last executing test programs: 1m30.164826349s ago: executing program 4 (id=126): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x3, 0x0, @vifc_lcl_addr=@local, @local}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000240)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0xfb, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @echo_reply={0x0, 0x0, 0x0, 0x64, 0xd2}}}}}, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r2, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xfffffff7, 0x4, 0x40000006}, 0x3c) 1m30.024577962s ago: executing program 4 (id=128): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r0, 0x400, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0xffffffffffffffef}, 0x27) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000500)='leases_conflict\x00', r1}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000340)='leases_conflict\x00', r2}, 0x18) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) 1m29.994263513s ago: executing program 4 (id=130): bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)={0x4c, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) sendmsg$IPSET_CMD_TEST(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="640000000906010800000000000000000600000505000100070000003c0007801800148014000240fc0000000000000000000000000000011800018014000240ff01000000000000000000000000000105000300070000000900020073797a31"], 0x64}}, 0x4800) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c0000000306010200000000000000000700000a050001000700"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40814) 1m29.913110994s ago: executing program 4 (id=133): syz_mount_image$iso9660(&(0x7f0000000340), &(0x7f0000000c80)='./file0\x00', 0x1004491, &(0x7f0000000000)=ANY=[], 0x2, 0x838, &(0x7f0000000cc0)="$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") r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount_setattr(r4, &(0x7f0000000100)='.\x00', 0x9000, &(0x7f0000001dc0)={0x0, 0x85, 0x20000}, 0x20) 1m29.719098178s ago: executing program 4 (id=136): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x61980, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) move_pages(0x0, 0x20a0, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000000), 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000200)='kfree\x00', r0, 0x0, 0x80}, 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_io_uring_setup(0x499, &(0x7f0000000400)={0x0, 0xd146, 0x0, 0x40003, 0x288}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r1, 0x0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x30}}) io_uring_enter(r2, 0x6b03, 0xd5c5, 0x4, 0x0, 0x0) 1m29.270095417s ago: executing program 4 (id=148): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32=0x0], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x40f00, 0x8}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8a}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000400000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x69, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000c}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='kfree\x00', r1}, 0x10) memfd_create(0x0, 0x5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000003580)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0xffffffffffffffff}], 0x9, 0x0) 1m29.263773887s ago: executing program 32 (id=148): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32=0x0], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x40f00, 0x8}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8a}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000400000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x69, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000c}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='kfree\x00', r1}, 0x10) memfd_create(0x0, 0x5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000003580)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0xffffffffffffffff}], 0x9, 0x0) 15.833885501s ago: executing program 1 (id=1645): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) r2 = socket$xdp(0x2c, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x4) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000000040)=0x1000000, 0x4) writev(r3, &(0x7f0000000100)=[{&(0x7f0000000180)="480000001400190d7ebdeb75fd0d9c562c84d8c033aae421962ea6ff3cd3c461ebe430a2ed7a80ffe0090f000000000000a2bc5603ca00000f7f89000000200000004a2471083ec6", 0x48}], 0x1) 15.404874619s ago: executing program 1 (id=1656): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000380)='devtmpfs\x00', 0x4000, 0x0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000180)='tmpfs\x00', 0x3200890, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r2}, 0x10) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x262) 15.35706781s ago: executing program 1 (id=1660): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r1}, 0x18) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f0000000940), 0x10) listen(r2, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) 15.329804021s ago: executing program 1 (id=1662): prlimit64(0x0, 0xe, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000440)='./file2\x00', 0x80, &(0x7f0000000480), 0x1, 0x3f5, &(0x7f00000004c0)="$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") r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) write$binfmt_register(r0, &(0x7f0000000340)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x9, 0x3a, '+\'', 0x3a, '', 0x3a, './file2', 0x3a, [0x46]}, 0x2a) 15.282749492s ago: executing program 1 (id=1665): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', '#\x00'}, 0x28) writev(r0, &(0x7f0000000400)=[{&(0x7f0000000280)="581a17919cc77431510e7fc4ed9fb860505f1495ff92f16a44f8a13d58751d926def1f80b315bdc726cdd8b5d1a91f485854af8fc854b0da7a02522fe7b2c21db7a46c48473099d4a4654cfd97a67c9e79afc0d444e6c78b0216d2201b128df9d4ed5b4dbe676fe56a6354f819d997a6acb8595633cff6f77473b2b3abcc65b51cb3d3a30bf9b0b2ce59d568d3a89b49331904da2a37c89ea236f5d5640c32c3ac74e4bde1a62c560cb63836552f881c8a8305d2a13d838a5160a6c06c63decc865a92e9539f3513af3a1e6f78608890f912f087214dac06387a94d5e1b31c35be117ee540dc4560aa500269b81a0bbc", 0xf0}, {&(0x7f0000000100)="1d4ac370cf8c47025bd7a6566c8bd20f39915734b4a24e9b596dfcd1abdb72276d5f80b1d38cedd7d704de6ec72fa6861cd700b4f8c0f594861c0296", 0x3c}, {&(0x7f0000000a40)="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", 0x143}, {&(0x7f0000000500)="83c0b58e5bcffe6c14ab199d81f63d9e77512d040c3f3a7b41a3a1ed6cf40450443e4e377139b523eb3dd725f87a1ed946e28c6b19e1fc6ea21fe2eef736ec85289f34830b89c7169369862871b9608f2e976924a41f64f236a395563ddb3b994b4d9cf9f465dea2adad06013851713e9d30f195383be99db35611dd11a69721e423fcf5904c2af8ca4b1774bc6438d1c6218a2ada56c8b5b289274c2d116ecd4aafbd01536f931c84ec7f95ce8c6d118d1dec3bfa645c3e72018e9c154a80fd84b6e0233520ee1dc56ec6247282000000000000000000", 0xd7}, {&(0x7f0000004480)="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", 0xda9}, {&(0x7f00000001c0)="aba1501aab68c98b25f2a20fd588ccbb9eb6a11a63c2af70c8d13d17203fcea6070b6cef7d3590e1fdb152e02a93faa1d6dbdc5521f78e31514c", 0x3a}, {&(0x7f0000001040)="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", 0xecb}], 0x7) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) readv(r0, &(0x7f0000000e40)=[{&(0x7f0000000f40)=""/250, 0xff1}], 0x1) 14.995650768s ago: executing program 1 (id=1670): ioctl$GIO_UNIMAP(0xffffffffffffffff, 0x4b66, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70300001d000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000200)={[{@noload}, {@nojournal_checksum}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@resgid}, {@jqfmt_vfsold}, {@journal_dev={'journal_dev', 0x3d, 0x800}}, {@nobh}, {@inlinecrypt}, {@grpquota}, {@dioread_nolock}]}, 0x1, 0x565, &(0x7f00000003c0)="$eJzs3c9rHFUcAPDvbH71lzaFUlREAj1Yqd00iT8qeKhH0WJB73VJpqFk0y3ZTWliwfZgL16kCCIWxLvePRb/Af+KghaKlKAHL5HZzCZps5ts0013634+MOG9mdl9892Z78ubfbtsAH1rLPtTiHg5Ir5JIg5HRJJvG4x849jafisPr09nSxKrq5/+ldT3y+qN52o87mBeeSkifvsq4mRha7vVpeW5UrmcLuT18dr8lfHq0vKpS/Ol2XQ2vTw5NXXm7anJ9959p2OxvnH+n+8/ufvhma+Pr3z3y/0jt5M4G4fybZvjeAo3NlfGYix/TYbi7GM7TnSgsV6SdPsA2JWBPM+HIusDDsdAnvXA/9+XEbEK9KlE/kOfaowDGvf2HboPfm48+GDtBmhr/INr743Evvq90YGV5JE7o+x+d7QD7Wdt/PrnndvZEp17HwJgRzduRsTpwcGt/V+S93+7d7qNfR5vQ/8Hz87dbPzzZrPxT2F9/BNNxj8jTXJ3N3bO/8L9DjTTUjb+e7/p+Hd90mp0IK+9UB/zDSUXL5XTrG97MSJOxNBIVt9uPufMyr3VVts2j/+yJWu/MRbMj+P+4Mijj5kp1UpPE/NmD25GvNJ0/Jusn/+kyfnPXo/zbbZxLL3zWqttO8e/t1Z/ini96fnfmNFKtp+fHK9fD+ONq2Krv28d+71V+63ivzqyB8E2kZ3/A9vHP5psnq+tPnkbP+77N2217ZH4o/3rfzj5rF4eztddK9VqCxMRw8nHW9dPbjy2UW/sn8V/4vj2/d+hJtf//oj4vM34bx39+dW24u/C9Z/FP/NE5//JC/c++uKHVu231/+9VS+dyNe00/+1e4BP89oBAAAAAABArylExKFICsX1cqFQLK59h/doHCiUK9XayYuVxcszUZ8HHY2hQmOm+/Cmz0NM5J+HbdQnH6tPRcSRiPh2YH+9XpyulGe6HTwAAAAAAAAAAAAAAAAAAAD0iIMtvv+f+WOg20cH7Dk/+Q39a8f878QvPQE9yf9/6F/yH/qX/If+Jf+hf8l/6F/yH/qX/If+Jf8BAAAAAAAAAAAAAAAAAAAAAAAAAACgo86fO5ctqysPr09n9ZmrS4tzlaunZtLqXHF+cbo4XVm4UpytVGbLaXG6Mr/T85UrlSsTk7F4bbyWVmvj1aXlC/OVxcu1C5fmS7PphXTomUQFAAAAAAAAAAAAAAAAAAAAz5fq0vJcqVxOFxQUdlUY7I3D6GZhODbWjPbA8XSk0O2eCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA2/BcAAP//k4E29A==") r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x6) ioctl$FS_IOC_RESVSP(r2, 0x40305839, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1000001000}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwritev2(r3, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0x1}], 0x1, 0xe7b, 0x4, 0x2) 14.995358717s ago: executing program 33 (id=1670): ioctl$GIO_UNIMAP(0xffffffffffffffff, 0x4b66, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70300001d000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000200)={[{@noload}, {@nojournal_checksum}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@resgid}, {@jqfmt_vfsold}, {@journal_dev={'journal_dev', 0x3d, 0x800}}, {@nobh}, {@inlinecrypt}, {@grpquota}, {@dioread_nolock}]}, 0x1, 0x565, &(0x7f00000003c0)="$eJzs3c9rHFUcAPDvbH71lzaFUlREAj1Yqd00iT8qeKhH0WJB73VJpqFk0y3ZTWliwfZgL16kCCIWxLvePRb/Af+KghaKlKAHL5HZzCZps5ts0013634+MOG9mdl9892Z78ubfbtsAH1rLPtTiHg5Ir5JIg5HRJJvG4x849jafisPr09nSxKrq5/+ldT3y+qN52o87mBeeSkifvsq4mRha7vVpeW5UrmcLuT18dr8lfHq0vKpS/Ol2XQ2vTw5NXXm7anJ9959p2OxvnH+n+8/ufvhma+Pr3z3y/0jt5M4G4fybZvjeAo3NlfGYix/TYbi7GM7TnSgsV6SdPsA2JWBPM+HIusDDsdAnvXA/9+XEbEK9KlE/kOfaowDGvf2HboPfm48+GDtBmhr/INr743Evvq90YGV5JE7o+x+d7QD7Wdt/PrnndvZEp17HwJgRzduRsTpwcGt/V+S93+7d7qNfR5vQ/8Hz87dbPzzZrPxT2F9/BNNxj8jTXJ3N3bO/8L9DjTTUjb+e7/p+Hd90mp0IK+9UB/zDSUXL5XTrG97MSJOxNBIVt9uPufMyr3VVts2j/+yJWu/MRbMj+P+4Mijj5kp1UpPE/NmD25GvNJ0/Jusn/+kyfnPXo/zbbZxLL3zWqttO8e/t1Z/ini96fnfmNFKtp+fHK9fD+ONq2Krv28d+71V+63ivzqyB8E2kZ3/A9vHP5psnq+tPnkbP+77N2217ZH4o/3rfzj5rF4eztddK9VqCxMRw8nHW9dPbjy2UW/sn8V/4vj2/d+hJtf//oj4vM34bx39+dW24u/C9Z/FP/NE5//JC/c++uKHVu231/+9VS+dyNe00/+1e4BP89oBAAAAAABArylExKFICsX1cqFQLK59h/doHCiUK9XayYuVxcszUZ8HHY2hQmOm+/Cmz0NM5J+HbdQnH6tPRcSRiPh2YH+9XpyulGe6HTwAAAAAAAAAAAAAAAAAAAD0iIMtvv+f+WOg20cH7Dk/+Q39a8f878QvPQE9yf9/6F/yH/qX/If+Jf+hf8l/6F/yH/qX/If+Jf8BAAAAAAAAAAAAAAAAAAAAAAAAAACgo86fO5ctqysPr09n9ZmrS4tzlaunZtLqXHF+cbo4XVm4UpytVGbLaXG6Mr/T85UrlSsTk7F4bbyWVmvj1aXlC/OVxcu1C5fmS7PphXTomUQFAAAAAAAAAAAAAAAAAAAAz5fq0vJcqVxOFxQUdlUY7I3D6GZhODbWjPbA8XSk0O2eCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA2/BcAAP//k4E29A==") r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x6) ioctl$FS_IOC_RESVSP(r2, 0x40305839, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1000001000}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwritev2(r3, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0x1}], 0x1, 0xe7b, 0x4, 0x2) 2.532302421s ago: executing program 5 (id=1933): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x39) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000840)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r2, 0x31, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4e, 0x0, 0x0, 0xfffffffffffffe9a, 0x0, 0x0, 0x0, 0x0}}, 0x10) r4 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000004c0)={r3}, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f13df33c9f7b986", 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.414790813s ago: executing program 5 (id=1937): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_bp={0x0}, 0x100202, 0x0, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x13, 0x20000000000001e3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r3, 0x24, &(0x7f00000000c0)={0x2, 0x0, 0xc63, 0x401}) 2.402039593s ago: executing program 5 (id=1938): bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='sys_enter\x00', r2}, 0x10) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) pidfd_getfd(r4, r4, 0x0) 2.385487004s ago: executing program 5 (id=1939): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x7, 0x9) write$P9_RWRITE(r3, &(0x7f0000000040)={0xb}, 0x11000) read(r2, &(0x7f0000032440)=""/102364, 0x18fdc) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) 1.571280359s ago: executing program 2 (id=1958): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x1400c, &(0x7f0000000840)={[{@stripe={'stripe', 0x3d, 0x3d}}, {@init_itable}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x3, 0x44d, &(0x7f0000000340)="$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") creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x19f) mkdirat(0xffffffffffffff9c, &(0x7f0000001dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4, 0x1) bpf$MAP_CREATE(0x0, 0x0, 0x50) connect$unix(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x183341, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) rename(&(0x7f0000001800)='./file0\x00', &(0x7f0000001080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 1.53125699s ago: executing program 2 (id=1959): sched_setscheduler(0x0, 0x5, &(0x7f0000000480)) ioprio_set$pid(0x2, 0x0, 0x0) r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) ftruncate(r2, 0x2007ffb) sendfile(r2, r2, 0x0, 0x1000000201005) 1.529055541s ago: executing program 5 (id=1960): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x8000, &(0x7f0000001dc0)={0x0, 0x72, 0x20000}, 0x20) 1.500110891s ago: executing program 5 (id=1961): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r1, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x3}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0xffffffff}}, 0xe8) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) 1.347758084s ago: executing program 6 (id=1964): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000040)={{r0}, &(0x7f0000000140), &(0x7f0000000200)='%pS \x00'}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x23) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000400), 0x101201, 0x0) ioctl$IMADDTIMER(r2, 0x80044940, &(0x7f0000000600)=0x14) ioctl$IMADDTIMER(r2, 0x80044940, &(0x7f0000000080)=0x14) close(r2) 1.347128064s ago: executing program 6 (id=1966): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='rss_stat\x00', r1}, 0x10) syz_clone(0x60000400, 0x0, 0x0, 0x0, 0x0, 0x0) 1.219683927s ago: executing program 0 (id=1969): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0xb76e}, 0x100002, 0x0, 0xfffffffc, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x800, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200a}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) syz_read_part_table(0x593, &(0x7f00000005c0)="$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") 1.145234748s ago: executing program 0 (id=1970): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r0, 0x10c000) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x2000000b, 0x80, &(0x7f0000000240)={0x3, 0x0, 0xfffa, 0x4360}, 0x8, 0x6, 0x7d, 0x0, 0x1, 0x101, 0x0}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000480)='kfree\x00', r2, 0x0, 0x7}, 0x18) ioctl$USBDEVFS_REAPURBNDELAY(r0, 0x4008550d, &(0x7f0000000040)) 1.05570942s ago: executing program 6 (id=1972): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xfffffffc}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) sendmmsg$inet(r2, &(0x7f00000039c0)=[{{&(0x7f0000000800)={0x2, 0x6e1a, @multicast1}, 0x10, 0x0}}], 0x1, 0x2000c044) sendto$inet(r2, &(0x7f0000000c80)="e8", 0x6200, 0x12000000, 0x0, 0x0) 1.05534355s ago: executing program 0 (id=1973): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0xfd}]}, 0x10) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) 1.054689689s ago: executing program 6 (id=1975): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = inotify_init() inotify_add_watch(r2, &(0x7f0000000340)='.\x00', 0xa50003d1) readv(r2, &(0x7f0000000140)=[{&(0x7f0000000040)=""/182, 0xb6}], 0x1) mkdir(&(0x7f0000000180)='./file0\x00', 0xffa1) 734.094386ms ago: executing program 3 (id=1976): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, &(0x7f0000000940)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002"], 0x310) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(0xffffffffffffffff, 0x40089413, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x100, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r2}, 0x10) syz_emit_ethernet(0x9e, &(0x7f0000003680)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x28, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @loopback={0x600, 0x1ff0000aa}, @private1}}}}}}, 0x0) 710.113806ms ago: executing program 3 (id=1977): r0 = open(&(0x7f00000000c0)='.