thread 5199 ... [ 205.314849][ T4371] hsr_slave_0: left promiscuous mode [ 205.323418][ T4371] hsr_slave_1: left promiscuous mode [ 205.329700][ T4371] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 205.338402][ T4371] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 205.349437][ T4371] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 205.357928][ T4371] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 205.367790][T11524] loop5: detected capacity change from 0 to 2048 [ 205.401798][ T4371] veth1_macvtap: left promiscuous mode [ 205.408892][ T4371] veth0_macvtap: left promiscuous mode [ 205.416769][ T4371] veth1_vlan: left promiscuous mode [ 205.422626][ T4371] veth0_vlan: left promiscuous mode [ 205.455077][T11533] vhci_hcd: invalid port number 96 [ 205.460742][T11533] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 205.490010][T11536] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11536 comm=syz.4.2749 [ 205.597252][ T4371] team0 (unregistering): Port device team_slave_1 removed [ 205.614245][ T4371] team0 (unregistering): Port device C removed [ 205.674111][T11468] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 205.698194][T11535] wg2: entered promiscuous mode [ 205.703313][T11535] wg2: entered allmulticast mode [ 205.713764][T11468] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 205.782767][T11468] team0: Port device team_slave_0 added [ 205.795969][T11468] team0: Port device team_slave_1 added [ 205.812217][T11543] loop4: detected capacity change from 0 to 2048 [ 205.887448][T11546] loop2: detected capacity change from 0 to 1024 [ 205.936762][T11546] EXT4-fs: Ignoring removed nobh option [ 205.943431][T11546] EXT4-fs: Ignoring removed nobh option [ 205.951939][T11468] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 205.960081][T11468] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 205.988706][T11468] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 205.992478][T11546] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 206.009590][T11468] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 206.018405][T11468] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 206.020204][T11546] EXT4-fs error (device loop2): ext4_get_journal_inode:5796: comm syz.2.2758: inode #4294967295: comm syz.2.2758: iget: illegal inode # [ 206.050937][T11468] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 206.070922][ T4352] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 206.105416][T11544] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11544 comm=syz.1.2756 [ 206.137979][T11468] hsr_slave_0: entered promiscuous mode [ 206.144257][T11546] EXT4-fs (loop2): no journal found [ 206.149674][T11546] EXT4-fs (loop2): can't get journal size [ 206.157462][T11468] hsr_slave_1: entered promiscuous mode [ 206.165003][ T4352] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 206.178426][ T4352] EXT4-fs (loop5): This should not happen!! Data will be lost [ 206.178426][ T4352] [ 206.188953][ T4352] EXT4-fs (loop5): Total free blocks count 0 [ 206.195976][ T4352] EXT4-fs (loop5): Free/Dirty block details [ 206.202424][ T4352] EXT4-fs (loop5): free_blocks=2415919504 [ 206.209228][ T4352] EXT4-fs (loop5): dirty_blocks=16400 [ 206.215575][ T4352] EXT4-fs (loop5): Block reservation details [ 206.218084][T11546] EXT4-fs (loop2): failed to initialize system zone (-22) [ 206.222920][ T4352] EXT4-fs (loop5): i_reserved_data_blocks=1025 [ 206.232824][T11546] EXT4-fs (loop2): mount failed [ 206.274589][ T4350] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 206.288328][ T4350] EXT4-fs (loop5): This should not happen!! Data will be lost [ 206.288328][ T4350] [ 206.327681][T11555] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 206.476514][ T29] kauditd_printk_skb: 206 callbacks suppressed [ 206.476534][ T29] audit: type=1400 audit(1748620733.410:3134): avc: denied { read write } for pid=11560 comm="syz.1.2763" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 206.512945][T11562] vhci_hcd: invalid port number 96 [ 206.518389][T11562] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 206.530236][T11563] netlink: 'syz.1.2763': attribute type 10 has an invalid length. [ 206.546696][ T29] audit: type=1400 audit(1748620733.410:3135): avc: denied { open } for pid=11560 comm="syz.1.2763" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 206.572260][ T29] audit: type=1400 audit(1748620733.410:3136): avc: denied { ioctl } for pid=11560 comm="syz.1.2763" path="/dev/loop-control" dev="devtmpfs" ino=99 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 206.607074][T11565] loop2: detected capacity change from 0 to 128 [ 206.614945][T11563] ipvlan0: entered allmulticast mode [ 206.620396][T11563] veth0_vlan: entered allmulticast mode [ 206.629982][ T29] audit: type=1326 audit(1748620733.560:3137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11564 comm="syz.2.2765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28aa07e969 code=0x7ffc0000 [ 206.654623][ T29] audit: type=1326 audit(1748620733.560:3138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11564 comm="syz.2.2765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28aa07e969 code=0x7ffc0000 [ 206.678933][ T29] audit: type=1326 audit(1748620733.560:3139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11564 