last executing test programs: 10m16.146778889s ago: executing program 5 (id=64): ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af00, &(0x7f0000000000)={0x1}) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) fchdir(0xffffffffffffffff) r5 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8102) r6 = fcntl$dupfd(r5, 0x406, r5) ioctl$SG_IO(r6, 0x2285, &(0x7f0000000400)={0x53, 0xfffffffffffffffd, 0x7, 0x8, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000880)="000000000013f4", 0x0, 0x0, 0x10010, 0x40002, 0x0}) sendmsg$IPCTNL_MSG_EXP_NEW(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x40, 0x0, 0x2, 0x401, 0x0, 0x0, {0x2, 0x0, 0x5}, [@CTA_EXPECT_TUPLE={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}, @CTA_EXPECT_MASK={0x4}, @CTA_EXPECT_MASTER={0x4}]}, 0x40}}, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r7, &(0x7f0000009a80)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f00000099c0)=ANY=[@ANYBLOB="34000000000701040000000000001000000000090c000640000000000000800008000540000000020900010073797a31"], 0x34}, 0x1, 0x0, 0x0, 0x4040}, 0x6) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, 0x0) 10m12.389724126s ago: executing program 5 (id=73): prlimit64(0x0, 0xe, &(0x7f0000000200)={0xfffc, 0x1008b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bond0\x00', 0x0}) setsockopt$packet_int(r3, 0x107, 0x14, &(0x7f0000000180)=0x2, 0x4) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000000)=0x3da, 0x4) sendto$packet(r3, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) 10m2.563775652s ago: executing program 5 (id=108): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x20, r2, 0x1, 0x80, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4004010}, 0x20008810) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) r4 = socket$kcm(0x10, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB=',\x00\x00\x00'], 0x2c}}, 0x800) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/consoles\x00', 0x0, 0x0) preadv(r7, &(0x7f0000000000)=[{&(0x7f0000000040)=""/56, 0x57}], 0x1, 0xffff, 0xfffffffe) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x24044810) sendmsg$inet(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x1f000801}, 0x840) r8 = socket(0x21, 0x4, 0x2) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r8, 0x84, 0x6e, &(0x7f0000000640)=[@in={0x2, 0x4e22, @broadcast}, @in6={0xa, 0x4e24, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xfffffffa}, @in6={0xa, 0x4e20, 0x7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xff}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x29}}, @in={0x2, 0x4e23, @remote}, @in={0x2, 0x4e21, @broadcast}, @in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x4e23, 0x0, @mcast2, 0xc}, @in6={0xa, 0x4e20, 0x3, @local, 0x2}], 0xc0) bind$alg(0xffffffffffffffff, &(0x7f0000000500)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYRES64=r0, @ANYBLOB], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4008014) r9 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r9, 0xc0145608, &(0x7f0000000040)={0x201, 0xa, 0x2}) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280), 0x8}) ioctl$VIDIOC_REQBUFS(r9, 0xc0585609, &(0x7f0000000280)={0x0, 0xa}) 10m1.440481891s ago: executing program 5 (id=112): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x18, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r0}, 0x10) socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="fb", 0x1}], 0x1}, 0x0) recvmsg(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000e40)=""/4096, 0x1000}], 0x1}, 0x0) 10m1.110390471s ago: executing program 5 (id=114): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x8, 0xf9, 0x7ffc1ffb}]}) r2 = gettid() syz_clone(0xb44040, 0x0, 0x0, 0x0, 0x0, 0x0) rt_sigaction(0x1b, &(0x7f0000000040)={0xfffffffffffffffc, 0x4c000000, 0x0, {[0x8000000000005a]}}, 0x0, 0x8, &(0x7f00000001c0)) tkill(r2, 0x1b) 9m59.145501969s ago: executing program 5 (id=121): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xb, &(0x7f0000000900)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0, 0x0, 0x9}, 0x18) r1 = socket$nl_rdma(0x10, 0x3, 0x14) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) sendmsg$TIPC_CMD_SET_LINK_PRI(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r4, 0x400, 0x70bd27, 0x25dfdbfe, {{}, {}, {0x4c, 0x18, {0x1, @media='udp\x00'}}}, ["", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x40008c0}, 0x20000000) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0xfe, 0x7ffc0002}]}) setitimer(0x1, &(0x7f0000000000)={{0x3}, {0x0, 0x10000000c}}, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073017a31000000000800410072786500140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) 9m42.810892694s ago: executing program 32 (id=121): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xb, &(0x7f0000000900)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0, 0x0, 0x9}, 0x18) r1 = socket$nl_rdma(0x10, 0x3, 0x14) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) sendmsg$TIPC_CMD_SET_LINK_PRI(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r4, 0x400, 0x70bd27, 0x25dfdbfe, {{}, {}, {0x4c, 0x18, {0x1, @media='udp\x00'}}}, ["", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x40008c0}, 0x20000000) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0xfe, 0x7ffc0002}]}) setitimer(0x1, &(0x7f0000000000)={{0x3}, {0x0, 0x10000000c}}, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073017a31000000000800410072786500140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) 4m46.302225416s ago: executing program 4 (id=1496): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r4, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r7, 0x890b, &(0x7f0000000080)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @remote}, {0x2, 0x0, @private}}) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r8, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r8, 0x0, 0x0, 0x800, 0x0, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000004c0)=@ipv4_newroute={0x1c, 0x18, 0x35f32a6dfa748ddd, 0x70bd26, 0x0, {0x2, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2900}}, 0x1c}}, 0x8c0) 4m42.00491519s ago: executing program 4 (id=1513): openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) syz_io_uring_setup(0x5e9, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) munlockall() fsetxattr$security_evm(0xffffffffffffffff, 0x0, &(0x7f0000000240)=ANY=[], 0x9, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x8, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000640)=@filter={'filter\x00', 0x42, 0x4, 0x348, 0xffffffff, 0x1b8, 0x0, 0x1b8, 0xffffffff, 0xffffffff, 0x2b0, 0x2b0, 0x2b0, 0xffffffff, 0x4, 0x0, {[{{@ip={@empty, @loopback, 0x0, 0x0, 'veth0_to_batadv\x00', 'wlan0\x00', {}, {}, 0x11}, 0x0, 0xd0, 0xf8, 0x0, {0x100000000000000}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0xf}}, @common=@unspec=@connmark={{0x30}, {0x5}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@unspec=@state={{0x28}, {0x7}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}, {{@ip={@multicast2, @private=0xa010102, 0x0, 0x0, 'veth1_virt_wifi\x00', '\x00', {}, {}, 0x0, 0x1}, 0x0, 0xb8, 0xf8, 0x0, {}, [@common=@unspec=@connlabel={{0x28}, {0xf, 0x2}}, @common=@socket0={{0x20}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3a8) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=@newsa={0x128, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2, 0x0, 0x10000000}, {0x0, 0x200000, 0x7}, {0x40000, 0xfffffffd, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}, @lifetime_val={0x24, 0x9, {0xb4, 0x8000000000000001, 0xb4, 0x5}}]}, 0x128}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r3}, 0x18) socket$key(0xf, 0x3, 0x2) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0x104, 0x1a, 0x7, 0x0, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x1b}, @in=@multicast2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x5a, 0xb400, 0x2, 0xfeffff7f00000001, 0x0, 0x60000}, {0x0, 0x200000, 0x7, 0xfffffffffffffffd}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x0) 4m40.956470305s ago: executing program 4 (id=1520): openat2$dir(0xffffffffffffff9c, &(0x7f0000000440)='./file0/file0/..\x00', 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000003c0)=[@in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x10) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000080)=0x3, 0x4) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000000)=0x2d, 0x4) openat$cgroup_procs(r0, 0x0, 0x2, 0x0) openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000240)={0x1c5540, 0x101, 0x24}, 0x18) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000000)) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x3, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x80000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1800403, &(0x7f0000000940), 0x2, 0x5ad, &(0x7f0000000180)="$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") r4 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r4, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0xffff, @remote}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000180)="08007715e050e9ce", 0x8}, {0x0}], 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x20000000) 4m39.465162065s ago: executing program 4 (id=1530): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000018c0), r2) sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000004c0)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002abd7000ffdbdf25090000006400038008000100010000000800030004000000140002"], 0x78}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 4m38.348662815s ago: executing program 4 (id=1532): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) 4m37.865491692s ago: executing program 4 (id=1535): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000300)=ANY=[], 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a}, 0x94) unshare(0x24020400) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0xfffffffffffffffc}, 0x18) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) 4m22.556743166s ago: executing program 33 (id=1535): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000300)=ANY=[], 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a}, 0x94) unshare(0x24020400) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0xfffffffffffffffc}, 0x18) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) 33.773537986s ago: executing program 7 (id=2983): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000"], 0x48) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f00000018c0), r2) sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f0000001ac0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 33.278921827s ago: executing program 7 (id=2986): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001700)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000140)={0x0, 0x0}, &(0x7f00000001c0)=0xc) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001600)={{{@in=@multicast2, @in6=@dev={0xfe, 0x80, '\x00', 0x12}, 0x4e23, 0x0, 0x4e20, 0x8000, 0xa, 0x80, 0x80, 0x2e, 0x0, r2}, {0x7, 0x80000000, 0x8000000000000000, 0xfffffffffffffdca, 0x30000000000000, 0x6, 0x6, 0x4854bbd}, {0x0, 0xfffffffffffffffb, 0x8001, 0xfffffffffffffffd}, 0xfff, 0x6e6bb6, 0x0, 0x1, 0x2, 0x3}, {{@in=@multicast2, 0x4d6, 0x6c}, 0xa, @in6=@private1, 0x3501, 0x3, 0x2, 0xd0, 0x0, 0x6, 0x7f}}, 0xe8) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={0x0}, 0x1, 0x0, 0x0, 0x41}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) clock_gettime(0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x989680}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(r3, 0x25, 0x0) fcntl$lock(r3, 0x7, &(0x7f0000001140)={0x1, 0x1, 0xfe5, 0x9}) 31.808675431s ago: executing program 7 (id=2987): prctl$PR_SET_NAME(0xf, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', 0xffffffffffffffff, 0x0, 0x39}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioperm(0x3c, 0x1, 0x8) syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000180)) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newtfilter={0x24, 0x11, 0x1, 0x691522eb, 0x0, {0x0, 0x0, 0x74, r1, {0xffff, 0x4}, {}, {0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000002c0)={'tunl0\x00', &(0x7f0000000240)={'syztnl1\x00', 0x0, 0x10, 0x10, 0x103, 0x56, {{0xd, 0x4, 0x0, 0x8, 0x34, 0x68, 0x0, 0x4, 0x4, 0x0, @rand_addr=0x64010106, @remote, {[@cipso={0x86, 0x1e, 0xffffffffffffffff, [{0x0, 0x4, "ced9"}, {0x6, 0x7, "cb4d378845"}, {0x0, 0xd, "2dbfee136df159bf249d75"}]}]}}}}}) r3 = socket(0x1d, 0x2, 0x6) ioctl$EXT4_IOC_SETFSUUID(0xffffffffffffffff, 0x4008662c, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xc94284a3061bb7bd, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/kexec_loaded', 0x2200, 0xb3b3f54ecfef7aec) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000ac0)={&(0x7f0000000b00)='kmem_cache_free\x00', r4, 0x0, 0x1034}, 0x18) brk(0x400000ffc000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r3) bind$packet(r3, &(0x7f0000000380)={0x11, 0x5, 0x0, 0x1, 0x8, 0x6, @random="06a798b51a58"}, 0x14) 30.357177709s ago: executing program 7 (id=2993): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x15c, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in=@multicast1, @in6=@mcast2, 0x4, 0x0, 0x4e21, 0x2, 0x0, 0x0, 0x0, 0x21, 0x0, 0xee00}, {@in6=@private1, 0x4d6, 0x32}, @in=@multicast2, {0x0, 0x0, 0x0, 0x9, 0xffffffff00000001, 0x0, 0x80000001, 0x543}, {0x4, 0x7fffffffffffffff, 0x0, 0x1}, {}, 0x70bd2c, 0x3500, 0x2, 0x0, 0x0, 0x50}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "210466d38547aa140db9a200000000c538c7cb7a"}}, @offload={0xc, 0x1c, {r1, 0x3}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2014) 30.102189724s ago: executing program 7 (id=2995): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000050b6850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r0, 0x0, 0x5}, 0x18) r1 = socket(0x10, 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000340)={0xa, 0x5, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "000000000200", "1fd33c81cf7995313c09de00fd6ded74", "62266bd8", "1e0003f100000100"}, 0x28) write$binfmt_script(r2, &(0x7f0000000800)={'#! ', './file0/file0'}, 0x11) close_range(r1, r2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x2008042, &(0x7f0000000340)={[{@grpjquota_path={'grpjquota', 0x3d, './bus'}}, {@jqfmt_vfsv0}, {@prjquota}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@user_xattr}, {@nobarrier}, {@journal_dev={'journal_dev', 0x3d, 0x1}}]}, 0x1, 0x571, &(0x7f0000000780)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x26, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="c0020000100063d10000000000000000fe8000000000000000000000000000bbfe8000000000000000000000000000aa0000000000000000000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc01000000000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000b000000000000000000000000000000ffffffffffffffff000000000000000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001600000000020000000000000000000000bf010100636d61632861657329"], 0x2c0}, 0x1, 0x0, 0x0, 0x40000}, 0x4004) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r9}, 0x10) sendmsg$tipc(r8, &(0x7f0000004440)={&(0x7f0000000ec0)=@id={0x1e, 0x3, 0x3, {0x4e20}}, 0x10, 0x0}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r7}, 0x18) r10 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00') preadv(r10, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0xc002a0, 0x0) setsockopt$RXRPC_SECURITY_KEYRING(r10, 0x110, 0x2, &(0x7f0000000200)='syzkaller\x00', 0xa) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000001c0)={r11, 0x0}, 0x20) 29.618007724s ago: executing program 7 (id=2999): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x9) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f0000000600)={[{@grpid}]}, 0x1, 0x521, &(0x7f0000000640)="$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") 20.851382697s ago: executing program 0 (id=3056): setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f00000003c0)=[@in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet(0x2, 0x2, 0x1) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xfffffffffffffe54, 0x0, 0x1, 0x0, 0x0, 0x14}, 0x4010) sendmsg$inet(r0, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0xffff, @remote}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000180)="08007715e050e9", 0x7}], 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x20000000) 19.856620287s ago: executing program 0 (id=3059): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, 0x0, 0x8800) 19.489603099s ago: executing program 0 (id=3061): socket$tipc(0x1e, 0x2, 0x0) r0 = socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x3548}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xd}}}, 0x24}}, 0x0) 19.02462959s ago: executing program 0 (id=3076): socket$tipc(0x1e, 0x2, 0x0) r0 = socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x3548}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xd}}}, 0x24}}, 0x0) 18.718732033s ago: executing program 0 (id=3065): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000000070000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r3 = fsopen(&(0x7f0000000340)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x86) fchdir(r4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r5, &(0x7f00000005c0)='\"', 0x1, 0x4fed0) sendfile(r5, r5, 0x0, 0xe3aa6ea) 13.82797485s ago: executing program 34 (id=2999): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x9) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f0000000600)={[{@grpid}]}, 0x1, 0x521, &(0x7f0000000640)="$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") 10.628925788s ago: executing program 2 (id=3101): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104a5270b7357000000925e4a44", @ANYRES32, @ANYBLOB="0dfa130016000000240012000c00010000000000000000000c0002f60800000001180000080001"], 0x44}}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000280)={r0, 0x7, 0x104, 0x7ff}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 10.489905543s ago: executing program 2 (id=3103): ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af00, &(0x7f0000000000)={0x1}) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000400)={0x53, 0xfffffffffffffffd, 0x0, 0x8, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000880), 0x0, 0x0, 0x10010, 0x40002, 0x0}) sendmsg$IPCTNL_MSG_EXP_NEW(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x40, 0x0, 0x2, 0x401, 0x0, 0x0, {0x2, 0x0, 0x5}, [@CTA_EXPECT_TUPLE={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}, @CTA_EXPECT_MASK={0x4}, @CTA_EXPECT_MASTER={0x4}]}, 0x40}}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r3, &(0x7f0000009a80)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f00000099c0)=ANY=[@ANYBLOB="34000000000701040000000000001000000000090c000640000000000000800008000540000000020900010073797a31"], 0x34}, 0x1, 0x0, 0x0, 0x4040}, 0x6) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, 0x0) 9.149065915s ago: executing program 0 (id=3105): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r4, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r7, 0x890b, &(0x7f0000000080)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @remote}, {0x2, 0x0, @private}}) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r8, 0x0, 0x0) sendto$inet6(r8, 0x0, 0x0, 0x800, 0x0, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000004c0)=@ipv4_newroute={0x1c, 0x18, 0x35f32a6dfa748ddd, 0x70bd26, 0x0, {0x2, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2900}}, 0x1c}}, 0x8c0) 6.521313674s ago: executing program 2 (id=3113): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40004}, 0x8800) 6.3418986s ago: executing program 3 (id=3116): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x1f) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xa0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000840)=ANY=[@ANYBLOB="240000001900010028bd7000fbdbdf251d01020008000900", @ANYRES32, @ANYBLOB="08000a00e1"], 0x24}, 0x1, 0x0, 0x0, 0x4048855}, 0x30004016) sendmmsg(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000235, 0x0) 6.096761515s ago: executing program 2 (id=3118): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000018c0), r2) sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000004c0)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002abd7000ffdbdf25090000006400038008000100010000000800030004000000140002007665744e315f6d616376746170000000060004000200000008000500e0000000140002006970766c616e31"], 