last executing test programs: 2.529668684s ago: executing program 2 (id=1658): r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') execveat$binfmt(0xffffffffffffff9c, r0, &(0x7f0000000080), &(0x7f00000000c0), 0x0) r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) close(r1) execveat$binfmt(0xffffffffffffff9c, r0, &(0x7f0000000100), &(0x7f0000000140), 0x0) r2 = openat$binfmt(0xffffffffffffff9c, r0, 0x2, 0x0) write(r2, &(0x7f0000000180)="01010101", 0x4) close(r2) execveat$binfmt(0xffffffffffffff9c, r0, &(0x7f00000001c0), &(0x7f0000000200), 0x0) (fail_nth: 9) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x0) close(r3) execveat$binfmt(0xffffffffffffff9c, r0, &(0x7f0000000280), &(0x7f00000002c0), 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x1ff) execveat$binfmt(0xffffffffffffff9c, r0, &(0x7f0000000340), &(0x7f0000000380), 0x0) 2.195964089s ago: executing program 2 (id=1661): bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000100)}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000000000000000000001801000078"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x2, 0x4, 0x8, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0xfffffffd, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000e00000007020000f8ffffffb703000008000000b70400000000000085000004030000009500df000000000000e4998f84e9b54c846ce93fe0ef250359f3b116700a393e9a93a2"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000140)=0x7ffd) ioctl$PPPIOCSPASS(r3, 0x40107447, &(0x7f0000000180)={0x2, &(0x7f00000000c0)=[{0x40, 0x0, 0x0, 0x3}, {0x6}]}) ioctl$PPPIOCSDEBUG(r3, 0x40047440, &(0x7f0000000080)=0x7) write$ppp(r3, &(0x7f00000003c0)='xS', 0x2) flock(0xffffffffffffffff, 0x5) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r4 = getpid() process_vm_readv(r4, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) 1.606457427s ago: executing program 4 (id=1667): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000010000000800000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000318110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x18) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r2}, &(0x7f0000000080), &(0x7f00000006c0)='%-010d \x00'}, 0x20) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x1c, r5, 0x1, 0x0, 0x0, {{}, {0x0, 0x6}}}, 0x1c}}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x18) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'vxcan0\x00', 0x0}) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r10}, 0x10) r11 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r11, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB="020300030c00000000070000000000000200090008000000e90000000000000003000600000000000200000000000000000000000000000002000100000000004700000d00000000030005000000000002"], 0x60}, 0x1, 0x7}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000980)=@bloom_filter={0x1e, 0x40, 0x401, 0x2, 0x400, r1, 0xffffffff, '\x00', r8, 0xffffffffffffffff, 0x2, 0x3, 0x2, 0xf, @void, @value, @void, @value}, 0x50) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0xffffffffffffffff, 0x408c5333, &(0x7f0000000880)={0x4, 0x3, 0x0, 'queue0\x00', 0x6}) r12 = socket$nl_xfrm(0x10, 0x3, 0x6) r13 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000060000000000000000008500000007000000850000000e00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000012c0)={&(0x7f0000000040)='kfree\x00', r13}, 