comm="syz.2.2765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f28aa07e969 code=0x7ffc0000 [ 206.682841][T11563] team0: Device ipvlan0 failed to register rx_handler [ 206.702968][ T29] audit: type=1326 audit(1748620733.560:3140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11564 comm="syz.2.2765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28aa07e969 code=0x7ffc0000 [ 206.703008][ T29] audit: type=1326 audit(1748620733.560:3141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11564 comm="syz.2.2765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28aa07e969 code=0x7ffc0000 [ 206.759086][ T29] audit: type=1326 audit(1748620733.560:3142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11564 comm="syz.2.2765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f28aa07e969 code=0x7ffc0000 [ 206.784174][ T29] audit: type=1326 audit(1748620733.560:3143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11564 comm="syz.2.2765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28aa07e969 code=0x7ffc0000 [ 206.812688][T11565] netlink: 'syz.2.2765': attribute type 1 has an invalid length. [ 206.844128][T11569] loop4: detected capacity change from 0 to 128 [ 206.867304][T11573] loop2: detected capacity change from 0 to 164 [ 206.877641][T11569] netlink: 'syz.4.2766': attribute type 1 has an invalid length. [ 206.894455][T11567] loop1: detected capacity change from 0 to 512 [ 206.907856][T11577] netlink: 'syz.5.2769': attribute type 39 has an invalid length. [ 206.922422][T11573] syz.2.2768: attempt to access beyond end of device [ 206.922422][T11573] loop2: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 206.937863][T11567] ext4 filesystem being mounted at /435/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 206.939265][T11573] syz.2.2768: attempt to access beyond end of device [ 206.939265][T11573] loop2: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 206.974822][T11583] loop4: detected capacity change from 0 to 164 [ 206.984066][T11583] syz.4.2770: attempt to access beyond end of device [ 206.984066][T11583] loop4: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 207.001586][T11583] syz.4.2770: attempt to access beyond end of device [ 207.001586][T11583] loop4: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 207.094299][T11595] loop1: detected capacity change from 0 to 2048 [ 207.132126][T11468] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 207.142727][T11468] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 207.162774][T11468] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 207.173687][T11468] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 207.183542][T11589] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11589 comm=syz.2.2773 [ 207.318600][T11468] 8021q: adding VLAN 0 to HW filter on device bond0 [ 207.352027][T11468] 8021q: adding VLAN 0 to HW filter on device team0 [ 207.377086][ T4380] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.384547][ T4380] bridge0: port 1(bridge_slave_0) entered forwarding state [ 207.413671][ T4380] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.421408][ T4380] bridge0: port 2(bridge_slave_1) entered forwarding state [ 207.456522][T11619] loop2: detected capacity change from 0 to 164 [ 207.491395][T11468] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 207.508150][T11613] syz.2.2781: attempt to access beyond end of device [ 207.508150][T11613] loop2: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 207.540142][T11613] syz.2.2781: attempt to access beyond end of device [ 207.540142][T11613] loop2: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 207.561961][T11621] tun0: tun_chr_ioctl cmd 2147767511 [ 207.579197][T11621] __nla_validate_parse: 10 callbacks suppressed [ 207.579218][T11621] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2784'. [ 207.599062][T11621] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2784'. [ 207.640203][T11468] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 207.817458][T11635] SELinux: failed to load policy [ 207.907565][T11468] veth0_vlan: entered promiscuous mode [ 207.910092][T11468] veth1_vlan: entered promiscuous mode [ 207.930237][T11468] veth0_macvtap: entered promiscuous mode [ 207.932039][T11468] veth1_macvtap: entered promiscuous mode [ 207.948250][T11468] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 207.952616][T11468] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 207.964833][T11468] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.964870][T11468] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.964901][T11468] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.964963][T11468] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.053352][T11643] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 208.116853][T11647] loop3: detected capacity change from 0 to 512 [ 208.185888][T11647] ext4 filesystem being mounted at /1/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 208.447662][T11653] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11653 comm=syz.1.2791 [ 208.483837][T11667] loop3: detected capacity change from 0 to 164 [ 208.495746][T11667] syz.3.2795: attempt to access beyond end of device [ 208.495746][T11667] loop3: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 208.536399][T11667] syz.3.2795: attempt to access beyond end of device [ 