0x78}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 5.961576286s ago: executing program 3 (id=3119): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000002880), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c000000", @ANYBLOB="11072abd7000fcdbdf250500000008000300", @ANYRES32=r1], 0x1c}, 0x1, 0x0, 0x0, 0x28008000}, 0x40000) syz_genetlink_get_family_id$ipvs(0x0, r0) 5.744718458s ago: executing program 6 (id=3122): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 5.604618272s ago: executing program 3 (id=3123): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x58) listen(r2, 0x5) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x24040014, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) close_range(r2, 0xffffffffffffffff, 0x0) 5.509851732s ago: executing program 2 (id=3124): ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af00, &(0x7f0000000000)={0x1}) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000400)={0x53, 0xfffffffffffffffd, 0x0, 0x8, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000880), 0x0, 0x0, 0x10010, 0x40002, 0x0}) sendmsg$IPCTNL_MSG_EXP_NEW(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x40, 0x0, 0x2, 0x401, 0x0, 0x0, {0x2, 0x0, 0x5}, [@CTA_EXPECT_TUPLE={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}, @CTA_EXPECT_MASK={0x4}, @CTA_EXPECT_MASTER={0x4}]}, 0x40}}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r3, &(0x7f0000009a80)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f00000099c0)=ANY=[@ANYBLOB="34000000000701040000000000001000000000090c000640000000000000800008000540000000020900010073797a31"], 0x34}, 0x1, 0x0, 0x0, 0x4040}, 0x6) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, 0x0) 5.434516215s ago: executing program 1 (id=3125): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001700)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYRES32, @ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000140)={0x0, 0x0}, &(0x7f00000001c0)=0xc) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001600)={{{@in=@multicast2, @in6=@dev={0xfe, 0x80, '\x00', 0x12}, 0x4e23, 0x0, 0x4e20, 0x8000, 0xa, 0x80, 0x80, 0x2e, 0x0, r2}, {0x7, 0x80000000, 0x8000000000000000, 0xfffffffffffffdca, 0x30000000000000, 0x6, 0x6, 0x4854bbd}, {0x0, 0xfffffffffffffffb, 0x8001, 0xfffffffffffffffd}, 0xfff, 0x6e6bb6, 0x0, 0x1, 0x2, 0x3}, {{@in=@multicast2, 0x4d6, 0x6c}, 0xa, @in6=@private1, 0x3501, 0x3, 0x2, 0xd0, 0x0, 0x6, 0x7f}}, 0xe8) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={0x0}, 0x1, 0x0, 0x0, 0x41}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) clock_gettime(0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x989680}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(r3, 0x25, 0x0) fcntl$lock(r3, 0x7, &(0x7f0000001140)={0x1, 0x1, 0xfe5, 0x9}) 5.101715791s ago: executing program 3 (id=3126): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) close_range(r0, 0xffffffffffffffff, 0x0) 5.032056273s ago: executing program 1 (id=3127): setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f00000003c0)=[@in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet(0x2, 0x2, 0x1) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xfffffffffffffe54, 0x0, 0x1, 0x0, 0x0, 0x14}, 0x4010) sendmsg$inet(r0, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0xffff, @remote}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000180)="08007715e050e9ce", 0x8}], 0x1, 0x0, 0x40}, 0x20000000) 4.861861456s ago: executing program 3 (id=3128): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0, 0x0, 0x7}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00!'], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x200000000000006}, 0x18) socket$inet_sctp(0x2, 0x1, 0x84) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioprio_set$pid(0x1, r2, 0x4004) bpf$PROG_LOAD(0x5, 0x0, 0x0) unshare(0x62040200) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00'}, 0x10) r5 = dup(0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB, @ANYRESHEX, @ANYBLOB, @ANYRESHEX=r5]) 4.652018186s ago: executing program 6 (id=3129): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104a5270b7357000000925e4a44", @ANYRES32, @ANYBLOB="0dfa130016000000240012000c00010000000000000000000c0002f60800000001180000080001"], 0x44}}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000280)={r0, 0x7, 0x104, 0x7ff}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 4.581603322s ago: executing program 1 (id=3130): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40004}, 0x8800) 3.714838123s ago: executing program 1 (id=3131): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x1f) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xa0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000840)=ANY=[@ANYBLOB="240000001900010028bd7000fbdbdf251d01020008000900", @ANYRES32, @ANYBLOB="08000a00e1"], 0x24}, 0x1, 0x0, 0x0, 0x4048855}, 0x30004016) sendmmsg(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000235, 0x0) 3.699693444s ago: executing program 6 (id=3132): setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e23, @remote}, 0x10) 2.017369631s ago: executing program 6 (id=3133): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x4004110) pipe(&(0x7f0000000080)={0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, 0x0) sendmsg$NFT_BATCH(r0, 0x0, 0x0) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) dup2(0xffffffffffffffff, r0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYRES32=r2, @ANYRESDEC=r2], 0x50) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={0xffffffffffffffff, 0x18000000000002a0, 0x15, 0x0, &(0x7f0000000100)="b9ff03316844268cb89e14f0080047e0ffff0016e0", 0x0, 0x24, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) close(r4) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x30) 1.561737194s ago: executing program 1 (id=3134): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000002880), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c000000", @ANYBLOB="11072abd7000fcdbdf250500000008000300", @ANYRES32=r1], 0x1c}, 0x1, 0x0, 0x0, 0x28008000}, 0x40000) syz_genetlink_get_family_id$ipvs(0x0, r0) 588.588271ms ago: executing program 1 (id=3135): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000200)='kfree\x00', r0}, 0x18) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f00000007c0)={[{@nodioread_nolock}, {@errors_remount}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5a}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x3}}]}, 0x1, 0x46f, &(0x7f0000000bc0)="$eJzs281rHOUfAPDvTF7a/vqS/Gp9aa0aLUJQTJq0ag9eFAWRioIe6jEm2xK6baSJYmuxqYgnQQp6Fo+if4E3EUQ9CV49eZJC0V7aeorM7Ey62WYTazaZ2P18YLPPM/PszvebeXv2eXYD6FpD2Z8kYkdE/BoRA43q0gZDjafrV89P3rh6fjKJhYXX/kjydteunp8sm5av215UhtOI9MOk2MhSs2fPnZyo12tnivro3Km3RmfPnnvinVMTJ2onaqfHjxw5fGjs6afGn+xInlle1/a9P7N/74tvXHp58tilN3/8Oot3R7G+OY9OGcoS/3Mh17ru0U5vrGI7m8pJb4WBcFt6IiLbXX35+T8QPXFz5w3ECx9UGhywrrJ705b2q+cXgDtYElVHAFSjvNFnn3/LxwZ1PTaFK882PgBleV8vHo01vZEWbfpaPt920lBEHJv/6/PsEes0DgEA0Ozjyc+O9kfEeze+einrewwsrknjnvz5t/zvrmIOZTAi/h8RuyPirojYExF3R+Rt742I+9YYz639n/TyGt9yRVn/75libmtp/6/s/cVgT1HbmefflxyfrtcOFv+T4ejbktXHVtjGt8//8km7dc39v+yRbb/sCxZxXO5tGaCbmpibyDulHXDlYsS+3uXyTxZnApKI2BsR+27vrXeVhenHvtzfrtHq+a+gA/NMC19k6c1n+c9HS/6lpHl+cvqW+cnRrVGvHRwtj4pb/fTzR6+22/6a8u+AK7XGc9P+b20ymDTP1852dvv/8vhP+5PX83nm/mLZuxNzc2fGIvqTo3l9yfLxm68t62X77PgfPrD8+b+7eE2W//0RkR3ED0TEgxHxUBH7wxHxSEQcWCHHH55bPf9IK9r/FyOmlr3+LR7/Lfv/9gs9J7//pt32/9n+P5yXhosl+fVvFcuFk10uWgNcy/8OAAAA/ivS/DvwSTqyWE7TkZHGd/j3xP/S+szs3OPHZ94+PdX4rvxg9KXlSNdAMR5an67XxpL54h0b46PjxVhxOV56qBg3/rRnW14fmZypT1WcO3S77W3O/8zvPVVHB6yzbcsuHe/f8ECACrTOo6dLqxdeCRcDuFP5vTZ0r1XO/3Sj4gA2nvs/dK/lzv8LLXVzAXBncv+H7uX8hy6Vfld1BECF3P+hK63ld/3rWNi6OcKoprBZd0peiCgL6aaIR2GdClVfmQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADrj7wAAAP//KFzmgQ==") 421.414225ms ago: executing program 6 (id=3136): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000"], 0x48) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000018c0), r2) sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000004c0)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r3], 0x78}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 23.412095ms ago: executing program 3 (id=3137): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtfilter={0x5c, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x4, 0xa}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x2c, 0x2, [@TCA_FLOWER_KEY_IPV6_SRC_MASK={0x14, 0xf, [0xff000000, 0x0, 0xff, 0xffffff00]}, @TCA_FLOWER_KEY_IPV6_SRC={0x14, 0xe, @ipv4={'\x00', '\xff\xff', @broadcast}}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8848}, 0x80) 22.699732ms ago: executing program 2 (id=3138): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="3183000000000000000019000000200001801400020076657468315f766c616e00000000000008000100", @ANYRES32], 0x34}}, 0x40010) 0s ago: executing program 6 (id=3139): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r2], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r3}, 0x18) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000004c0)={r1, 0x3, 0x6}, 0x10) kernel console output (not intermixed with test programs): 8efc9 code=0x7ffc0000 [ 579.781886][ T30] audit: type=1326 audit(1761192581.046:699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12213 comm="syz.6.2106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbeb318efc9 code=0x7ffc0000 [ 579.810686][T12234] loop2: detected capacity change from 0 to 128 [ 579.972465][T12234] syz.2.2114: attempt to access beyond end of device [ 579.972465][T12234] loop2: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 580.044734][T12234] syz.2.2114: attempt to access beyond end of device [ 580.044734][T12234] loop2: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 580.099880][T12234] syz.2.2114: attempt to access beyond end of device [ 580.099880][T12234] loop2: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 580.165273][T12234] syz.2.2114: attempt to access beyond end of device [ 580.165273][T12234] loop2: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 580.184818][T12234] syz.2.2114: attempt to access beyond end of device [ 580.184818][T12234] loop2: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 580.234610][ T36] kworker/u8:2: attempt to access beyond end of device [ 580.234610][ T36] loop2: rw=1, sector=233, nr_sectors = 8 limit=128 [ 580.319166][T12234] syz.2.2114: attempt to access beyond end of device [ 580.319166][T12234] loop2: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 580.363991][T12234] syz.2.2114: attempt to access beyond end of device [ 580.363991][T12234] loop2: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 580.404825][T12234] syz.2.2114: attempt to access beyond end of device [ 580.404825][T12234] loop2: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 580.444865][T12234] syz.2.2114: attempt to access beyond end of device [ 580.444865][T12234] loop2: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 580.628375][T12244] loop3: detected capacity change from 0 to 256 [ 581.405537][T12271] loop7: detected capacity change from 0 to 512 [ 581.423211][T12271] EXT4-fs: Ignoring removed bh option [ 581.435942][T12271] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 581.466570][T12271] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem [ 581.511769][T12279] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2129'. [ 581.521266][T12271] EXT4-fs (loop7): warning: mounting unchecked fs, running e2fsck is recommended [ 581.559996][T12271] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=e002e01c, mo2=0006] [ 581.614773][T12271] System zones: 0-2, 18-18, 34-35 [ 581.656142][T12271] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 581.805978][T12271] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 581.879924][ T1012] Bluetooth: hci3: Frame reassembly failed (-84) [ 581.922870][T10868] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 582.174138][T12299] loop7: detected capacity change from 0 to 512 [ 582.191760][T12299] EXT4-fs: quotafile must be on filesystem root [ 582.216838][T12299] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2139'. [ 583.986363][T12334] loop6: detected capacity change from 0 to 512 [ 584.056299][ T5848] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 584.191379][T12334] EXT4-fs (loop6): 1 orphan inode deleted [ 584.224943][T12334] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 584.262689][T12334] ext4 filesystem being mounted at /340/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 584.507072][ T1142] __quota_error: 44 callbacks suppressed [ 584.507101][ T1142] Quota error (device loop6): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 584.631047][ T1142] EXT4-fs error (device loop6): ext4_release_dquot:6979: comm kworker/u8:7: Failed to release dquot type 1 [ 584.776942][T12339] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2156'. [ 585.084144][T12346] IPv6: NLM_F_CREATE should be specified when creating new route [ 585.381214][T12350] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2161'. [ 585.565652][T12355] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2163'. [ 585.585616][T12352] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2161'. [ 585.877887][T12358] loop1: detected capacity change from 0 to 2048 [ 585.992850][T12358] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 586.074672][T12358] ext4 filesystem being mounted at /363/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 586.239691][ T6520] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 586.307297][ T5834] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 586.429179][ T30] audit: type=1326 audit(1761192588.246:744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12369 comm="syz.6.2168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbeb318efc9 code=0x7ffc0000 [ 586.479388][T12373] netlink: 12 bytes leftover after parsing attributes in process `net/sco'. [ 586.618134][T12377] loop3: detected capacity change from 0 to 512 [ 586.636651][ T30] audit: type=1326 audit(1761192588.276:745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12369 comm="syz.6.2168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbeb318efc9 code=0x7ffc0000 [ 586.660710][ T30] audit: type=1326 audit(1761192588.286:746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12370 comm="net/sco" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa95378efc9 code=0x7ffc0000 [ 586.662981][T12377] EXT4-fs: quotafile must be on filesystem root [ 586.685833][ T30] audit: type=1326 audit(1761192588.296:747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12370 comm="net/sco" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa95378efc9 code=0x7ffc0000 [ 586.748643][ T30] audit: type=1326 audit(1761192588.296:748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12370 comm="net/sco" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa95378efc9 code=0x7ffc0000 [ 586.802535][T12377] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2172'. [ 586.831945][ T30] audit: type=1326 audit(1761192588.296:749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12370 comm="net/sco" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa95378efc9 code=0x7ffc0000 [ 586.902037][ T30] audit: type=1326 audit(1761192588.296:750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12370 comm="net/sco" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa95378efc9 code=0x7ffc0000 [ 586.994413][ T30] audit: type=1326 audit(1761192588.296:751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12370 comm="net/sco" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa95378efc9 code=0x7ffc0000 [ 587.056083][ T30] audit: type=1326 audit(1761192588.296:752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12370 comm="net/sco" exe="/root/syz-executor" sig=0 arch=c000003e syscall=132 compat=0 ip=0x7fa95378efc9 code=0x7ffc0000 [ 587.772429][T12402] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2176'. [ 588.305975][T12397] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 588.515795][T12402] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 588.525306][T12402] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 588.535020][T12402] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 588.706726][T12408] loop3: detected capacity change from 0 to 512 [ 588.878377][T12408] EXT4-fs (loop3): 1 orphan inode deleted [ 588.901789][T12408] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 588.917389][T12408] ext4 filesystem being mounted at /389/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 589.082214][ T6100] EXT4-fs error (device loop3): ext4_release_dquot:6979: comm kworker/u8:11: Failed to release dquot type 1 [ 589.280474][T12397] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 589.490219][T12397] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 589.766093][T12423] unsupported nla_type 52263 [ 589.775538][T12397] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 589.966253][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 589.966278][ T30] audit: type=1326 audit(1761192591.786:760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12425 comm="syz.7.2188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95c798efc9 code=0x7ffc0000 [ 590.167308][ T30] audit: type=1326 audit(1761192591.826:761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12425 comm="syz.7.2188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=123 compat=0 ip=0x7f95c798efc9 code=0x7ffc0000 [ 590.345834][ T30] audit: type=1326 audit(1761192591.826:762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12425 comm="syz.7.2188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95c798efc9 code=0x7ffc0000 [ 590.377317][ T6100] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 590.472050][T12430] loop6: detected capacity change from 0 to 512 [ 590.499405][ T6100] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 590.531620][T12430] EXT4-fs: quotafile must be on filesystem root [ 590.600570][ T6350] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 590.648023][T12430] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2190'. [ 590.765510][ T6100] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 590.930214][ T5852] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 591.038521][ T30] audit: type=1326 audit(1761192592.856:763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12440 comm="syz.1.2196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f142c78efc9 code=0x7ffc0000 [ 591.150684][ T30] audit: type=1326 audit(1761192592.856:764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12440 comm="syz.1.2196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f142c78efc9 code=0x7ffc0000 [ 591.268994][ T30] audit: type=1326 audit(1761192592.906:765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12440 comm="syz.1.2196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f142c78efc9 code=0x7ffc0000 [ 591.339135][ T30] audit: type=1326 audit(1761192592.906:766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12440 comm="syz.1.2196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f142c78efc9 code=0x7ffc0000 [ 591.400441][T12451] veth0: entered promiscuous mode [ 591.407002][ T30] audit: type=1326 audit(1761192592.906:767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12440 comm="syz.1.2196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f142c78efc9 code=0x7ffc0000 [ 591.428094][T12449] veth0: left promiscuous mode [ 591.494654][ T30] audit: type=1326 audit(1761192592.906:768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12440 comm="syz.1.2196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f142c78efc9 code=0x7ffc0000 [ 591.567019][ T30] audit: type=1326 audit(1761192592.906:769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12440 comm="syz.1.2196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f142c78efc9 code=0x7ffc0000 [ 591.615974][T12458] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2202'. [ 591.976486][T12464] wireguard0: entered promiscuous mode [ 592.114104][T12464] wireguard0: entered allmulticast mode [ 593.111918][T12476] loop1: detected capacity change from 0 to 512 [ 593.400966][T12476] EXT4-fs (loop1): 1 orphan inode deleted [ 593.408523][T12476] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 593.421444][ T6100] EXT4-fs error (device loop1): ext4_release_dquot:6979: comm kworker/u8:11: Failed to release