0x10) syz_read_part_table(0x5e4, &(0x7f0000000000)="$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") sendmsg$nl_xfrm(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000740)=ANY=[@ANYBLOB="540100001a001307000000000000001cac141400"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ffffffff0000000000000000000000000000000032000000ac141417000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c001c"], 0x154}}, 0x8040) quotactl_fd$Q_QUOTAOFF(r7, 0xffffffff80000301, 0x0, 0x0) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x200000000000000d, &(0x7f0000000700)=[{0x6}]}) r14 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000, 0x0) ioctl$TUNSETQUEUE(r14, 0x400454d9, &(0x7f0000000100)={'macsec0\x00', 0x400}) 1.559035538s ago: executing program 1 (id=1668): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400000bb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000700)='kfree\x00', r1}, 0x18) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x1, 0x2, 0x7fff7ffc}]}) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, 0x0, 0x0) setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x30, &(0x7f00000012c0)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000007f00000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x290) close_range(r2, 0xffffffffffffffff, 0x0) 1.530696599s ago: executing program 1 (id=1669): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b70300000000"], &(0x7f0000001480)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b40)={&(0x7f0000000380)='kfree\x00', r0}, 0x18) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001180)=ANY=[@ANYBLOB="19000000040000"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r1}, &(0x7f00000002c0), &(0x7f0000000300)}, 0x20) 1.463741279s ago: executing program 0 (id=1670): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0xfe, 0x0, 0x7ffc0002}]}) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x1) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000cc0)={0x11, 0x5, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8}, [@btf_id={0x18, 0x0, 0x3, 0x0, 0x3}]}, &(0x7f0000000380)='syzkaller\x00', 0x6098, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000ac0)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000000bc0)={0x3, 0x9, 0x8, 0x5}, 0x10, 0x0, 0x0, 0xa, 0x0, &(0x7f0000000c00)=[{0x4, 0x1, 0xa, 0x2}, {0x2, 0x1, 0x2}, {0x4, 0x4, 0x2, 0x7}, {0x4, 0x4, 0xe, 0x1}, {0x2, 0x2, 0xc, 0x7}, {0x1, 0x5, 0x6, 0x7}, {0x5, 0x5, 0x6, 0x2}, {0x0, 0x1, 0xd, 0x2}, {0x1, 0x2, 0x1, 0x3}, {0x1, 0x2, 0xa, 0xa}], 0x10, 0x80000001, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000d80)={&(0x7f00000002c0)='afs_notify_call\x00', r2, 0x0, 0x100}, 0x18) ioctl$PTP_EXTTS_REQUEST2(0xffffffffffffffff, 0x40103d0b, &(0x7f0000000000)={0x3, 0x3}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000380), 0x1, r3}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x8, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x57, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f000001a240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=r3, @ANYBLOB="00000100"/16, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="05000000aedbe0ba0500000004000000000000000000000000000000000000003e578f4067038b44d885d4ac006dd008d48b98954d6e0740bb564a2109171fae9138fcb92bcac3c126f0f0fc29e007c60c91f6b3e70924bca2e5af4ba3fe1149920858207a85b35369c03a0dbd999a7bd4d632b454203a5394908ec60f2a1dee277068243edeffa847a5e081f908c0ded2edefed5217fc6ea22e3814f122538d704908cfc8f4db"], 