208.536399][T11667] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 208.593680][T11669] loop1: detected capacity change from 0 to 2048 [ 208.672821][T11680] loop4: detected capacity change from 0 to 512 [ 208.734533][T11683] vhci_hcd: invalid port number 96 [ 208.740558][T11683] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 208.756808][T11680] ext4 filesystem being mounted at /552/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 208.833522][ T4371] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 208.845064][ T4371] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.919125][ T4371] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 208.930413][ T4371] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.028550][ T4371] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 209.039424][ T4371] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.079475][T11687] loop5: detected capacity change from 0 to 1024 [ 209.090146][T11687] EXT4-fs: Ignoring removed bh option [ 209.098993][T11687] EXT4-fs: inline encryption not supported [ 209.107342][T11687] EXT4-fs: Ignoring removed i_version option [ 209.110617][T11688] lo speed is unknown, defaulting to 1000 [ 209.128625][ T4371] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 209.139482][ T4371] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.160041][T11702] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11702 comm=syz.3.2806 [ 209.176656][T11687] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 209.211371][T11708] netlink: 196 bytes leftover after parsing attributes in process `syz.4.2807'. [ 209.235852][T11687] EXT4-fs error (device loop5): ext4_map_blocks:816: inode #3: block 1: comm syz.5.2803: lblock 1 mapped to illegal pblock 1 (length 1) [ 209.257122][T11687] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.2803: Failed to acquire dquot type 0 [ 209.281154][T11687] EXT4-fs error (device loop5): ext4_free_blocks:6587: comm syz.5.2803: Freeing blocks not in datazone - block = 0, count = 4096 [ 209.303288][T11687] EXT4-fs error (device loop5): ext4_read_inode_bitmap:139: comm syz.5.2803: Invalid inode bitmap blk 0 in block_group 0 [ 209.318763][ T4350] EXT4-fs error (device loop5): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:11: lblock 1 mapped to illegal pblock 1 (length 1) [ 209.335413][T11687] EXT4-fs error (device loop5) in ext4_free_inode:361: Corrupt filesystem [ 209.371782][ T4350] EXT4-fs error (device loop5): ext4_release_dquot:6969: comm kworker/u8:11: Failed to release dquot type 0 [ 209.387293][T11687] EXT4-fs (loop5): 1 orphan inode deleted [ 209.419641][ T4371] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 209.435023][T11714] vhci_hcd: invalid port number 96 [ 209.440324][T11714] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 209.455117][ T4371] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 209.466580][ T4371] bond0 (unregistering): Released all slaves [ 209.513311][ T4371] hsr_slave_0: left promiscuous mode [ 209.529509][ T4371] hsr_slave_1: left promiscuous mode [ 209.544966][ T4371] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 209.552866][ T4371] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 209.566009][T11723] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11723 comm=syz.5.2803 [ 209.584950][ T4371] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 209.593394][ T4371] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 209.615051][T11727] loop1: detected capacity change from 0 to 512 [ 209.627728][T11727] ext4 filesystem being mounted at /446/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 209.641275][ T4371] veth1_macvtap: left promiscuous mode [ 209.648995][ T4371] veth0_macvtap: left promiscuous mode [ 209.655480][ T4371] veth1_vlan: left promiscuous mode [ 209.664011][ T4371] veth0_vlan: left promiscuous mode [ 209.738454][ T4371] team0 (unregistering): Port device batadv1 removed [ 209.861289][ T4371] team0 (unregistering): Port device team_slave_1 removed [ 209.885430][ T4371] team0 (unregistering): Port device team_slave_0 removed [ 209.983931][T11718] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2812'. [ 210.052116][T11735] lo speed is unknown, defaulting to 1000 [ 210.088759][T11688] chnl_net:caif_netlink_parms(): no params data found [ 210.143273][T11739] lo speed is unknown, defaulting to 1000 [ 210.245022][T11750] loop3: detected capacity change from 0 to 128 [ 210.261237][T11750] netlink: 'syz.3.2820': attribute type 1 has an invalid length. [ 210.396071][T11688] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.405297][T11688] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.414875][T11688] bridge_slave_0: entered allmulticast mode [ 210.423186][T11688] bridge_slave_0: entered promiscuous mode [ 210.436898][T11759] lo speed is unknown, defaulting to 1000 [ 210.465748][T11688] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.474972][T11688] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.488316][T11688] bridge_slave_1: entered allmulticast mode [ 210.498401][T11688] bridge_slave_1: entered promiscuous mode [ 210.544825][T11688] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 210.588569][T11688] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 210.627996][T11767] loop1: detected capacity change from 0 to 1024 [ 