dquot type 1 [ 593.434361][T12476] ext4 filesystem being mounted at /372/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 593.714960][ T5834] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 594.014171][T12489] loop1: detected capacity change from 0 to 2048 [ 594.157166][T12489] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 594.412309][ T5834] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 595.115054][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 595.115080][ T30] audit: type=1326 audit(1761192596.936:781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12506 comm="syz.1.2219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f142c78efc9 code=0x7ffc0000 [ 595.196902][ T30] audit: type=1326 audit(1761192596.936:782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12506 comm="syz.1.2219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f142c78efc9 code=0x7ffc0000 [ 595.342982][ T30] audit: type=1326 audit(1761192596.966:783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12506 comm="syz.1.2219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f142c78efc9 code=0x7ffc0000 [ 595.442069][ T30] audit: type=1326 audit(1761192596.966:784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12506 comm="syz.1.2219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f142c78efc9 code=0x7ffc0000 [ 595.450359][T12515] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2223'. [ 595.538052][ T30] audit: type=1326 audit(1761192596.966:785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12506 comm="syz.1.2219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=429 compat=0 ip=0x7f142c78efc9 code=0x7ffc0000 [ 595.595127][ T30] audit: type=1326 audit(1761192596.966:786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12506 comm="syz.1.2219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f142c78efc9 code=0x7ffc0000 [ 596.223344][ T30] audit: type=1326 audit(1761192598.026:787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12528 comm="syz.1.2230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f142c78efc9 code=0x7ffc0000 [ 596.364563][ T30] audit: type=1326 audit(1761192598.026:788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12528 comm="syz.1.2230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f142c78efc9 code=0x7ffc0000 [ 596.445517][ T30] audit: type=1326 audit(1761192598.026:789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12528 comm="syz.1.2230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f142c78efc9 code=0x7ffc0000 [ 596.553663][ T30] audit: type=1326 audit(1761192598.036:790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12528 comm="syz.1.2230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f142c78efc9 code=0x7ffc0000 [ 597.996917][T12547] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2238'. [ 599.245119][T12562] xt_connbytes: Forcing CT accounting to be enabled [ 599.320919][T12565] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2244'. [ 599.366643][T12566] loop7: detected capacity change from 0 to 512 [ 599.429517][T12566] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 599.467713][T12566] EXT4-fs (loop7): orphan cleanup on readonly fs [ 599.501048][T12566] EXT4-fs error (device loop7): ext4_ext_check_inode:523: inode #13: comm syz.7.2245: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 599.532717][T12566] EXT4-fs error (device loop7): ext4_orphan_get:1395: comm syz.7.2245: couldn't read orphan inode 13 (err -117) [ 599.616710][T12566] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 599.715729][T12566] EXT4-fs (loop7): warning: mounting fs with errors, running e2fsck is recommended [ 599.744281][T12566] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 599.797528][T12577] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2249'. [ 599.820204][T12566] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 599.849454][T12566] ext4 filesystem being remounted at /96/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 600.307540][T10868] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 600.929063][T12597] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2256'. [ 601.081879][T12599] veth0: entered promiscuous mode [ 601.111422][T12598] veth0: left promiscuous mode [ 601.235853][T12603] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2261'. [ 601.325818][ T30] kauditd_printk_skb: 19 callbacks suppressed [ 601.325844][ T30] audit: type=1326 audit(1761192603.146:810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12608 comm="syz.7.2254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95c798efc9 code=0x7ffc0000 [ 601.363903][T12607] loop2: detected capacity change from 0 to 2048 [ 601.428284][T12614] loop1: detected capacity change from 0 to 512 [ 601.430717][ T30] audit: type=1326 audit(1761192603.146:811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12608 comm="syz.7.2254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95c798efc9 code=0x7ffc0000 [ 601.460492][T12614] EXT4-fs: quotafile must be on filesystem root [ 601.502435][T12607] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 601.518190][T12614] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2262'. [ 601.527961][ T30] audit: type=1326 audit(1761192603.196:812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12608 comm="syz.7.2254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f95c798efc9 code=0x7ffc0000 [ 601.551249][ T30] audit: type=1326 audit(1761192603.196:813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12608 comm="syz.7.2254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95c798efc9 code=0x7ffc0000 [ 601.576955][ T30] audit: type=1326 audit(1761192603.196:814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12608 comm="syz.7.2254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95c798efc9 code=0x7ffc0000 [ 601.599573][ T30] audit: type=1326 audit(1761192603.206:815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12608 comm="syz.7.2254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f95c798efc9 code=0x7ffc0000 [ 601.626223][ T30] audit: type=1326 audit(1761192603.206:816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12608 comm="syz.7.2254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95c798efc9 code=0x7ffc0000 [ 601.659457][ T30] audit: type=1326 audit(1761192603.206:817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12608 comm="syz.7.2254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f95c798efc9 code=0x7ffc0000 [ 601.708081][ T30] audit: type=1326 audit(1761192603.206:818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12608 comm="syz.7.2254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95c798efc9 code=0x7ffc0000 [ 601.804845][ T30] audit: type=1326 audit(1761192603.206:819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12608 comm="syz.7.2254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=36 compat=0 ip=0x7f95c798efc9 code=0x7ffc0000 [ 601.880908][ T5843] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 602.122458][T12637] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2274'. [ 602.971888][T12645] veth0: entered promiscuous mode [ 602.996570][T12643] veth0: left promiscuous mode [ 603.227450][T12648] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2277'. [ 603.692205][T12668] loop6: detected capacity change from 0 to 512 [ 603.803929][T12668] EXT4-fs: quotafile must be on filesystem root [ 603.880214][T12664] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2285'. [ 603.999537][T12675] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 604.858878][T12675] lo speed is unknown, defaulting to 1000 [ 605.135022][T12681] rdma_rxe: rxe_newlink: failed to add bond0 [ 606.781299][ T30] kauditd_printk_skb: 58 callbacks suppressed [ 606.781326][ T30] audit: type=1326 audit(1761192608.596:878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12708 comm="syz.0.2301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f644998efc9 code=0x7ffc0000 [ 606.881353][ T30] audit: type=1326 audit(1761192608.646:879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12708 comm="syz.0.2301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f644998efc9 code=0x7ffc0000 [ 606.903968][ T30] audit: type=1326 audit(1761192608.656:880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12708 comm="syz.0.2301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f644998efc9 code=0x7ffc0000 [ 606.927443][ T30] audit: type=1326 audit(1761192608.656:881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12708 comm="syz.0.2301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f644998efc9 code=0x7ffc0000 [ 606.974229][ T30] audit: type=1326 audit(1761192608.656:882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12708 comm="syz.0.2301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f644998efc9 code=0x7ffc0000 [ 607.038615][ T30] audit: type=1326 audit(1761192608.666:883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12708 comm="syz.0.2301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f644998efc9 code=0x7ffc0000 [ 607.094512][ T30] audit: type=1326 audit(1761192608.666:884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12708 comm="syz.0.2301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f644998efc9 code=0x7ffc0000 [ 607.139297][ T30] audit: type=1326 audit(1761192608.666:885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12708 comm="syz.0.2301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f644998efc9 code=0x7ffc0000 [ 607.168422][ T30] audit: type=1326 audit(1761192608.666:886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12708 comm="syz.0.2301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f644998efc9 code=0x7ffc0000 [ 607.194293][ T30] audit: type=1326 audit(1761192608.666:887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12708 comm="syz.0.2301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=244 compat=0 ip=0x7f644998efc9 code=0x7ffc0000 [ 607.981089][T12736] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2312'. [ 607.994232][T12738] loop1: detected capacity change from 0 to 512 [ 608.211551][T12738] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 608.225740][T12738] ext4 filesystem being mounted at /392/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 608.240204][T12743] loop3: detected capacity change from 0 to 128 [ 608.253696][T12738] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 608.307075][T12743] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 608.394319][T12743] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 608.717782][T12749] loop6: detected capacity change from 0 to 2048 [ 608.829457][T12749] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 609.177264][T12774] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2327'. [ 609.236613][T12748] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1286: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 609.275428][T12748] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 984 with error 28 [ 609.324527][T12748] EXT4-fs (loop6): This should not happen!! Data will be lost [ 609.324527][T12748] [ 609.334226][T12748] EXT4-fs (loop6): Total free blocks count 0 [ 609.385315][T12748] EXT4-fs (loop6): Free/Dirty block details [ 609.398027][T12748] EXT4-fs (loop6): free_blocks=2415919104 [ 609.403816][T12748] EXT4-fs (loop6): dirty_blocks=992 [ 609.433910][T12748] EXT4-fs (loop6): Block reservation details [ 609.450121][T12782] loop1: detected capacity change from 0 to 512 [ 609.456542][T12748] EXT4-fs (loop6): i_reserved_data_blocks=62 [ 609.479591][T12782] EXT4-fs: Ignoring removed nobh option [ 609.486143][T12783] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2331'. [ 609.532657][T12782] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #3: comm syz.1.2330: corrupted inode contents [ 609.585559][T12782] EXT4-fs error (device loop1): ext4_dirty_inode:6517: inode #3: comm syz.1.2330: mark_inode_dirty error [ 609.622268][T12782] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #3: comm syz.1.2330: corrupted inode contents [ 609.697459][T12782] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #3: comm syz.1.2330: mark_inode_dirty error [ 609.750177][T12782] EXT4-fs error (device loop1): ext4_acquire_dquot:6943: comm syz.1.2330: Failed to acquire dquot type 0 [ 609.772657][ T6520] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 609.824760][T12782] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #16: comm syz.1.2330: corrupted inode contents [ 609.856861][T12782] EXT4-fs error (device loop1): ext4_dirty_inode:6517: inode #16: comm syz.1.2330: mark_inode_dirty error [ 609.898234][T12782] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #16: comm syz.1.2330: corrupted inode contents [ 609.964481][T12782] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #16: comm syz.1.2330: mark_inode_dirty error [ 610.006620][T12782] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #16: comm syz.1.2330: corrupted inode contents [ 610.048760][T12782] EXT4-fs error (device loop1) in ext4_orphan_del:301: Corrupt filesystem [ 610.108125][T12782] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #16: comm syz.1.2330: corrupted inode contents [ 610.177197][T12782] EXT4-fs error (device loop1): ext4_truncate:4637: inode #16: comm syz.1.2330: mark_inode_dirty error [ 610.207172][T12782] EXT4-fs error (device loop1) in ext4_process_orphan:343: Corrupt filesystem [ 610.242389][T12782] EXT4-fs (loop1): 1 truncate cleaned up [ 610.276773][T12782] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 610.314772][T12782] ext4 filesystem being mounted at /395/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 610.446465][T12811] loop6: detected capacity change from 0 to 512 [ 610.630566][T12811] EXT4-fs (loop6): too many log groups per flexible block group [ 610.687237][T12811] EXT4-fs (loop6): failed to initialize mballoc (-12) [ 610.744879][T12822] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2345'. [ 610.853976][T12811] EXT4-fs (loop6): mount failed [ 611.009725][ T5834] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 612.760046][T12836] loop3: detected capacity change from 0 to 512 [ 612.828996][T12836] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 613.010432][T12836] EXT4-fs (loop3): 1 truncate cleaned up [ 613.063389][T12836] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 613.170665][ T30] kauditd_printk_skb: 40 callbacks suppressed [ 613.170691][ T30] audit: type=1800 audit(1761192614.986:926): pid=12836 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2349" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 613.341051][T12845] veth0: entered promiscuous mode [ 613.385481][T12844] veth0: left promiscuous mode [ 613.484220][ T5852] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 613.606151][T12847] loop1: detected capacity change from 0 to 128 [ 613.616729][T12847] FAT-fs (loop1): bogus sectors per cluster 0 [ 613.622837][T12847] FAT-fs (loop1): Can't find a valid FAT filesystem [ 614.186951][T12859] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2359'. [ 614.224817][T12859] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 614.232495][T12859] IPv6: NLM_F_CREATE should be set when creating new route [ 614.239954][T12859] IPv6: NLM_F_CREATE should be set when creating new route [ 614.540969][T12876] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2367'. [ 614.568158][T12876] IPVS: Unknown mcast interface: [ 614.583196][T12877] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2366'. [ 614.696103][T12880] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2368'. [ 614.897132][T12886] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2371'. [ 615.212142][T10356] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 615.244105][T10356] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 615.314946][T12900] loop3: detected capacity change from 0 to 128 [ 615.591352][ T30] audit: type=1326 audit(1761192617.406:927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12906 comm="syz.0.2381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f644998efc9 code=0x7ffc0000 [ 615.674741][ T30] audit: type=1326 audit(1761192617.406:928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12906 comm="syz.0.2381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f644998efc9 code=0x7ffc0000 [ 615.711978][T12910] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2382'. [ 615.721451][T12910] IPVS: Unknown mcast interface: [ 615.778953][ T30] audit: type=1326 audit(1761192617.406:929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12906 comm="syz.0.2381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f644998efc9 code=0x7ffc0000 [ 615.864347][ T30] audit: type=1326 audit(1761192617.406:930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12906 comm="syz.0.2381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f644998efc9 code=0x7ffc0000 [ 615.936677][T12916] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2385'. [ 615.949177][ T30] audit: type=1326 audit(1761192617.426:931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12906 comm="syz.0.2381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=17 compat=0 ip=0x7f644998efc9 code=0x7ffc0000 [ 616.044567][ T30] audit: type=1326 audit(1761192617.426:932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12906 comm="syz.0.2381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f644998efc9 code=0x7ffc0000 [ 616.117121][ T30] audit: type=1326 audit(1761192617.436:933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12906 comm="syz.0.2381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f644998efc9 code=0x7ffc0000 [ 616.196506][ T30] audit: type=1326 audit(1761192617.436:934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12906 comm="syz.0.2381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f644998efc9 code=0x7ffc0000 [ 616.315332][ T30] audit: type=1326 audit(1761192617.436:935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12906 comm="syz.0.2381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f644998efc9 code=0x7ffc0000 [ 616.345922][T12928] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2389'. [ 616.358952][T12928] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2389'. [ 616.517062][T12932] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2391'. [ 616.560366][T12931] loop6: detected capacity change from 0 to 2048 [ 616.574391][T12932] hsr_slave_0: left promiscuous mode [ 616.585031][T12932] hsr_slave_1: left promiscuous mode [ 616.606112][T12931] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 616.678782][T12936] tipc: Enabling of bearer rejected, failed to enable media [ 616.876173][ T6520] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 617.864871][T12947] lo speed is unknown, defaulting to 1000 [ 619.886618][T12972] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2406'. [ 619.959682][T12972] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2406'. [ 620.008504][T12977] loop3: detected capacity change from 0 to 128 [ 620.063151][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 620.063176][ T30] audit: type=1326 audit(1761192621.876:952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12976 comm="syz.0.2409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f644998efc9 code=0x7ffc0000 [ 620.120927][T12977] bio_check_eod: 3 callbacks suppressed [ 620.120954][T12977] syz.3.2408: attempt to access beyond end of device [ 620.120954][T12977] loop3: rw=2049, sector=154, nr_sectors = 6 limit=128 [ 620.141574][T12975] loop7: detected capacity change from 0 to 2048 [ 620.153303][ T30] audit: type=1326 audit(1761192621.886:953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12976 comm="syz.0.2409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f644998efc9 code=0x7ffc0000 [ 620.183314][T12977] syz.3.2408: attempt to access beyond end of device [ 620.183314][T12977] loop3: rw=2049, sector=158, nr_sectors = 2 limit=128 [ 620.215052][T12977] buffer_io_error: 23 callbacks suppressed [ 620.215079][T12977] Buffer I/O error on dev loop3, logical block 79, lost async page write [ 620.236950][ T30] audit: type=1326 audit(1761192621.886:954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12976 comm="syz.0.2409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f644998efc9 code=0x7ffc0000 [ 620.284732][T12977] syz.3.2408: attempt to access beyond end of