\x00', 0x48800, 0x50) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0) pwrite64(r1, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080)='./file2\x00') getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) r2 = inotify_init() inotify_add_watch(r2, &(0x7f0000000000)='./file1\x00', 0x16000f57) r3 = socket$unix(0x1, 0x2, 0x0) bind$unix(r3, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 599.775899ms ago: executing program 0 (id=1978): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) r4 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x0, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10) close_range(r2, 0xffffffffffffffff, 0x0) 599.357309ms ago: executing program 0 (id=1979): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70300001c000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kfree\x00', r1}, 0x18) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000040)={0x60002016}) fcntl$setpipe(r2, 0x407, 0x10005) 496.43948ms ago: executing program 0 (id=1980): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty, 0xfffe0000}, 0x1c) recvmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001400)=""/210, 0xd2}], 0x1}, 0x6ac}], 0x2, 0x832b, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00'}, 0x18) write$tun(r1, &(0x7f0000000200)={@val={0xa}, @void, @eth={@multicast, @remote, @void, {@ipv6={0x86dd, @udp={0xd, 0x6, '\x00 \x00', 0x18, 0x11, 0xff, @empty, @mcast2, {[], {0x4f19, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0xb, 0x10000}}}}}}}}, 0x52) 478.819441ms ago: executing program 2 (id=1981): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000005800)={0x18, 0xf, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) r4 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x0, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10) close_range(r2, 0xffffffffffffffff, 0x0) 407.705622ms ago: executing program 3 (id=1982): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xe0000000, 0x5, 0xb7, 0x2, 0x1, 0x1, 0x4, 0x3, 0x1}}}}]}, 0x58}}, 0x4000) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f000000e0c0)=@newtfilter={0x3c, 0x2c, 0xd2b, 0x0, 0x1, {0x0, 0x0, 0x0, r5, {0xb, 0x3}, {}, {0x1, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_CT_STATE_MASK={0x6, 0x5c, 0x7f}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x81}, 0x800) 407.286902ms ago: executing program 2 (id=1983): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x3c, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100003}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket(0x10, 0x3, 0x6) r3 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x90, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [], 0x0, [0x4, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x0, 0x0, 0x2, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}, @TCA_RATE={0x6}]}, 0x90}}, 0x20008010) 383.042833ms ago: executing program 2 (id=1984): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000180)='kmem_cache_free\x00', r1, 0x0, 0x2e38}, 0x18) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) process_mrelease(0xffffffffffffffff, 0x0) 359.348933ms ago: executing program 2 (id=1985): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1, 0x0, 0x3}, 0x18) pause() timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) r2 = gettid() rt_sigaction(0x16, &(0x7f0000000080)={0x0, 0x90000003, 0x0}, 0x0, 0x8, &(0x7f0000000200)) tkill(r2, 0x16) 312.168224ms ago: executing program 3 (id=1986): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000300)={'#! ', '', [{0x20, 'memory.events\x00'}]}, 0x13) perf_event_open(&(0x7f0000000140)={0x8, 0x80, 0x7, 0x0, 0x0, 0x3, 0x82, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0xf}, 0x8080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x10000000000007}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x2) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001380)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='kfree\x00', r3}, 0x10) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x8404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_bp={&(0x7f0000000080)}, 0x400, 0x0, 0x0, 0x0, 0x0, 0x1fffffff, 0x0, 0x0, 0x40, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 155.764037ms ago: executing program 6 (id=1987): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r2, 0x0, 0xa55c}, 0x18) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f00000002c0)={0x0, 0x0, 0x1, 'M'}, 0x9) 155.182507ms ago: executing program 6 (id=1988): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c094, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000280)='./file1\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x1219, &(0x7f0000001100)="$eJzs28FrXEUcB/BfkqapqclGrdUWxEEvFeTR5OBFL0FSkC4obSO0gvBqXnTJczfkLYEVsXry6t8hggjeBPGml1z8DwRvuXisID7JrrZd3RVWQjfI53PZH8z7zs7ssAuzzBy+8tn7O9tVtp13Y3ZmJmZ3I9LdFClm4y8fxwsvf//DM9dv3rq63mxuXEvpyvqN1ZdSSsvPfvvWh18891337JtfL3+zEAcrbx/+svbzwfmDC4e/33ivVaVWldqdbsrT7U6nm98ui7TVqnaylN4oi7wqUqtdFXtD7dtlZ3e3l/L21tLi7l5RVSlv99JO0UvdTuru9VL+bt5qpyzL0tJiMLlT96rNz+/WdR1R1/NxOuq6rh+JxTgbj8ZSLEcjVuKxeDyeiHPxZJyPp+Lp+OqnL3tHCQAAAAAAAAAAAAAAAAAAAOD4THr//0L/qWmPGgAAAAAAAAAAAAAAAAAAAP5frt+8dXW92dy4ltKZiPLT/c39zcHroH19O1pRRhGXoxG/Rf/2/8CgvvJac+Ny6luJT8o7f+bv7G/ODedXoxEvjs6vDvJpOL8Qiw/m16IR50bl52NtZP5MXHr+gXwWjfjxnehEGVtxlL3//h+tpvTq682/5S/2nxtv7mEsDwAAAByLLN0zcv+eZePaB/kJ/h8Y2l8fZS+emurUiYiq98FOXpbFnmJkcelkDKNfnD7ODucjYrLUr3VdT/9DmFIx/puyEBH/ueeZiDgZE/xHMe1fJh6G+4s+7ZEAAAAAAAAAAAAwibHHABf+7YTg3ETHCac9RwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD+YAeOBQAAAACE+Vun0bEBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfBUAAP//0AbP3Q==") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='cpuacct.usage_percpu\x00', 0x275a, 0x0) ftruncate(r0, 0x2000009) r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x40000, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x5, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) write$P9_RREADLINK(r1, &(0x7f0000000000)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) 142.792078ms ago: executing program 3 (id=1989): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0xc) syz_read_part_table(0x60d, &(0x7f0000002200)="$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") r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'veth0_virt_wifi\x00', 0x2400000}, 0x18) 0s ago: executing program 3 (id=1990): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="01000000010000000500080001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000f7ff0000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='block_bio_remap\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='block_bio_remap\x00', r2}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) pread64(0xffffffffffffffff, 0x0, 0x0, 0x41e) kernel console output (not intermixed with test programs): ) cancelled because transaction is not started [ 93.556570][ T3679] EXT4-fs (loop1): Quota write (off=8, len=24) cancelled because transaction is not started [ 93.574113][ T6806] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 93.632467][ T4268] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.742848][ T6770] syz.2.1039 (6770) used greatest stack depth: 6168 bytes left [ 93.753711][ T6822] loop3: detected capacity change from 0 to 2048 [ 93.755161][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.784128][ T6827] macvlan1: entered promiscuous mode [ 93.791322][ T6827] ipvlan0: entered promiscuous mode [ 93.792091][ T6822] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 93.810920][ T6827] ipvlan0: left promiscuous mode [ 93.828804][ T6827] macvlan1: left promiscuous mode [ 93.910180][ T6822] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 93.925441][ T6822] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 28 [ 93.937853][ T6822] EXT4-fs (loop3): This should not happen!! Data will be lost [ 93.937853][ T6822] [ 93.947727][ T6822] EXT4-fs (loop3): Total free blocks count 0 [ 93.953979][ T6822] EXT4-fs (loop3): Free/Dirty block details [ 93.959942][ T6822] EXT4-fs (loop3): free_blocks=2415919104 [ 93.965735][ T6822] EXT4-fs (loop3): dirty_blocks=32 [ 93.970892][ T6822] EXT4-fs (loop3): Block reservation details [ 93.976961][ T6822] EXT4-fs (loop3): i_reserved_data_blocks=2 [ 94.004989][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 94.049879][ T6847] loop5: detected capacity change from 0 to 512 [ 94.062238][ T6847] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 94.168367][ T6853] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1069'. [ 94.331000][ T6863] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1074'. [ 94.546305][ T6873] loop3: detected capacity change from 0 to 128 [ 94.566984][ T6873] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 94.638022][ T3313] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 94.690512][ T6882] vlan2: entered allmulticast mode [ 94.695866][ T6882] dummy0: entered allmulticast mode [ 94.763910][ T6888] loop1: detected capacity change from 0 to 512 [ 94.771634][ T6888] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 94.783915][ T6888] EXT4-fs (loop1): orphan cleanup on readonly fs [ 94.813399][ T6888] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:517: comm syz.1.1084: Block bitmap for bg 0 marked uninitialized [ 94.841963][ T6888] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 94.854861][ T6888] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:517: comm syz.1.1084: Block bitmap for bg 0 marked uninitialized [ 94.868654][ T6888] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 94.877784][ T6888] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:517: comm syz.1.1084: Block bitmap for bg 0 marked uninitialized [ 94.891820][ T6888] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 94.901725][ T6888] EXT4-fs (loop1): 1 orphan inode deleted [ 94.911307][ T6888] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 94.991890][ T4268] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.008132][ T6899] syzkaller0: entered promiscuous mode [ 95.013658][ T6899] syzkaller0: entered allmulticast mode [ 95.141102][ T6913] bridge_slave_1: left allmulticast mode [ 95.146858][ T6913] bridge_slave_1: left promiscuous mode [ 95.152611][ T6913] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.163207][ T6913] bridge_slave_0: left allmulticast mode [ 95.169043][ T6913] bridge_slave_0: left promiscuous mode [ 95.174825][ T6913] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.259980][ T6923] loop1: detected capacity change from 0 to 1024 [ 95.268828][ T6923] EXT4-fs error (device loop1): ext4_acquire_dquot:6937: comm syz.1.1099: Failed to acquire dquot type 0 [ 95.280693][ T6923] EXT4-fs error (device loop1): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 95.296066][ T6923] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #13: comm syz.1.1099: corrupted inode contents [ 95.324194][ T6923] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #13: comm syz.1.1099: mark_inode_dirty error [ 95.339459][ T6923] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #13: comm syz.1.1099: corrupted inode contents [ 95.354797][ T6923] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #13: comm syz.1.1099: mark_inode_dirty error [ 95.366596][ T6923] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #13: comm syz.1.1099: corrupted inode contents [ 95.379209][ T6923] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 95.388127][ T6923] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #13: comm syz.1.1099: corrupted inode contents [ 95.404976][ T6923] EXT4-fs error (device loop1): ext4_truncate:4666: inode #13: comm syz.1.1099: mark_inode_dirty error [ 95.417526][ T6923] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 95.427797][ T6923] EXT4-fs (loop1): 1 truncate cleaned up [ 95.434260][ T6923] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 95.457830][ T6935] loop2: detected capacity change from 0 to 512 [ 95.473427][ T4268] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.475208][ T6935] EXT4-fs: Ignoring removed oldalloc option [ 95.488550][ T6937] loop5: detected capacity change from 0 to 512 [ 95.495614][ T6935] EXT4-fs (loop2): 1 truncate cleaned up [ 95.496847][ T6937] EXT4-fs error (device loop5): ext4_iget_extra_inode:5104: inode #12: comm syz.5.1105: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 95.501989][ T6935] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 95.519387][ T6937] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.1105: couldn't read orphan inode 12 (err -117) [ 95.543213][ T6937] EXT4-fs (loop5): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 95.559831][ T6937] EXT4-fs error (device loop5): ext4_add_entry:2417: inode #2: comm syz.5.1105: Directory hole found for htree leaf block 0 [ 95.585042][ T3968] EXT4-fs (loop5): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 95.611027][ T6945] loop5: detected capacity change from 0 to 1024 [ 95.617930][ T6945] EXT4-fs: Ignoring removed nobh option [ 95.623662][ T6945] EXT4-fs: inline encryption not supported [ 95.636387][ T6945] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 95.652704][ T6945] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4183: comm syz.5.1107: Allocating blocks 497-513 which overlap fs metadata [ 95.675482][ T6945] EXT4-fs (loop5): pa ffff8881072609a0: logic 16, phys. 129, len 24 [ 95.683555][ T6945] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 1 [ 95.694976][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.714378][ T3968] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.743663][ T6953] loop5: detected capacity change from 0 to 128 [ 96.042776][ T6977] loop2: detected capacity change from 0 to 128 [ 96.050844][ T6976] __nla_validate_parse: 1 callbacks suppressed [ 96.050861][ T6976] netlink: 3 bytes leftover after parsing attributes in process `syz.5.1130'. [ 96.069012][ T6976] batadv0: entered promiscuous mode [ 96.074250][ T6976] batadv0: entered allmulticast mode [ 96.074913][ T6980] netlink: 240 bytes leftover after parsing attributes in process `syz.3.1117'. [ 96.094319][ T6977] FAT-fs (loop2): Directory bread(block 32) failed [ 96.105011][ T6977] FAT-fs (loop2): Directory bread(block 33) failed [ 96.115273][ T6977] FAT-fs (loop2): Directory bread(block 34) failed [ 96.122930][ T6977] FAT-fs (loop2): Directory bread(block 35) failed [ 96.133314][ T6977] FAT-fs (loop2): Directory bread(block 36) failed [ 96.143399][ T6977] FAT-fs (loop2): Directory bread(block 37) failed [ 96.152430][ T6977] FAT-fs (loop2): Directory bread(block 38) failed [ 96.155675][ T6985] tipc: New replicast peer: 255.255.255.255 [ 96.161903][ T6977] FAT-fs (loop2): Directory bread(block 39) failed [ 96.165130][ T6985] tipc: Enabled bearer , priority 10 [ 96.175126][ T6977] FAT-fs (loop2): Directory bread(block 40) failed [ 96.187347][ T6977] FAT-fs (loop2): Directory bread(block 41) failed [ 96.228536][ T6989] loop3: detected capacity change from 0 to 128 [ 96.238359][ T6989] bio_check_eod: 33 callbacks suppressed [ 96.238372][ T6989] syz.3.1124: attempt to access beyond end of device [ 96.238372][ T6989] loop3: rw=0, sector=2072, nr_sectors = 1 limit=128 [ 96.341148][ T6997] loop5: detected capacity change from 0 to 512 [ 96.349539][ T6997] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 96.361221][ T6997] EXT4-fs (loop5): orphan cleanup on readonly fs [ 96.367941][ T6997] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:517: comm syz.5.1127: Block bitmap for bg 0 marked uninitialized [ 96.378454][ T7000] syzkaller0: entered promiscuous mode [ 96.382177][ T6997] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 96.386677][ T7000] syzkaller0: entered allmulticast mode [ 96.401596][ T6997] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:517: comm syz.5.1127: Block bitmap for bg 0 marked uninitialized [ 96.421058][ T6997] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 96.422890][ T7004] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1131'. [ 96.434139][ T6997] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:517: comm syz.5.1127: Block bitmap for bg 0 marked uninitialized [ 96.453392][ T6997] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 96.464579][ T6997] EXT4-fs (loop5): 1 orphan inode deleted [ 96.471618][ T6997] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 96.512993][ T3968] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.548603][ T7008] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1132'. [ 96.566126][ T7017] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1137'. [ 96.579345][ T7017] batadv0: entered promiscuous mode [ 96.584581][ T7017] batadv0: entered allmulticast mode [ 96.605778][ T7022] loop2: detected capacity change from 0 to 128 [ 96.765288][ T7046] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1146'. [ 97.046605][ T7061] loop1: detected capacity change from 0 to 128 [ 97.593600][ T7074] loop1: detected capacity change from 0 to 2048 [ 97.604703][ T29] kauditd_printk_skb: 341 callbacks suppressed [ 97.604717][ T29] audit: type=1326 audit(97.595:3978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7075 comm="syz.3.1160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe293afec29 code=0x7ffc0000 [ 97.633883][ T29] audit: type=1326 audit(97.595:3979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7075 comm="syz.3.1160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe293afec29 code=0x7ffc0000 [ 97.662897][ T7076] loop3: detected capacity change from 0 to 512 [ 97.670882][ T7076] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 97.682508][ T29] audit: type=1326 audit(97.655:3980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7075 comm="syz.3.1160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fe293afec29 code=0x7ffc0000 [ 97.705338][ T29] audit: type=1326 audit(97.655:3981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7075 comm="syz.3.1160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe293afec29 code=0x7ffc0000 [ 97.728205][ T29] audit: type=1326 audit(97.655:3982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7075 