210.645949][T11767] EXT4-fs: Ignoring removed nobh option [ 210.652312][T11767] EXT4-fs: Ignoring removed nobh option [ 210.662949][T11767] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 210.674122][T11765] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 210.690345][T11767] EXT4-fs error (device loop1): ext4_get_journal_inode:5796: comm syz.1.2828: inode #4294967295: comm syz.1.2828: iget: illegal inode # [ 210.715060][T11774] loop3: detected capacity change from 0 to 512 [ 210.722827][T11767] EXT4-fs (loop1): no journal found [ 210.728135][T11767] EXT4-fs (loop1): can't get journal size [ 210.735583][T11688] team0: Port device team_slave_0 added [ 210.745399][T11765] lo speed is unknown, defaulting to 1000 [ 210.756845][T11778] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2831'. [ 210.765988][T11778] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2831'. [ 210.777945][T11767] EXT4-fs (loop1): failed to initialize system zone (-22) [ 210.785470][T11771] loop5: detected capacity change from 0 to 512 [ 210.787196][T11774] ext4 filesystem being mounted at /17/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 210.793601][T11688] team0: Port device team_slave_1 added [ 210.802703][T11771] EXT4-fs: Ignoring removed nobh option [ 210.812534][T11767] EXT4-fs (loop1): mount failed [ 210.819485][T11771] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 210.828283][T11771] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 210.840266][T11778] wireguard12: entered promiscuous mode [ 210.846029][T11778] wireguard12: entered allmulticast mode [ 210.852525][T11771] EXT4-fs (loop5): orphan cleanup on readonly fs [ 210.861044][T11771] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.2827: bg 0: block 64: padding at end of block bitmap is not set [ 210.876414][T11771] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.2827: Failed to acquire dquot type 0 [ 210.888398][T11771] EXT4-fs (loop5): 1 truncate cleaned up [ 210.926031][T11688] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 210.933949][T11688] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 210.961557][T11688] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 210.983164][T11688] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 210.990598][T11688] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 211.017316][T11688] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 211.066336][T11688] hsr_slave_0: entered promiscuous mode [ 211.072765][T11688] hsr_slave_1: entered promiscuous mode [ 211.079057][T11688] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 211.089983][T11688] Cannot create hsr debugfs directory [ 211.172301][T11799] netlink: 'syz.5.2839': attribute type 39 has an invalid length. [ 211.176128][T11798] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 211.249348][T11803] netlink: 'syz.5.2841': attribute type 39 has an invalid length. [ 211.331472][T11808] loop3: detected capacity change from 0 to 512 [ 211.350379][T11808] ext4 filesystem being mounted at /20/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 211.383563][T11812] loop4: detected capacity change from 0 to 512 [ 211.440061][T11812] ext4 filesystem being mounted at /560/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 211.464635][T11688] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 211.479425][T11688] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 211.489047][T11688] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 211.516414][T11688] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 211.528185][T11824] netlink: 196 bytes leftover after parsing attributes in process `syz.5.2848'. [ 211.582379][T11826] loop3: detected capacity change from 0 to 512 [ 211.593779][ T29] kauditd_printk_skb: 305 callbacks suppressed [ 211.593796][ T29] audit: type=1400 audit(1748620738.520:3444): avc: denied { setopt } for pid=11827 comm="syz.5.2851" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 211.637685][T11826] ext4 filesystem being mounted at /22/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 211.665053][T11828] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 211.677803][T11688] 8021q: adding VLAN 0 to HW filter on device bond0 [ 211.691973][T11688] 8021q: adding VLAN 0 to HW filter on device team0 [ 211.703576][ T4413] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.711062][ T4413] bridge0: port 1(bridge_slave_0) entered forwarding state [ 211.719482][T11835] vhci_hcd: invalid port number 96 [ 211.725143][T11835] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 211.739544][ T29] audit: type=1400 audit(1748620738.670:3445): avc: denied { write } for pid=11827 comm="syz.5.2851" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 211.760216][ T29] audit: type=1400 audit(1748620738.670:3446): avc: denied { connect } for pid=11827 comm="syz.5.2851" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 211.780372][ T29] audit: type=1400 audit(1748620738.670:3447): avc: denied { name_connect } for pid=11827 comm="syz.5.2851" dest=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 211.833854][ T4413] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.842056][ T4413] bridge0: port 2(bridge_slave_1) entered forwarding state [ 211.896890][T11839] loop4: detected capacity change from 0 to 1024 [ 211.900487][T11688] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 