device [ 620.284732][T12977] loop3: rw=2049, sector=160, nr_sectors = 2 limit=128 [ 620.326083][ T30] audit: type=1326 audit(1761192621.886:955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12976 comm="syz.0.2409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7f644998efc9 code=0x7ffc0000 [ 620.366599][T12977] Buffer I/O error on dev loop3, logical block 80, lost async page write [ 620.415280][T12977] syz.3.2408: attempt to access beyond end of device [ 620.415280][T12977] loop3: rw=2049, sector=162, nr_sectors = 6 limit=128 [ 620.432443][T12975] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 620.479508][ T30] audit: type=1326 audit(1761192621.906:956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12976 comm="syz.0.2409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f644998efc9 code=0x7ffc0000 [ 620.503789][T12977] syz.3.2408: attempt to access beyond end of device [ 620.503789][T12977] loop3: rw=2049, sector=166, nr_sectors = 2 limit=128 [ 620.546874][ T30] audit: type=1326 audit(1761192621.906:957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12976 comm="syz.0.2409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f644998efc9 code=0x7ffc0000 [ 620.617444][T12977] Buffer I/O error on dev loop3, logical block 83, lost async page write [ 620.657707][T12977] syz.3.2408: attempt to access beyond end of device [ 620.657707][T12977] loop3: rw=2049, sector=168, nr_sectors = 2 limit=128 [ 620.658380][ T30] audit: type=1326 audit(1761192622.466:958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12992 comm="syz.1.2414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f142c78efc9 code=0x7ffc0000 [ 620.696399][T12977] Buffer I/O error on dev loop3, logical block 84, lost async page write [ 620.702737][T10868] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 620.708347][ T30] audit: type=1326 audit(1761192622.476:959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12992 comm="syz.1.2414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f142c78efc9 code=0x7ffc0000 [ 620.744693][T12977] syz.3.2408: attempt to access beyond end of device [ 620.744693][T12977] loop3: rw=2049, sector=186, nr_sectors = 6 limit=128 [ 620.776939][T12977] syz.3.2408: attempt to access beyond end of device [ 620.776939][T12977] loop3: rw=2049, sector=190, nr_sectors = 2 limit=128 [ 620.846415][T12977] Buffer I/O error on dev loop3, logical block 95, lost async page write [ 620.867988][T12995] netlink: 'syz.0.2415': attribute type 1 has an invalid length. [ 620.897653][ T30] audit: type=1326 audit(1761192622.526:960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12992 comm="syz.1.2414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f142c78efc9 code=0x7ffc0000 [ 620.905610][T12977] syz.3.2408: attempt to access beyond end of device [ 620.905610][T12977] loop3: rw=2049, sector=192, nr_sectors = 2 limit=128 [ 620.988041][ T30] audit: type=1326 audit(1761192622.526:961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12992 comm="syz.1.2414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f142c78efc9 code=0x7ffc0000 [ 621.015665][T12977] Buffer I/O error on dev loop3, logical block 96, lost async page write [ 621.093882][T13001] netlink: 'syz.1.2418': attribute type 21 has an invalid length. [ 621.113615][T13001] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2418'. [ 621.151104][T13001] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2418'. [ 621.714939][T13019] veth0: entered promiscuous mode [ 621.720919][T13018] veth0: left promiscuous mode [ 622.501008][T13035] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2427'. [ 623.265973][T13051] loop1: detected capacity change from 0 to 512 [ 623.293584][T13051] EXT4-fs: quotafile must be on filesystem root [ 623.345830][T13051] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2434'. [ 623.689661][T13064] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2440'. [ 623.728556][T13067] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2443'. [ 624.514110][T13089] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2451'. [ 624.556723][T13093] netlink: 'syz.2.2453': attribute type 1 has an invalid length. [ 625.018484][T13101] loop7: detected capacity change from 0 to 2048 [ 625.036891][T13108] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2459'. [ 625.047231][T13101] EXT4-fs: Ignoring removed bh option [ 625.070153][T13108] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2459'. [ 625.096630][T13107] loop2: detected capacity change from 0 to 128 [ 625.104279][T13107] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 625.200224][T13101] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 625.252185][T13107] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 625.358953][T13117] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1286: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 625.601894][T10868] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 625.682961][T13103] Process accounting resumed [ 625.715505][ T13] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 625.809864][T13127] loop7: detected capacity change from 0 to 128 [ 625.866583][T13127] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 625.936096][T13127] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 625.994788][T13136] netlink: 'syz.6.2470': attribute type 1 has an invalid length. [ 627.578245][T13160] loop6: detected capacity change from 0 to 512 [ 627.623199][T13160] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 628.168410][T13179] veth0: entered promiscuous mode [ 628.184007][T13178] veth0: left promiscuous mode [ 628.369391][T13188] loop1: detected capacity change from 0 to 1024 [ 628.556715][T13188] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 629.601535][T13198] lo speed is unknown, defaulting to 1000 [ 629.703409][ T5834] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 630.662456][T13217] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2503'. [ 631.039583][T13217] 8021q: adding VLAN 0 to HW filter on device bond1 [ 631.136290][T13220] vlan2: entered allmulticast mode [ 631.141481][T13220] bond1: entered allmulticast mode [ 632.672369][T13243] loop1: detected capacity change from 0 to 1024 [ 632.737169][T13243] EXT4-fs: Ignoring removed orlov option [ 632.809844][T13243] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 632.977774][ T30] kauditd_printk_skb: 24 callbacks suppressed [ 632.977800][ T30] audit: type=1800 audit(1761192634.796:986): pid=13248 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2513" name="bus" dev="loop1" ino=18 res=0 errno=0 [ 633.039343][ T30] audit: type=1804 audit(1761192634.856:987): pid=13243 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.2513" name="/newroot/422/bus/bus" dev="loop1" ino=18 res=1 errno=0 [ 633.064642][ T30] audit: type=1800 audit(1761192634.856:988): pid=13243 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2513" name="bus" dev="loop1" ino=18 res=0 errno=0 [ 633.087540][ T30] audit: type=1804 audit(1761192634.886:989): pid=13243 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.2513" name="/newroot/422/bus/bus" dev="loop1" ino=18 res=1 errno=0 [ 633.108825][ T30] audit: type=1800 audit(1761192634.886:990): pid=13243 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2513" name="bus" dev="loop1" ino=18 res=0 errno=0 [ 633.170284][ T30] audit: type=1326 audit(1761192634.906:991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13221 comm="syz.0.2504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f644998efc9 code=0x7ffc0000 [ 633.261416][ T30] audit: type=1326 audit(1761192634.906:992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13221 comm="syz.0.2504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f644998efc9 code=0x7ffc0000 [ 633.261920][T13246] loop2: detected capacity change from 0 to 8192 [ 633.325806][ T30] audit: type=1326 audit(1761192635.036:993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13221 comm="syz.0.2504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=152 compat=0 ip=0x7f644998efc9 code=0x7ffc0000 [ 633.362798][ T5834] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 633.444521][ T30] audit: type=1800 audit(1761192635.236:994): pid=13246 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2515" name="bus" dev="loop2" ino=1048640 res=0 errno=0 [ 633.554575][ T30] audit: type=1326 audit(1761192635.246:995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13221 comm="syz.0.2504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f644998efc9 code=0x7ffc0000 [ 633.794916][T13239] rdma_op ffff888055e901f0 conn xmit_rdma 0000000000000000 [ 633.807951][T13264] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2520'. [ 633.848622][T13264] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2520'. [ 634.004861][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 634.482074][T13273] loop6: detected capacity change from 0 to 512 [ 634.540823][T13273] EXT4-fs (loop6): 1 orphan inode deleted [ 634.548930][T13273] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 634.562154][T13273] ext4 filesystem being mounted at /388/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 634.573977][ T6257] EXT4-fs error (device loop6): ext4_release_dquot:6979: comm kworker/u8:12: Failed to release dquot type 1 [ 634.772503][ T6520] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 635.121454][T13301] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2530'. [ 635.155854][T13299] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2533'. [ 635.247135][T13299] IPVS: Unknown mcast interface: [ 635.299869][T13301] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2530'. [ 635.356226][T13303] bond0: (slave dummy0): Releasing backup interface [ 635.445805][T13303] bridge0: port 1(batadv0) entered disabled state [ 635.560683][T13313] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2536'. [ 635.644565][T13313] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2536'. [ 640.610236][ T30] kauditd_printk_skb: 22 callbacks suppressed [ 640.610264][ T30] audit: type=1326 audit(1761192642.416:1017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13351 comm="syz.1.2550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f142c78efc9 code=0x7ffc0000 [ 640.775600][ T30] audit: type=1326 audit(1761192642.416:1018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13351 comm="syz.1.2550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f142c78efc9 code=0x7ffc0000 [ 640.837034][ T30] audit: type=1326 audit(1761192642.476:1019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13351 comm="syz.1.2550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f142c78efc9 code=0x7ffc0000 [ 640.955141][ T30] audit: type=1326 audit(1761192642.486:1020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13351 comm="syz.1.2550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f142c78efc9 code=0x7ffc0000 [ 641.013719][T13359] netlink: 'syz.0.2552': attribute type 1 has an invalid length. [ 641.032522][T13356] loop7: detected capacity change from 0 to 2048 [ 641.079811][ T30] audit: type=1326 audit(1761192642.486:1021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13351 comm="syz.1.2550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f142c78efc9 code=0x7ffc0000 [ 641.103090][ T30] audit: type=1326 audit(1761192642.486:1022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13351 comm="syz.1.2550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f142c78efc9 code=0x7ffc0000 [ 641.126417][ T30] audit: type=1326 audit(1761192642.486:1023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13351 comm="syz.1.2550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f142c78efc9 code=0x7ffc0000 [ 641.152756][ T30] audit: type=1326 audit(1761192642.486:1024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13351 comm="syz.1.2550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f142c78efc9 code=0x7ffc0000 [ 641.184595][ T30] audit: type=1326 audit(1761192642.486:1025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13351 comm="syz.1.2550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f142c78efc9 code=0x7ffc0000 [ 641.226633][T13356] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 641.248186][ T30] audit: type=1326 audit(1761192642.486:1026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13351 comm="syz.1.2550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f142c78efc9 code=0x7ffc0000 [ 641.365464][T13365] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1286: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 641.474999][T13368] netlink: 'syz.0.2555': attribute type 1 has an invalid length. [ 641.696194][T13356] EXT4-fs (loop7): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1266 with error 28 [ 641.719460][T13356] EXT4-fs (loop7): This should not happen!! Data will be lost [ 641.719460][T13356] [ 641.734528][T13356] EXT4-fs (loop7): Total free blocks count 0 [ 641.752282][T13356] EXT4-fs (loop7): Free/Dirty block details [ 641.774857][T13356] EXT4-fs (loop7): free_blocks=2415919104 [ 641.804980][T13356] EXT4-fs (loop7): dirty_blocks=1280 [ 641.810344][T13356] EXT4-fs (loop7): Block reservation details [ 641.816492][T13356] EXT4-fs (loop7): i_reserved_data_blocks=80 [ 642.121271][T10868] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 642.213729][T13389] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2563'. [ 642.224294][T13389] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2563'. [ 643.363307][T13400] loop7: detected capacity change from 0 to 1764 [ 643.742304][T13368] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 643.776070][T13372] veth3: entered promiscuous mode [ 643.808516][T13376] erspan0: entered allmulticast mode [ 645.079508][T13420] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2574'. [ 645.140325][T13422] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2574'. [ 645.490524][T13431] loop2: detected capacity change from 0 to 128 [ 646.023784][T13431] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 646.114573][T13431] ext4 filesystem being mounted at /449/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 646.157275][T13438] loop1: detected capacity change from 0 to 128 [ 646.422661][T13433] lo speed is unknown, defaulting to 1000 [ 646.739267][T13440] loop7: detected capacity change from 0 to 512 [ 646.903173][T13440] EXT4-fs (loop7): 1 orphan inode deleted [ 646.913727][T13440] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 646.931462][T13440] ext4 filesystem being mounted at /150/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 647.027635][T13438] pim6reg: entered allmulticast mode [ 647.167985][ T8632] __quota_error: 87 callbacks suppressed [ 647.168013][ T8632] Quota error (device loop7): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 647.185302][ T8632] EXT4-fs error (device loop7): ext4_release_dquot:6979: comm kworker/u8:15: Failed to release dquot type 1 [ 647.203479][T13444] pim6reg: left allmulticast mode [ 649.036827][T10868] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 649.085693][T13449] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(10) [ 649.092738][T13449] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 649.196890][ T5843] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 649.214828][T13449] vhci_hcd vhci_hcd.0: Device attached [ 649.287789][ T30] audit: type=1804 audit(1761192651.106:1114): pid=13449 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.2579" name="/newroot/436/file7/bus" dev="loop1" ino=1048641 res=1 errno=0 [ 649.394505][ T30] audit: type=1800 audit(1761192651.136:1115): pid=13449 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2579" name="bus" dev="loop1" ino=1048641 res=0 errno=0 [ 649.492000][T13452] vhci_hcd: connection closed [ 649.495612][ T8632] vhci_hcd: stop threads [ 649.535791][ T8632] vhci_hcd: release socket [ 649.564341][ T8632] vhci_hcd: disconnect device [ 650.103941][T13474] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2584'. [ 650.130360][T13474] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2584'. [ 650.401250][T13481] netlink: 'syz.3.2592': attribute type 1 has an invalid length. [ 650.680291][T13490] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2597'. [ 651.076430][T13506] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 651.173456][T13507] loop3: detected capacity change from 0 to 512 [ 651.531254][T13518] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2608'. [ 651.544375][ T30] audit: type=1326 audit(1761192653.366:1116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13517 comm="syz.7.2607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95c798efc9 code=0x7ffc0000 [ 651.571230][T13507] EXT4-fs (loop3): 1 orphan inode deleted [ 651.577242][ T30] audit: type=1326 audit(1761192653.386:1117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13517 comm="syz.7.2607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95c798efc9 code=0x7ffc0000 [ 651.584688][T13518] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2608'. [ 651.601529][ T8632] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 652.426902][ T30] audit: type=1326 audit(1761192653.386:1118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13517 comm="syz.7.2607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f95c798efc9 code=0x7ffc0000 [ 652.482472][ T30] audit: type=1326 audit(1761192653.386:1119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13517 comm="syz.7.2607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95c798efc9 code=0x7ffc0000 [ 652.556672][T13522] lo speed is unknown, defaulting to 1000 [ 652.578344][T13507] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 652.581563][ T8632] EXT4-fs error (device loop3): ext4_release_dquot:6979: comm kworker/u8:15: Failed to release dquot type 1 [ 652.675319][ T30] audit: type=1326 audit(1761192653.396:1120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13517 comm="syz.7.2607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f95c798efc9 code=0x7ffc0000 [ 652.778971][T13507] ext4 filesystem being mounted at /453/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 652.824613][ T30] audit: type=1326 audit(1761192653.396:1121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13517 comm="syz.7.2607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95c798efc9 code=0x7ffc0000 [ 652.912059][ T30] audit: type=1326 audit(1761192654.276:1122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13517 comm="syz.7.2607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f95c798efc9 code=0x7ffc0000 [ 652.935978][ T30] audit: type=1326 audit(1761192654.296:1123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13517 comm="syz.7.2607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95c798efc9 code=0x7ffc0000 [ 652.965500][ T30] audit: type=1326 audit(1761192654.296:1124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13517 comm="syz.7.2607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95c798efc9 code=0x7ffc0000 [ 653.044812][T13533] netlink: 'syz.7.2610': attribute type 1 has an invalid length. [ 653.949592][ T30] audit: type=1326 audit(1761192655.766:1125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13551 comm="syz.2.2620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa95378efc9 code=0x7ffc0000 [ 653.991900][T13550] loop9: detected capacity change from 0 to 7 [ 654.014533][ T30] audit: type=1326 audit(1761192655.786:1126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13551 comm="syz.2.2620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa95378efc9 code=0x7ffc0000 [ 654.083444][T13550] Buffer I/O error on dev loop9, logical block 0, async page read [ 654.114617][T13550] Buffer I/O error on dev loop9, logical block 0, async page read [ 654.193191][T13550] Buffer I/O error on dev loop9, logical block 0, async page read [ 654.225118][ T30] audit: type=1326 audit(1761192655.786:1127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13551 comm="syz.2.2620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa95378efc9 code=0x7ffc0000 [ 654.278607][T13550] Buffer I/O error on dev loop9, logical block 0, async page read [ 654.314110][T13550] Buffer I/O error on dev loop9, logical block 0, async page read [ 654.334865][T13550] Buffer I/O error on dev loop9, logical block 0, async page read [ 654.342849][T13550] Buffer I/O error on dev loop9, logical block 