0x50) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r4, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') 1.463640119s ago: executing program 1 (id=1671): r0 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r0, &(0x7f0000001240)=""/102400, 0x200000, 0x0) 1.196128433s ago: executing program 3 (id=1675): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'macvlan1\x00', 0x0}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="400000001000030500000000fddbdf", @ANYRES32=0x0, @ANYBLOB="02880100373004002000128008000100687372001400028008000100", @ANYRES32=r1, @ANYBLOB="08000200", @ANYRES32=r3], 0x40}}, 0x4) 1.194662673s ago: executing program 1 (id=1676): lstat(&(0x7f0000000100)='./file1\x00', &(0x7f00000003c0)) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000002c0)={[{@delalloc}, {@max_batch_time={'max_batch_time', 0x3d, 0xfa2}}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000000a40)="$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") socket$nl_netfilter(0x10, 0x3, 0xc) r0 = open(&(0x7f0000000000)='./file1\x00', 0x109042, 0x7a) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) r3 = socket(0x1e, 0x4, 0x0) sendmsg$tipc(r3, &(0x7f0000000200)={&(0x7f00000002c0)=@id={0x1e, 0x3, 0x2, {0x4e20}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x840) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f00000004c0)={[{@acl}, {@barrier}, {@usrjquota}, {@acl}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@resuid}, {@nodelalloc}, {@acl}, {@noinit_itable}]}, 0xfc, 0x587, &(0x7f0000002100)="$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") pwrite64(r0, &(0x7f0000000140)='2', 0x1, 0x8000c64) fallocate(r0, 0x20, 0x1000000, 0x7000000) 1.155763924s ago: executing program 3 (id=1677): openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000010000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000318110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r1}, &(0x7f0000000080), &(0x7f00000006c0)='%-010d \x00'}, 0x20) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x1c, r4, 0x1, 0x0, 0x0, {{}, {0x0, 0x6}}}, 0x1c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_read_part_table(0x5e4, &(0x7f0000000000)="$eJzs3D2LXFUYB/D/uXfeFiLrBxBcSCMKRrETF2Oha7og2gnaWqxILMRCdgcVwZcPYCtaGIUQawUFCWKsrERYYiFib2GacGTuy0xAsZlFCfx+xZznnHue57mXe9sz4c5Wd5Nakuvd7KO2GybNw33wW/L2NFm+8EQy7xOmQ2JJ8tzlJ5+6sHexzNdrq9Xj4ep802U2jJPsDdGXk3xw+eCdLj5OyVGGMNPPZ5ms9tY+78O/3/TNkrbbw/9s8nXtX8QsP+aLJIelXb38ebLMJ8ndWXT7ziVpa63daz5OdpJ2/VVs4cr+teXjQ7yT4Uub9rOjd0t9aLg2Ta21Njk6O2a2yT2Pnbv0T0W7/GX3eONSrXV6ZsxtNhcOb80mw+yR7345ynKxrp7abEqe7CSvnDzzYHcnpa8x3f7xAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4Zfe9ev83zTg53/2Wdfz0p2k2W49z7zreW5xS/yv713bffOtSk9f3X/rp5Td+Pfg9fyRp2xycSebrfS/2w9X3umEyrLZb9z+81cw++/jbnfXCULok35/9+WYdO5wM42uP3pa832zdHwAAAAAAAAAAAAAAAAAAAFau5sLexSbPfnWj5PlsjvvXLJJSxukiqbXWP2tnPPz/w3gOP9dvpKySUsvt1c8nu3cldf7+A93fCvSJtdZJ16L8J4/Iv/grAAD//x/vY/E=") 1.131378124s ago: executing program 2 (id=1678): r0 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000300)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@quota}, {@stripe={'stripe', 0x3d, 