211.917734][T11688] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 211.917969][T11839] EXT4-fs: Ignoring removed bh option [ 211.999136][T11688] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 212.014673][T11839] EXT4-fs: inline encryption not supported [ 212.021070][T11839] EXT4-fs: Ignoring removed i_version option [ 212.052424][T11839] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 212.099063][T11839] EXT4-fs error (device loop4): ext4_map_blocks:816: inode #3: block 1: comm syz.4.2854: lblock 1 mapped to illegal pblock 1 (length 1) [ 212.116338][T11839] Quota error (device loop4): write_blk: dquota write failed [ 212.124298][T11839] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 212.136019][T11839] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.2854: Failed to acquire dquot type 0 [ 212.167439][T11839] EXT4-fs error (device loop4): ext4_free_blocks:6587: comm syz.4.2854: Freeing blocks not in datazone - block = 0, count = 4096 [ 212.203308][T11839] EXT4-fs error (device loop4): ext4_read_inode_bitmap:139: comm syz.4.2854: Invalid inode bitmap blk 0 in block_group 0 [ 212.205876][T11862] netlink: 196 bytes leftover after parsing attributes in process `syz.1.2860'. [ 212.227725][ T4350] EXT4-fs error (device loop4): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:11: lblock 1 mapped to illegal pblock 1 (length 1) [ 212.252558][T11861] loop3: detected capacity change from 0 to 512 [ 212.253880][T11839] EXT4-fs error (device loop4) in ext4_free_inode:361: Corrupt filesystem [ 212.260743][T11688] veth0_vlan: entered promiscuous mode [ 212.273933][T11839] EXT4-fs (loop4): 1 orphan inode deleted [ 212.275544][ T29] audit: type=1326 audit(1748620739.180:3448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11858 comm="syz.3.2859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb4e00e969 code=0x7ffc0000 [ 212.304662][ T4350] Quota error (device loop4): remove_tree: Can't read quota data block 1 [ 212.304692][ T4350] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:11: Failed to release dquot type 0 [ 212.325948][ T29] audit: type=1326 audit(1748620739.180:3449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11858 comm="syz.3.2859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcb4e00e969 code=0x7ffc0000 [ 212.327102][T11688] veth1_vlan: entered promiscuous mode [ 212.352155][ T29] audit: type=1326 audit(1748620739.180:3450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11858 comm="syz.3.2859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb4e00e969 code=0x7ffc0000 [ 212.368254][T11688] veth0_macvtap: entered promiscuous mode [ 212.395564][T11861] ext4 filesystem being mounted at /23/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 212.415404][T11688] veth1_macvtap: entered promiscuous mode [ 212.439140][T11857] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11857 comm=syz.5.2857 [ 212.458481][T11688] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 212.472481][T11868] loop1: detected capacity change from 0 to 164 [ 212.483763][T11868] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 212.496825][T11688] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 212.505210][T11868] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 212.511237][T11688] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.523658][T11688] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.524845][T11868] Symlink component flag not implemented [ 212.535288][T11688] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.543038][T11868] Symlink component flag not implemented [ 212.548068][T11837] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11837 comm=syz.4.2854 [ 212.554752][T11688] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.564907][T11868] Symlink component flag not implemented (7) [ 212.593966][T11868] Symlink component flag not implemented (116) [ 212.683362][T11880] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2865'. [ 212.693189][T11880] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2865'. [ 212.717978][T11883] loop4: detected capacity change from 0 to 128 [ 212.725371][T11880] wireguard5: entered promiscuous mode [ 212.731202][T11885] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2800'. [ 212.731350][T11880] wireguard5: entered allmulticast mode [ 212.740439][T11885] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2800'. [ 212.764015][T11883] syz.4.2866: attempt to access beyond end of device [ 212.764015][T11883] loop4: rw=2049, sector=129, nr_sectors = 8 limit=128 [ 212.779307][T11885] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2800'. [ 212.787152][T11875] lo speed is unknown, defaulting to 1000 [ 212.804894][T11883] syz.4.2866: attempt to access beyond end of device [ 212.804894][T11883] loop4: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 212.827139][T11885] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2800'. [ 212.834749][T11883] syz.4.2866: attempt to access beyond end of device [ 212.834749][T11883] loop4: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 212.842900][T11893] loop1: detected capacity change from 0 to 512 [ 212.869715][T11883] syz.4.2866: attempt to access beyond end of device [ 212.869715][T11883] loop4: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 