0, async page read [ 654.406745][T13550] ldm_validate_partition_table(): Disk read failed. [ 654.413460][T13550] Buffer I/O error on dev loop9, logical block 0, async page read [ 654.463027][T13550] Buffer I/O error on dev loop9, logical block 0, async page read [ 654.495794][T13550] Buffer I/O error on dev loop9, logical block 0, async page read [ 654.504083][T13550] Dev loop9: unable to read RDB block 0 [ 654.510154][T13550] loop9: unable to read partition table [ 654.524926][ T5985] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 654.533064][T13550] loop9: partition table beyond EOD, truncated [ 654.552733][T13550] loop_reread_partitions: partition scan of loop9 (þ被xüŸÑø éÚ¬§½dG¤´à–ƒÝ¡¯ â·û [ 654.552733][T13550] ) failed (rc=-5) [ 654.595579][T13562] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2623'. [ 654.617604][T13562] netlink: 36 bytes leftover after parsing attributes in process `syz.7.2623'. [ 654.646899][T13562] bridge0: port 3(vlan2) entered blocking state [ 654.663678][T13562] bridge0: port 3(vlan2) entered disabled state [ 654.687812][T13562] vlan2: entered allmulticast mode [ 654.692985][T13562] bridge0: entered allmulticast mode [ 654.708055][ T5985] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 654.723772][ T5985] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 654.754501][ T5985] usb 2-1: Product: syz [ 654.758733][ T5985] usb 2-1: Manufacturer: syz [ 654.768596][T13562] vlan2: left allmulticast mode [ 654.773495][T13562] bridge0: left allmulticast mode [ 654.784462][ T5985] usb 2-1: SerialNumber: syz [ 654.812490][ T5985] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 654.852843][ T9] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 654.882506][T13575] netlink: 'syz.2.2628': attribute type 1 has an invalid length. [ 655.159479][ T5919] usb 2-1: USB disconnect, device number 30 [ 655.454871][T13590] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 655.691400][T13598] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2638'. [ 655.906861][ T9] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 655.954847][ T9] ath9k_htc: Failed to initialize the device [ 656.027088][ T5919] usb 2-1: ath9k_htc: USB layer deinitialized [ 656.947281][T13614] netlink: 'syz.7.2644': attribute type 1 has an invalid length. [ 657.699374][T13636] loop2: detected capacity change from 0 to 1024 [ 657.712161][T13637] veth0: entered promiscuous mode [ 657.720227][T13634] veth0: left promiscuous mode [ 657.765710][T13636] EXT4-fs: inline encryption not supported [ 657.863917][T13636] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 657.883299][T13641] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2655'. [ 657.921813][T13645] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2657'. [ 658.086989][T13649] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2658'. [ 658.185365][T13653] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2658'. [ 658.216586][T13655] netlink: 'syz.0.2660': attribute type 1 has an invalid length. [ 658.267543][ T30] kauditd_printk_skb: 58 callbacks suppressed [ 658.267567][ T30] audit: type=1326 audit(1761192660.086:1186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13656 comm="syz.1.2661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f142c78efc9 code=0x7ffc0000 [ 658.351997][ T30] audit: type=1326 audit(1761192660.146:1187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13656 comm="syz.1.2661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f142c78efc9 code=0x7ffc0000 [ 658.371792][ T5843] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 658.415614][ T30] audit: type=1326 audit(1761192660.146:1188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13656 comm="syz.1.2661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f142c78efc9 code=0x7ffc0000 [ 658.504666][ T30] audit: type=1326 audit(1761192660.146:1189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13656 comm="syz.1.2661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f142c78efc9 code=0x7ffc0000 [ 658.706180][T13664] loop2: detected capacity change from 0 to 128 [ 658.797863][ T30] audit: type=1326 audit(1761192660.146:1190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13656 comm="syz.1.2661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f142c78efc9 code=0x7ffc0000 [ 658.845113][ T30] audit: type=1326 audit(1761192660.146:1191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13656 comm="syz.1.2661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f142c78efc9 code=0x7ffc0000 [ 659.595762][ T30] audit: type=1326 audit(1761192660.146:1192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13656 comm="syz.1.2661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f142c78efc9 code=0x7ffc0000 [ 659.618710][ T30] audit: type=1326 audit(1761192660.146:1193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13656 comm="syz.1.2661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f142c78efc9 code=0x7ffc0000 [ 659.747354][T13671] siw: device registration error -23 [ 659.762795][ T30] audit: type=1326 audit(1761192660.146:1194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13656 comm="syz.1.2661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f142c78efc9 code=0x7ffc0000 [ 659.841978][ T30] audit: type=1326 audit(1761192660.146:1195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13656 comm="syz.1.2661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f142c78efc9 code=0x7ffc0000 [ 659.870037][T13673] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2668'. [ 659.879179][T13673] IPVS: Unknown mcast interface: [ 659.927165][T13675] veth0: entered promiscuous mode [ 659.932737][T13674] veth0: left promiscuous mode [ 660.218776][T13683] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2673'. [ 660.473915][T13688] loop7: detected capacity change from 0 to 512 [ 660.491954][T13688] EXT4-fs: quotafile must be on filesystem root [ 660.523696][T13688] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2675'. [ 660.541000][T13691] netlink: 'syz.0.2676': attribute type 1 has an invalid length. [ 660.747949][ T5852] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 661.145156][T13711] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2685'. [ 661.187192][T13711] IPVS: Unknown mcast interface: [ 661.273906][T13716] veth0: entered promiscuous mode [ 661.317446][T13714] veth0: left promiscuous mode [ 661.357772][T13719] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2688'. [ 662.516812][T13708] syz.3.2683: vmalloc error: size 268439552, failed to allocated page array size 524296, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 662.535521][T13708] CPU: 1 UID: 0 PID: 13708 Comm: syz.3.2683 Not tainted syzkaller #0 PREEMPT(full) [ 662.535568][T13708] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 662.535590][T13708] Call Trace: [ 662.535601][T13708] [ 662.535614][T13708] dump_stack_lvl+0x16c/0x1f0 [ 662.535670][T13708] warn_alloc+0x248/0x3a0 [ 662.535723][T13708] ? __pfx_warn_alloc+0x10/0x10 [ 662.535794][T13708] ? xskq_create+0xfb/0x1d0 [ 662.535853][T13708] ? srso_alias_return_thunk+0x5/0xfbef5 [ 662.535899][T13708] ? __vmalloc_node_noprof+0xad/0xf0 [ 662.535948][T13708] __vmalloc_node_range_noprof+0xfe2/0x1480 [ 662.536007][T13708] ? xskq_create+0xfb/0x1d0 [ 662.536081][T13708] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 662.536143][T13708] ? xskq_create+0xfb/0x1d0 [ 662.536204][T13708] vmalloc_user_noprof+0x9e/0xe0 [ 662.536244][T13708] ? xskq_create+0xfb/0x1d0 [ 662.536306][T13708] xskq_create+0xfb/0x1d0 [ 662.536370][T13708] xsk_setsockopt+0x792/0x9a0 [ 662.536429][T13708] ? __pfx_xsk_setsockopt+0x10/0x10 [ 662.536486][T13708] ? srso_alias_return_thunk+0x5/0xfbef5 [ 662.536532][T13708] ? find_held_lock+0x2b/0x80 [ 662.536586][T13708] ? srso_alias_return_thunk+0x5/0xfbef5 [ 662.536631][T13708] ? aa_sock_opt_perm+0xfd/0x1c0 [ 662.536692][T13708] ? __pfx_xsk_setsockopt+0x10/0x10 [ 662.536753][T13708] do_sock_setsockopt+0xf3/0x1d0 [ 662.536805][T13708] __sys_setsockopt+0x1a0/0x230 [ 662.536875][T13708] __x64_sys_setsockopt+0xbd/0x160 [ 662.536933][T13708] ? do_syscall_64+0x91/0xfa0 [ 662.536975][T13708] ? srso_alias_return_thunk+0x5/0xfbef5 [ 662.537020][T13708] ? lockdep_hardirqs_on+0x7c/0x110 [ 662.537063][T13708] do_syscall_64+0xcd/0xfa0 [ 662.537109][T13708] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 662.537148][T13708] RIP: 0033:0x7f648358efc9 [ 662.537177][T13708] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 662.537214][T13708] RSP: 002b:00007f64844fa038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 662.537248][T13708] RAX: ffffffffffffffda RBX: 00007f64837e5fa0 RCX: 00007f648358efc9 [ 662.537273][T13708] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000003 [ 662.537296][T13708] RBP: 00007f6483611f91 R08: 0000000000000004 R09: 0000000000000000 [ 662.537320][T13708] R10: 00002000000004c0 R11: 0000000000000246 R12: 0000000000000000 [ 662.537344][T13708] R13: 00007f64837e6038 R14: 00007f64837e5fa0 R15: 00007ffca3040498 [ 662.537396][T13708] [ 662.538228][T13708] Mem-Info: [ 662.794719][T13708] active_anon:8366 inactive_anon:0 isolated_anon:0 [ 662.794719][T13708] active_file:16681 inactive_file:40566 isolated_file:0 [ 662.794719][T13708] unevictable:768 dirty:401 writeback:0 [ 662.794719][T13708] slab_reclaimable:12170 slab_unreclaimable:137635 [ 662.794719][T13708] mapped:37859 shmem:4308 pagetables:1396 [ 662.794719][T13708] sec_pagetables:0 bounce:0 [ 662.794719][T13708] kernel_misc_reclaimable:0 [ 662.794719][T13708] free:1183543 free_pcp:14897 free_cma:0 [ 662.911526][T13708] Node 0 active_anon:30564kB inactive_anon:0kB active_file:66724kB inactive_file:162060kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:139936kB dirty:1604kB writeback:0kB shmem:12896kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12704kB pagetables:5428kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 662.985743][T13708] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:156kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 663.015911][T13708] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 663.089436][T13708] lowmem_reserve[]: 0 2485 2487 2487 2487 [ 663.141533][T13708] Node 0 DMA32 free:825152kB boost:0kB min:34108kB low:42632kB high:51156kB reserved_highatomic:0KB free_highatomic:0KB active_anon:21864kB inactive_anon:0kB active_file:66724kB inactive_file:162060kB unevictable:1536kB writepending:1604kB zspages:0kB present:3129332kB managed:2545020kB mlocked:0kB bounce:0kB free_pcp:43152kB local_pcp:11660kB free_cma:0kB [ 663.191689][T13708] lowmem_reserve[]: 0 0 1 1 1 [ 663.197382][T13708] Node 0 Normal free:0kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 663.310040][T13735] loop6: detected capacity change from 0 to 512 [ 663.316470][T13708] lowmem_reserve[]: 0 0 0 0 0 [ 663.325615][T13735] EXT4-fs: quotafile must be on filesystem root [ 663.331500][T13708] Node 1 Normal free:3883628kB boost:0kB min:55768kB low:69708kB high:83648kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:27596kB local_pcp:13424kB free_cma:0kB [ 663.388412][T13735] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2694'. [ 663.414271][T13708] lowmem_reserve[]: 0 0 0 0 0 [ 663.446961][T13708] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 663.499053][T13708] Node 0 DMA32: 275*4kB (ME) 523*8kB (UME) 654*16kB (UME) 281*32kB (ME) 248*64kB (UME) 106*128kB (UME) 35*256kB (M) 17*512kB (ME) 8*1024kB (M) 5*2048kB (UME) 176*4096kB (M) = 811172kB [ 663.553148][T13708] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 663.597188][T13708] Node 1 Normal: 198*4kB (U) 35*8kB (UM) 37*16kB (UE) 121*32kB (UME) 38*64kB (UE) 5*128kB (UE) 3*256kB (U) 3*512kB (UME) 4*1024kB (UME) 3*2048kB (UME) 943*4096kB (M) = 3883680kB [ 663.641290][T13708] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 663.657159][T13708] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 663.683450][T13708] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 663.725890][T13708] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 663.760757][T13708] 58672 total pagecache pages [ 663.784083][T13708] 0 pages in swap cache [ 663.804453][T13708] Free swap = 124996kB [ 663.808675][T13708] Total swap = 124996kB [ 663.834528][T13708] 2097051 pages RAM [ 663.838548][T13708] 0 pages HighMem/MovableOnly [ 663.843364][T13708] 428706 pages reserved [ 663.847701][T13708] 0 pages cma reserved [ 664.546436][T13757] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2703'. [ 664.597505][T13753] veth0: entered promiscuous mode [ 664.602964][T13752] veth0: left promiscuous mode [ 664.849975][ T30] kauditd_printk_skb: 37 callbacks suppressed [ 664.850002][ T30] audit: type=1326 audit(1761192666.666:1233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13768 comm="syz.3.2708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f648358efc9 code=0x7ffc0000 [ 664.941809][ T30] audit: type=1326 audit(1761192666.716:1234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13768 comm="syz.3.2708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f648358efc9 code=0x7ffc0000 [ 665.747240][ T30] audit: type=1326 audit(1761192666.716:1235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13768 comm="syz.3.2708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f648358efc9 code=0x7ffc0000 [ 665.771296][ T30] audit: type=1326 audit(1761192666.716:1236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13768 comm="syz.3.2708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f648358efc9 code=0x7ffc0000 [ 665.804115][ T30] audit: type=1326 audit(1761192666.726:1237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13768 comm="syz.3.2708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f648358efc9 code=0x7ffc0000 [ 665.874788][ T30] audit: type=1326 audit(1761192666.736:1238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13768 comm="syz.3.2708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f648358efc9 code=0x7ffc0000 [ 665.964580][ T30] audit: type=1326 audit(1761192666.736:1239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13768 comm="syz.3.2708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f648358efc9 code=0x7ffc0000 [ 666.067054][T13779] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2711'. [ 666.085396][ T30] audit: type=1326 audit(1761192666.736:1240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13768 comm="syz.3.2708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f648358efc9 code=0x7ffc0000 [ 666.384054][ T30] audit: type=1326 audit(1761192666.736:1241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13768 comm="syz.3.2708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f648358efc9 code=0x7ffc0000 [ 666.456967][ T30] audit: type=1326 audit(1761192666.736:1242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13768 comm="syz.3.2708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f648358efc9 code=0x7ffc0000 [ 666.526478][T13789] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2715'. [ 666.550593][T13790] binfmt_misc: register: failed to install interpreter file ./file0 [ 666.707046][T13789] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2715'. [ 666.748929][T13798] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2717'. [ 667.114774][T13805] netlink: 'syz.0.2720': attribute type 1 has an invalid length. [ 667.190200][T13807] program syz.2.2721 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 667.382903][T13815] veth0: entered promiscuous mode [ 667.389164][T13814] veth0: left promiscuous mode [ 667.987903][T13838] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2734'. [ 668.011941][T13839] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2736'. [ 668.366809][T13846] netlink: 'syz.1.2739': attribute type 1 has an invalid length. [ 668.534105][T13850] loop3: detected capacity change from 0 to 164 [ 668.560230][T13852] veth0: entered promiscuous mode [ 668.586886][T13851] veth0: left promiscuous mode [ 668.596644][T13850] Unable to read rock-ridge attributes [ 668.616584][T13850] Unable to read rock-ridge attributes [ 669.231972][T13868] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2750'. [ 669.649322][T13883] veth0: entered promiscuous mode [ 669.681838][T13885] netlink: 'syz.1.2757': attribute type 1 has an invalid length. [ 669.682033][T13882] veth0: left promiscuous mode [ 670.098069][T13894] loop2: detected capacity change from 0 to 1024 [ 670.119491][T13894] EXT4-fs: Ignoring removed orlov option [ 670.243470][T13894] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 670.331428][ T30] kauditd_printk_skb: 46 callbacks suppressed [ 670.331457][ T30] audit: type=1800 audit(1761192672.146:1289): pid=13894 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2762" name="bus" dev="loop2" ino=18 res=0 errno=0 [ 670.444544][ T30] audit: type=1804 audit(1761192672.186:1290): pid=13894 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.2762" name="/newroot/488/bus/bus" dev="loop2" ino=18 res=1 errno=0 [ 670.805371][T13913] netlink: 'syz.1.2769': attribute type 3 has an invalid length. [ 670.832116][ T30] audit: type=1326 audit(1761192672.646:1291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13914 comm="syz.7.2771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95c798efc9 code=0x7ffc0000 [ 670.888878][T13917] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2770'. [ 670.914523][ T30] audit: type=1326 audit(1761192672.646:1292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13914 comm="syz.7.2771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95c798efc9 code=0x7ffc0000 [ 670.952350][ T5843] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 670.993731][ T30] audit: type=1326 audit(1761192672.646:1293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13914 comm="syz.7.2771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f95c798efc9 code=0x7ffc0000 [ 671.088129][ T30] audit: type=1326 audit(1761192672.646:1294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13914 comm="syz.7.2771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95c798efc9 code=0x7ffc0000 [ 671.156775][ T30] audit: type=1326 audit(1761192672.646:1295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13914 comm="syz.7.2771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95c798efc9 code=0x7ffc0000 [ 671.252589][T13923] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2772'. [ 671.254490][ T30] audit: type=1326 audit(1761192672.646:1296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13914 comm="syz.7.2771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f95c798efc9 code=0x7ffc0000 [ 671.332880][ T30] audit: type=1326 audit(1761192672.646:1297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13914 comm="syz.7.2771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95c798efc9 code=0x7ffc0000 [ 671.370932][ T30] audit: type=1326 audit(1761192672.646:1298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13914 comm="syz.7.2771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f95c798efc9 code=0x7ffc0000 [ 671.574680][T13928] veth0: entered promiscuous mode [ 671.598157][T13927] veth0: left promiscuous mode [ 671.629393][T13930] netlink: 'syz.1.2777': attribute type 1 has an invalid length. [ 673.556546][T13949] netlink: 'syz.6.2785': attribute type 3 has an invalid length. [ 673.797864][T13951] loop1: detected capacity change from 0 to 1024 [ 673.870966][T13951] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 673.924898][T13951] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 673.974448][T13951] JBD2: no valid journal superblock found [ 673.980251][T13951] EXT4-fs (loop1): Could not load journal inode [ 674.088745][T13958] veth0: entered promiscuous mode [ 674.100980][T13956] veth0: left promiscuous mode [ 674.157208][T13959] loop6: detected capacity change from 0 to 512 [ 674.199514][T13959] EXT4-fs: Ignoring removed bh option [ 674.248250][T13959] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 674.280408][T13959] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 674.313379][T13959] EXT4-fs (loop6): warning: mounting unchecked fs, running e2fsck is recommended [ 674.493076][T13959] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=e002e01c, mo2=0006] [ 674.542537][T13959] System zones: 0-2, 18-18, 34-35 [ 674.560166][T13959] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 674.583128][T13969] netlink: 'syz.0.2795': attribute type 1 