comm="syz.3.1160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe293afec29 code=0x7ffc0000 [ 97.750944][ T29] audit: type=1326 audit(97.655:3983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7075 comm="syz.3.1160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fe293afec29 code=0x7ffc0000 [ 97.773805][ T29] audit: type=1326 audit(97.655:3984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7075 comm="syz.3.1160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fe293afec63 code=0x7ffc0000 [ 97.796555][ T29] audit: type=1326 audit(97.655:3985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7075 comm="syz.3.1160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fe293afd6df code=0x7ffc0000 [ 97.797424][ T7076] EXT4-fs (loop3): orphan cleanup on readonly fs [ 97.819355][ T29] audit: type=1326 audit(97.655:3986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7075 comm="syz.3.1160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fe293afecb7 code=0x7ffc0000 [ 97.819396][ T29] audit: type=1326 audit(97.655:3987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7075 comm="syz.3.1160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe293afd590 code=0x7ffc0000 [ 97.849185][ T7076] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:517: comm syz.3.1160: Block bitmap for bg 0 marked uninitialized [ 97.885213][ T7076] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 97.894372][ T7076] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:517: comm syz.3.1160: Block bitmap for bg 0 marked uninitialized [ 97.908596][ T7076] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 97.943398][ T7074] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 97.958615][ T7074] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 28 [ 97.971088][ T7074] EXT4-fs (loop1): This should not happen!! Data will be lost [ 97.971088][ T7074] [ 97.981269][ T7074] EXT4-fs (loop1): Total free blocks count 0 [ 97.987349][ T7074] EXT4-fs (loop1): Free/Dirty block details [ 97.993264][ T7074] EXT4-fs (loop1): free_blocks=2415919104 [ 97.999098][ T7074] EXT4-fs (loop1): dirty_blocks=32 [ 98.004322][ T7074] EXT4-fs (loop1): Block reservation details [ 98.010388][ T7074] EXT4-fs (loop1): i_reserved_data_blocks=2 [ 98.020387][ T7076] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:517: comm syz.3.1160: Block bitmap for bg 0 marked uninitialized [ 98.051605][ T7076] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 98.073684][ T7076] EXT4-fs (loop3): 1 orphan inode deleted [ 98.117221][ T7087] syzkaller0: entered promiscuous mode [ 98.122822][ T7087] syzkaller0: entered allmulticast mode [ 98.221030][ T7097] netlink: 2028 bytes leftover after parsing attributes in process `syz.3.1168'. [ 98.230264][ T7097] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1168'. [ 98.273845][ T7102] loop1: detected capacity change from 0 to 512 [ 98.300896][ T7106] vlan0: entered allmulticast mode [ 98.316484][ T7106] dummy0: entered allmulticast mode [ 98.422140][ T7111] loop2: detected capacity change from 0 to 2048 [ 98.618692][ T7111] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 98.692702][ T7111] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 28 [ 98.705145][ T7111] EXT4-fs (loop2): This should not happen!! Data will be lost [ 98.705145][ T7111] [ 98.714856][ T7111] EXT4-fs (loop2): Total free blocks count 0 [ 98.720864][ T7111] EXT4-fs (loop2): Free/Dirty block details [ 98.726922][ T7111] EXT4-fs (loop2): free_blocks=2415919104 [ 98.732809][ T7111] EXT4-fs (loop2): dirty_blocks=32 [ 98.738068][ T7111] EXT4-fs (loop2): Block reservation details [ 98.744068][ T7111] EXT4-fs (loop2): i_reserved_data_blocks=2 [ 98.909005][ T7115] loop5: detected capacity change from 0 to 512 [ 98.915849][ T7115] EXT4-fs: Ignoring removed oldalloc option [ 99.144451][ T7115] EXT4-fs (loop5): 1 truncate cleaned up [ 99.346256][ T7124] loop2: detected capacity change from 0 to 512 [ 99.358637][ T7128] loop3: detected capacity change from 0 to 1024 [ 99.376327][ T7124] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 99.387879][ T7124] EXT4-fs (loop2): orphan cleanup on readonly fs [ 99.387959][ T7128] EXT4-fs error (device loop3): ext4_acquire_dquot:6937: comm syz.3.1180: Failed to acquire dquot type 0 [ 99.405803][ T7124] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:517: comm syz.2.1177: Block bitmap for bg 0 marked uninitialized [ 99.419874][ T7128] EXT4-fs error (device loop3): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 99.435266][ T7128] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #13: comm syz.3.1180: corrupted inode contents [ 99.447764][ T7133] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1179'. [ 99.454913][ T7124] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 99.457770][ T7128] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #13: comm syz.3.1180: mark_inode_dirty error [ 99.477675][ T7124] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:517: comm syz.2.1177: Block bitmap for bg 0 marked uninitialized [ 99.478069][ T7128] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #13: comm syz.3.1180: corrupted inode contents [ 99.503304][ T7124] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 99.503641][ T7128] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #13: comm syz.3.1180: mark_inode_dirty error [ 99.524574][ T7124] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:517: comm syz.2.1177: Block bitmap for bg 0 marked uninitialized [ 99.524666][ T7128] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #13: comm syz.3.1180: corrupted inode contents [ 99.550067][ T7128] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 99.558843][ T7124] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 99.559048][ T7128] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #13: comm syz.3.1180: corrupted inode contents [ 99.580596][ T7128] EXT4-fs error (device loop3): ext4_truncate:4666: inode #13: comm syz.3.1180: mark_inode_dirty error [ 99.592019][ T7128] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 99.594824][ T7124] EXT4-fs (loop2): 1 orphan inode deleted [ 99.602774][ T7128] EXT4-fs (loop3): 1 truncate cleaned up [ 99.739146][ T7147] loop3: detected capacity change from 0 to 512 [ 99.747796][ T7147] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 99.761960][ T7141] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1184'. [ 99.773161][ T7147] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #16: comm syz.3.1189: invalid indirect mapped block 4294967295 (level 0) [ 99.797582][ T7147] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #16: comm syz.3.1189: invalid indirect mapped block 4294967295 (level 1) [ 99.815181][ T7147] EXT4-fs (loop3): 1 orphan inode deleted [ 99.821338][ T7147] EXT4-fs (loop3): 1 truncate cleaned up [ 99.895769][ T7161] loop5: detected capacity change from 0 to 1024 [ 99.906516][ T7161] EXT4-fs error (device loop5): ext4_acquire_dquot:6937: comm syz.5.1194: Failed to acquire dquot type 0 [ 99.935122][ T7161] EXT4-fs error (device loop5): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 99.978765][ T7161] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #13: comm syz.5.1194: corrupted inode contents [ 99.991190][ T7161] EXT4-fs error (device loop5): ext4_dirty_inode:6538: inode #13: comm syz.5.1194: mark_inode_dirty error [ 100.024469][ T7161] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #13: comm syz.5.1194: corrupted inode contents [ 100.037293][ T7153] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 100.046514][ T7153] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 100.065488][ T7161] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #13: comm syz.5.1194: mark_inode_dirty error [ 100.084154][ T7161] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #13: comm syz.5.1194: corrupted inode contents [ 100.097500][ T7161] EXT4-fs error (device loop5) in ext4_orphan_del:305: Corrupt filesystem [ 100.106543][ T7161] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #13: comm syz.5.1194: corrupted inode contents [ 100.120198][ T7161] EXT4-fs error (device loop5): ext4_truncate:4666: inode #13: comm syz.5.1194: mark_inode_dirty error [ 100.138601][ T7161] EXT4-fs error (device loop5) in ext4_process_orphan:347: Corrupt filesystem [ 100.148306][ T7161] EXT4-fs (loop5): 1 truncate cleaned up [ 100.215602][ T7179] netlink: 'syz.1.1201': attribute type 30 has an invalid length. [ 100.362393][ T7193] vlan2: entered allmulticast mode [ 100.367978][ T7193] dummy0: entered allmulticast mode [ 100.593850][ T7206] bond_slave_1: mtu less than device minimum [ 100.628331][ T7208] loop2: detected capacity change from 0 to 1024 [ 100.665887][ T7208] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.1211: Failed to acquire dquot type 0 [ 100.725086][ T7208] EXT4-fs error (device loop2): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 100.782496][ T7208] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #13: comm syz.2.1211: corrupted inode contents [ 100.835384][ T7208] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #13: comm syz.2.1211: mark_inode_dirty error [ 100.855796][ T7221] netlink: 'syz.5.1217': attribute type 30 has an invalid length. [ 100.879176][ T7208] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #13: comm syz.2.1211: corrupted inode contents [ 100.904787][ T7208] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #13: comm syz.2.1211: mark_inode_dirty error [ 100.927091][ T7208] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #13: comm syz.2.1211: corrupted inode contents [ 100.975104][ T7208] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 100.995342][ T7208] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #13: comm syz.2.1211: corrupted inode contents [ 101.017389][ T7208] EXT4-fs error (device loop2): ext4_truncate:4666: inode #13: comm syz.2.1211: mark_inode_dirty error [ 101.044814][ T7208] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 101.062053][ T7208] EXT4-fs (loop2): 1 truncate cleaned up [ 101.201331][ T7237] $H: renamed from .` [ 101.206791][ T7237] $H: entered promiscuous mode [ 101.212068][ T7237] dummy0: entered promiscuous mode [ 101.298907][ T7242] __nla_validate_parse: 1 callbacks suppressed [ 101.298923][ T7242] netlink: 240 bytes leftover after parsing attributes in process `syz.2.1225'. [ 101.355181][ T7246] loop2: detected capacity change from 0 to 1024 [ 101.365385][ T7246] EXT4-fs: Ignoring removed bh option [ 101.370951][ T7246] EXT4-fs: inline encryption not supported [ 101.395432][ T7246] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 101.446129][ T7255] netlink: 'syz.3.1240': attribute type 21 has an invalid length. [ 101.454241][ T7246] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 101.469355][ T7255] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1240'. [ 101.477809][ T7246] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 2: comm syz.2.1229: lblock 2 mapped to illegal pblock 2 (length 1) [ 101.478692][ T7255] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1240'. [ 101.502307][ T7246] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 48: comm syz.2.1229: lblock 0 mapped to illegal pblock 48 (length 1) [ 101.519285][ T7246] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.1229: Failed to acquire dquot type 0 [ 101.540767][ T7246] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 101.568764][ T7246] EXT4-fs error (device loop2): ext4_evict_inode:254: inode #11: comm syz.2.1229: mark_inode_dirty error [ 101.580685][ T7246] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 101.581354][ T7257] netlink: 'syz.0.1232': attribute type 30 has an invalid length. [ 101.591604][ T7246] EXT4-fs (loop2): 1 orphan inode deleted [ 101.605352][ T4198] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:68: lblock 1 mapped to illegal pblock 1 (length 1) [ 101.621585][ T7246] EXT4-fs mount: 24 callbacks suppressed [ 101.621602][ T7246] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.640384][ T4198] EXT4-fs error (device loop2): ext4_release_dquot:6973: comm kworker/u8:68: Failed to release dquot type 0 [ 101.666882][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.692437][ T3308] EXT4-fs error (device loop2): __ext4_get_inode_loc:4861: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 101.705913][ T3308] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 101.715974][ T3308] EXT4-fs error (device loop2): ext4_quota_off:7221: inode #3: comm syz-executor: mark_inode_dirty error [ 101.777939][ T7269] netlink: 'syz.2.1247': attribute type 30 has an invalid length. [ 101.801135][ T7273] syzkaller0: entered promiscuous mode [ 101.806708][ T7273] syzkaller0: entered allmulticast mode [ 101.889889][ T7276] loop5: detected capacity change from 0 to 512 [ 101.900134][ T7279] $H: renamed from bond0 (while UP) [ 101.910106][ T7276] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.923408][ T7279] $H: entered promiscuous mode [ 101.928574][ T7279] bond_slave_0: entered promiscuous mode [ 101.934366][ T7279] bond_slave_1: entered promiscuous mode [ 102.473134][ T7306] bond_slave_1: mtu less than device minimum [ 102.804060][ T7313] loop1: detected capacity change from 0 to 2048 [ 102.843811][ T7313] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 102.910057][ T3968] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.927042][ T7317] $H: renamed from bond0 [ 102.956863][ T7317] $H: entered promiscuous mode [ 102.961949][ T7317] bond_slave_0: entered promiscuous mode [ 102.967799][ T7317] bond_slave_1: entered promiscuous mode [ 103.131560][ T4268] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.289508][ T7341] loop1: detected capacity change from 0 to 512 [ 103.296753][ T7341] EXT4-fs: Ignoring removed nomblk_io_submit option [ 103.325813][ T7341] EXT4-fs error (device loop1): ext4_expand_extra_isize_ea:2798: inode #11: comm syz.1.1277: corrupted xattr block 95: invalid header [ 103.365370][ T7341] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.1277: bg 0: block 7: invalid block bitmap [ 103.383041][ T7349] loop3: detected capacity change from 0 to 512 [ 103.411149][ T7341] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 103.498610][ T7352] loop5: detected capacity change from 0 to 1024 [ 103.505939][ T7341] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.1277: invalid indirect mapped block 69888 (level 2) [ 103.508255][ T29] kauditd_printk_skb: 612 callbacks suppressed [ 103.508272][ T29] audit: type=1326 audit(103.505:4591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7351 comm="syz.2.1270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8beb9eec29 code=0x7ffc0000 [ 103.549058][ T29] audit: type=1326 audit(103.505:4592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7351 comm="syz.2.1270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8beb9eec29 code=0x7ffc0000 [ 103.550259][ T7341] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2962: inode #11: comm syz.1.1277: corrupted xattr block 95: invalid header [ 103.572133][ T29] audit: type=1326 audit(103.505:4593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7351 comm="syz.2.1270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f8beb9eec29 code=0x7ffc0000 [ 103.572162][ T29] audit: type=1326 audit(103.505:4594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7351 comm="syz.2.1270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8beb9eec29 code=0x7ffc0000 [ 103.631814][ T29] audit: type=1326 audit(103.625:4595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7351 comm="syz.2.1270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=244 compat=0 ip=0x7f8beb9eec29 code=0x7ffc0000 [ 103.633508][ T7349] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.654686][ T29] audit: type=1326 audit(103.625:4596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7351 comm="syz.2.1270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8beb9eec29 code=0x7ffc0000 [ 103.654715][ T29] audit: type=1326 audit(103.625:4597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7351 comm="syz.2.1270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8beb9eec29 code=0x7ffc0000 [ 103.655201][ T7341] EXT4-fs warning (device loop1): ext4_evict_inode:274: xattr delete (err -117) [ 103.669929][ T7352] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 103.690182][ T7341] EXT4-fs (loop1): 1 orphan inode deleted [ 103.747056][ T7341] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.761750][ T7352] EXT4-fs error (device loop5): ext4_map_blocks:814: inode #15: block 3: comm syz.5.1271: lblock 3 mapped to illegal pblock 3 (length 3) [ 103.776888][ T7352] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 103.789512][ T7352] EXT4-fs (loop5): This should not happen!! Data will be lost [ 103.789512][ T7352] [ 103.815712][ T3968] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 103.903690][ T7341] SELinux: failed to load policy [ 103.934051][ T7367] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1286'. [ 103.947975][ T4268] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.995059][ T7367] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1286'. [ 104.439476][ T7392] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 104.679613][ T7400] netlink: 'syz.5.1288': attribute type 12 has an invalid length. [ 104.687557][ T7400] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1288'. [ 104.716470][ T7402] loop2: detected capacity change from 0 to 512 [ 104.723422][ T7402] EXT4-fs: Ignoring removed nomblk_io_submit option [ 104.732635][ T7402] EXT4-fs error (device loop2): ext4_expand_extra_isize_ea:2798: inode #11: comm syz.2.1289: corrupted xattr block 95: invalid header [ 104.760504][ T7402] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.1289: bg 0: block 7: invalid block bitmap [ 104.761572][ T7400] netlink: 'syz.5.1288': attribute type 12 has an invalid length. [ 104.773715][ T7402] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 104.780841][ T7400] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1288'. [ 104.799540][ T3655] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 104.824328][ T3655] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 104.845540][ T3655] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 104.869824][ T7406] loop5: detected capacity change from 0 to 1024 [ 104.876766][ T3655] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 104.885476][ T7402] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.1289: invalid indirect mapped block 69888 (level 2) [ 104.900133][ T7406] EXT4-fs: Ignoring removed bh option [ 104.906270][ T7406] EXT4-fs (loop5): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 104.916914][ T7402] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2962: inode #11: comm syz.2.1289: corrupted xattr block 95: invalid header [ 104.931097][ T7402] EXT4-fs warning (device loop2): ext4_evict_inode:274: xattr delete (err -117) [ 104.940961][ T7402] EXT4-fs (loop2): 1 orphan inode deleted [ 104.948504][ T7406] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 104.961565][ T7402] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.018495][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.054974][ T7402] SELinux: failed to load policy [ 105.094314][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.357502][ T7431] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 105.783201][ T3968] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.793872][ T7463] loop3: detected capacity change from 0 to 1024 [ 105.853543][ T7463] EXT4-fs: Ignoring removed orlov option [ 105.862274][ T7463] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.005010][ T29] audit: type=1326 audit(106.005:4598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7482 comm="syz.1.1313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76ad1fec29 code=0x7ffc0000 [ 106.028376][ T29] audit: type=1326 audit(106.005:4599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7482 comm="syz.1.1313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76ad1fec29 code=0x7ffc0000 [ 106.055086][ T29] audit: type=1326 audit(106.005:4600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7482 comm="syz.1.1313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f76ad1fec29 code=0x7ffc0000 [ 106.206957][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.265773][ T7496] netlink: 'syz.3.1319': attribute type 1 has an invalid length. [ 106.280608][ T7496] 8021q: adding VLAN 0 to HW filter on device bond1 [ 106.298461][ T7496] macvlan0: entered promiscuous mode [ 106.303932][ T7496] macvlan0: entered allmulticast mode [ 106.311794][ T7496] bond1: entered promiscuous mode [ 106.317469][ T7496] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 106.326726][ T7496] bond1: left promiscuous mode [ 106.403938][ T7507] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1324'. [ 106.460814][ T7517] loop2: detected capacity change from 0 to 1024 [ 106.468010][ T7517] EXT4-fs: Ignoring removed nobh option [ 106.473729][ T7517] EXT4-fs: inline encryption not supported [ 106.497118][ T7517] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.513322][ T7517] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4183: comm syz.2.1329: Allocating blocks 385-513 which overlap fs metadata [ 106.529904][ T7517] EXT4-fs (loop2): pa ffff8881072b0310: logic 16, phys. 129, len 24 [ 106.538268][ T7517] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 8 [ 106.549374][ T7517] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 28 [ 106.561674][ T7517] EXT4-fs (loop2): This should not happen!! Data will be lost [ 106.561674][ T7517] [ 106.571418][ T7517] EXT4-fs (loop2): Total free blocks count 0 [ 106.577528][ T7517] EXT4-fs (loop2): Free/Dirty block details [ 106.583454][ T7517] EXT4-fs (loop2): free_blocks=128 [ 106.588784][ T7517] EXT4-fs (loop2): dirty_blocks=0 [ 106.593928][ T7517] EXT4-fs (loop2): Block reservation details [ 106.600150][ T7517] EXT4-fs (loop2): i_reserved_data_blocks=0 [ 106.736722][ T7540] loop3: detected capacity change from 0 to 512 [ 106.758185][ T7540] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.961577][ T7570] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1349'. [ 106.990259][ T7570] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.030685][ T7570] macvlan2: entered promiscuous mode [ 107.036079][ T7570] macvlan2: entered allmulticast mode [ 107.055248][ T7570] bond0: (slave macvlan2): Opening slave failed [ 107.065188][ T7578] syz_tun: entered allmulticast mode [ 107.075969][ T7578] dvmrp1: entered allmulticast mode [ 107.105319][ T7577] syz_tun: left allmulticast mode [ 107.318464][ T7598] sctp: [Deprecated]: syz.0.1359 (pid 7598) Use of struct sctp_assoc_value in delayed_ack socket option. [ 107.318464][ T7598] Use struct sctp_sack_info instead [ 107.323574][ T7599] loop5: detected capacity change from 0 to 512 [ 107.343710][ T7599] EXT4-fs (loop5): orphan cleanup on readonly fs [ 107.350791][ T7599] EXT4-fs error (device loop5): ext4_orphan_get:1418: comm syz.5.1360: bad orphan inode 13 [ 107.361859][ T7599] ext4_test_bit(bit=12, block=18) = 1 [ 107.367375][ T7599] is_bad_inode(inode)=0 [ 107.371608][ T7599] NEXT_ORPHAN(inode)=2130706432 [ 107.376616][ T7599] max_ino=32 [ 107.379841][ T7599] i_nlink=1 [ 107.384066][ T7599] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 107.400628][ T7599] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended [ 107.415906][ T7599] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.1360: bg 0: block 248: padding at end of block bitmap is not set [ 107.430676][ T7599] EXT4-fs error (device loop5): ext4_acquire_dquot:6937: comm syz.5.1360: Failed to acquire dquot type 1 [ 107.442394][ T7599] EXT4-fs warning (device loop5): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 107.488513][ T3968] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.589882][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.611474][ T7618] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 107.704303][ T7627] bridge: RTM_NEWNEIGH with invalid ether address [ 107.713246][ T7629] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1372'. [ 107.807331][ T7638] loop1: detected capacity change from 0 to 4096 [ 107.814239][ T7638] EXT4-fs: Ignoring removed nomblk_io_submit option [ 107.845601][ T7638] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.863850][ T7650] loop3: detected capacity change from 0 to 1024 [ 107.873947][ T7650] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 107.883860][ T7650] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 107.894334][ T7650] EXT4-fs (loop3): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 107.905686][ T7650] EXT4-fs error (device loop3): ext4_get_journal_inode:5800: inode #32: comm syz.3.1382: iget: special inode unallocated [ 107.919366][ T7650] EXT4-fs (loop3): no journal found [ 107.924794][ T7650] EXT4-fs (loop3): can't get journal size [ 107.933344][ T7650] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 107.949794][ T7650] EXT4-fs error (device loop3): ext4_inlinedir_to_tree:1314: inode #12: block 16: comm syz.3.1382: path /303/file0/file0: bad entry in directory: rec_len is too small for name_len - offset=20, inode=13, rec_len=16, size=60 fake=0 [ 107.956571][ T4268] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.997054][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.101964][ T7679] loop1: detected capacity change from 0 to 512 [ 108.109546][ T7679] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 108.125166][ T7679] EXT4-fs (loop1): 1 truncate cleaned up [ 108.131294][ T7679] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.167049][ T4268] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.300405][ T7697] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1409'. [ 108.310897][ T7694] loop1: detected capacity change from 0 to 1024 [ 108.317869][ T7694] EXT4-fs: Ignoring removed orlov option [ 108.329692][ T7694] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.638582][ T4268] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.719798][ T29] kauditd_printk_skb: 369 callbacks suppressed [ 108.719877][ T29] audit: type=1326 audit(108.715:4968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7707 comm="syz.2.1401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8beb9eec29 code=0x7ffc0000 [ 108.759051][ T29] audit: type=1326 audit(108.715:4969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7707 comm="syz.2.1401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8beb9eec29 code=0x7ffc0000 [ 108.763243][ T7712] loop2: detected capacity change from 0 to 2048 [ 108.782037][ T29] audit: type=1326 audit(108.715:4970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7707 comm="syz.2.1401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=131 compat=0 ip=0x7f8beb9eec29 code=0x7ffc0000 [ 108.782128][ T29] audit: type=1326 audit(108.715:4971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7707 comm="syz.2.1401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8beb9eec29 code=0x7ffc0000 [ 108.834458][ T29] audit: type=1326 audit(108.715:4972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7707 comm="syz.2.1401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8beb9eec29 code=0x7ffc0000 [ 108.857280][ T29] audit: type=1326 audit(108.715:4973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7707 comm="syz.2.1401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8beb9eec29 code=0x7ffc0000 [ 108.880178][ T29] audit: type=1326 audit(108.715:4974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7707 comm="syz.2.1401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8beb9eec29 code=0x7ffc0000 [ 108.903137][ T29] audit: type=1326 audit(108.715:4975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7707 comm="syz.2.1401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8beb9eec29 code=0x7ffc0000 [ 108.925998][ T29] audit: type=1326 audit(108.715:4976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7707 comm="syz.2.1401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8beb9eec29 code=0x7ffc0000 [ 108.948888][ T29] audit: type=1326 audit(108.715:4977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7707 comm="syz.2.1401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8beb9eec29 code=0x7ffc0000 [ 108.973264][ T7712] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 109.018462][ T7718] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 109.220079][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.301399][ T7724] loop2: detected capacity change from 0 to 512 [ 109.309349][ T7724] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 109.323306][ T7724] EXT4-fs (loop2): 1 truncate cleaned up [ 109.330306][ T7698] syz.0.1399 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 109.341226][ T7698] CPU: 0 UID: 0 PID: 7698 Comm: syz.0.1399 Not tainted syzkaller #0 PREEMPT(voluntary) [ 109.341256][ T7698] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 109.341268][ T7698] Call Trace: [ 109.341273][ T7698] [ 109.341280][ T7698] __dump_stack+0x1d/0x30 [ 109.341300][ T7698] dump_stack_lvl+0xe8/0x140 [ 109.341398][ T7698] dump_stack+0x15/0x1b [ 109.341420][ T7698] dump_header+0x81/0x220 [ 109.341457][ T7698] oom_kill_process+0x342/0x400 [ 109.341545][ T7698] out_of_memory+0x979/0xb80 [ 109.341591][ T7698] try_charge_memcg+0x5e6/0x9e0 [ 109.341626][ T7698] charge_memcg+0x51/0xc0 [ 109.341650][ T7698] __mem_cgroup_charge+0x28/0xb0 [ 109.341702][ T7698] filemap_add_folio+0x4e/0x1b0 [ 109.341780][ T7698] __filemap_get_folio+0x31e/0x6b0 [ 109.341808][ T7698] filemap_fault+0x41f/0xb40 [ 109.341829][ T7698] ? css_rstat_updated+0xb7/0x240 [ 109.341942][ T7698] ? __rcu_read_lock+0x37/0x50 [ 109.341992][ T7698] __do_fault+0xbc/0x200 [ 109.342018][ T7698] handle_mm_fault+0xd69/0x2c20 [ 109.342133][ T7698] do_user_addr_fault+0x636/0x1090 [ 109.342232][ T7698] exc_page_fault+0x62/0xa0 [ 109.342269][ T7698] asm_exc_page_fault+0x26/0x30 [ 109.342295][ T7698] RIP: 0033:0x7f6a285ff6b6 [ 109.342337][ T7698] Code: 07 0f 87 54 fe ff ff e9 47 fe ff ff 4c 89 fe 48 89 df e8 3d 74 fe ff 48 8b 43 38 44 01 7b 28 4c 29 f8 41 83 e4 06 48 89 43 38 00 00 0f 84 35 fe ff ff b8 01 00 00 00 0f 1f 40 00 48 8b 53 38 [ 109.342422][ T7698] RSP: 002b:00007ffdeb039730 EFLAGS: 00010202 [ 109.342484][ T7698] RAX: 0000001b33509438 RBX: 00007f6a29495720 RCX: ffffffff8567664c [ 109.342500][ T7698] RDX: 0000001b32f24220 RSI: 0000000000000004 RDI: 00007f6a29495720 [ 109.342516][ T7698] RBP: 0000000000000899 R08: 00007f6a28187080 R09: 00007f6a28952000 [ 109.342577][ T7698] R10: 00007f6a28187008 R11: 0000000000000003 R12: 0000000000000004 [ 109.342589][ T7698] R13: 00007f6a28966038 R14: 00000000000044c8 R15: 0000000000000004 [ 109.342608][ T7698] ? xa_load+0xac/0xe0 [ 109.342631][ T7698] [ 109.342638][ T7698] memory: usage 307200kB, limit 307200kB, failcnt 389 [ 109.345067][ T7724] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.352534][ T7698] memory+swap: usage 307560kB, limit 9007199254740988kB, failcnt 0 [ 109.563230][ T7698] kmem: usage 307200kB, limit 9007199254740988kB, failcnt 0 [ 109.570594][ T7698] Memory cgroup stats for /syz0: [ 109.570980][ T7698] cache 0 [ 109.578963][ T7698] rss 0 [ 109.581802][ T7698] shmem 0 [ 109.584802][ T7698] mapped_file 0 [ 109.587996][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.588267][ T7698] dirty 0 [ 109.588278][ T7698] writeback 0 [ 109.603579][ T7698] workingset_refault_anon 65 [ 109.608289][ T7698] workingset_refault_file 90 [ 109.612904][ T7698] swap 368640 [ 109.616247][ T7698] swapcached 0 [ 109.619637][ T7698] pgpgin 66616 [ 109.623006][ T7698] pgpgout 66616 [ 109.626511][ T7698] pgfault 77653 [ 109.629984][ T7698] pgmajfault 30 [ 109.633473][ T7698] inactive_anon 0 [ 109.637130][ T7698] active_anon 0 [ 109.640643][ T7698] inactive_file 0 [ 109.644284][ T7698] active_file 0 [ 109.647789][ T7698] unevictable 0 [ 109.651259][ T7698] hierarchical_memory_limit 314572800 [ 109.656735][ T7698] hierarchical_memsw_limit 9223372036854771712 [ 109.663074][ T7698] total_cache 0 [ 109.666585][ T7698] total_rss 0 [ 109.670053][ T7698] total_shmem 0 [ 109.673574][ T7698] total_mapped_file 0 [ 109.677600][ T7698] total_dirty 0 [ 109.681083][ T7698] total_writeback 0 [ 109.684933][ T7698] total_workingset_refault_anon 65 [ 109.690076][ T7698] total_workingset_refault_file 90 [ 109.695212][ T7698] total_swap 368640 [ 109.699030][ T7698] total_swapcached 0 [ 109.702991][ T7698] total_pgpgin 66616 [ 109.706925][ T7698] total_pgpgout 66616 [ 109.710925][ T7698] total_pgfault 77653 [ 109.714959][ T7698] total_pgmajfault 30 [ 109.718945][ T7698] total_inactive_anon 0 [ 109.723099][ T7698] total_active_anon 0 [ 109.727239][ T7698] total_inactive_file 0 [ 109.731412][ T7698] total_active_file 0 [ 109.735500][ T7698] total_unevictable 0 [ 109.739566][ T7698] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.179,pid=4082,uid=0 [ 109.754126][ T7698] Memory cgroup out of memory: Killed process 4082 (syz.0.179) total-vm:95808kB, anon-rss:1092kB, file-rss:20736kB, shmem-rss:0kB, UID:0 pgtables:88kB oom_score_adj:1000 [ 109.860038][ T4548] hid_parser_main: 16 callbacks suppressed [ 109.860060][ T4548] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 109.873365][ T4548] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 109.880872][ T4548] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 109.888389][ T4548] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 109.894871][ T3304] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 109.895916][ T4548] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 109.906767][ T3304] CPU: 0 UID: 0 PID: 3304 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(voluntary) [ 109.906859][ T3304] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 109.906872][ T3304] Call Trace: [ 109.906878][ T3304] [ 109.906885][ T3304] __dump_stack+0x1d/0x30 [ 109.906910][ T3304] dump_stack_lvl+0xe8/0x140 [ 109.906938][ T3304] dump_stack+0x15/0x1b [ 109.907034][ T3304] dump_header+0x81/0x220 [ 109.907082][ T3304] oom_kill_process+0x342/0x400 [ 109.907138][ T3304] out_of_memory+0x979/0xb80 [ 109.907186][ T3304] try_charge_memcg+0x5e6/0x9e0 [ 109.907229][ T3304] charge_memcg+0x51/0xc0 [ 109.907262][ T3304] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 109.907295][ T3304] __read_swap_cache_async+0x1df/0x350 [ 109.907415][ T3304] swap_cluster_readahead+0x376/0x3e0 [ 109.907537][ T3304] swapin_readahead+0xde/0x6f0 [ 109.907616][ T3304] ? __filemap_get_folio+0x4f7/0x6b0 [ 109.907647][ T3304] ? swap_cache_get_folio+0x77/0x200 [ 109.907740][ T3304] do_swap_page+0x301/0x2430 [ 109.907774][ T3304] ? finish_task_switch+0xad/0x2b0 [ 109.907805][ T3304] ? __pfx_default_wake_function+0x10/0x10 [ 109.907840][ T3304] handle_mm_fault+0x9a5/0x2c20 [ 109.907933][ T3304] do_user_addr_fault+0x636/0x1090 [ 109.907977][ T3304] ? fpregs_restore_userregs+0xe2/0x1d0 [ 109.908006][ T3304] ? switch_fpu_return+0xe/0x20 [ 109.908085][ T3304] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 109.908122][ T3304] exc_page_fault+0x62/0xa0 [ 109.908218][ T3304] asm_exc_page_fault+0x26/0x30 [ 109.908246][ T3304] RIP: 0033:0x7f6a287514a5 [ 109.908268][ T3304] Code: 00 00 00 00 00 83 ff 03 74 7b 83 ff 02 b8 fa ff ff ff 49 89 ca 0f 44 f8 80 3d be 70 1e 00 00 74 14 b8 e6 00 00 00 0f 05 f7 d8 66 2e 0f 1f 84 00 00 00 00 00 48 83 ec 28 48 89 54 24 10 89 74 [ 109.908333][ T3304] RSP: 002b:00007ffdeb0399c8 EFLAGS: 00010246 [ 109.908361][ T3304] RAX: 0000000000000000 RBX: 00000000000002d5 RCX: 00007f6a287514a3 [ 109.908381][ T3304] RDX: 00007ffdeb0399e0 RSI: 0000000000000000 RDI: 0000000000000000 [ 109.908417][ T3304] RBP: 00007ffdeb039a4c R08: 00000000103a5698 R09: 0000000000000000 [ 109.908434][ T3304] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000001388 [ 109.908453][ T3304] R13: 00000000000927c0 R14: 000000000001a9cb R15: 00007ffdeb039aa0 [ 109.908481][ T3304] [ 109.908490][ T3304] memory: usage 307200kB, limit 307200kB, failcnt 474 [ 109.914302][ T4548] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 109.924275][ T3304] memory+swap: usage 307424kB, limit 9007199254740988kB, failcnt 0 [ 109.934680][ T4548] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 109.937917][ T3304] kmem: usage 307196kB, limit 9007199254740988kB, failcnt 0 [ 109.940913][ T4548] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 109.945261][ T3304] Memory cgroup stats for /syz0: [ 109.949784][ T3304] cache 4096 [ 109.949975][ T4548] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 109.949999][ T4548] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 109.954205][ T3304] rss 0 [ 109.954215][ T3304] shmem 0 [ 110.016477][ T4548] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz0] on syz1 [ 110.019924][ T3304] mapped_file 0 [ 110.019935][ T3304] dirty 0 [ 110.019944][ T3304] writeback 0 [ 110.214909][ T7744] loop5: detected capacity change from 0 to 2048 [ 110.219828][ T3304] workingset_refault_anon 65 [ 110.240733][ T3304] workingset_refault_file 91 [ 110.245528][ T3304] swap 229376 [ 110.248824][ T3304] swapcached 0 [ 110.249788][ T7744] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 110.252281][ T3304] pgpgin 66617 [ 110.252290][ T3304] pgpgout 66616 [ 110.252296][ T3304] pgfault 77653 [ 110.252302][ T3304] pgmajfault 30 [ 110.252309][ T3304] inactive_anon 0 [ 110.252342][ T3304] active_anon 0 [ 110.252349][ T3304] inactive_file 0 [ 110.252356][ T3304] active_file 4096 [ 110.252365][ T3304] unevictable 0 [ 110.296555][ T3304] hierarchical_memory_limit 314572800 [ 110.302003][ T3304] hierarchical_memsw_limit 9223372036854771712 [ 110.308211][ T3304] total_cache 4096 [ 110.311941][ T3304] total_rss 0 [ 110.315320][ T3304] total_shmem 0 [ 110.318799][ T3304] total_mapped_file 0 [ 110.322801][ T3304] total_dirty 0 [ 110.326318][ T3304] total_writeback 0 [ 110.330226][ T3304] total_workingset_refault_anon 65 [ 110.335465][ T3304] total_workingset_refault_file 91 [ 110.340599][ T3304] total_swap 229376 [ 110.344491][ T3304] total_swapcached 0 [ 110.348566][ T3304] total_pgpgin 66617 [ 110.352480][ T3304] total_pgpgout 66616 [ 110.356640][ T3304] total_pgfault 77653 [ 110.360666][ T3304] total_pgmajfault 30 [ 110.364828][ T3304] total_inactive_anon 0 [ 110.369037][ T3304] total_active_anon 0 [ 110.373275][ T3304] total_inactive_file 0 [ 110.377495][ T3304] total_active_file 4096 [ 110.381830][ T3304] total_unevictable 0 [ 110.385875][ T3304] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.1399,pid=7698,uid=0 [ 110.400679][ T3304] Memory cgroup out of memory: Killed process 7698 (syz.0.1399) total-vm:96072kB, anon-rss:1200kB, file-rss:22348kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:0 [ 110.557983][ T7761] lo speed is unknown, defaulting to 1000 [ 110.582285][ T3968] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.632820][ T7766] loop5: detected capacity change from 0 to 512 [ 110.690852][ T7766] EXT4-fs error (device loop5): ext4_orphan_get:1418: comm syz.5.1424: bad orphan inode 11862016 [ 110.712237][ T7766] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 110.852514][ T7775] loop1: detected capacity change from 0 to 512 [ 110.915999][ T7775] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.988901][ T7776] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #19: comm syz.5.1424: corrupted inode contents [ 111.057851][ T7776] EXT4-fs error (device loop5): ext4_dirty_inode:6538: inode #19: comm syz.5.1424: mark_inode_dirty error [ 111.083380][ T7784] 9pnet: p9_errstr2errno: server reported unknown error [ 111.122047][ T7776] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #19: comm syz.5.1424: corrupted inode contents [ 111.167909][ T7776] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2991: inode #19: comm syz.5.1424: mark_inode_dirty error [ 111.242163][ T7776] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2994: inode #19: comm syz.5.1424: mark inode dirty (error -117) [ 111.263721][ T7792] lo speed is unknown, defaulting to 1000 [ 111.308712][ T7776] EXT4-fs warning (device loop5): ext4_evict_inode:274: xattr delete (err -117) [ 111.361194][ T7802] loop3: detected capacity change from 0 to 2048 [ 111.386929][ T3968] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 111.408099][ T7805] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1440'. [ 111.505703][ T7802] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 111.660548][ T7815] netlink: 100 bytes leftover after parsing attributes in process `syz.5.1444'. [ 111.755287][ T7819] 9pnet: p9_errstr2errno: server reported unknown error [ 111.776433][ T7775] syz.1.1426 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 111.790605][ T7775] CPU: 0 UID: 0 PID: 7775 Comm: syz.1.1426 Not tainted syzkaller #0 PREEMPT(voluntary) [ 111.790632][ T7775] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 111.790644][ T7775] Call Trace: [ 111.790651][ T7775] [ 111.790660][ T7775] __dump_stack+0x1d/0x30 [ 111.790724][ T7775] dump_stack_lvl+0xe8/0x140 [ 111.790813][ T7775] dump_stack+0x15/0x1b [ 111.790833][ T7775] dump_header+0x81/0x220 [ 111.790873][ T7775] oom_kill_process+0x342/0x400 [ 111.790910][ T7775] out_of_memory+0x979/0xb80 [ 111.790992][ T7775] try_charge_memcg+0x5e6/0x9e0 [ 111.791024][ T7775] obj_cgroup_charge_pages+0xa6/0x150 [ 111.791064][ T7775] __memcg_kmem_charge_page+0x9f/0x170 [ 111.791148][ T7775] __alloc_frozen_pages_noprof+0x188/0x360 [ 111.791188][ T7775] alloc_pages_mpol+0xb3/0x250 [ 111.791235][ T7775] alloc_pages_noprof+0x90/0x130 [ 111.791299][ T7775] __vmalloc_node_range_noprof+0x6f2/0xe00 [ 111.791420][ T7775] __kvmalloc_node_noprof+0x30f/0x4e0 [ 111.791461][ T7775] ? ip_set_alloc+0x1f/0x30 [ 111.791486][ T7775] ? ip_set_alloc+0x1f/0x30 [ 111.791581][ T7775] ? __kmalloc_cache_noprof+0x189/0x320 [ 111.791614][ T7775] ip_set_alloc+0x1f/0x30 [ 111.791636][ T7775] hash_netiface_create+0x282/0x740 [ 111.791669][ T7775] ? __pfx_hash_netiface_create+0x10/0x10 [ 111.791701][ T7775] ip_set_create+0x3c9/0x960 [ 111.791796][ T7775] nfnetlink_rcv_msg+0x4c3/0x590 [ 111.791852][ T7775] netlink_rcv_skb+0x123/0x220 [ 111.791882][ T7775] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 111.791917][ T7775] nfnetlink_rcv+0x16b/0x1690 [ 111.791994][ T7775] ? nlmon_xmit+0x4f/0x60 [ 111.792033][ T7775] ? consume_skb+0x49/0x150 [ 111.792064][ T7775] ? nlmon_xmit+0x4f/0x60 [ 111.792164][ T7775] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 111.792233][ T7775] ? __dev_queue_xmit+0x1200/0x2000 [ 111.792259][ T7775] ? __dev_queue_xmit+0x182/0x2000 [ 111.792386][ T7775] ? ref_tracker_free+0x37d/0x3e0 [ 111.792488][ T7775] ? __netlink_deliver_tap+0x4dc/0x500 [ 111.792570][ T7775] netlink_unicast+0x5bd/0x690 [ 111.792596][ T7775] netlink_sendmsg+0x58b/0x6b0 [ 111.792626][ T7775] ? __pfx_netlink_sendmsg+0x10/0x10 [ 111.792654][ T7775] __sock_sendmsg+0x142/0x180 [ 111.792759][ T7775] ____sys_sendmsg+0x31e/0x4e0 [ 111.792805][ T7775] ___sys_sendmsg+0x17b/0x1d0 [ 111.792850][ T7775] __x64_sys_sendmsg+0xd4/0x160 [ 111.792960][ T7775] x64_sys_call+0x191e/0x2ff0 [ 111.792983][ T7775] do_syscall_64+0xd2/0x200 [ 111.793017][ T7775] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 111.793085][ T7775] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 111.793175][ T7775] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.793198][ T7775] RIP: 0033:0x7f76ad1fec29 [ 111.793214][ T7775] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 111.793233][ T7775] RSP: 002b:00007f76abc5f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 111.793254][ T7775] RAX: ffffffffffffffda RBX: 00007f76ad445fa0 RCX: 00007f76ad1fec29 [ 111.793290][ T7775] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000004 [ 111.793303][ T7775] RBP: 00007f76ad281e41 R08: 0000000000000000 R09: 0000000000000000 [ 111.793316][ T7775] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 111.793406][ T7775] R13: 00007f76ad446038 R14: 00007f76ad445fa0 R15: 00007ffe57b8b3f8 [ 111.793427][ T7775] [ 111.793438][ T7775] memory: usage 307196kB, limit 307200kB, failcnt 263 [ 112.130019][ T7775] memory+swap: usage 307644kB, limit 9007199254740988kB, failcnt 0 [ 112.133591][ T3408] IPVS: starting estimator thread 0... [ 112.138218][ T7775] kmem: usage 307176kB, limit 9007199254740988kB, failcnt 0 [ 112.151203][ T7775] Memory cgroup stats for /syz1: [ 112.179235][ T7775] cache 16384 [ 112.187571][ T7775] rss 0 [ 112.190351][ T7775] shmem 0 [ 112.193364][ T7775] mapped_file 4096 [ 112.197163][ T7775] dirty 4096 [ 112.200460][ T7775] writeback 0 [ 112.203760][ T7775] workingset_refault_anon 124 [ 112.208513][ T7775] workingset_refault_file 697 [ 112.213384][ T7775] swap 458752 [ 112.216841][ T7775] swapcached 0 [ 112.220247][ T7775] pgpgin 35234 [ 112.223705][ T7775] pgpgout 35228 [ 112.227246][ T7775] pgfault 50630 [ 112.230719][ T7775] pgmajfault 78 [ 112.234186][ T7775] inactive_anon 0 [ 112.237863][ T7775] active_anon 0 [ 112.241347][ T7775] inactive_file 0 [ 112.244759][ T7829] IPVS: using max 1968 ests per chain, 98400 per kthread [ 112.245024][ T7775] active_file 20480 [ 112.255894][ T7775] unevictable 0 [ 112.259378][ T7775] hierarchical_memory_limit 314572800 [ 112.264884][ T7775] hierarchical_memsw_limit 9223372036854771712 [ 112.271077][ T7775] total_cache 16384 [ 112.274935][ T7775] total_rss 0 [ 112.278241][ T7775] total_shmem 0 [ 112.281720][ T7775] total_mapped_file 4096 [ 112.286051][ T7775] total_dirty 4096 [ 112.289818][ T7775] total_writeback 0 [ 112.293639][ T7775] total_workingset_refault_anon 124 [ 112.299034][ T7775] total_workingset_refault_file 697 [ 112.304314][ T7775] total_swap 458752 [ 112.308172][ T7775] total_swapcached 0 [ 112.312109][ T7775] total_pgpgin 35234 [ 112.316031][ T7775] total_pgpgout 35228 [ 112.320458][ T7775] total_pgfault 50630 [ 112.324475][ T7775] total_pgmajfault 78 [ 112.328526][ T7775] total_inactive_anon 0 [ 112.332958][ T7775] total_active_anon 0 [ 112.336978][ T7775] total_inactive_file 0 [ 112.341207][ T7775] total_active_file 20480 [ 112.345625][ T7775] total_unevictable 0 [ 112.350020][ T7775] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.1426,pid=7774,uid=0 [ 112.364959][ T7775] Memory cgroup out of memory: Killed process 7774 (syz.1.1426) total-vm:95940kB, anon-rss:1152kB, file-rss:22184kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 112.384025][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.538446][ T7850] loop3: detected capacity change from 0 to 1024 [ 112.555050][ T7850] EXT4-fs: Ignoring removed nomblk_io_submit option [ 112.564511][ T7852] netlink: 100 bytes leftover after parsing attributes in process `syz.2.1458'. [ 112.565112][ T7850] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 112.624388][ T7850] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.708133][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.766739][ T4268] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.837958][ T7863] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1461'. [ 112.906958][ T7876] loop1: detected capacity change from 0 to 128 [ 112.928347][ T7876] +}[@: attempt to access beyond end of device [ 112.928347][ T7876] loop1: rw=2049, sector=138, nr_sectors = 8 limit=128 [ 112.981483][ T7882] netlink: 100 bytes leftover after parsing attributes in process `syz.3.1471'. [ 112.993246][ T7876] +}[@: attempt to access beyond end of device [ 112.993246][ T7876] loop1: rw=2049, sector=146, nr_sectors = 6 limit=128 [ 113.059018][ T7891] loop3: detected capacity change from 0 to 512 [ 113.063929][ T7876] +}[@: attempt to access beyond end of device [ 113.063929][ T7876] loop1: rw=2049, sector=150, nr_sectors = 2 limit=128 [ 113.078293][ T7876] buffer_io_error: 16 callbacks suppressed [ 113.078309][ T7876] Buffer I/O error on dev loop1, logical block 75, lost async page write [ 113.109341][ T7885] loop5: detected capacity change from 0 to 8192 [ 113.122939][ T7891] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.135134][ T7876] +}[@: attempt to access beyond end of device [ 113.135134][ T7876] loop1: rw=2049, sector=152, nr_sectors = 2 limit=128 [ 113.148398][ T7876] Buffer I/O error on dev loop1, logical block 76, lost async page write [ 113.220320][ T7876] +}[@: attempt to access beyond end of device [ 113.220320][ T7876] loop1: rw=2049, sector=170, nr_sectors = 6 limit=128 [ 113.239073][ T4548] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 113.255840][ T7876] +}[@: attempt to access beyond end of device [ 113.255840][ T7876] loop1: rw=2049, sector=174, nr_sectors = 2 limit=128 [ 113.268858][ T7876] Buffer I/O error on dev loop1, logical block 87, lost async page write [ 113.335087][ T7876] +}[@: attempt to access beyond end of device [ 113.335087][ T7876] loop1: rw=2049, sector=176, nr_sectors = 2 limit=128 [ 113.348064][ T7876] Buffer I/O error on dev loop1, logical block 88, lost async page write [ 113.386614][ T7901] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7901 comm=syz.5.1478 [ 113.400134][ T7876] +}[@: attempt to access beyond end of device [ 113.400134][ T7876] loop1: rw=2049, sector=178, nr_sectors = 6 limit=128 [ 113.426317][ T7876] +}[@: attempt to access beyond end of device [ 113.426317][ T7876] loop1: rw=2049, sector=182, nr_sectors = 2 limit=128 [ 113.439354][ T7876] Buffer I/O error on dev loop1, logical block 91, lost async page write [ 113.463825][ T7903] netlink: 256 bytes leftover after parsing attributes in process `syz.5.1479'. [ 113.465330][ T7876] +}[@: attempt to access beyond end of device [ 113.465330][ T7876] loop1: rw=2049, sector=184, nr_sectors = 2 limit=128 [ 113.485962][ T7876] Buffer I/O error on dev loop1, logical block 92, lost async page write [ 113.515630][ T7876] Buffer I/O error on dev loop1, logical block 103, lost async page write [ 113.524939][ T7876] Buffer I/O error on dev loop1, logical block 104, lost async page write [ 113.558015][ T7876] Buffer I/O error on dev loop1, logical block 107, lost async page write [ 113.626691][ T7908] loop5: detected capacity change from 0 to 164 [ 113.663414][ T7910] loop5: detected capacity change from 0 to 128 [ 113.681800][ T7910] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 113.695026][ T7876] Buffer I/O error on dev loop1, logical block 108, lost async page write [ 113.749300][ T3968] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 113.990254][ T7916] tipc: Started in network mode [ 113.995444][ T7916] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 114.004346][ T7916] tipc: Enabling of bearer rejected, failed to enable media [ 114.103859][ T7918] SELinux: failed to load policy [ 114.142942][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.167239][ T7935] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1491'. [ 114.190383][ T7939] $H: (slave dummy0): Releasing backup interface [ 114.202268][ T7939] dummy0: left promiscuous mode [ 114.210621][ T7941] loop9: detected capacity change from 0 to 7 [ 114.217549][ T7941] loop9: unable to read partition table [ 114.225383][ T7939] bridge_slave_0: left allmulticast mode [ 114.231077][ T7939] bridge_slave_0: left promiscuous mode [ 114.237059][ T7939] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.244447][ T7941] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 114.244447][ T7941] ) failed (rc=-5) [ 114.264062][ T7939] bridge_slave_1: left allmulticast mode [ 114.269808][ T7939] bridge_slave_1: left promiscuous mode [ 114.275578][ T7939] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.285889][ T7939] $H: (slave bond_slave_0): Releasing backup interface [ 114.293507][ T7939] bond_slave_0: left promiscuous mode [ 114.301732][ T7946] loop1: detected capacity change from 0 to 512 [ 114.309847][ T7939] $H: (slave bond_slave_1): Releasing backup interface [ 114.317909][ T7939] bond_slave_1: left promiscuous mode [ 114.324548][ T7939] team0: Port device team_slave_0 removed [ 114.335583][ T7946] EXT4-fs error (device loop1): ext4_orphan_get:1418: comm syz.1.1495: bad orphan inode 11862016 [ 114.368157][ T7939] team0: Port device team_slave_1 removed [ 114.374122][ T7939] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 114.381980][ T7946] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 114.405344][ T7939] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 114.415494][ T29] kauditd_printk_skb: 104 callbacks suppressed [ 114.415511][ T29] audit: type=1326 audit(114.415:5082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7949 comm="syz.0.1496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a2871ec29 code=0x7ffc0000 [ 114.452081][ T29] audit: type=1326 audit(114.445:5083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7949 comm="syz.0.1496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=237 compat=0 ip=0x7f6a2871ec29 code=0x7ffc0000 [ 