212.893522][T11885] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2800'. [ 212.903070][T11885] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2800'. [ 212.913871][T11893] ext4 filesystem being mounted at /457/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 212.925320][T11883] syz.4.2866: attempt to access beyond end of device [ 212.925320][T11883] loop4: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 212.968725][T11883] syz.4.2866: attempt to access beyond end of device [ 212.968725][T11883] loop4: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 212.982875][T11897] syz.4.2866: attempt to access beyond end of device [ 212.982875][T11897] loop4: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 212.997108][T11883] syz.4.2866: attempt to access beyond end of device [ 212.997108][T11883] loop4: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 213.010786][T11897] syz.4.2866: attempt to access beyond end of device [ 213.010786][T11897] loop4: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 213.024679][T11883] syz.4.2866: attempt to access beyond end of device [ 213.024679][T11883] loop4: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 213.038900][T11904] netlink: 196 bytes leftover after parsing attributes in process `syz.3.2870'. [ 213.114065][T11891] loop5: detected capacity change from 0 to 1024 [ 213.137168][T11891] EXT4-fs: Ignoring removed bh option [ 213.145159][T11891] EXT4-fs: inline encryption not supported [ 213.153119][T11891] EXT4-fs: Ignoring removed i_version option [ 213.173684][T11891] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 213.241334][T11891] EXT4-fs error (device loop5): ext4_map_blocks:816: inode #3: block 1: comm syz.5.2869: lblock 1 mapped to illegal pblock 1 (length 1) [ 213.260945][T11911] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2873'. [ 213.267968][T11891] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.2869: Failed to acquire dquot type 0 [ 213.295066][T11914] netlink: 'syz.4.2874': attribute type 39 has an invalid length. [ 213.300300][T11891] EXT4-fs error (device loop5): ext4_free_blocks:6587: comm syz.5.2869: Freeing blocks not in datazone - block = 0, count = 4096 [ 213.332857][T11891] EXT4-fs error (device loop5): ext4_read_inode_bitmap:139: comm syz.5.2869: Invalid inode bitmap blk 0 in block_group 0 [ 213.333134][T11911] team0 (unregistering): Port device team_slave_0 removed [ 213.358975][ T4364] EXT4-fs error (device loop5): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:25: lblock 1 mapped to illegal pblock 1 (length 1) [ 213.364312][T11911] team0 (unregistering): Port device team_slave_1 removed [ 213.384210][T11891] EXT4-fs error (device loop5) in ext4_free_inode:361: Corrupt filesystem [ 213.385134][ T4364] EXT4-fs error (device loop5): ext4_release_dquot:6969: comm kworker/u8:25: Failed to release dquot type 0 [ 213.400198][T11891] EXT4-fs (loop5): 1 orphan inode deleted [ 213.453256][T11909] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11909 comm=syz.3.2872 [ 213.472965][T11927] FAULT_INJECTION: forcing a failure. [ 213.472965][T11927] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 213.486139][T11927] CPU: 1 UID: 0 PID: 11927 Comm: syz.4.2879 Not tainted 6.15.0-syzkaller-08486-gf66bc387efbe #0 PREEMPT(voluntary) [ 213.486187][T11927] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 213.486202][T11927] Call Trace: [ 213.486210][T11927] [ 213.486220][T11927] __dump_stack+0x1d/0x30 [ 213.486247][T11927] dump_stack_lvl+0xe8/0x140 [ 213.486301][T11927] dump_stack+0x15/0x1b [ 213.486321][T11927] should_fail_ex+0x265/0x280 [ 213.486356][T11927] should_fail+0xb/0x20 [ 213.486402][T11927] should_fail_usercopy+0x1a/0x20 [ 213.486425][T11927] _copy_from_user+0x1c/0xb0 [ 213.486452][T11927] vmemdup_user+0x59/0xd0 [ 213.486532][T11927] map_get_next_key+0x140/0x330 [ 213.486556][T11927] ? __sys_bpf+0x6fd/0x790 [ 213.486598][T11927] __sys_bpf+0x707/0x790 [ 213.486644][T11927] __x64_sys_bpf+0x41/0x50 [ 213.486712][T11927] x64_sys_call+0x2478/0x2fb0 [ 213.486738][T11927] do_syscall_64+0xd2/0x200 [ 213.486802][T11927] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 213.486839][T11927] ? clear_bhb_loop+0x40/0x90 [ 213.486881][T11927] ? clear_bhb_loop+0x40/0x90 [ 213.486903][T11927] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.486958][T11927] RIP: 0033:0x7fd3e67be969 [ 213.486977][T11927] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 213.486995][T11927] RSP: 002b:00007fd3e4e27038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 213.487013][T11927] RAX: ffffffffffffffda RBX: 00007fd3e69e5fa0 RCX: 00007fd3e67be969 [ 213.487025][T11927] RDX: 0000000000000020 RSI: 0000200000000480 RDI: 0000000000000004 [ 213.487038][T11927] RBP: 00007fd3e4e27090 R08: 0000000000000000 R09: 0000000000000000 [ 213.487084][T11927] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 213.487100][T11927] R13: 0000000000000000 R14: 00007fd3e69e5fa0 R15: 00007ffde91b11c8 [ 213.487124][T11927] [ 213.738488][T11929] lo speed is unknown, defaulting to 1000 [ 213.744932][T11891] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11891 comm=syz.5.2869 [ 213.816262][T11932] loop4: detected capacity change from 0 to 8192 [ 213.892298][T11941] loop3: detected capacity change from 0 to 512 [ 213.936586][T11941] ext4 filesystem being mounted at /30/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 213.981706][T11958] FAULT_INJECTION: forcing a failure. [ 213.981706][T11958] name failslab, interval 1, probability 0, space 0, times 0 [ 213.995607][T11958] CPU: 1 UID: 0 PID: 11958 Comm: syz.5.2892 Not tainted 6.15.0-syzkaller-08486-gf66bc387efbe #0 PREEMPT(voluntary) [ 213.995711][T11958] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 213.995728][T11958] Call Trace: [ 213.995736][T11958] [ 213.995746][T11958] __dump_stack+0x1d/0x30 [ 213.995772][T11958] dump_stack_lvl+0xe8/0x140 [ 213.995797][T11958] dump_stack+0x15/0x1b [ 213.995882][T11958] should_fail_ex+0x265/0x280 [ 213.995929][T11958] should_failslab+0x8c/0xb0 [ 213.995957][T11958] __kvmalloc_node_noprof+0x126/0x4f0 [ 213.995993][T11958] ? proc_sys_call_handler+0x243/0x4a0 [ 213.996052][T11958] proc_sys_call_handler+0x243/0x4a0 [ 213.996084][T11958] ? __pfx_proc_sys_write+0x10/0x10 [ 213.996111][T11958] proc_sys_write+0x22/0x30 [ 213.996137][T11958] vfs_write+0x4a0/0x8e0 [ 213.996217][T11958] ksys_write+0xda/0x1a0 [ 213.996241][T11958] __x64_sys_write+0x40/0x50 [ 213.996264][T11958] x64_sys_call+0x2cdd/0x2fb0 [ 213.996291][T11958] do_syscall_64+0xd2/0x200 [ 213.996401][T11958] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 213.996434][T11958] ? clear_bhb_loop+0x40/0x90 [ 213.996461][T11958] ? clear_bhb_loop+0x40/0x90 [ 213.996490][T11958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.996584][T11958] RIP: 0033:0x7f3cc630e969 [ 213.996604][T11958] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 213.996627][T11958] RSP: 002b:00007f3cc4977038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 213.996650][T11958] RAX: ffffffffffffffda RBX: 00007f3cc6535fa0 RCX: 00007f3cc630e969 [ 213.996666][T11958] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 213.996681][T11958] RBP: 00007f3cc4977090 R08: 0000000000000000 R09: 0000000000000000 [ 213.996696][T11958] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 213.996711][T11958] R13: 0000000000000000 R14: 00007f3cc6535fa0 R15: 00007fff6762dd98 [ 213.996808][T11958] [ 214.353130][T11971] lo speed is unknown, defaulting to 1000 [ 214.434778][T11976] tun0: tun_chr_ioctl cmd 2147767511 [ 214.469730][T11985] netlink: 'syz.3.2903': attribute type 39 has an invalid length. [ 214.481987][T11987] FAULT_INJECTION: forcing a failure. [ 214.481987][T11987] name failslab, interval 1, probability 0, space 0, times 0 [ 214.495465][T11987] CPU: 1 UID: 0 PID: 11987 Comm: syz.5.2905 Not tainted 6.15.0-syzkaller-08486-gf66bc387efbe #0 PREEMPT(voluntary) [ 214.495499][T11987] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 214.495515][T11987] Call Trace: [ 214.495523][T11987] [ 214.495532][T11987] __dump_stack+0x1d/0x30 [ 214.495556][T11987] dump_stack_lvl+0xe8/0x140 [ 214.495576][T11987] dump_stack+0x15/0x1b [ 214.495591][T11987] should_fail_ex+0x265/0x280 [ 214.495625][T11987] should_failslab+0x8c/0xb0 [ 214.495650][T11987] kmem_cache_alloc_noprof+0x50/0x310 [ 214.495680][T11987] ? vm_area_dup+0x32/0x230 [ 214.495705][T11987] vm_area_dup+0x32/0x230 [ 214.495731][T11987] __split_vma+0xe9/0x610 [ 214.495761][T11987] ? tracing_record_taskinfo_sched_switch+0x71/0x260 [ 214.495800][T11987] ? probe_sched_wakeup+0x85/0xa0 [ 214.495851][T11987] vms_gather_munmap_vmas+0x172/0x7a0 [ 214.495879][T11987] ? try_to_wake_up+0x3df/0x630 [ 214.495919][T11987] ? __list_del_entry_valid_or_report+0x65/0x130 [ 214.495949][T11987] ? audit_log_end+0x1d7/0x1f0 [ 214.495989][T11987] do_vmi_align_munmap+0x1a4/0x3d0 [ 214.496027][T11987] do_vmi_munmap+0x1db/0x220 [ 214.496055][T11987] __vm_munmap+0x1a1/0x280 [ 214.496091][T11987] __x64_sys_munmap+0x36/0x50 [ 214.496114][T11987] x64_sys_call+0xa65/0x2fb0 [ 214.496203][T11987] do_syscall_64+0xd2/0x200 [ 214.496241][T11987] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 214.496273][T11987] ? clear_bhb_loop+0x40/0x90 [ 214.496296][T11987] ? clear_bhb_loop+0x40/0x90 [ 214.496317][T11987] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.496339][T11987] RIP: 0033:0x7f3cc630e969 [ 214.496357][T11987] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 214.496424][T11987] RSP: 002b:00007f3cc4977038 EFLAGS: 00000246 ORIG_RAX: 000000000000000b [ 214.496447][T11987] RAX: ffffffffffffffda RBX: 00007f3cc6535fa0 RCX: 00007f3cc630e969 [ 214.496462][T11987] RDX: 0000000000000000 RSI: 0000000000001000 RDI: 0000200000002000 [ 214.496475][T11987] RBP: 00007f3cc4977090 R08: 0000000000000000 R09: 0000000000000000 [ 214.496490][T11987] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 214.496504][T11987] R13: 0000000000000000 R14: 00007f3cc6535fa0 R15: 00007fff6762dd98 [ 214.496527][T11987] [ 214.775127][T11989] vhci_hcd: invalid port number 96 [ 214.780613][T11989] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 214.811518][T12002] FAULT_INJECTION: forcing a failure. [ 214.811518][T12002] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 214.824830][T12002] CPU: 1 UID: 0 PID: 12002 Comm: syz.5.2911 Not tainted 6.15.0-syzkaller-08486-gf66bc387efbe #0 PREEMPT(voluntary) [ 214.824914][T12002] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 214.824962][T12002] Call Trace: [ 214.824971][T12002] [ 214.824980][T12002] __dump_stack+0x1d/0x30 [ 214.825005][T12002] dump_stack_lvl+0xe8/0x140 [ 214.825030][T12002] dump_stack+0x15/0x1b [ 