0x2}}, {@jqfmt_vfsold}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$eJzs3c9vG1kdAPCvnThx0uwmu+wBEOyW3YWCqjqJuxut9gDLCSFUCdEjSG1I3CiKHUexU5rQQ3rmikQlTnDkD+DcE3cuCG5cygGJHxGoQeLg1YwnqZvaTdQkdhR/PtJo3ps39fe9pvNe/U3iF8DQuhoRuxExFhF3I2I6u57LjvisfST3Pdt7uLS/93ApF63W7X/l0vbkWnT8mcSV7DWLEfGj70X8NPdy3Mb2ztpitVrZzOqzzdrGbGN758ZqbXGlslJZL5cX5hfmPrn5cfnMxvpebSwrffXpH3e/9fOkW1PZlc5xnKX20AuHcRKjEfGD8wg2ACPZeMYG3RFeSz4i3o6I99PnfzpG0q8mAHCZtVrT0ZrurAMAl10+zYHl8qUsFzAV+Xyp1M7hvROT+Wq90bx+r761vtzOlc1EIX9vtVqZy3KFM1HIJfX5tPy8Xj5SvxkRb0XEL8cn0nppqV5dHuR/fABgiF05sv7/d7y9/gMAl1xx0B0AAPrO+g8Aw8f6DwDDx/oPAMOnvf5PDLobAEAfef8PAMPH+g8AQ+WHt24lR2s/+/zr5fvbW2v1+zeWK421Um1rqbRU39wordTrK+ln9tSOe71qvb4x/1FsPZj59kajOdvY3rlTq2+tN++kn+t9p1JI79rtw8gAgF7eeu/JX3LJivzpRHpEx14OhYH2DDhv+UF3ABiYkUF3ABgYu33B8DrFe3zpAbgkumzR+4Jit18QarVarfPrEnDOrn1J/h+GVUf+308Bw5CR/4fhJf8Pw6vVyp10z/846Y0AwMUmxw/0+P7/29n5d9k3B36yfPSOx+fZKwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYDvb/LWV7gU9FPl8qRbwRETNRyN1brVbmIuLNiPjzeGE8qc8PuM8AwGnl/57L9v+6Nv3h1AtN7145LI5FxM9+fftXDxabzc0/RYzl/j1+cL35OLte7n/vAYDjHazT6bnjjfyzvYdLB0c/+/OP70ZEsR1/f28s9g/jj8Zoei5GISIm/5PL6m25jtzFaew+iogvdht/LqbSHEh759Oj8ZPYb/Q1fv6F+Pm0rX1O/i6+cAZ9gWHzJJl/Puv2/OXjanru/vwX0xnq9LL5L3mppf10Dnwe/2D+G+kx/109aYyP/vD9dmni5bZHEV8ejTiIvd8x/xzEz/WI/+EJ4//1K+++36ut9ZuIa9E9fmes2WZtY7axvXNjtba4UlmprJfLC/MLc5/c/Lg8m+aoZ3uvBv/89PqbvdqS8U/2iF88ZvxfP+H4f/v/uz/+2ivif/ODbvHz8c4r4idr4jdOGH9x8vfFXm1J/OUe4z/u63/9hPGf/m3npW3DAYDBaWzvrC1Wq5VNBYWLX0j+yV6AbnQtfKdfscaie9MvPmg/00eaWq3XitVrxjiLrBtwERw+9BHxv0F3BgAAAAAAAAAAAAAA6Kofv7E06DECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABweX0eAAD//19xzyM=") r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001180)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r2}, 0x10) lsetxattr$trusted_overlay_upper(&(0x7f0000000040)='./file1\x00', &(0x7f0000000300), &(0x7f0000000200)=ANY=[@ANYRESDEC=r0, @ANYRESHEX=r3, @ANYRES8=r0, @ANYRES16=r1, @ANYRESDEC, @ANYRES8=r2], 0xfe37, 0x0) 1.107001434s ago: executing program 4 (id=1679): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400000bb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000700)='kfree\x00', r1}, 0x18) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x1, 0x2, 0x7fff7ffc}]}) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, 0x0, 0x0) setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x30, &(0x7f00000012c0)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000007f00000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x290) close_range(r2, 0xffffffffffffffff, 0x0) 1.065143395s ago: executing program 4 (id=1680): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@mcast2, 0x800, 0x0, 0x2, 0x0, 0x0, 0x8c}, 0x20) 1.010603026s ago: executing program 1 (id=1681): r0 = socket$inet6(0xa, 0x80000, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000007"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r3, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0) fchown(0xffffffffffffffff, 0x0, 0xee01) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x34}}, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2e, &(0x7f0000001140)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x66, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x1, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='kfree\x00', r2, 0x0, 0x8000000000004}, 0x18) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0800034000000004640000000e0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000380003803400008028000180230001"], 0xf0}, 0x1, 0x0, 0x0, 0x80}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet6_int(r5, 0x29, 0x8, &(0x7f0000000180)=0xffff7b6e, 0x4) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r6}, 0x4) accept$inet(r4, &(0x7f0000000080), &(0x7f00000002c0)=0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r7}, 0x10) lsetxattr$security_selinux(&(0x7f00000001c0)='.