114.504495][ T7942] A link change request failed with some changes committed already. Interface bond1 may have been left with an inconsistent configuration, please check. [ 114.533655][ T7958] syz_tun: entered allmulticast mode [ 114.545725][ T7958] dvmrp1: entered allmulticast mode [ 114.556286][ T7957] syz_tun: left allmulticast mode [ 114.578201][ T29] audit: type=1326 audit(114.485:5084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7949 comm="syz.0.1496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a2871ec29 code=0x7ffc0000 [ 114.601216][ T29] audit: type=1326 audit(114.485:5085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7949 comm="syz.0.1496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a2871ec29 code=0x7ffc0000 [ 114.640266][ T7966] ref_ctr going negative. vaddr: 0x200000ffc002, curr val: -29824, delta: 1 [ 114.649186][ T7966] ref_ctr increment failed for inode: 0x5d4 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88810c71d080 [ 114.666593][ T7959] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #19: comm syz.1.1495: corrupted inode contents [ 114.688687][ T29] audit: type=1400 audit(114.685:5086): avc: denied { lock } for pid=7968 comm="syz.3.1504" path="socket:[19592]" dev="sockfs" ino=19592 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 114.694814][ T7959] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #19: comm syz.1.1495: mark_inode_dirty error [ 114.765577][ T7959] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #19: comm syz.1.1495: corrupted inode contents [ 114.784044][ T7959] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2991: inode #19: comm syz.1.1495: mark_inode_dirty error [ 114.809433][ T7959] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2994: inode #19: comm syz.1.1495: mark inode dirty (error -117) [ 114.824896][ T7959] EXT4-fs warning (device loop1): ext4_evict_inode:274: xattr delete (err -117) [ 114.906083][ T4268] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 114.943387][ T29] audit: type=1400 audit(114.935:5087): avc: denied { bind } for pid=7983 comm="syz.5.1512" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 114.994741][ T29] audit: type=1400 audit(114.965:5088): avc: denied { setopt } for pid=7983 comm="syz.5.1512" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 115.067547][ T7991] loop2: detected capacity change from 0 to 4096 [ 115.074363][ T7991] EXT4-fs: Ignoring removed nomblk_io_submit option [ 115.088421][ T7991] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.252329][ T8000] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1518'. [ 115.261537][ T8000] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1518'. [ 115.315677][ T8005] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1520'. [ 115.382286][ T8009] loop3: detected capacity change from 0 to 512 [ 115.422619][ T8009] EXT4-fs error (device loop3): ext4_orphan_get:1418: comm syz.3.1522: bad orphan inode 11862016 [ 115.469407][ T8009] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 115.667219][ T8014] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #19: comm syz.3.1522: corrupted inode contents [ 115.680539][ T8014] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #19: comm syz.3.1522: mark_inode_dirty error [ 115.714996][ T8014] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #19: comm syz.3.1522: corrupted inode contents [ 115.742475][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.771870][ T8014] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2991: inode #19: comm syz.3.1522: mark_inode_dirty error [ 115.790849][ T8014] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2994: inode #19: comm syz.3.1522: mark inode dirty (error -117) [ 115.850111][ T7998] Set syz1 is full, maxelem 65536 reached [ 115.855357][ T8014] EXT4-fs warning (device loop3): ext4_evict_inode:274: xattr delete (err -117) [ 115.885097][ T8023] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8023 comm=syz.5.1527 [ 115.916427][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 116.037569][ T29] audit: type=1326 audit(116.035:5089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8048 comm="syz.0.1540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a2871ec29 code=0x7ffc0000 [ 116.083192][ T29] audit: type=1326 audit(116.035:5090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8048 comm="syz.0.1540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=172 compat=0 ip=0x7f6a2871ec29 code=0x7ffc0000 [ 116.106373][ T29] audit: type=1326 audit(116.035:5091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8048 comm="syz.0.1540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a2871ec29 code=0x7ffc0000 [ 116.124835][ T8053] loop5: detected capacity change from 0 to 2048 [ 116.175226][ T8053] Alternate GPT is invalid, using primary GPT. [ 116.181511][ T8053] loop5: p1 p2 p3 [ 116.230174][ T8069] loop5: detected capacity change from 0 to 512 [ 116.257999][ T8069] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 116.281031][ T8069] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #2: comm syz.5.1547: corrupted inode contents [ 116.293099][ T8069] EXT4-fs error (device loop5): ext4_dirty_inode:6538: inode #2: comm syz.5.1547: mark_inode_dirty error [ 116.305556][ T8069] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #2: comm syz.5.1547: corrupted inode contents [ 116.318717][ T8069] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #2: comm syz.5.1547: mark_inode_dirty error [ 116.333316][ T8069] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #2: comm syz.5.1547: corrupted inode contents [ 116.349799][ T8069] EXT4-fs error (device loop5): ext4_dirty_inode:6538: inode #2: comm syz.5.1547: mark_inode_dirty error [ 116.362212][ T8069] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #2: comm syz.5.1547: corrupted inode contents [ 116.375457][ T8069] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #2: comm syz.5.1547: corrupted inode contents [ 116.387676][ T8069] EXT4-fs error (device loop5): add_dirent_to_buf:2153: inode #2: comm syz.5.1547: mark_inode_dirty error [ 116.400290][ T8069] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #2: comm syz.5.1547: corrupted inode contents [ 116.423460][ T3968] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.449823][ T8082] __nla_validate_parse: 3 callbacks suppressed [ 116.449840][ T8082] netlink: 96 bytes leftover after parsing attributes in process `syz.5.1553'. [ 116.469216][ T8084] netlink: 'syz.0.1554': attribute type 10 has an invalid length. [ 116.481963][ T8084] team0: Port device dummy0 added [ 116.489522][ T8084] netlink: 'syz.0.1554': attribute type 10 has an invalid length. [ 116.499606][ T8084] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 116.510883][ T8084] team0: Failed to send options change via netlink (err -105) [ 116.518603][ T8084] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 116.528042][ T8084] team0: Port device dummy0 removed [ 116.535343][ T8084] dummy0: entered promiscuous mode [ 116.540990][ T8084] $H: (slave dummy0): Enslaving as an active interface with an up link [ 116.574452][ T8090] loop5: detected capacity change from 0 to 512 [ 116.586268][ T8090] EXT4-fs error (device loop5): ext4_orphan_get:1418: comm syz.5.1557: bad orphan inode 11862016 [ 116.597931][ T8090] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 116.679172][ T3968] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 116.700742][ T8099] loop5: detected capacity change from 0 to 512 [ 116.717567][ T8099] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 116.878347][ T8106] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1562'. [ 117.032160][ T8115] loop2: detected capacity change from 0 to 512 [ 117.046986][ T8115] EXT4-fs error (device loop2): ext4_orphan_get:1418: comm syz.2.1563: bad orphan inode 11862016 [ 117.059101][ T8115] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 117.156014][ T8121] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #19: comm syz.2.1563: corrupted inode contents [ 117.168661][ T8121] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #19: comm syz.2.1563: mark_inode_dirty error [ 117.190401][ T8121] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #19: comm syz.2.1563: corrupted inode contents [ 117.202727][ T8121] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2991: inode #19: comm syz.2.1563: mark_inode_dirty error [ 117.239494][ T8121] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2994: inode #19: comm syz.2.1563: mark inode dirty (error -117) [ 117.303092][ T8121] EXT4-fs warning (device loop2): ext4_evict_inode:274: xattr delete (err -117) [ 117.419665][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 117.435446][ T8114] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1564'. [ 117.635058][ T8150] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1576'. [ 117.643981][ T8150] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1576'. [ 117.666699][ T3968] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.676796][ T8151] loop2: detected capacity change from 0 to 128 [ 117.711858][ T8153] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1579'. [ 117.852249][ T8166] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1584'. [ 117.875130][ T8166] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1584'. [ 117.934666][ T8151] bio_check_eod: 2143 callbacks suppressed [ 117.934686][ T8151] syz.2.1568: attempt to access beyond end of device [ 117.934686][ T8151] loop2: rw=0, sector=145, nr_sectors = 8 limit=128 [ 117.955589][ T8151] syz.2.1568: attempt to access beyond end of device [ 117.955589][ T8151] loop2: rw=0, sector=145, nr_sectors = 8 limit=128 [ 117.969002][ T8151] syz.2.1568: attempt to access beyond end of device [ 117.969002][ T8151] loop2: rw=0, sector=145, nr_sectors = 8 limit=128 [ 117.983226][ T8151] syz.2.1568: attempt to access beyond end of device [ 117.983226][ T8151] loop2: rw=0, sector=145, nr_sectors = 8 limit=128 [ 117.999570][ T8151] syz.2.1568: attempt to access beyond end of device [ 117.999570][ T8151] loop2: rw=0, sector=145, nr_sectors = 8 limit=128 [ 118.014066][ T8151] syz.2.1568: attempt to access beyond end of device [ 118.014066][ T8151] loop2: rw=0, sector=145, nr_sectors = 8 limit=128 [ 118.029845][ T8151] syz.2.1568: attempt to access beyond end of device [ 118.029845][ T8151] loop2: rw=0, sector=145, nr_sectors = 8 limit=128 [ 118.044464][ T8151] syz.2.1568: attempt to access beyond end of device [ 118.044464][ T8151] loop2: rw=0, sector=145, nr_sectors = 8 limit=128 [ 118.062361][ T8170] loop5: detected capacity change from 0 to 128 [ 118.065471][ T8172] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 118.069067][ T8170] EXT4-fs: Ignoring removed nobh option [ 118.084392][ T8151] syz.2.1568: attempt to access beyond end of device [ 118.084392][ T8151] loop2: rw=0, sector=145, nr_sectors = 8 limit=128 [ 118.110753][ T8151] syz.2.1568: attempt to access beyond end of device [ 118.110753][ T8151] loop2: rw=0, sector=145, nr_sectors = 8 limit=128 [ 118.360515][ T8201] sctp: [Deprecated]: syz.2.1598 (pid 8201) Use of int in maxseg socket option. [ 118.360515][ T8201] Use struct sctp_assoc_value instead [ 118.539687][ T8231] tipc: Started in network mode [ 118.544656][ T8231] tipc: Node identity ac14140f, cluster identity 4711 [ 118.551679][ T8231] tipc: New replicast peer: 255.255.255.255 [ 118.557812][ T8231] tipc: Enabled bearer , priority 10 [ 118.801987][ T8256] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1622'. [ 118.961140][ T8267] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=8267 comm=syz.5.1624 [ 119.468280][ T8291] capability: warning: `syz.2.1636' uses 32-bit capabilities (legacy support in use) [ 119.536440][ T3408] hid_parser_main: 17 callbacks suppressed [ 119.536457][ T3408] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 119.549818][ T3408] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 119.557303][ T3408] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 119.591449][ T3408] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 119.599021][ T3408] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 119.606465][ T3408] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 119.613998][ T3408] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 119.621489][ T3408] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 119.629003][ T3408] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 119.636522][ T3408] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 119.670311][ T29] kauditd_printk_skb: 128 callbacks suppressed [ 119.670350][ T29] audit: type=1400 audit(119.665:5220): avc: denied { compute_member } for pid=8306 comm="syz.1.1643" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 119.696646][ T3393] tipc: Node number set to 2886997007 [ 119.757125][ T3408] hid-generic 0000:0000:0000.0004: hidraw0: HID v8.00 Device [syz0] on syz0 [ 119.924040][ T29] audit: type=1326 audit(119.915:5221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8334 comm="syz.5.1654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f408498ec29 code=0x7ffc0000 [ 119.947065][ T29] audit: type=1326 audit(119.915:5222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8334 comm="syz.5.1654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f408498ec29 code=0x7ffc0000 [ 119.970130][ T29] audit: type=1326 audit(119.915:5223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8334 comm="syz.5.1654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f408498ec29 code=0x7ffc0000 [ 119.992987][ T29] audit: type=1326 audit(119.915:5224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8334 comm="syz.5.1654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f408498ec29 code=0x7ffc0000 [ 120.016264][ T29] audit: type=1326 audit(119.915:5225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8334 comm="syz.5.1654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f408498ec29 code=0x7ffc0000 [ 120.039128][ T29] audit: type=1326 audit(119.915:5226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8334 comm="syz.5.1654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f408498ec29 code=0x7ffc0000 [ 120.062285][ T29] audit: type=1326 audit(119.915:5227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8334 comm="syz.5.1654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f408498ec29 code=0x7ffc0000 [ 120.085417][ T29] audit: type=1326 audit(119.915:5228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8334 comm="syz.5.1654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f408498ec29 code=0x7ffc0000 [ 120.108446][ T29] audit: type=1326 audit(119.915:5229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8334 comm="syz.5.1654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f408498ec29 code=0x7ffc0000 [ 120.222794][ T8354] loop1: detected capacity change from 0 to 512 [ 120.271279][ T4268] EXT4-fs error (device loop1): __ext4_iget:5464: inode #13: block 33024: comm syz-executor: invalid block [ 120.286579][ T4268] EXT4-fs error (device loop1): __ext4_iget:5464: inode #13: block 33024: comm syz-executor: invalid block [ 120.445152][ T8367] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 120.452629][ T8367] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 120.460478][ T8367] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 120.467965][ T8367] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 120.575191][ T8373] loop2: detected capacity change from 0 to 1024 [ 120.582309][ T8373] EXT4-fs: Ignoring removed bh option [ 120.593444][ T8373] EXT4-fs (loop2): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 120.690254][ T8370] lo speed is unknown, defaulting to 1000 [ 120.762177][ T8370] chnl_net:caif_netlink_parms(): no params data found [ 120.810220][ T8370] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.817727][ T8370] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.825119][ T8370] bridge_slave_0: entered allmulticast mode [ 120.831917][ T8370] bridge_slave_0: entered promiscuous mode [ 120.839245][ T8370] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.846551][ T8370] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.853913][ T8370] bridge_slave_1: entered allmulticast mode [ 120.860917][ T8370] bridge_slave_1: entered promiscuous mode [ 120.881936][ T8370] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 120.892810][ T8370] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 120.915843][ T8370] team0: Port device team_slave_0 added [ 120.922836][ T8370] team0: Port device team_slave_1 added [ 120.942267][ T8370] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 120.949451][ T8370] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 120.975622][ T8370] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 120.987275][ T8370] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 120.994274][ T8370] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 121.020707][ T8370] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 121.051892][ T8370] hsr_slave_0: entered promiscuous mode [ 121.062311][ T8370] hsr_slave_1: entered promiscuous mode [ 121.073218][ T8370] debugfs: 'hsr0' already exists in 'hsr' [ 121.079031][ T8370] Cannot create hsr debugfs directory [ 121.178795][ T8370] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 121.187950][ T8370] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 121.197041][ T8370] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 121.205815][ T8370] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 121.258776][ T8370] 8021q: adding VLAN 0 to HW filter on device bond0 [ 121.273164][ T8370] 8021q: adding VLAN 0 to HW filter on device team0 [ 121.284949][ T3569] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.292074][ T3569] bridge0: port 1(bridge_slave_0) entered forwarding state [ 121.304024][ T3569] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.311161][ T3569] bridge0: port 2(bridge_slave_1) entered forwarding state [ 121.495834][ T8370] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 121.555429][ T8414] loop5: detected capacity change from 0 to 512 [ 121.774733][ T8370] veth0_vlan: entered promiscuous mode [ 121.784462][ T8370] veth1_vlan: entered promiscuous mode [ 121.804316][ T8439] .