214.825051][T12002] should_fail_ex+0x265/0x280 [ 214.825136][T12002] should_fail_alloc_page+0xf2/0x100 [ 214.825178][T12002] __alloc_frozen_pages_noprof+0xff/0x360 [ 214.825222][T12002] alloc_pages_mpol+0xb3/0x250 [ 214.825278][T12002] alloc_pages_noprof+0x90/0x130 [ 214.825386][T12002] __pmd_alloc+0x47/0x460 [ 214.825412][T12002] handle_mm_fault+0x19ae/0x2c00 [ 214.825434][T12002] ? __rcu_read_unlock+0x4f/0x70 [ 214.825468][T12002] do_user_addr_fault+0x3fe/0x1090 [ 214.825568][T12002] exc_page_fault+0x62/0xa0 [ 214.825592][T12002] asm_exc_page_fault+0x26/0x30 [ 214.825614][T12002] RIP: 0010:__put_user_4+0xd/0x20 [ 214.825713][T12002] Code: 66 89 01 31 c9 0f 01 ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 [ 214.825738][T12002] RSP: 0018:ffffc9000145bea0 EFLAGS: 00050202 [ 214.825757][T12002] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000200000000040 [ 214.825791][T12002] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000ffffffff [ 214.825806][T12002] RBP: 0000000000000000 R08: 0001ffff8685ee23 R09: 0000000000000000 [ 214.825836][T12002] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 214.825847][T12002] R13: ffffffff8685ee20 R14: 0000000000000000 R15: 0000200000000180 [ 214.825865][T12002] __se_sys_getresuid+0xb9/0x130 [ 214.825986][T12002] __x64_sys_getresuid+0x43/0x50 [ 214.826080][T12002] x64_sys_call+0x2ca6/0x2fb0 [ 214.826117][T12002] do_syscall_64+0xd2/0x200 [ 214.826143][T12002] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 214.826168][T12002] ? clear_bhb_loop+0x40/0x90 [ 214.826249][T12002] ? clear_bhb_loop+0x40/0x90 [ 214.826277][T12002] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.826308][T12002] RIP: 0033:0x7f3cc630e969 [ 214.826327][T12002] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 214.826350][T12002] RSP: 002b:00007f3cc4977038 EFLAGS: 00000246 ORIG_RAX: 0000000000000076 [ 214.826372][T12002] RAX: ffffffffffffffda RBX: 00007f3cc6535fa0 RCX: 00007f3cc630e969 [ 214.826388][T12002] RDX: 0000200000000180 RSI: 0000200000000100 RDI: 0000200000000040 [ 214.826402][T12002] RBP: 00007f3cc4977090 R08: 0000000000000000 R09: 0000000000000000 [ 214.826416][T12002] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 214.826483][T12002] R13: 0000000000000001 R14: 00007f3cc6535fa0 R15: 00007fff6762dd98 [ 214.826508][T12002] [ 215.177237][T12007] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 215.177722][T12009] loop4: detected capacity change from 0 to 512 [ 215.198093][T12004] lo speed is unknown, defaulting to 1000 [ 215.198103][T12007] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 215.217699][T12009] ext4 filesystem being mounted at /573/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 215.341769][T12022] loop3: detected capacity change from 0 to 128 [ 215.355452][T12021] tun0: tun_chr_ioctl cmd 2147767511 [ 215.373568][ T3329] ================================================================== [ 215.382674][ T3329] BUG: KCSAN: data-race in find_get_block_common / has_bh_in_lru [ 215.390456][ T3329] [ 215.393142][ T3329] read-write to 0xffff888237d26f70 of 8 bytes by task 12022 on cpu 1: [ 215.401518][ T3329] find_get_block_common+0x4f0/0x960 [ 215.406934][ T3329] bdev_getblk+0x83/0x3d0 [ 215.411575][ T3329] __bread_gfp+0x51/0x250 [ 215.415955][ T3329] fat_ent_bread+0xc9/0x1a0 [ 215.420622][ T3329] fat_ent_read+0x3ad/0x5a0 [ 215.425793][ T3329] fat_get_cluster+0x4b2/0x7b0 [ 215.430757][ T3329] fat_truncate_blocks+0x27d/0x550 [ 215.435940][ T3329] fat_write_end+0xba/0x160 [ 215.440652][ T3329] generic_perform_write+0x312/0x490 [ 215.445972][ T3329] __generic_file_write_iter+0x9e/0x120 [ 215.451791][ T3329] generic_file_write_iter+0x8d/0x2f0 [ 215.457187][ T3329] vfs_write+0x4a0/0x8e0 [ 215.461462][ T3329] __x64_sys_pwrite64+0xfd/0x150 [ 215.466949][ T3329] x64_sys_call+0xe45/0x2fb0 [ 215.471737][ T3329] do_syscall_64+0xd2/0x200 [ 215.476343][ T3329] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.482274][ T3329] [ 215.484620][ T3329] read to 0xffff888237d26f70 of 8 bytes by task 3329 on cpu 0: [ 215.492430][ T3329] has_bh_in_lru+0x35/0x1f0 [ 215.497045][ T3329] __lru_add_drain_all+0x234/0x3f0 [ 215.502174][ T3329] lru_add_drain_all+0x10/0x20 [ 215.506948][ T3329] invalidate_bdev+0x47/0x70 [ 215.511773][ T3329] ext4_put_super+0x624/0x7d0 [ 215.516829][ T3329] generic_shutdown_super+0xe6/0x210 [ 215.522483][ T3329] kill_block_super+0x2a/0x70 [ 215.527256][ T3329] ext4_kill_sb+0x42/0x80 [ 215.531687][ T3329] deactivate_locked_super+0x75/0x1c0 [ 215.537269][ T3329] deactivate_super+0x97/0xa0 [ 215.541970][ T3329] cleanup_mnt+0x269/0x2e0 [ 215.546749][ T3329] __cleanup_mnt+0x19/0x20 [ 215.551594][ T3329] task_work_run+0x12e/0x1a0 [ 215.556444][ T3329] exit_to_user_mode_loop+0xe4/0x100 [ 215.561984][ T3329] do_syscall_64+0x1d6/0x200 [ 215.566696][ T3329] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.572602][ T3329] [ 215.574950][ T3329] value changed: 0x0000000000000000 -> 0xffff888111603ea0 [ 215.582150][ T3329] [ 215.584560][ T3329] Reported by Kernel Concurrency Sanitizer on: [ 215.591079][ T3329] CPU: 0 UID: 0 PID: 3329 Comm: syz-executor Not tainted 6.15.0-syzkaller-08486-gf66bc387efbe #0 PREEMPT(voluntary) [ 215.603453][ T3329] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 215.613798][ T3329] ==================================================================