has an invalid length. [ 674.641863][T13959] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 674.665070][T13959] EXT4-fs error (device loop6): ext4_readdir:262: inode #2: block 3: comm syz.6.2791: path /435/file0: bad entry in directory: inode out of bounds - offset=24, inode=134217739, rec_len=20, size=2048 fake=0 [ 674.897430][ T6520] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 675.221717][T13985] netlink: 'syz.0.2802': attribute type 3 has an invalid length. [ 675.473914][T13990] tipc: Enabling of bearer rejected, failed to enable media [ 675.685944][T13996] veth0: entered promiscuous mode [ 675.702090][T13994] veth0: left promiscuous mode [ 677.636488][T14013] netlink: 'syz.2.2813': attribute type 1 has an invalid length. [ 677.804341][T14017] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2815'. [ 677.983860][T14022] netlink: 'syz.3.2817': attribute type 3 has an invalid length. [ 678.081346][T14025] veth0: entered promiscuous mode [ 678.099215][T14024] veth0: left promiscuous mode [ 678.187933][T14027] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2820'. [ 678.271279][T14027] loop1: detected capacity change from 0 to 764 [ 678.305647][T14027] iso9660: Bad value for 'sbsector' [ 678.378475][T14027] tap0: tun_chr_ioctl cmd 1074025673 [ 678.967046][T14047] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2829'. [ 679.512780][T14059] netlink: 'syz.3.2834': attribute type 3 has an invalid length. [ 679.563056][T14061] veth0: entered promiscuous mode [ 679.574752][ T30] kauditd_printk_skb: 57 callbacks suppressed [ 679.574776][ T30] audit: type=1326 audit(1761192937.392:1356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14062 comm="syz.6.2811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbeb318efc9 code=0x7ffc0000 [ 680.847043][T14060] veth0: left promiscuous mode [ 680.857036][ T30] audit: type=1326 audit(1761192938.662:1357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14062 comm="syz.6.2811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbeb318efc9 code=0x7ffc0000 [ 680.976910][ T30] audit: type=1326 audit(1761192938.662:1358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14062 comm="syz.6.2811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbeb318efc9 code=0x7ffc0000 [ 681.043898][ T30] audit: type=1326 audit(1761192938.662:1359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14062 comm="syz.6.2811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbeb318efc9 code=0x7ffc0000 [ 681.134485][ T30] audit: type=1326 audit(1761192938.672:1360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14062 comm="syz.6.2811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbeb318efc9 code=0x7ffc0000 [ 681.204568][ T30] audit: type=1326 audit(1761192938.672:1361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14062 comm="syz.6.2811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbeb318efc9 code=0x7ffc0000 [ 681.264644][ T30] audit: type=1326 audit(1761192938.672:1362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14062 comm="syz.6.2811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbeb318efc9 code=0x7ffc0000 [ 681.400508][ T30] audit: type=1326 audit(1761192938.682:1363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14062 comm="syz.6.2811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbeb318efc9 code=0x7ffc0000 [ 681.448796][ T30] audit: type=1326 audit(1761192938.682:1364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14062 comm="syz.6.2811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbeb318efc9 code=0x7ffc0000 [ 681.472051][ T30] audit: type=1326 audit(1761192938.682:1365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14062 comm="syz.6.2811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbeb318efc9 code=0x7ffc0000 [ 682.395436][T14078] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2841'. [ 682.484728][T14074] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2841'. [ 682.502950][T14076] lo speed is unknown, defaulting to 1000 [ 684.827639][T14091] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2845'. [ 685.109440][T14097] loop3: detected capacity change from 0 to 1024 [ 685.135622][T14097] EXT4-fs: Ignoring removed orlov option [ 685.196371][T14097] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 685.267546][T14106] veth0: entered promiscuous mode [ 685.285478][T14105] veth0: left promiscuous mode [ 685.301833][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 685.301859][ T30] audit: type=1800 audit(1761192943.122:1369): pid=14097 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2847" name="bus" dev="loop3" ino=18 res=0 errno=0 [ 685.394020][ T30] audit: type=1804 audit(1761192943.162:1370): pid=14097 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.2847" name="/newroot/484/bus/bus" dev="loop3" ino=18 res=1 errno=0 [ 685.399214][T14108] netlink: 'syz.6.2850': attribute type 3 has an invalid length. [ 685.534238][T14110] ªªªªªªÿÿòÿÿÿòÿÿ: renamed from wg2 (while UP) [ 685.612271][T14116] loop2: detected capacity change from 0 to 512 [ 685.677820][T14116] EXT4-fs error (device loop2): ext4_xattr_inode_iget:444: comm syz.2.2854: error while reading EA inode 32 err=-116 [ 685.722661][T14116] EXT4-fs (loop2): Remounting filesystem read-only [ 685.749338][T14116] EXT4-fs warning (device loop2): ext4_evict_inode:256: couldn't mark inode dirty (err -30) [ 685.810410][T14126] netlink: 36 bytes leftover after parsing attributes in process `syz.7.2858'. [ 685.824233][T14116] EXT4-fs (loop2): 1 orphan inode deleted [ 685.832784][T14116] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 685.866969][T14116] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 686.164653][ T30] audit: type=1326 audit(1761192943.982:1371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14129 comm="syz.7.2859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95c798efc9 code=0x7ffc0000 [ 686.253175][ T5852] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 686.262428][ T30] audit: type=1326 audit(1761192943.982:1372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14129 comm="syz.7.2859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95c798efc9 code=0x7ffc0000 [ 686.327719][ T30] audit: type=1326 audit(1761192943.992:1373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14129 comm="syz.7.2859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f95c798efc9 code=0x7ffc0000 [ 686.425672][ T30] audit: type=1326 audit(1761192943.992:1374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14129 comm="syz.7.2859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95c798efc9 code=0x7ffc0000 [ 686.486543][ T30] audit: type=1326 audit(1761192944.002:1375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14129 comm="syz.7.2859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f95c798efc9 code=0x7ffc0000 [ 686.521030][T14139] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2863'. [ 686.767430][ T30] audit: type=1326 audit(1761192944.002:1376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14129 comm="syz.7.2859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95c798efc9 code=0x7ffc0000 [ 686.862029][ T30] audit: type=1326 audit(1761192944.002:1377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14129 comm="syz.7.2859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f95c798efc9 code=0x7ffc0000 [ 686.922243][ T30] audit: type=1326 audit(1761192944.002:1378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14129 comm="syz.7.2859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95c798efc9 code=0x7ffc0000 [ 687.893066][T14145] lo speed is unknown, defaulting to 1000 [ 687.973628][T14149] loop1: detected capacity change from 0 to 512 [ 687.981399][T14149] EXT4-fs: Ignoring removed bh option [ 688.078389][T14149] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 688.115091][T14149] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 688.154019][T14149] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 688.238727][T14149] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=e002e01c, mo2=0006] [ 688.263961][T14154] veth0: entered promiscuous mode [ 688.284674][T14149] System zones: 0-2, 18-18, 34-35 [ 688.311734][T14149] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 688.367371][T14153] veth0: left promiscuous mode [ 688.440645][T14149] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 688.496730][T14158] EXT4-fs error (device loop1): ext4_readdir:262: inode #2: block 3: comm syz.1.2864: path /479/file0: bad entry in directory: inode out of bounds - offset=24, inode=134217739, rec_len=20, size=2048 fake=0 [ 688.598252][T14157] netlink: 'syz.7.2867': attribute type 3 has an invalid length. [ 689.228985][ T5834] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 690.398119][T14177] loop2: detected capacity change from 0 to 512 [ 690.459070][T14177] EXT4-fs error (device loop2): ext4_xattr_inode_iget:444: comm syz.2.2876: error while reading EA inode 32 err=-116 [ 690.554767][T14177] EXT4-fs (loop2): Remounting filesystem read-only [ 690.561535][T14177] EXT4-fs warning (device loop2): ext4_evict_inode:256: couldn't mark inode dirty (err -30) [ 690.615591][T14177] EXT4-fs (loop2): 1 orphan inode deleted [ 690.623642][T14177] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 690.701054][T14177] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 690.817012][ T5919] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 690.860942][ T5919] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 691.395464][T14196] serio: Serial port ptm0 [ 691.673929][T14199] loop1: detected capacity change from 0 to 512 [ 691.909146][T14199] EXT4-fs (loop1): 1 orphan inode deleted [ 691.937289][ T6100] __quota_error: 4 callbacks suppressed [ 691.937315][ T6100] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 692.010354][T14199] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 692.023237][ T6100] EXT4-fs error (device loop1): ext4_release_dquot:6979: comm kworker/u8:11: Failed to release dquot type 1 [ 692.054676][T14199] ext4 filesystem being mounted at /482/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 692.690226][T14214] loop2: detected capacity change from 0 to 512 [ 692.711172][T14201] loop6: detected capacity change from 0 to 1764 [ 692.765704][T14214] EXT4-fs: quotafile must be on filesystem root [ 692.847089][T14210] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2883'. [ 693.495543][T14223] veth0: entered promiscuous mode [ 693.521565][T14220] veth0: left promiscuous mode [ 695.963464][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 696.180744][T14237] lo speed is unknown, defaulting to 1000 [ 697.669151][T14248] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2895'. [ 698.182177][T14263] loop3: detected capacity change from 0 to 512 [ 698.206281][T14263] EXT4-fs: quotafile must be on filesystem root [ 698.238654][T14263] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2898'. [ 698.335593][T14265] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2899'. [ 698.679867][T14275] netlink: 'syz.2.2904': attribute type 1 has an invalid length. [ 698.712293][T14277] loop3: detected capacity change from 0 to 512 [ 698.766035][T14277] EXT4-fs: Ignoring removed bh option [ 698.849345][T14277] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 698.900356][T14277] ext4 filesystem being mounted at /492/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 698.938874][T14277] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2905'. [ 698.949377][T14277] netlink: 80 bytes leftover after parsing attributes in process `syz.3.2905'. [ 699.051250][T14288] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2908'. [ 699.077990][ T5852] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 699.373571][T14293] netlink: 'syz.3.2910': attribute type 3 has an invalid length. [ 699.895287][T14300] loop2: detected capacity change from 0 to 512 [ 699.902610][T14300] EXT4-fs: quotafile must be on filesystem root [ 699.924996][T14300] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2913'. [ 700.006143][T14302] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2915'. [ 700.317935][T14308] veth0: entered promiscuous mode [ 700.323595][T14307] veth0: left promiscuous mode [ 700.536572][T14315] netlink: 'syz.2.2920': attribute type 1 has an invalid length. [ 700.555817][T14317] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2917'. [ 700.885558][T14322] loop6: detected capacity change from 0 to 512 [ 700.940094][T14322] EXT4-fs error (device loop6): ext4_xattr_inode_iget:444: comm syz.6.2923: error while reading EA inode 32 err=-116 [ 700.996170][T14322] EXT4-fs (loop6): Remounting filesystem read-only [ 701.007482][T14327] netlink: 'syz.2.2924': attribute type 3 has an invalid length. [ 701.038569][T14322] EXT4-fs warning (device loop6): ext4_evict_inode:256: couldn't mark inode dirty (err -30) [ 701.124691][T14322] EXT4-fs (loop6): 1 orphan inode deleted [ 701.141626][T14322] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 701.309179][ T6520] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 701.608134][T14335] loop6: detected capacity change from 0 to 128 [ 701.641500][T14335] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 701.675484][T14335] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 701.859129][ T5834] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 701.965622][T14339] loop6: detected capacity change from 0 to 512 [ 701.976159][T14339] EXT4-fs: quotafile must be on filesystem root [ 701.977368][ T30] audit: type=1326 audit(1761192959.802:1383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14340 comm="syz.1.2929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f142c78efc9 code=0x7ffc0000 [ 701.998415][T14339] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2928'. [ 702.009703][ T30] audit: type=1326 audit(1761192959.832:1384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14340 comm="syz.1.2929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f142c78efc9 code=0x7ffc0000 [ 702.057390][ T30] audit: type=1326 audit(1761192959.872:1385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14340 comm="syz.1.2929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f142c78efc9 code=0x7ffc0000 [ 702.154677][ T30] audit: type=1326 audit(1761192959.882:1386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14340 comm="syz.1.2929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f142c78efc9 code=0x7ffc0000 [ 702.205034][ T30] audit: type=1326 audit(1761192959.882:1387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14340 comm="syz.1.2929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f142c78efc9 code=0x7ffc0000 [ 702.277396][ T30] audit: type=1326 audit(1761192959.902:1388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14340 comm="syz.1.2929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f142c78efc9 code=0x7ffc0000 [ 702.369389][ T30] audit: type=1326 audit(1761192959.902:1389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14340 comm="syz.1.2929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f142c78efc9 code=0x7ffc0000 [ 702.444448][ T30] audit: type=1326 audit(1761192959.912:1390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14340 comm="syz.1.2929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f142c78efc9 code=0x7ffc0000 [ 702.484208][T14349] loop6: detected capacity change from 0 to 512 [ 702.492877][ T30] audit: type=1326 audit(1761192959.912:1391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14340 comm="syz.1.2929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f142c78efc9 code=0x7ffc0000 [ 702.516092][ T30] audit: type=1326 audit(1761192959.912:1392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14340 comm="syz.1.2929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f142c78efc9 code=0x7ffc0000 [ 702.566357][T14349] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a84ec118, mo2=0002] [ 702.577177][T14349] System zones: 0-2, 18-18, 34-35 [ 702.621556][T14349] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 702.667150][T14349] ext4 filesystem being mounted at /459/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 702.846198][ T6520] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 703.301110][T14364] loop6: detected capacity change from 0 to 2048 [ 703.477744][T14364] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 704.148525][T14364] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1286: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 704.166830][T14364] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 704.179869][T14364] EXT4-fs (loop6): This should not happen!! Data will be lost [ 704.179869][T14364] [ 704.189709][T14364] EXT4-fs (loop6): Total free blocks count 0 [ 704.195888][T14364] EXT4-fs (loop6): Free/Dirty block details [ 704.201804][T14364] EXT4-fs (loop6): free_blocks=2415919104 [ 704.213069][T14364] EXT4-fs (loop6): dirty_blocks=4096 [ 704.223034][T14364] EXT4-fs (loop6): Block reservation details [ 704.240435][T14364] EXT4-fs (loop6): i_reserved_data_blocks=256 [ 704.397097][ T13] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2038 with error 28 [ 704.780262][T14368] netlink: 'syz.6.2937': attribute type 1 has an invalid length. [ 705.108703][T14374] loop1: detected capacity change from 0 to 128 [ 705.128542][T14374] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 705.165843][T14374] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 705.957378][T14379] loop1: detected capacity change from 0 to 2048 [ 705.967239][T14379] EXT4-fs: Ignoring removed mblk_io_submit option [ 705.973973][T14379] EXT4-fs: Ignoring removed i_version option [ 706.003598][T14379] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 706.116692][ T5834] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 706.456156][T14387] netlink: 'syz.1.2942': attribute type 4 has an invalid length. [ 706.500390][T14376] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 706.510527][T14376] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 706.520347][T14376] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 706.873444][T14395] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2946'. [ 707.019450][T14397] veth0: entered promiscuous mode [ 707.035064][T14396] veth0: left promiscuous mode [ 707.345175][T14412] loop3: detected capacity change from 0 to 128 [ 707.381195][T14412] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 707.416541][T14416] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2956'. [ 707.442202][T14412] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 707.458057][T14418] netlink: 'syz.1.2955': attribute type 3 has an invalid length. [ 707.465585][ T10] IPVS: starting estimator thread 0... [ 707.466204][T14414] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 707.573118][T14420] IPVS: using max 21 ests per chain, 50400 per kthread [ 707.749377][T14427] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2957'. [ 707.839762][ T30] kauditd_printk_skb: 19 callbacks suppressed [ 707.839788][ T30] audit: type=1326 audit(1761192965.662:1412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14426 comm="syz.0.2961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f644998efc9 code=0x7ffc0000 [ 708.903514][ T30] audit: type=1326 audit(1761192965.732:1413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14426 comm="syz.0.2961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f644998efc9 code=0x7ffc0000 [ 709.213818][ T30] audit: type=1326 audit(1761192965.732:1414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14426 comm="syz.0.2961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f644998efc9 code=0x7ffc0000 [ 709.791713][ T30] audit: type=1326 audit(1761192965.832:1415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14426 comm="syz.0.2961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f644998efc9 code=0x7ffc0000 [ 709.951973][ T30] audit: type=1326 audit(1761192965.832:1416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14426 comm="syz.0.2961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f644998efc9 code=0x7ffc0000 [ 710.094597][ T30] audit: type=1326 audit(1761192965.842:1417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14426 comm="syz.0.2961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f644998efc9 code=0x7ffc0000 [ 710.133761][T14447] syz.1.2963 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 