`: (slave dummy0): Releasing backup interface [ 121.846645][ T8439] bridge_slave_0: left allmulticast mode [ 121.852483][ T8439] bridge_slave_0: left promiscuous mode [ 121.858420][ T8439] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.897597][ T8439] bridge_slave_1: left allmulticast mode [ 121.903571][ T8439] bridge_slave_1: left promiscuous mode [ 121.909324][ T8439] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.936463][ T8439] .`: (slave bond_slave_0): Releasing backup interface [ 121.948883][ T8439] .`: (slave bond_slave_1): Releasing backup interface [ 121.961001][ T8439] team0: Port device team_slave_0 removed [ 121.971466][ T8439] team0: Port device team_slave_1 removed [ 122.002477][ T8370] veth0_macvtap: entered promiscuous mode [ 122.024180][ T8370] veth1_macvtap: entered promiscuous mode [ 122.072289][ T8370] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 122.108276][ T8370] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 122.141419][ T3655] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.150902][ T3655] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.171504][ T3655] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.185953][ T3655] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.324450][ T8461] loop6: detected capacity change from 0 to 128 [ 122.330839][ T8459] loop5: detected capacity change from 0 to 2048 [ 122.376481][ T8459] loop5: p1 < > p4 [ 122.389252][ T8459] loop5: p4 size 8388608 extends beyond EOD, truncated [ 123.670102][ T8511] Set syz1 is full, maxelem 65536 reached [ 123.904533][ T8558] netlink: 'syz.6.1733': attribute type 1 has an invalid length. [ 124.161676][ T8590] loop3: detected capacity change from 0 to 512 [ 124.169954][ T8590] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 124.186788][ T8592] netlink: 'syz.0.1748': attribute type 11 has an invalid length. [ 124.188883][ T8590] EXT4-fs error (device loop3): ext4_xattr_block_get:593: inode #15: comm syz.3.1747: corrupted xattr block 19: overlapping e_value [ 124.209651][ T8590] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 124.219110][ T8590] EXT4-fs error (device loop3): ext4_xattr_block_get:593: inode #15: comm syz.3.1747: corrupted xattr block 19: overlapping e_value [ 124.233875][ T8590] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 124.239527][ T8597] loop6: detected capacity change from 0 to 512 [ 124.243194][ T8590] EXT4-fs error (device loop3): ext4_xattr_block_get:593: inode #15: comm syz.3.1747: corrupted xattr block 19: overlapping e_value [ 124.250904][ T8597] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 124.283189][ T8597] EXT4-fs (loop6): 1 truncate cleaned up [ 124.721740][ T8640] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1769'. [ 124.802195][ T8649] ip6gre1: entered allmulticast mode [ 124.881263][ T8656] netlink: 'syz.2.1775': attribute type 30 has an invalid length. [ 125.431317][ T29] kauditd_printk_skb: 42 callbacks suppressed [ 125.431336][ T29] audit: type=1400 audit(125.425:5272): avc: denied { create } for pid=8672 comm="syz.2.1781" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 125.444953][ T29] audit: type=1400 audit(125.425:5273): avc: denied { read } for pid=8672 comm="syz.2.1781" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 125.603006][ T8682] vlan0: entered promiscuous mode [ 125.697766][ T8688] 9pnet: p9_errstr2errno: server reported unknown error @0x0000000000000007 [ 125.724464][ T29] audit: type=1326 audit(125.715:5274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8695 comm="syz.0.1791" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6a2871ec29 code=0x0 [ 125.760848][ T8700] loop2: detected capacity change from 0 to 512 [ 125.796884][ T8706] loop5: detected capacity change from 0 to 1024 [ 125.814318][ T8708] loop3: detected capacity change from 0 to 128 [ 125.826528][ T8708] bio_check_eod: 3846 callbacks suppressed [ 125.826544][ T8708] +}[@: attempt to access beyond end of device [ 125.826544][ T8708] loop3: rw=2049, sector=138, nr_sectors = 8 limit=128 [ 125.859027][ T8708] +}[@: attempt to access beyond end of device [ 125.859027][ T8708] loop3: rw=2049, sector=146, nr_sectors = 6 limit=128 [ 125.873218][ T8706] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4183: comm syz.5.1794: Allocating blocks 385-513 which overlap fs metadata [ 125.887718][ T8708] +}[@: attempt to access beyond end of device [ 125.887718][ T8708] loop3: rw=2049, sector=150, nr_sectors = 2 limit=128 [ 125.898493][ T8706] EXT4-fs (loop5): pa ffff888107260af0: logic 16, phys. 129, len 24 [ 125.900831][ T8708] buffer_io_error: 18 callbacks suppressed [ 125.900847][ T8708] Buffer I/O error on dev loop3, logical block 75, lost async page write [ 125.908825][ T8706] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:5434: group 0, [ 125.915184][ T8708] +}[@: attempt to access beyond end of device [ 125.915184][ T8708] loop3: rw=2049, sector=152, nr_sectors = 2 limit=128 [ 125.923196][ T8706] free 0, pa_free 8 [ 125.931940][ T8708] Buffer I/O error on dev loop3, logical block 76, lost async page write [ 125.960408][ T29] audit: type=1326 audit(125.955:5275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8707 comm="syz.3.1795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe293afec29 code=0x7ffc0000 [ 125.997551][ T29] audit: type=1326 audit(125.955:5276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8707 comm="syz.3.1795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe293afec29 code=0x7ffc0000 [ 125.998379][ T8708] +}[@: attempt to access beyond end of device [ 125.998379][ T8708] loop3: rw=2049, sector=170, nr_sectors = 6 limit=128 [ 126.020418][ T29] audit: type=1326 audit(125.955:5277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8707 comm="syz.3.1795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=237 compat=0 ip=0x7fe293afec29 code=0x7ffc0000 [ 126.020453][ T29] audit: type=1326 audit(125.995:5278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8707 comm="syz.3.1795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe293afec29 code=0x7ffc0000 [ 126.079093][ T29] audit: type=1326 audit(125.995:5279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8707 comm="syz.3.1795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe293afec29 code=0x7ffc0000 [ 126.106113][ T8708] +}[@: attempt to access beyond end of device [ 126.106113][ T8708] loop3: rw=2049, sector=174, nr_sectors = 2 limit=128 [ 126.119312][ T8708] Buffer I/O error on dev loop3, logical block 87, lost async page write [ 126.129030][ T8708] +}[@: attempt to access beyond end of device [ 126.129030][ T8708] loop3: rw=2049, sector=176, nr_sectors = 2 limit=128 [ 126.142082][ T8708] Buffer I/O error on dev loop3, logical block 88, lost async page write [ 126.151681][ T4548] hid_parser_main: 19 callbacks suppressed [ 126.151698][ T4548] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 126.152590][ T8708] +}[@: attempt to access beyond end of device [ 126.152590][ T8708] loop3: rw=2049, sector=178, nr_sectors = 6 limit=128 [ 126.159202][ T4548] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 126.166663][ T8708] +}[@: attempt to access beyond end of device [ 126.166663][ T8708] loop3: rw=2049, sector=182, nr_sectors = 2 limit=128 [ 126.200358][ T8708] Buffer I/O error on dev loop3, logical block 91, lost async page write [ 126.234041][ T8718] loop6: detected capacity change from 0 to 2048 [ 126.238961][ T8708] +}[@: attempt to access beyond end of device [ 126.238961][ T8708] loop3: rw=2049, sector=184, nr_sectors = 2 limit=128 [ 126.253450][ T8708] Buffer I/O error on dev loop3, logical block 92, lost async page write [ 126.264033][ T8708] Buffer I/O error on dev loop3, logical block 103, lost async page write [ 126.282993][ T8708] Buffer I/O error on dev loop3, logical block 104, lost async page write [ 126.324247][ T8708] Buffer I/O error on dev loop3, logical block 107, lost async page write [ 126.347669][ T8708] Buffer I/O error on dev loop3, logical block 108, lost async page write [ 126.890097][ T8738] loop6: detected capacity change from 0 to 128 [ 126.902045][ T29] audit: type=1400 audit(126.895:5280): avc: denied { append } for pid=8737 comm="syz.6.1804" path="/27/mnt/cpuset.memory_pressure_enabled" dev="loop6" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 126.991175][ T8746] bridge_slave_0: left allmulticast mode [ 126.997065][ T8746] bridge_slave_0: left promiscuous mode [ 127.002835][ T8746] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.012588][ T8746] bridge_slave_1: left allmulticast mode [ 127.018434][ T8746] bridge_slave_1: left promiscuous mode [ 127.024197][ T8746] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.034126][ T8746] bond0: (slave bond_slave_0): Releasing backup interface [ 127.044287][ T8746] bond0: (slave bond_slave_1): Releasing backup interface [ 127.066760][ T8746] team0: Port device team_slave_0 removed [ 127.076986][ T8746] team0: Port device team_slave_1 removed [ 127.084559][ T8746] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 127.092157][ T8746] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 127.101415][ T8746] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 127.109060][ T8746] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 127.173231][ T8755] binfmt_misc: register: failed to install interpreter file ./file2 [ 127.199150][ T8755] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 127.226893][ T8759] loop2: detected capacity change from 0 to 128 [ 127.237541][ T8758] loop5: detected capacity change from 0 to 2048 [ 127.261954][ T29] audit: type=1326 audit(127.255:5281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8757 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8beb9eec29 code=0x7ffc0000 [ 127.536752][ T8774] loop6: detected capacity change from 0 to 512 [ 127.557135][ T3408] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 127.580127][ T3408] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz1] on syz0 [ 127.698654][ T8787] loop5: detected capacity change from 0 to 256 [ 127.727988][ T8787] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 127.776225][ T8787] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 127.991925][ T8794] netlink: 332 bytes leftover after parsing attributes in process `syz.0.1824'. [ 128.303818][ T8774] syz.6.1816 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 128.318047][ T8774] CPU: 1 UID: 0 PID: 8774 Comm: syz.6.1816 Not tainted syzkaller #0 PREEMPT(voluntary) [ 128.318080][ T8774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 128.318097][ T8774] Call Trace: [ 128.318105][ T8774] [ 128.318113][ T8774] __dump_stack+0x1d/0x30 [ 128.318142][ T8774] dump_stack_lvl+0xe8/0x140 [ 128.318161][ T8774] dump_stack+0x15/0x1b [ 128.318195][ T8774] dump_header+0x81/0x220 [ 128.318230][ T8774] oom_kill_process+0x342/0x400 [ 128.318330][ T8774] out_of_memory+0x979/0xb80 [ 128.318367][ T8774] try_charge_memcg+0x5e6/0x9e0 [ 128.318401][ T8774] obj_cgroup_charge_pages+0xa6/0x150 [ 128.318443][ T8774] __memcg_kmem_charge_page+0x9f/0x170 [ 128.318478][ T8774] __alloc_frozen_pages_noprof+0x188/0x360 [ 128.318556][ T8774] alloc_pages_mpol+0xb3/0x250 [ 128.318610][ T8774] alloc_pages_noprof+0x90/0x130 [ 128.318647][ T8774] __vmalloc_node_range_noprof+0x6f2/0xe00 [ 128.318727][ T8774] ? __tsan_memset+0x1da/0x1f0 [ 128.318865][ T8774] __kvmalloc_node_noprof+0x30f/0x4e0 [ 128.318905][ T8774] ? ip_set_alloc+0x1f/0x30 [ 128.319000][ T8774] ? ip_set_alloc+0x1f/0x30 [ 128.319021][ T8774] ? __kmalloc_cache_noprof+0x189/0x320 [ 128.319053][ T8774] ip_set_alloc+0x1f/0x30 [ 128.319074][ T8774] hash_netiface_create+0x282/0x740 [ 128.319116][ T8774] ? __pfx_hash_netiface_create+0x10/0x10 [ 128.319166][ T8774] ip_set_create+0x3c9/0x960 [ 128.319274][ T8774] ? __nla_parse+0x40/0x60 [ 128.319304][ T8774] nfnetlink_rcv_msg+0x4c3/0x590 [ 128.319348][ T8774] netlink_rcv_skb+0x123/0x220 [ 128.319378][ T8774] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 128.319440][ T8774] nfnetlink_rcv+0x16b/0x1690 [ 128.319462][ T8774] ? nlmon_xmit+0x4f/0x60 [ 128.319493][ T8774] ? consume_skb+0x49/0x150 [ 128.319549][ T8774] ? nlmon_xmit+0x4f/0x60 [ 128.319581][ T8774] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 128.319611][ T8774] ? __dev_queue_xmit+0x1200/0x2000 [ 128.319651][ T8774] ? __dev_queue_xmit+0x182/0x2000 [ 128.319677][ T8774] ? __pfx_ext4_attr_show+0x10/0x10 [ 128.319780][ T8774] ? ref_tracker_free+0x37d/0x3e0 [ 128.319812][ T8774] ? __netlink_deliver_tap+0x4dc/0x500 [ 128.319916][ T8774] netlink_unicast+0x5bd/0x690 [ 128.319942][ T8774] netlink_sendmsg+0x58b/0x6b0 [ 128.319972][ T8774] ? __pfx_netlink_sendmsg+0x10/0x10 [ 128.320005][ T8774] __sock_sendmsg+0x142/0x180 [ 128.320095][ T8774] ____sys_sendmsg+0x31e/0x4e0 [ 128.320127][ T8774] ___sys_sendmsg+0x17b/0x1d0 [ 128.320191][ T8774] __x64_sys_sendmsg+0xd4/0x160 [ 128.320224][ T8774] x64_sys_call+0x191e/0x2ff0 [ 128.320250][ T8774] do_syscall_64+0xd2/0x200 [ 128.320283][ T8774] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 128.320309][ T8774] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 128.320435][ T8774] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.320458][ T8774] RIP: 0033:0x7f2a5e77ec29 [ 128.320478][ T8774] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 128.320497][ T8774] RSP: 002b:00007f2a5d1df038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 128.320517][ T8774] RAX: ffffffffffffffda RBX: 00007f2a5e9c5fa0 RCX: 00007f2a5e77ec29 [ 128.320559][ T8774] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000004 [ 128.320572][ T8774] RBP: 00007f2a5e801e41 R08: 0000000000000000 R09: 0000000000000000 [ 128.320584][ T8774] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 128.320639][ T8774] R13: 00007f2a5e9c6038 R14: 00007f2a5e9c5fa0 R15: 00007ffcddfca478 [ 128.320659][ T8774] [ 128.320711][ T8774] memory: usage 307200kB, limit 307200kB, failcnt 141 [ 128.668938][ T8774] memory+swap: usage 307640kB, limit 9007199254740988kB, failcnt 0 [ 128.676929][ T8774] kmem: usage 307180kB, limit 9007199254740988kB, failcnt 0 [ 128.684239][ T8774] Memory cgroup stats for /syz6: [ 128.684554][ T8774] cache 8192 [ 128.692843][ T8774] rss 0 [ 128.695633][ T8774] shmem 0 [ 128.698575][ T8774] mapped_file 0 [ 128.702035][ T8774] dirty 0 [ 128.705088][ T8774] writeback 0 [ 128.708447][ T8774] workingset_refault_anon 26 [ 128.713212][ T8774] workingset_refault_file 0 [ 128.717760][ T8774] swap 450560 [ 128.721063][ T8774] swapcached 8192 [ 128.724734][ T8774] pgpgin 13842 [ 128.728114][ T8774] pgpgout 13837 [ 128.731588][ T8774] pgfault 16092 [ 128.735091][ T8774] pgmajfault 20 [ 128.738560][ T8774] inactive_anon 8192 [ 128.742449][ T8774] active_anon 0 [ 128.745943][ T8774] inactive_file 4096 [ 128.749854][ T8774] active_file 8192 [ 128.753626][ T8774] unevictable 0 [ 128.757138][ T8774] hierarchical_memory_limit 314572800 [ 128.762520][ T8774] hierarchical_memsw_limit 9223372036854771712 [ 128.768724][ T8774] total_cache 8192 [ 128.772452][ T8774] total_rss 0 [ 128.775793][ T8774] total_shmem 0 [ 128.779286][ T8774] total_mapped_file 0 [ 128.783300][ T8774] total_dirty 0 [ 128.786779][ T8774] total_writeback 0 [ 128.790627][ T8774] total_workingset_refault_anon 26 [ 128.795831][ T8774] total_workingset_refault_file 0 [ 128.800874][ T8774] total_swap 450560 [ 128.804730][ T8774] total_swapcached 8192 [ 128.808987][ T8774] total_pgpgin 13842 [ 128.812880][ T8774] total_pgpgout 13837 [ 128.816887][ T8774] total_pgfault 16092 [ 128.820961][ T8774] total_pgmajfault 20 [ 128.825037][ T8774] total_inactive_anon 8192 [ 128.829460][ T8774] total_active_anon 0 [ 128.833430][ T8774] total_inactive_file 4096 [ 128.837954][ T8774] total_active_file 8192 [ 128.842197][ T8774] total_unevictable 0 [ 128.846193][ T8774] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz6,task_memcg=/syz6,task=syz.6.1816,pid=8772,uid=0 [ 128.861024][ T8774] Memory cgroup out of memory: Killed process 8772 (syz.6.1816) total-vm:95940kB, anon-rss:1200kB, file-rss:22184kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 129.031337][ T8803] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1837'. [ 129.044723][ T8806] loop6: detected capacity change from 0 to 128 [ 129.088127][ T8808] loop5: detected capacity change from 0 to 512 [ 129.112726][ T8808] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 129.129465][ T8808] EXT4-fs (loop5): orphan cleanup on readonly fs [ 129.153411][ T8808] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #16: comm syz.5.1831: corrupted inode contents [ 129.166115][ T8808] EXT4-fs (loop5): Remounting filesystem read-only [ 129.172792][ T8808] EXT4-fs (loop5): 1 truncate cleaned up [ 129.178651][ T3678] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 129.189361][ T3678] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 129.200913][ T3678] EXT4-fs (loop5): Quota write (off=8, len=24) cancelled because transaction is not started [ 