710.154948][T14434] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 710.166402][T14434] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 710.176161][T14434] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 710.307808][T14447] loop1: detected capacity change from 0 to 512 [ 710.318791][ T30] audit: type=1326 audit(1761192965.842:1418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14426 comm="syz.0.2961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f644998efc9 code=0x7ffc0000 [ 710.379111][T14449] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2965'. [ 710.433915][T14447] EXT4-fs (loop1): too many log groups per flexible block group [ 710.471786][ T30] audit: type=1326 audit(1761192965.852:1419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14426 comm="syz.0.2961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f644998efc9 code=0x7ffc0000 [ 710.501932][T14447] EXT4-fs (loop1): failed to initialize mballoc (-12) [ 710.535621][T14447] EXT4-fs (loop1): mount failed [ 710.560728][ T30] audit: type=1326 audit(1761192965.852:1420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14426 comm="syz.0.2961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f644998efc9 code=0x7ffc0000 [ 710.613190][ T30] audit: type=1326 audit(1761192965.852:1421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14426 comm="syz.0.2961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f644998efc9 code=0x7ffc0000 [ 710.746425][T14453] netlink: 'syz.7.2966': attribute type 1 has an invalid length. [ 714.415282][T14453] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 714.516591][T14457] veth3: entered promiscuous mode [ 714.592040][T14458] erspan0: entered allmulticast mode [ 714.630613][T14461] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 714.640657][T14461] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 714.650412][T14461] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 714.940148][T14470] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2969'. [ 714.975444][T14471] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2970'. [ 714.995204][T14473] netlink: 'syz.0.2971': attribute type 3 has an invalid length. [ 715.068814][T14475] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2970'. [ 715.094349][T14476] loop7: detected capacity change from 0 to 128 [ 715.157533][T14476] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 715.181174][T14478] loop2: detected capacity change from 0 to 512 [ 715.207864][T14476] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 715.218366][T14478] EXT4-fs: Ignoring removed bh option [ 715.242742][T14478] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 715.262323][T14478] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 715.288615][T14478] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 715.302398][T14478] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=e002e01c, mo2=0006] [ 715.313455][T14478] System zones: 0-2, 18-18, 34-35 [ 715.333514][T14478] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 715.391689][T14478] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 715.408808][T14442] lo speed is unknown, defaulting to 1000 [ 715.427318][T14478] EXT4-fs error (device loop2): ext4_readdir:262: inode #2: block 3: comm syz.2.2973: path /532/file0: bad entry in directory: inode out of bounds - offset=24, inode=134217739, rec_len=20, size=2048 fake=0 [ 715.534527][ T30] kauditd_printk_skb: 97 callbacks suppressed [ 715.534554][ T30] audit: type=1326 audit(1761192973.352:1519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14485 comm="syz.3.2976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f648358efc9 code=0x7ffc0000 [ 715.638479][ T5843] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 715.644587][ T30] audit: type=1326 audit(1761192973.402:1520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14485 comm="syz.3.2976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f648358efc9 code=0x7ffc0000 [ 715.736169][ T30] audit: type=1326 audit(1761192973.412:1521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14485 comm="syz.3.2976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f648358efc9 code=0x7ffc0000 [ 715.760044][T14490] veth0: entered promiscuous mode [ 715.769859][T14489] veth0: left promiscuous mode [ 715.801502][ T30] audit: type=1326 audit(1761192973.412:1522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14485 comm="syz.3.2976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f648358efc9 code=0x7ffc0000 [ 715.876814][T14496] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2980'. [ 716.118226][ T30] audit: type=1326 audit(1761192973.412:1523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14485 comm="syz.3.2976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f648358efc9 code=0x7ffc0000 [ 716.142650][ T30] audit: type=1326 audit(1761192973.412:1524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14485 comm="syz.3.2976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f648358efc9 code=0x7ffc0000 [ 716.168415][ T30] audit: type=1326 audit(1761192973.412:1525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14485 comm="syz.3.2976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f648358efc9 code=0x7ffc0000 [ 716.191330][ T30] audit: type=1326 audit(1761192973.412:1526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14485 comm="syz.3.2976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f648358efc9 code=0x7ffc0000 [ 716.266650][ T30] audit: type=1326 audit(1761192973.412:1527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14485 comm="syz.3.2976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f648358efc9 code=0x7ffc0000 [ 716.340324][ T30] audit: type=1326 audit(1761192973.412:1528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14485 comm="syz.3.2976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f648358efc9 code=0x7ffc0000 [ 718.406175][T14517] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2987'. [ 718.752867][T14517] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 718.850879][T14517] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 718.920452][T14522] netlink: 'syz.0.2988': attribute type 3 has an invalid length. [ 718.931957][T14517] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 718.992719][T14517] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 719.335464][T14526] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2990'. [ 719.426628][T14526] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2990'. [ 719.911522][T14538] loop7: detected capacity change from 0 to 512 [ 719.945969][T14538] EXT4-fs: quotafile must be on filesystem root [ 719.982803][T14538] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2995'. [ 720.018629][T14540] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 720.070800][T14542] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2997'. [ 720.661251][T14557] loop2: detected capacity change from 0 to 128 [ 720.700634][T14557] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 720.724083][ T30] kauditd_printk_skb: 38 callbacks suppressed [ 720.724110][ T30] audit: type=1326 audit(1761192978.542:1567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14553 comm="syz.6.3003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbeb318efc9 code=0x7ffc0000 [ 720.755883][T14557] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 720.844493][ T30] audit: type=1326 audit(1761192978.592:1568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14553 comm="syz.6.3003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbeb318efc9 code=0x7ffc0000 [ 720.925069][T14554] bridge0: port 1(batadv0) entered disabled state [ 720.955409][ T30] audit: type=1326 audit(1761192978.592:1569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14553 comm="syz.6.3003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbeb318efc9 code=0x7ffc0000 [ 721.049611][ T30] audit: type=1326 audit(1761192978.602:1570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14553 comm="syz.6.3003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbeb318efc9 code=0x7ffc0000 [ 721.091408][T14554] batadv0: left promiscuous mode [ 721.098998][T14554] bridge0: port 1(batadv0) entered disabled state [ 721.132650][ T30] audit: type=1326 audit(1761192978.602:1571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14553 comm="syz.6.3003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbeb318efc9 code=0x7ffc0000 [ 721.221093][ T30] audit: type=1326 audit(1761192978.602:1572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14553 comm="syz.6.3003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbeb318efc9 code=0x7ffc0000 [ 721.324595][ T30] audit: type=1326 audit(1761192978.602:1573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14553 comm="syz.6.3003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=461 compat=0 ip=0x7fbeb318efc9 code=0x7ffc0000 [ 721.434652][ T30] audit: type=1326 audit(1761192978.602:1574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14553 comm="syz.6.3003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbeb318efc9 code=0x7ffc0000 [ 721.497733][ T30] audit: type=1326 audit(1761192978.602:1575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14553 comm="syz.6.3003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fbeb318efc9 code=0x7ffc0000 [ 721.605558][T14581] loop7: detected capacity change from 0 to 512 [ 721.631783][ T30] audit: type=1326 audit(1761192978.602:1576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14553 comm="syz.6.3003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbeb318efc9 code=0x7ffc0000 [ 721.720042][T14581] EXT4-fs (loop7): 1 orphan inode deleted [ 721.734744][T14581] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 721.755027][T14581] ext4 filesystem being mounted at /219/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 721.755172][ T36] EXT4-fs error (device loop7): ext4_release_dquot:6979: comm kworker/u8:2: Failed to release dquot type 1 [ 721.788960][T14554] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 721.867282][ T10] lo speed is unknown, defaulting to 1000 [ 721.875160][ T10] syz2: Port: 1 Link DOWN [ 721.888581][T14569] veth0: entered promiscuous mode [ 721.914696][T14568] veth0: left promiscuous mode [ 722.928732][T14610] netlink: 'syz.0.3022': attribute type 1 has an invalid length. [ 726.275636][T14624] veth0: entered promiscuous mode [ 726.295064][T14623] veth0: left promiscuous mode [ 726.984217][T14639] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3032'. [ 727.095847][T14639] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3032'. [ 727.504984][T14652] netlink: 'syz.0.3038': attribute type 1 has an invalid length. [ 727.784555][T14661] veth0: entered promiscuous mode [ 727.797417][T14659] veth0: left promiscuous mode [ 728.103074][T14665] netlink: 96 bytes leftover after parsing attributes in process `syz.3.3040'. [ 729.762378][T14697] loop6: detected capacity change from 0 to 1024 [ 729.782040][T14697] EXT4-fs: inline encryption not supported [ 729.884195][T14697] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 730.445775][T14707] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3061'. [ 730.608906][ T6520] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 730.852808][T14711] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3076'. [ 731.768595][T14725] loop3: detected capacity change from 0 to 1024 [ 731.874992][T14725] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 732.103507][T14725] EXT4-fs error (device loop3): mb_free_blocks:2014: group 0, inode 15: block 225:freeing already freed block (bit 14); block bitmap corrupt. [ 732.399576][ T5852] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 733.511777][T14749] loop2: detected capacity change from 0 to 128 [ 733.546519][T14749] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 733.595043][T14749] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 734.025397][ T30] kauditd_printk_skb: 32 callbacks suppressed [ 734.025424][ T30] audit: type=1326 audit(1761192991.802:1608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14754 comm="syz.2.3082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa95378efc9 code=0x7ffc0000 [ 734.134494][ T30] audit: type=1326 audit(1761192991.802:1609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14754 comm="syz.2.3082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa95378efc9 code=0x7ffc0000 [ 734.186852][T14757] loop2: detected capacity change from 0 to 512 [ 734.204598][ T30] audit: type=1326 audit(1761192991.802:1610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14754 comm="syz.2.3082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa95378efc9 code=0x7ffc0000 [ 734.287128][ T30] audit: type=1326 audit(1761192991.812:1611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14754 comm="syz.2.3082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7fa95378efc9 code=0x7ffc0000 [ 734.333959][T14757] EXT4-fs (loop2): too many log groups per flexible block group [ 734.375028][T14757] EXT4-fs (loop2): failed to initialize mballoc (-12) [ 734.380988][ T30] audit: type=1326 audit(1761192991.852:1612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14754 comm="syz.2.3082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa95378efc9 code=0x7ffc0000 [ 734.381963][T14757] EXT4-fs (loop2): mount failed [ 734.491258][ T30] audit: type=1326 audit(1761192991.852:1613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14754 comm="syz.2.3082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fa95378f003 code=0x7ffc0000 [ 734.575177][ T30] audit: type=1326 audit(1761192991.852:1614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14754 comm="syz.2.3082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fa95378f087 code=0x7ffc0000 [ 734.656524][ T30] audit: type=1326 audit(1761192991.872:1615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14754 comm="syz.2.3082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fa95374644d code=0x7ffc0000 [ 734.735681][ T30] audit: type=1326 audit(1761192991.872:1616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14754 comm="syz.2.3082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7fa9537c3709 code=0x7ffc0000 [ 734.812057][ T30] audit: type=1326 audit(1761192991.912:1617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14754 comm="syz.2.3082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7fa953745bc7 code=0x7ffc0000 [ 736.037753][T14755] lo speed is unknown, defaulting to 1000 [ 736.082358][T14772] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3089'. [ 737.597678][T14778] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 737.628095][T14778] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 737.639555][T14778] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 737.674946][T14778] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 737.691011][T14778] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 738.803941][T14794] loop1: detected capacity change from 0 to 512 [ 738.815033][T14794] EXT4-fs: Ignoring removed bh option [ 738.865578][T14794] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 738.927170][T14794] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 739.054542][T14794] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 739.155090][T14794] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=e002e01c, mo2=0006] [ 739.163240][T14794] System zones: 0-2, 18-18, 34-35 [ 739.349049][T14794] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 739.429153][T14794] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 739.457242][T14794] EXT4-fs error (device loop1): ext4_readdir:262: inode #2: block 3: comm syz.1.3097: path /506/file0: bad entry in directory: inode out of bounds - offset=24, inode=134217739, rec_len=20, size=2048 fake=0 [ 739.581393][T14807] loop6: detected capacity change from 0 to 128 [ 739.737261][T14807] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 739.759906][T14778] Bluetooth: hci3: command tx timeout [ 739.768404][T14807] ext4 filesystem being mounted at /501/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 739.770305][T14777] lo speed is unknown, defaulting to 1000 [ 740.149963][ T5834] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 741.825057][T14778] Bluetooth: hci3: command tx timeout [ 742.380277][ T6520] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 742.557961][T14777] chnl_net:caif_netlink_parms(): no params data found [ 743.237890][T14777] bridge0: port 1(bridge_slave_0) entered blocking state [ 743.249727][T14777] bridge0: port 1(bridge_slave_0) entered disabled state [ 743.304741][T14777] bridge_slave_0: entered allmulticast mode [ 743.327528][T14777] bridge_slave_0: entered promiscuous mode [ 743.367282][T14777] bridge0: port 2(bridge_slave_1) entered blocking state [ 743.395038][T14777] bridge0: port 2(bridge_slave_1) entered disabled state [ 743.416753][T14777] bridge_slave_1: entered allmulticast mode [ 743.455153][T14777] bridge_slave_1: entered promiscuous mode [ 743.482779][T14845] loop1: detected capacity change from 0 to 512 [ 743.554058][T14845] EXT4-fs (loop1): too many log groups per flexible block group [ 743.614948][T14845] EXT4-fs (loop1): failed to initialize mballoc (-12) [ 743.622012][T14845] EXT4-fs (loop1): mount failed [ 743.705828][T14777] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 743.835137][T14855] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3118'. [ 743.841032][T14777] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 743.914804][T14778] Bluetooth: hci3: command tx timeout [ 744.026397][T14855] IPVS: Error connecting to the multicast addr [ 744.039998][T14777] team0: Port device team_slave_0 added [ 744.090264][T14777] team0: Port device team_slave_1 added [ 744.307922][T14777] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 744.338787][T14777] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 744.436838][T14777] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 744.478517][T14777] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 744.501242][T14777] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 744.646734][T14777] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 745.036900][T14777] hsr_slave_0: entered promiscuous mode [ 745.067644][T14777] hsr_slave_1: entered promiscuous mode [ 745.105008][T14777] debugfs: 'hsr0' already exists in 'hsr' [ 745.113994][T14777] Cannot create hsr debugfs directory [ 745.984853][T14778] Bluetooth: hci3: command tx timeout [ 747.889202][T14882] lo speed is unknown, defaulting to 1000 [ 749.489565][T14898] loop1: detected capacity change from 0 to 512 [ 749.756605][T14898] [ 749.759016][T14898] ====================================================== [ 749.766045][T14898] WARNING: possible circular locking dependency detected [ 749.773065][T14898] syzkaller #0 Not tainted [ 749.777484][T14898] ------------------------------------------------------ [ 749.784500][T14898] syz.1.3135/14898 is trying to acquire lock: [ 749.790569][T14898] ffff888051ceeb98 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: do_writepages+0x27a/0x600 [ 749.800497][T14898] [ 749.800497][T14898] but task is already holding lock: [ 749.807861][T14898] ffff88804fe5cd48 (&ei->xattr_sem){++++}-{4:4}, at: __ext4_mark_inode_dirty+0x4ba/0x870 [ 749.817946][T14898] [ 749.817946][T14898] which lock already depends on the new lock. [ 749.817946][T14898] [ 749.828362][T14898] [ 749.828362][T14898] the existing dependency chain (in reverse order) is: [ 749.837370][T14898] [ 749.837370][T14898] -> #1 (&ei->xattr_sem){++++}-{4:4}: [ 749.844962][T14898] down_write+0x92/0x200 [ 749.849837][T14898] ext4_destroy_inline_data+0x2d/0xe0 [ 749.855830][T14898] ext4_do_writepages+0x1154/0x3cf0 [ 749.861575][T14898] ext4_writepages+0x37a/0x7d0 [ 749.866882][T14898] do_writepages+0x27a/0x600 [ 749.872001][T14898] filemap_fdatawrite_wbc+0x104/0x160 [ 749.877993][T14898] __filemap_fdatawrite_range+0xb9/0x100 [ 749.884182][T14898] ext4_convert_inline_data+0x1a7/0x610 [ 749.890282][T14898] ext4_fallocate+0x1f5/0x37a0 [ 749.895599][T14898] vfs_fallocate+0x5b4/0x10e0 [ 749.900831][T14898] __x64_sys_fallocate+0xd5/0x150 [ 749.906491][T14898] do_syscall_64+0xcd/0xfa0 [ 749.911535][T14898] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 749.918020][T14898] [ 749.918020][T14898] -> #0 (&sbi->s_writepages_rwsem){++++}-{0:0}: [ 749.926475][T14898] __lock_acquire+0x126f/0x1c90 [ 749.931891][T14898] lock_acquire+0x179/0x350 [ 749.936926][T14898] ext4_writepages+0x224/0x7d0 [ 749.942233][T14898] do_writepages+0x27a/0x600 [ 749.947357][T14898] __writeback_single_inode+0x160/0xfb0 [ 749.953447][T14898] writeback_single_inode+0x2bc/0x550 [ 749.959375][T14898] write_inode_now+0x170/0x1e0 [ 749.964682][T14898] iput.part.0+0x487/0xb00 [ 749.969634][T14898] iput+0x35/0x40 [ 749.973801][T14898] ext4_xattr_block_set+0x67c/0x3650 [ 749.979648][T14898] ext4_expand_extra_isize_ea+0x1442/0x1ab0 [ 749.986075][T14898] __ext4_expand_extra_isize+0x346/0x480 [ 749.992435][T14898] __ext4_mark_inode_dirty+0x544/0x870 [ 749.998443][T14898] ext4_evict_inode+0x74e/0x18e0 [ 750.003927][T14898] evict+0x3e6/0x920 [ 750.008355][T14898] iput.part.0+0x6a9/0xb00 [ 750.013307][T14898] iput+0x35/0x40 [ 750.017466][T14898] ext4_orphan_cleanup+0x731/0x11e0 [ 750.023207][T14898] ext4_fill_super+0x8db7/0xaf70 [ 750.028689][T14898] get_tree_bdev_flags+0x38c/0x620 [ 750.034345][T14898] vfs_get_tree+0x8e/0x340 [ 750.039314][T14898] path_mount+0x7b9/0x23a0 [ 750.044253][T14898] __x64_sys_mount+0x293/0x310 [ 750.049539][T14898] do_syscall_64+0xcd/0xfa0 [ 750.054664][T14898] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 750.061091][T14898] [ 750.061091][T14898] other info that might help us debug this: [ 750.061091][T14898] [ 750.071309][T14898] Possible unsafe locking scenario: [ 750.071309][T14898] [ 750.078750][T14898] CPU0 CPU1 [ 750.084105][T14898] ---- ---- [ 750.089545][T14898] lock(&ei->xattr_sem); [ 750.093881][T14898] lock(&sbi->s_writepages_rwsem); [ 750.101603][T14898] lock(&ei->xattr_sem); [ 750.108466][T14898] rlock(&sbi->s_writepages_rwsem); [ 750.113763][T14898] [ 750.113763][T14898] *** DEADLOCK *** [ 750.113763][T14898] [ 750.121894][T14898] 3 locks held by syz.1.3135/14898: [ 750.127099][T14898] #0: ffff888032d2a0e0 (&type->s_umount_key#27/1){+.