129.548936][ T8834] IPv4: Oversized IP packet from 127.202.26.0 [ 129.597435][ T8842] 9pnet: p9_errstr2errno: server reported unknown error [ 129.630528][ T8848] loop5: detected capacity change from 0 to 128 [ 129.897388][ T8868] loop2: detected capacity change from 0 to 512 [ 129.914332][ T8868] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 129.961963][ T8870] loop3: detected capacity change from 0 to 4096 [ 129.981248][ T8868] EXT4-fs (loop2): 1 truncate cleaned up [ 129.993302][ T8870] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 130.252773][ T8846] syz.0.1842 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=0 [ 130.266702][ T8846] CPU: 0 UID: 0 PID: 8846 Comm: syz.0.1842 Not tainted syzkaller #0 PREEMPT(voluntary) [ 130.266742][ T8846] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 130.266759][ T8846] Call Trace: [ 130.266767][ T8846] [ 130.266777][ T8846] __dump_stack+0x1d/0x30 [ 130.266879][ T8846] dump_stack_lvl+0xe8/0x140 [ 130.266978][ T8846] dump_stack+0x15/0x1b [ 130.267000][ T8846] dump_header+0x81/0x220 [ 130.267040][ T8846] oom_kill_process+0x342/0x400 [ 130.267112][ T8846] out_of_memory+0x979/0xb80 [ 130.267204][ T8846] try_charge_memcg+0x5e6/0x9e0 [ 130.267240][ T8846] obj_cgroup_charge_pages+0xa6/0x150 [ 130.267282][ T8846] __memcg_kmem_charge_page+0x9f/0x170 [ 130.267317][ T8846] __alloc_frozen_pages_noprof+0x188/0x360 [ 130.267374][ T8846] alloc_pages_mpol+0xb3/0x250 [ 130.267417][ T8846] alloc_pages_noprof+0x90/0x130 [ 130.267466][ T8846] __vmalloc_node_range_noprof+0x6f2/0xe00 [ 130.267516][ T8846] __kvmalloc_node_noprof+0x30f/0x4e0 [ 130.267556][ T8846] ? ip_set_alloc+0x1f/0x30 [ 130.267609][ T8846] ? ip_set_alloc+0x1f/0x30 [ 130.267640][ T8846] ? __kmalloc_cache_noprof+0x189/0x320 [ 130.267683][ T8846] ip_set_alloc+0x1f/0x30 [ 130.267710][ T8846] hash_netiface_create+0x282/0x740 [ 130.267766][ T8846] ? __pfx_hash_netiface_create+0x10/0x10 [ 130.267793][ T8846] ip_set_create+0x3c9/0x960 [ 130.267829][ T8846] ? __nla_parse+0x40/0x60 [ 130.267860][ T8846] nfnetlink_rcv_msg+0x4c3/0x590 [ 130.267979][ T8846] netlink_rcv_skb+0x123/0x220 [ 130.268079][ T8846] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 130.268111][ T8846] nfnetlink_rcv+0x16b/0x1690 [ 130.268132][ T8846] ? nlmon_xmit+0x4f/0x60 [ 130.268167][ T8846] ? consume_skb+0x49/0x150 [ 130.268231][ T8846] ? nlmon_xmit+0x4f/0x60 [ 130.268271][ T8846] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 130.268315][ T8846] ? __dev_queue_xmit+0x1200/0x2000 [ 130.268417][ T8846] ? __dev_queue_xmit+0x182/0x2000 [ 130.268452][ T8846] ? ref_tracker_free+0x37d/0x3e0 [ 130.268492][ T8846] ? __netlink_deliver_tap+0x4dc/0x500 [ 130.268557][ T8846] netlink_unicast+0x5bd/0x690 [ 130.268581][ T8846] netlink_sendmsg+0x58b/0x6b0 [ 130.268616][ T8846] ? __pfx_netlink_sendmsg+0x10/0x10 [ 130.268728][ T8846] __sock_sendmsg+0x142/0x180 [ 130.268770][ T8846] ____sys_sendmsg+0x31e/0x4e0 [ 130.268814][ T8846] ___sys_sendmsg+0x17b/0x1d0 [ 130.268976][ T8846] __x64_sys_sendmsg+0xd4/0x160 [ 130.269053][ T8846] x64_sys_call+0x191e/0x2ff0 [ 130.269082][ T8846] do_syscall_64+0xd2/0x200 [ 130.269296][ T8846] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 130.269348][ T8846] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.269374][ T8846] RIP: 0033:0x7f6a2871ec29 [ 130.269393][ T8846] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 130.269496][ T8846] RSP: 002b:00007f6a2717f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 130.269515][ T8846] RAX: ffffffffffffffda RBX: 00007f6a28965fa0 RCX: 00007f6a2871ec29 [ 130.269527][ T8846] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000003 [ 130.269540][ T8846] RBP: 00007f6a287a1e41 R08: 0000000000000000 R09: 0000000000000000 [ 130.269554][ T8846] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 130.269569][ T8846] R13: 00007f6a28966038 R14: 00007f6a28965fa0 R15: 00007ffdeb039688 [ 130.269594][ T8846] [ 130.269615][ T8846] memory: usage 307200kB, limit 307200kB, failcnt 988 [ 130.602207][ T8846] memory+swap: usage 307440kB, limit 9007199254740988kB, failcnt 0 [ 130.604443][ T8882] loop6: detected capacity change from 0 to 512 [ 130.610240][ T8846] kmem: usage 307184kB, limit 9007199254740988kB, failcnt 0 [ 130.610260][ T8846] Memory cgroup stats for /syz0: [ 130.610747][ T8846] cache 0 [ 130.631783][ T8846] rss 0 [ 130.634551][ T8846] shmem 0 [ 130.637705][ T8846] mapped_file 0 [ 130.641183][ T8846] dirty 0 [ 130.644240][ T8846] writeback 4096 [ 130.648084][ T8846] workingset_refault_anon 230 [ 130.652795][ T8846] workingset_refault_file 603 [ 130.657544][ T8846] swap 245760 [ 130.661017][ T8846] swapcached 16384 [ 130.665023][ T8846] pgpgin 126508 [ 130.668261][ T8882] EXT4-fs error (device loop6): ext4_orphan_get:1392: inode #15: comm syz.6.1862: casefold flag without casefold feature [ 130.668554][ T8846] pgpgout 126504 [ 130.668565][ T8846] pgfault 128560 [ 130.685178][ T8882] EXT4-fs error (device loop6): ext4_orphan_get:1397: comm syz.6.1862: couldn't read orphan inode 15 (err -117) [ 130.688372][ T8846] pgmajfault 64 [ 130.688383][ T8846] inactive_anon 16384 [ 130.688392][ T8846] active_anon 0 [ 130.688400][ T8846] inactive_file 0 [ 130.688409][ T8846] active_file 0 [ 130.688417][ T8846] unevictable 0 [ 130.688426][ T8846] hierarchical_memory_limit 314572800 [ 130.688436][ T8846] hierarchical_memsw_limit 9223372036854771712 [ 130.733724][ T8846] total_cache 0 [ 130.737273][ T8846] total_rss 0 [ 130.740742][ T8846] total_shmem 0 [ 130.744292][ T8846] total_mapped_file 0 [ 130.748362][ T8846] total_dirty 0 [ 130.751949][ T8846] total_writeback 4096 [ 130.756057][ T8846] total_workingset_refault_anon 230 [ 130.761277][ T8846] total_workingset_refault_file 603 [ 130.766603][ T8846] total_swap 245760 [ 130.770440][ T8846] total_swapcached 16384 [ 130.774720][ T8846] total_pgpgin 126508 [ 130.778730][ T8846] total_pgpgout 126504 [ 130.782837][ T8846] total_pgfault 128560 [ 130.787080][ T8846] total_pgmajfault 64 [ 130.791337][ T8846] total_inactive_anon 16384 [ 130.796062][ T8846] total_active_anon 0 [ 130.800067][ T8846] total_inactive_file 0 [ 130.804230][ T8846] total_active_file 0 [ 130.808339][ T8846] total_unevictable 0 [ 130.812331][ T8846] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.1842,pid=8845,uid=0 [ 130.826996][ T8846] Memory cgroup out of memory: Killed process 8845 (syz.0.1842) total-vm:95940kB, anon-rss:1072kB, file-rss:22212kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:0 [ 130.844298][ T29] kauditd_printk_skb: 20 callbacks suppressed [ 130.844343][ T29] audit: type=1326 audit(130.835:5296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8886 comm="syz.3.1866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe293afec29 code=0x7ffc0000 [ 130.873627][ T29] audit: type=1326 audit(130.835:5297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8886 comm="syz.3.1866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7fe293afec29 code=0x7ffc0000 [ 130.896349][ T29] audit: type=1326 audit(130.835:5298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8886 comm="syz.3.1866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe293afec29 code=0x7ffc0000 [ 130.919214][ T29] audit: type=1326 audit(130.835:5299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8886 comm="syz.3.1866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=61 compat=0 ip=0x7fe293afec29 code=0x7ffc0000 [ 130.941998][ T29] audit: type=1326 audit(130.835:5300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8888 comm="syz.3.1866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe293b314e5 code=0x7ffc0000 [ 130.978722][ T29] audit: type=1326 audit(130.965:5301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8886 comm="syz.3.1866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe293af5be7 code=0x7ffc0000 [ 131.001849][ T29] audit: type=1326 audit(130.965:5302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8886 comm="syz.3.1866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe293a9ae09 code=0x7ffc0000 [ 131.024808][ T29] audit: type=1326 audit(130.965:5303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8886 comm="syz.3.1866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=61 compat=0 ip=0x7fe293afec29 code=0x7ffc0000 [ 131.047710][ T29] audit: type=1326 audit(130.975:5304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8886 comm="syz.3.1866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe293af5be7 code=0x7ffc0000 [ 131.070525][ T29] audit: type=1326 audit(130.975:5305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8886 comm="syz.3.1866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe293a9ae09 code=0x7ffc0000 [ 131.097748][ T8893] loop5: detected capacity change from 0 to 128 [ 131.113025][ T8893] bio_check_eod: 150 callbacks suppressed [ 131.113086][ T8893] +}[@: attempt to access beyond end of device [ 131.113086][ T8893] loop5: rw=2049, sector=138, nr_sectors = 8 limit=128 [ 131.136095][ T8893] +}[@: attempt to access beyond end of device [ 131.136095][ T8893] loop5: rw=2049, sector=146, nr_sectors = 6 limit=128 [ 131.150654][ T8893] +}[@: attempt to access beyond end of device [ 131.150654][ T8893] loop5: rw=2049, sector=150, nr_sectors = 2 limit=128 [ 131.163674][ T8893] buffer_io_error: 94 callbacks suppressed [ 131.163691][ T8893] Buffer I/O error on dev loop5, logical block 75, lost async page write [ 131.181154][ T8893] +}[@: attempt to access beyond end of device [ 131.181154][ T8893] loop5: rw=2049, sector=152, nr_sectors = 2 limit=128 [ 131.194413][ T8893] Buffer I/O error on dev loop5, logical block 76, lost async page write [ 131.204680][ T8893] +}[@: attempt to access beyond end of device [ 131.204680][ T8893] loop5: rw=2049, sector=170, nr_sectors = 6 limit=128 [ 131.218705][ T8893] +}[@: attempt to access beyond end of device [ 131.218705][ T8893] loop5: rw=2049, sector=174, nr_sectors = 2 limit=128 [ 131.231632][ T8893] Buffer I/O error on dev loop5, logical block 87, lost async page write [ 131.241058][ T8893] +}[@: attempt to access beyond end of device [ 131.241058][ T8893] loop5: rw=2049, sector=176, nr_sectors = 2 limit=128 [ 131.254047][ T8893] Buffer I/O error on dev loop5, logical block 88, lost async page write [ 131.284522][ T8893] +}[@: attempt to access beyond end of device [ 131.284522][ T8893] loop5: rw=2049, sector=178, nr_sectors = 6 limit=128 [ 131.299066][ T8893] +}[@: attempt to access beyond end of device [ 131.299066][ T8893] loop5: rw=2049, sector=182, nr_sectors = 2 limit=128 [ 131.312091][ T8893] Buffer I/O error on dev loop5, logical block 91, lost async page write [ 131.321312][ T8893] +}[@: attempt to access beyond end of device [ 131.321312][ T8893] loop5: rw=2049, sector=184, nr_sectors = 2 limit=128 [ 131.334386][ T8893] Buffer I/O error on dev loop5, logical block 92, lost async page write [ 131.348162][ T8893] Buffer I/O error on dev loop5, logical block 103, lost async page write [ 131.357161][ T8893] Buffer I/O error on dev loop5, logical block 104, lost async page write [ 131.367599][ T8893] Buffer I/O error on dev loop5, logical block 107, lost async page write [ 131.376926][ T8893] Buffer I/O error on dev loop5, logical block 108, lost async page write [ 131.446152][ T8909] lo speed is unknown, defaulting to 1000 [ 131.636712][ T8934] ref_ctr increment failed for inode: 0x81b offset: 0xf ref_ctr_offset: 0x82 of mm: 0xffff88810c719cc0 [ 131.648176][ T8935] netlink: 'syz.5.1884': attribute type 1 has an invalid length. [ 131.657117][ T8932] uprobe: syz.3.1883:8932 failed to unregister, leaking uprobe [ 131.672095][ T8935] 8021q: adding VLAN 0 to HW filter on device bond1 [ 131.687718][ T8935] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 131.697865][ T8935] bond1: (slave batadv0): making interface the new active one [ 131.707226][ T8935] bond1: (slave batadv0): Enslaving as an active interface with an up link [ 131.787744][ T8947] syzkaller0: entered promiscuous mode [ 131.793339][ T8947] syzkaller0: entered allmulticast mode [ 131.799239][ T8946] loop3: detected capacity change from 0 to 512 [ 131.811610][ T8946] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 131.821783][ T8946] FAT-fs (loop3): Filesystem has been set read-only [ 131.829486][ T8946] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 131.860920][ T8951] loop3: detected capacity change from 0 to 128 [ 132.050617][ T8969] loop3: detected capacity change from 0 to 1764 [ 132.288358][ T8986] loop6: detected capacity change from 0 to 128 [ 132.339532][ T8991] loop6: detected capacity change from 0 to 128 [ 132.379672][ T8993] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1910'. [ 132.555057][ T9015] 9pnet: p9_errstr2errno: server reported unknown error [ 132.841769][ T9033] loop5: detected capacity change from 0 to 128 [ 132.958529][ T9043] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1931'. [ 132.967665][ T9043] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1931'. [ 132.986382][ T9043] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1931'. [ 132.995413][ T9043] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1931'. [ 133.054280][ T9043] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1931'. [ 133.063372][ T9043] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1931'. [ 133.194545][ T9068] loop6: detected capacity change from 0 to 1024 [ 133.203889][ T9068] EXT4-fs: Ignoring removed nomblk_io_submit option [ 133.211647][ T9068] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 133.223216][ T9068] EXT4-fs mount: 33 callbacks suppressed [ 133.223230][ T9068] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.256782][ T8370] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.342276][ T9083] loop6: detected capacity change from 0 to 128 [ 133.737599][ T9101] loop6: detected capacity change from 0 to 256 [ 133.753806][ T9101] FAT-fs (loop6): Directory bread(block 64) failed [ 133.760937][ T9101] FAT-fs (loop6): Directory bread(block 65) failed [ 133.767553][ T9101] FAT-fs (loop6): Directory bread(block 66) failed [ 133.774266][ T9101] FAT-fs (loop6): Directory bread(block 67) failed [ 133.780947][ T9101] FAT-fs (loop6): Directory bread(block 68) failed [ 133.787646][ T9101] FAT-fs (loop6): Directory bread(block 69) failed [ 133.794269][ T9101] FAT-fs (loop6): Directory bread(block 70) failed [ 133.800972][ T9101] FAT-fs (loop6): Directory bread(block 71) failed [ 133.807562][ T9101] FAT-fs (loop6): Directory bread(block 72) failed [ 133.814388][ T9101] FAT-fs (loop6): Directory bread(block 73) failed [ 133.947083][ T9111] loop6: detected capacity change from 0 to 128 [ 133.959670][ T9113] loop2: detected capacity change from 0 to 512 [ 133.966814][ T9113] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 133.978583][ T9113] EXT4-fs error (device loop2): ext4_orphan_get:1418: comm syz.2.1958: bad orphan inode 131083 [ 133.990399][ T9113] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 134.020059][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.309258][ T9143] lo speed is unknown, defaulting to 1000 [ 135.436570][ T9296] loop3: detected capacity change from 0 to 2048 [ 135.454478][ T9289] loop6: detected capacity change from 0 to 8192 [ 135.485983][ T9296] loop3: p1 < > p4 [ 135.496076][ T9296] loop3: p4 size 8388608 extends beyond EOD, truncated [ 135.505816][ T9296] IPVS: Error connecting to the multicast addr [ 135.567914][ T3655] ================================================================== [ 135.576050][ T3655] BUG: KCSAN: data-race in copy_folio_from_iter_atomic / fat16_ent_put [ 135.584357][ T3655] [ 135.586693][ T3655] write to 0xffff88812556836e of 2 bytes by task 9289 on cpu 1: [ 135.594335][ T3655] fat16_ent_put+0x28/0x60 [ 135.598765][ T3655] fat_alloc_clusters+0x4d1/0xa80 [ 135.603828][ T3655] fat_get_block+0x258/0x5e0 [ 135.608441][ T3655] __block_write_begin_int+0x3fd/0xf90 [ 135.613928][ T3655] cont_write_begin+0x5fc/0x970 [ 135.618806][ T3655] fat_write_begin+0x4f/0xe0 [ 135.623413][ T3655] cont_write_begin+0x1ad/0x970 [ 135.628283][ T3655] fat_write_begin+0x4f/0xe0 [ 135.632929][ T3655] generic_cont_expand_simple+0xb0/0x150 [ 135.638589][ T3655] fat_cont_expand+0x3e/0x170 [ 135.643282][ T3655] fat_setattr+0x2a5/0x8a0 [ 135.647710][ T3655] notify_change+0x809/0x890 [ 135.652319][ T3655] do_ftruncate+0x34b/0x450 [ 135.656833][ T3655] __x64_sys_ftruncate+0x68/0xc0 [ 135.661783][ T3655] x64_sys_call+0x2d52/0x2ff0 [ 135.666480][ T3655] do_syscall_64+0xd2/0x200 [ 135.671037][ T3655] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.677034][ T3655] [ 135.679374][ T3655] read to 0xffff888125568200 of 512 bytes by task 3655 on cpu 0: [ 135.687116][ T3655] copy_folio_from_iter_atomic+0x7fc/0x11b0 [ 135.693065][ T3655] generic_perform_write+0x2c2/0x490 [ 135.698403][ T3655] shmem_file_write_iter+0xc5/0xf0 [ 135.703727][ T3655] lo_rw_aio+0x69d/0x760 [ 135.708067][ T3655] loop_process_work+0x52d/0xa60 [ 135.713110][ T3655] loop_workfn+0x31/0x40 [ 135.717359][ T3655] process_scheduled_works+0x4cb/0x9d0 [ 135.722852][ T3655] worker_thread+0x582/0x770 [ 135.727463][ T3655] kthread+0x489/0x510 [ 135.731542][ T3655] ret_from_fork+0x11f/0x1b0 [ 135.736153][ T3655] ret_from_fork_asm+0x1a/0x30 [ 135.741154][ T3655] [ 135.743490][ T3655] Reported by Kernel Concurrency Sanitizer on: [ 135.749654][ T3655] CPU: 0 UID: 0 PID: 3655 Comm: kworker/u8:37 Not tainted syzkaller #0 PREEMPT(voluntary) [ 135.759644][ T3655] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 135.769709][ T3655] Workqueue: loop6 loop_workfn [ 135.774491][ T3655] ==================================================================