+.}-{4:4}, at: alloc_super+0x1e3/0xb60 [ 750.137284][T14898] #1: ffff888032d2a610 (sb_internal){.+.+}-{0:0}, at: evict+0x3e6/0x920 [ 750.145777][T14898] #2: ffff88804fe5cd48 (&ei->xattr_sem){++++}-{4:4}, at: __ext4_mark_inode_dirty+0x4ba/0x870 [ 750.156101][T14898] [ 750.156101][T14898] stack backtrace: [ 750.161991][T14898] CPU: 1 UID: 0 PID: 14898 Comm: syz.1.3135 Not tainted syzkaller #0 PREEMPT(full) [ 750.162034][T14898] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 750.162055][T14898] Call Trace: [ 750.162068][T14898] [ 750.162082][T14898] dump_stack_lvl+0x116/0x1f0 [ 750.162124][T14898] print_circular_bug+0x275/0x350 [ 750.162183][T14898] check_noncircular+0x14c/0x170 [ 750.162244][T14898] __lock_acquire+0x126f/0x1c90 [ 750.162304][T14898] ? __lock_acquire+0x622/0x1c90 [ 750.162362][T14898] lock_acquire+0x179/0x350 [ 750.162391][T14898] ? do_writepages+0x27a/0x600 [ 750.162428][T14898] ? __pfx___might_resched+0x10/0x10 [ 750.162477][T14898] ext4_writepages+0x224/0x7d0 [ 750.162528][T14898] ? do_writepages+0x27a/0x600 [ 750.162562][T14898] ? __pfx_ext4_writepages+0x10/0x10 [ 750.162603][T14898] ? srso_alias_return_thunk+0x5/0xfbef5 [ 750.162646][T14898] ? __lock_acquire+0xb8a/0x1c90 [ 750.162710][T14898] ? srso_alias_return_thunk+0x5/0xfbef5 [ 750.162754][T14898] ? __pfx_ext4_writepages+0x10/0x10 [ 750.162799][T14898] do_writepages+0x27a/0x600 [ 750.162835][T14898] ? __pfx_do_writepages+0x10/0x10 [ 750.162874][T14898] __writeback_single_inode+0x160/0xfb0 [ 750.162921][T14898] ? __pfx___writeback_single_inode+0x10/0x10 [ 750.162964][T14898] ? srso_alias_return_thunk+0x5/0xfbef5 [ 750.163005][T14898] ? do_raw_spin_unlock+0x172/0x230 [ 750.163045][T14898] ? srso_alias_return_thunk+0x5/0xfbef5 [ 750.163089][T14898] writeback_single_inode+0x2bc/0x550 [ 750.163138][T14898] write_inode_now+0x170/0x1e0 [ 750.163183][T14898] ? __pfx_write_inode_now+0x10/0x10 [ 750.163253][T14898] ? find_held_lock+0x2b/0x80 [ 750.163297][T14898] ? srso_alias_return_thunk+0x5/0xfbef5 [ 750.163340][T14898] ? srso_alias_return_thunk+0x5/0xfbef5 [ 750.163384][T14898] iput.part.0+0x487/0xb00 [ 750.163426][T14898] iput+0x35/0x40 [ 750.163459][T14898] ext4_xattr_block_set+0x67c/0x3650 [ 750.163534][T14898] ? __pfx_ext4_xattr_block_set+0x10/0x10 [ 750.163597][T14898] ? srso_alias_return_thunk+0x5/0xfbef5 [ 750.163638][T14898] ? xattr_find_entry+0x289/0x330 [ 750.163695][T14898] ? srso_alias_return_thunk+0x5/0xfbef5 [ 750.163736][T14898] ? ext4_xattr_block_find+0x59/0x430 [ 750.163796][T14898] ext4_expand_extra_isize_ea+0x1442/0x1ab0 [ 750.163848][T14898] ? __pfx_ext4_expand_extra_isize_ea+0x10/0x10 [ 750.163892][T14898] ? srso_alias_return_thunk+0x5/0xfbef5 [ 750.163933][T14898] ? srso_alias_return_thunk+0x5/0xfbef5 [ 750.163974][T14898] ? dquot_initialize_needed+0x183/0x2a0 [ 750.164015][T14898] __ext4_expand_extra_isize+0x346/0x480 [ 750.164075][T14898] __ext4_mark_inode_dirty+0x544/0x870 [ 750.164124][T14898] ? __pfx___ext4_mark_inode_dirty+0x10/0x10 [ 750.164170][T14898] ? __pfx___might_resched+0x10/0x10 [ 750.164218][T14898] ? ext4_journal_check_start+0x22b/0x340 [ 750.164260][T14898] ? srso_alias_return_thunk+0x5/0xfbef5 [ 750.164302][T14898] ? __ext4_journal_start_sb+0x19e/0x690 [ 750.164341][T14898] ? ext4_evict_inode+0x5cf/0x18e0 [ 750.164390][T14898] ext4_evict_inode+0x74e/0x18e0 [ 750.164440][T14898] ? __pfx_ext4_evict_inode+0x10/0x10 [ 750.164490][T14898] ? srso_alias_return_thunk+0x5/0xfbef5 [ 750.164537][T14898] ? __pfx_ext4_evict_inode+0x10/0x10 [ 750.164581][T14898] evict+0x3e6/0x920 [ 750.164617][T14898] ? __pfx_evict+0x10/0x10 [ 750.164651][T14898] ? srso_alias_return_thunk+0x5/0xfbef5 [ 750.164697][T14898] ? srso_alias_return_thunk+0x5/0xfbef5 [ 750.164744][T14898] iput.part.0+0x6a9/0xb00 [ 750.164779][T14898] ? __pfx_ext4_drop_inode+0x10/0x10 [ 750.164817][T14898] iput+0x35/0x40 [ 750.164850][T14898] ext4_orphan_cleanup+0x731/0x11e0 [ 750.164902][T14898] ? __pfx_ext4_orphan_cleanup+0x10/0x10 [ 750.164952][T14898] ? srso_alias_return_thunk+0x5/0xfbef5 [ 750.164992][T14898] ? ext4_register_li_request+0xec/0x9b0 [ 750.165048][T14898] ext4_fill_super+0x8db7/0xaf70 [ 750.165114][T14898] ? __pfx_ext4_fill_super+0x10/0x10 [ 750.165163][T14898] ? do_raw_spin_lock+0x12c/0x2b0 [ 750.165200][T14898] ? srso_alias_return_thunk+0x5/0xfbef5 [ 750.165240][T14898] ? find_held_lock+0x2b/0x80 [ 750.165287][T14898] ? srso_alias_return_thunk+0x5/0xfbef5 [ 750.165329][T14898] ? sb_set_blocksize+0x176/0x1d0 [ 750.165385][T14898] ? srso_alias_return_thunk+0x5/0xfbef5 [ 750.165426][T14898] ? setup_bdev_super+0x369/0x730 [ 750.165474][T14898] get_tree_bdev_flags+0x38c/0x620 [ 750.165530][T14898] ? __pfx_ext4_fill_super+0x10/0x10 [ 750.165581][T14898] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 750.165634][T14898] ? apparmor_capable+0x114/0x1d0 [ 750.165686][T14898] ? srso_alias_return_thunk+0x5/0xfbef5 [ 750.165727][T14898] ? srso_alias_return_thunk+0x5/0xfbef5 [ 750.165768][T14898] ? security_capable+0x7e/0x260 [ 750.165817][T14898] vfs_get_tree+0x8e/0x340 [ 750.165858][T14898] path_mount+0x7b9/0x23a0 [ 750.165894][T14898] ? __pfx_path_mount+0x10/0x10 [ 750.165929][T14898] ? putname+0x154/0x1a0 [ 750.165966][T14898] ? srso_alias_return_thunk+0x5/0xfbef5 [ 750.166007][T14898] ? putname+0x154/0x1a0 [ 750.166043][T14898] ? __x64_sys_mount+0x293/0x310 [ 750.166074][T14898] __x64_sys_mount+0x293/0x310 [ 750.166108][T14898] ? __pfx___x64_sys_mount+0x10/0x10 [ 750.166140][T14898] ? srso_alias_return_thunk+0x5/0xfbef5 [ 750.166190][T14898] do_syscall_64+0xcd/0xfa0 [ 750.166231][T14898] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 750.166265][T14898] RIP: 0033:0x7f142c79076a [ 750.166291][T14898] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 750.166324][T14898] RSP: 002b:00007f142d5a4e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 750.166356][T14898] RAX: ffffffffffffffda RBX: 00007f142d5a4ef0 RCX: 00007f142c79076a [ 750.166378][T14898] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007f142d5a4eb0 [ 750.166400][T14898] RBP: 0000200000000180 R08: 00007f142d5a4ef0 R09: 0000000000800700 [ 750.166422][T14898] R10: 0000000000800700 R11: 0000000000000246 R12: 00002000000001c0 [ 750.166444][T14898] R13: 00007f142d5a4eb0 R14: 000000000000046f R15: 000000000000002c [ 750.166479][T14898] [ 750.959973][T14777] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 751.051143][T14898] ------------[ cut here ]------------ [ 751.056706][T14898] EA inode 11 i_nlink=2 [ 751.079358][T14898] WARNING: CPU: 0 PID: 14898 at fs/ext4/xattr.c:1056 ext4_xattr_inode_update_ref+0x4ec/0x610 [ 751.093952][T14898] Modules linked in: [ 751.098138][T14898] CPU: 0 UID: 0 PID: 14898 Comm: syz.1.3135 Not tainted syzkaller #0 PREEMPT(full) [ 751.107629][T14898] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 751.117750][T14898] RIP: 0010:ext4_xattr_inode_update_ref+0x4ec/0x610 [ 751.125025][T14898] Code: df 48 8d 7b 40 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 23 01 00 00 48 8b 73 40 44 89 e2 48 c7 c7 80 5d a8 8b e8 d5 f5 ec fe 90 <0f> 0b 90 90 e9 d9 fe ff ff e8 76 c2 2e ff 44 0f b6 2d 95 78 dc 0d [ 751.145569][T14898] RSP: 0018:ffffc900124e7178 EFLAGS: 00010282 [ 751.151667][T14898] RAX: 0000000000000000 RBX: ffff888053450c28 RCX: ffffc9000bd6b000 [ 751.159748][T14898] RDX: 0000000000080000 RSI: ffffffff817b2ef5 RDI: 0000000000000001 [ 751.167794][T14898] RBP: ffffc900124e7240 R08: 0000000000000001 R09: 0000000000000000 [ 751.175968][T14898] R10: 0000000000000001 R11: 000000002d2d2d2d R12: 0000000000000002 [ 751.183958][T14898] R13: 0000000000000000 R14: 1ffff9200249ce32 R15: ffff888053450e18 [ 751.192007][T14898] FS: 00007f142d5a56c0(0000) GS:ffff888124a0c000(0000) knlGS:0000000000000000 [ 751.201040][T14898] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 751.207715][T14898] CR2: ffffffffd88f0000 CR3: 000000003f8dd000 CR4: 0000000000350ef0 [ 751.215801][T14898] Call Trace: [ 751.219174][T14898] [ 751.222639][T14898] ? __pfx_ext4_xattr_inode_update_ref+0x10/0x10 [ 751.229644][T14898] ? srso_alias_return_thunk+0x5/0xfbef5 [ 751.235381][T14898] ? ext4_xattr_inode_iget+0x1ee/0x400 [ 751.240900][T14898] ext4_xattr_set_entry+0x158f/0x1f00 [ 751.246396][T14898] ? __pfx_ext4_xattr_set_entry+0x10/0x10 [ 751.252167][T14898] ? xattr_find_entry+0x289/0x330 [ 751.257281][T14898] ext4_xattr_ibody_set+0x3d6/0x5d0 [ 751.262538][T14898] ext4_expand_extra_isize_ea+0x148c/0x1ab0 [ 751.268608][T14898] ? __pfx_ext4_expand_extra_isize_ea+0x10/0x10 [ 751.274908][T14898] ? srso_alias_return_thunk+0x5/0xfbef5 [ 751.280578][T14898] ? srso_alias_return_thunk+0x5/0xfbef5 [ 751.286298][T14898] ? dquot_initialize_needed+0x183/0x2a0 [ 751.291962][T14898] __ext4_expand_extra_isize+0x346/0x480 [ 751.297720][T14898] __ext4_mark_inode_dirty+0x544/0x870 [ 751.303319][T14898] ? __pfx___ext4_mark_inode_dirty+0x10/0x10 [ 751.309513][T14898] ? __pfx___might_resched+0x10/0x10 [ 751.314864][T14898] ? ext4_journal_check_start+0x22b/0x340 [ 751.320611][T14898] ? srso_alias_return_thunk+0x5/0xfbef5 [ 751.326896][T14898] ? __ext4_journal_start_sb+0x19e/0x690 [ 751.332647][T14898] ? ext4_evict_inode+0x5cf/0x18e0 [ 751.338404][T14898] ext4_evict_inode+0x74e/0x18e0 [ 751.343382][T14898] ? __pfx_ext4_evict_inode+0x10/0x10 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 751.348837][T14898] ? srso_alias_return_thunk+0x5/0xfbef5 [ 751.354594][T14898] ? __pfx_ext4_evict_inode+0x10/0x10 [ 751.360006][T14898] evict+0x3e6/0x920 [ 751.363909][T14898] ? __pfx_evict+0x10/0x10 [ 751.368374][T14898] ? srso_alias_return_thunk+0x5/0xfbef5 [ 751.374032][T14898] ? srso_alias_return_thunk+0x5/0xfbef5 [ 751.379774][T14898] iput.part.0+0x6a9/0xb00 [ 751.384205][T14898] ? __pfx_ext4_drop_inode+0x10/0x10 [ 751.389602][T14898] iput+0x35/0x40 [ 751.393245][T14898] ext4_orphan_cleanup+0x731/0x11e0 [ 751.399223][T14898] ? __pfx_ext4_orphan_cleanup+0x10/0x10 [ 751.404962][T14898] ? srso_alias_return_thunk+0x5/0xfbef5 [ 751.410625][T14898] ? ext4_register_li_request+0xec/0x9b0 [ 751.416346][T14898] ext4_fill_super+0x8db7/0xaf70 [ 751.421344][T14898] ? __pfx_ext4_fill_super+0x10/0x10 [ 751.427310][T14898] ? do_raw_spin_lock+0x12c/0x2b0 [ 751.432365][T14898] ? srso_alias_return_thunk+0x5/0xfbef5 [ 751.438640][T14898] ? find_held_lock+0x2b/0x80 [ 751.443365][T14898] ? srso_alias_return_thunk+0x5/0xfbef5 [ 751.449428][T14898] ? sb_set_blocksize+0x176/0x1d0 [ 751.454592][T14898] ? srso_alias_return_thunk+0x5/0xfbef5 [ 751.460254][T14898] ? setup_bdev_super+0x369/0x730 [ 751.465392][T14898] get_tree_bdev_flags+0x38c/0x620 [ 751.470549][T14898] ? __pfx_ext4_fill_super+0x10/0x10 [ 751.476028][T14898] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 751.481726][T14898] ? apparmor_capable+0x114/0x1d0 [ 751.486849][T14898] ? srso_alias_return_thunk+0x5/0xfbef5 [ 751.492511][T14898] ? srso_alias_return_thunk+0x5/0xfbef5 [ 751.499889][T14898] ? security_capable+0x7e/0x260 [ 751.505829][T14898] vfs_get_tree+0x8e/0x340 [ 751.510286][T14898] path_mount+0x7b9/0x23a0 [ 751.515440][T14898] ? __pfx_path_mount+0x10/0x10 [ 751.520330][T14898] ? putname+0x154/0x1a0 [ 751.525350][T14898] ? srso_alias_return_thunk+0x5/0xfbef5 [ 751.532259][T14898] ? putname+0x154/0x1a0 [ 751.537518][T14898] ? __x64_sys_mount+0x293/0x310 [ 751.542486][T14898] __x64_sys_mount+0x293/0x310 [ 751.547792][T14898] ? __pfx___x64_sys_mount+0x10/0x10 [ 751.553102][T14898] ? srso_alias_return_thunk+0x5/0xfbef5 [ 751.559586][T14898] do_syscall_64+0xcd/0xfa0 [ 751.564130][T14898] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 751.570121][T14898] RIP: 0033:0x7f142c79076a [ 751.574583][T14898] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 751.594290][T14898] RSP: 002b:00007f142d5a4e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 751.602782][T14898] RAX: ffffffffffffffda RBX: 00007f142d5a4ef0 RCX: 00007f142c79076a [ 751.610833][T14898] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007f142d5a4eb0 [ 751.618853][T14898] RBP: 0000200000000180 R08: 00007f142d5a4ef0 R09: 0000000000800700 [ 751.626890][T14898] R10: 0000000000800700 R11: 0000000000000246 R12: 00002000000001c0 [ 751.635544][T14898] R13: 00007f142d5a4eb0 R14: 000000000000046f R15: 000000000000002c [ 751.643552][T14898] [ 751.647219][T14898] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 751.654600][T14898] CPU: 0 UID: 0 PID: 14898 Comm: syz.1.3135 Not tainted syzkaller #0 PREEMPT(full) [ 751.664082][T14898] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 751.674172][T14898] Call Trace: [ 751.677453][T14898] [ 751.680381][T14898] dump_stack_lvl+0x3d/0x1f0 [ 751.684993][T14898] vpanic+0x640/0x6f0 [ 751.689019][T14898] ? ext4_xattr_inode_update_ref+0x4ec/0x610 [ 751.695039][T14898] panic+0xca/0xd0 [ 751.698807][T14898] ? __pfx_panic+0x10/0x10 [ 751.703263][T14898] check_panic_on_warn+0xab/0xb0 [ 751.708236][T14898] __warn+0xf6/0x3c0 [ 751.712133][T14898] ? srso_alias_return_thunk+0x5/0xfbef5 [ 751.718055][T14898] ? ext4_xattr_inode_update_ref+0x4ec/0x610 [ 751.724072][T14898] report_bug+0x3c3/0x580 [ 751.728414][T14898] ? ext4_xattr_inode_update_ref+0x4ec/0x610 [ 751.734614][T14898] handle_bug+0x184/0x210 [ 751.738973][T14898] exc_invalid_op+0x17/0x50 [ 751.743533][T14898] asm_exc_invalid_op+0x1a/0x20 [ 751.748402][T14898] RIP: 0010:ext4_xattr_inode_update_ref+0x4ec/0x610 [ 751.755030][T14898] Code: df 48 8d 7b 40 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 23 01 00 00 48 8b 73 40 44 89 e2 48 c7 c7 80 5d a8 8b e8 d5 f5 ec fe 90 <0f> 0b 90 90 e9 d9 fe ff ff e8 76 c2 2e ff 44 0f b6 2d 95 78 dc 0d [ 751.774658][T14898] RSP: 0018:ffffc900124e7178 EFLAGS: 00010282 [ 751.780748][T14898] RAX: 0000000000000000 RBX: ffff888053450c28 RCX: ffffc9000bd6b000 [ 751.788722][T14898] RDX: 0000000000080000 RSI: ffffffff817b2ef5 RDI: 0000000000000001 [ 751.796698][T14898] RBP: ffffc900124e7240 R08: 0000000000000001 R09: 0000000000000000 [ 751.804709][T14898] R10: 0000000000000001 R11: 000000002d2d2d2d R12: 0000000000000002 [ 751.812694][T14898] R13: 0000000000000000 R14: 1ffff9200249ce32 R15: ffff888053450e18 [ 751.820683][T14898] ? __warn_printk+0x1a5/0x350 [ 751.825486][T14898] ? ext4_xattr_inode_update_ref+0x4eb/0x610 [ 751.831537][T14898] ? __pfx_ext4_xattr_inode_update_ref+0x10/0x10 [ 751.837898][T14898] ? srso_alias_return_thunk+0x5/0xfbef5 [ 751.843546][T14898] ? ext4_xattr_inode_iget+0x1ee/0x400 [ 751.849041][T14898] ext4_xattr_set_entry+0x158f/0x1f00 [ 751.854460][T14898] ? __pfx_ext4_xattr_set_entry+0x10/0x10 [ 751.860228][T14898] ? xattr_find_entry+0x289/0x330 [ 751.865382][T14898] ext4_xattr_ibody_set+0x3d6/0x5d0 [ 751.870599][T14898] ext4_expand_extra_isize_ea+0x148c/0x1ab0 [ 751.876580][T14898] ? __pfx_ext4_expand_extra_isize_ea+0x10/0x10 [ 751.882875][T14898] ? srso_alias_return_thunk+0x5/0xfbef5 [ 751.888527][T14898] ? srso_alias_return_thunk+0x5/0xfbef5 [ 751.894176][T14898] ? dquot_initialize_needed+0x183/0x2a0 [ 751.899826][T14898] __ext4_expand_extra_isize+0x346/0x480 [ 751.905501][T14898] __ext4_mark_inode_dirty+0x544/0x870 [ 751.911007][T14898] ? __pfx___ext4_mark_inode_dirty+0x10/0x10 [ 751.917009][T14898] ? __pfx___might_resched+0x10/0x10 [ 751.922324][T14898] ? ext4_journal_check_start+0x22b/0x340 [ 751.928068][T14898] ? srso_alias_return_thunk+0x5/0xfbef5 [ 751.933721][T14898] ? __ext4_journal_start_sb+0x19e/0x690 [ 751.939387][T14898] ? ext4_evict_inode+0x5cf/0x18e0 [ 751.944538][T14898] ext4_evict_inode+0x74e/0x18e0 [ 751.949519][T14898] ? __pfx_ext4_evict_inode+0x10/0x10 [ 751.954922][T14898] ? srso_alias_return_thunk+0x5/0xfbef5 [ 751.960587][T14898] ? __pfx_ext4_evict_inode+0x10/0x10 [ 751.965990][T14898] evict+0x3e6/0x920 [ 751.969918][T14898] ? __pfx_evict+0x10/0x10 [ 751.974364][T14898] ? srso_alias_return_thunk+0x5/0xfbef5 [ 751.980028][T14898] ? srso_alias_return_thunk+0x5/0xfbef5 [ 751.985692][T14898] iput.part.0+0x6a9/0xb00 [ 751.990215][T14898] ? __pfx_ext4_drop_inode+0x10/0x10 [ 751.995518][T14898] iput+0x35/0x40 [ 751.999165][T14898] ext4_orphan_cleanup+0x731/0x11e0 [ 752.004400][T14898] ? __pfx_ext4_orphan_cleanup+0x10/0x10 [ 752.010061][T14898] ? srso_alias_return_thunk+0x5/0xfbef5 [ 752.015709][T14898] ? ext4_register_li_request+0xec/0x9b0 [ 752.021478][T14898] ext4_fill_super+0x8db7/0xaf70 [ 752.026503][T14898] ? __pfx_ext4_fill_super+0x10/0x10 [ 752.031814][T14898] ? do_raw_spin_lock+0x12c/0x2b0 [ 752.036850][T14898] ? srso_alias_return_thunk+0x5/0xfbef5 [ 752.042503][T14898] ? find_held_lock+0x2b/0x80 [ 752.047208][T14898] ? srso_alias_return_thunk+0x5/0xfbef5 [ 752.052864][T14898] ? sb_set_blocksize+0x176/0x1d0 [ 752.057921][T14898] ? srso_alias_return_thunk+0x5/0xfbef5 [ 752.063575][T14898] ? setup_bdev_super+0x369/0x730 [ 752.068627][T14898] get_tree_bdev_flags+0x38c/0x620 [ 752.073766][T14898] ? __pfx_ext4_fill_super+0x10/0x10 [ 752.079080][T14898] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 752.084752][T14898] ? apparmor_capable+0x114/0x1d0 [ 752.089824][T14898] ? srso_alias_return_thunk+0x5/0xfbef5 [ 752.095496][T14898] ? srso_alias_return_thunk+0x5/0xfbef5 [ 752.101151][T14898] ? security_capable+0x7e/0x260 [ 752.106115][T14898] vfs_get_tree+0x8e/0x340 [ 752.110551][T14898] path_mount+0x7b9/0x23a0 [ 752.114993][T14898] ? __pfx_path_mount+0x10/0x10 [ 752.119858][T14898] ? putname+0x154/0x1a0 [ 752.124113][T14898] ? srso_alias_return_thunk+0x5/0xfbef5 [ 752.129767][T14898] ? putname+0x154/0x1a0 [ 752.134026][T14898] ? __x64_sys_mount+0x293/0x310 [ 752.138971][T14898] __x64_sys_mount+0x293/0x310 [ 752.143775][T14898] ? __pfx___x64_sys_mount+0x10/0x10 [ 752.149102][T14898] ? srso_alias_return_thunk+0x5/0xfbef5 [ 752.154778][T14898] do_syscall_64+0xcd/0xfa0 [ 752.159308][T14898] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 752.165215][T14898] RIP: 0033:0x7f142c79076a [ 752.169636][T14898] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 752.189265][T14898] RSP: 002b:00007f142d5a4e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 752.197702][T14898] RAX: ffffffffffffffda RBX: 00007f142d5a4ef0 RCX: 00007f142c79076a [ 752.205771][T14898] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007f142d5a4eb0 [ 752.213756][T14898] RBP: 0000200000000180 R08: 00007f142d5a4ef0 R09: 0000000000800700 [ 752.221824][T14898] R10: 0000000000800700 R11: 0000000000000246 R12: 00002000000001c0 [ 752.229799][T14898] R13: 00007f142d5a4eb0 R14: 000000000000046f R15: 000000000000002c [ 752.237985][T14898] [ 752.241218][T14898] Kernel Offset: disabled [ 752.245541][T14898] Rebooting in 86400 seconds..