\x00', &(0x7f0000000240), &(0x7f0000000280)='system_u:object_r:fsadm_exec_t:s0\x00', 0x1001, 0x0) setsockopt$inet6_int(r5, 0x29, 0x2, &(0x7f00000001c0)=0x7, 0x4) getsockopt$inet6_buf(r5, 0x29, 0x6, &(0x7f0000000200)=""/11, &(0x7f0000000280)=0x3b) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@mcast2, 0x800, 0x0, 0x2, 0x0, 0x0, 0x8c}, 0x20) 974.147466ms ago: executing program 3 (id=1682): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b70300000000"], &(0x7f0000001480)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b40)={&(0x7f0000000380)='kfree\x00', r0}, 0x18) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001180)=ANY=[@ANYBLOB="19000000040000"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r1}, &(0x7f00000002c0), &(0x7f0000000300)}, 0x20) 970.098126ms ago: executing program 4 (id=1683): openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000000)='memory.pressure\x00', 0x2, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x40a141, 0x120) r1 = openat(r0, &(0x7f0000000080)='./file0\x00', 0x340, 0x20) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e24, 0xaf28, @loopback, 0x4}, 0x1c) (async) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r0, 0xf507, 0x0) r2 = open(&(0x7f0000000100)='./file0\x00', 0x80480, 0x4) r3 = openat$cgroup_ro(r2, &(0x7f0000000140)='cpu.stat\x00', 0x0, 0x0) (async) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000180)=0x9) (async) getsockopt$inet_mreqn(r2, 0x0, 0x20, &(0x7f0000000280)={@empty, @dev, 0x0}, &(0x7f00000002c0)=0xc) (async) r5 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000003c0)=@generic={&(0x7f0000000380)='./file1\x00'}, 0x18) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xe, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfff}, [@map_val={0x18, 0x4, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x5}, @map_idx={0x18, 0x1, 0x5, 0x0, 0x5}, @generic={0xbe, 0x1, 0x7, 0xfffe, 0x1}, @call={0x85, 0x0, 0x0, 0x8}, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}]}, &(0x7f0000000240)='syzkaller\x00', 0x1c, 0x0, 0x0, 0x40f00, 0x60, '\x00', r4, 0x0, r1, 0x8, &(0x7f0000000300)={0x7, 0x2}, 0x8, 0x10, &(0x7f0000000340)={0x1, 0xf, 0x8f, 0x8}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000000400)=[r3, r1, r1, r5], &(0x7f0000000440)=[{0x3, 0x2, 0xf, 0xa}, {0x3, 0x3, 0x3, 0xb}, {0x1, 0x1, 0x8, 0x8}, {0x0, 0x2, 0xe, 0x6}, {0x0, 0x5, 0x2, 0x6}, {0x1, 0x2, 0x9, 0x1}, {0x5, 0x2, 0x9, 0x4}], 0x10, 0x80000001, @void, @value}, 0x94) ioctl$BLKALIGNOFF(0xffffffffffffffff, 0x127a, &(0x7f0000000580)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000005c0)={0x9, 0x8000, 0x0, 'queue0\x00', 0x9}) (async) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000680)={0x0, 0x0}) syz_open_procfs$namespace(r7, &(0x7f0000000700)='ns/time_for_children\x00') sendmsg$inet6(r3, &(0x7f0000000a00)={&(0x7f0000000740)={0xa, 0x4e22, 0x7fff, @local, 0x7}, 0x1c, &(0x7f0000000980)=[{&(0x7f0000000780)="e6fe13bf20d205b1863d0d733b0786bbf865dee46928b61802eea9278055", 0x1e}, {&(0x7f00000007c0)="a7971eda65b77657d490e09ac613ec16fdb4b5e0ce9a956bac888327fd05d8a2cb1c5e79f669c1ac5833e2478617ed2d285edf8d1df959dc6fdf4310dfcd1a4a46b641cea7d56ae7864883dfbdc60e5e9de6885cea3d9b30ce41c10a95889586eae2df9e66879410520b63f91a11a79e15f6d2a379fccb94668750487c17405a030a2941c7eb52b491ae9c8b8b111dfd93108ba3dcb81072e32cf31dd5aea58f80b039554afb80991b95231ab0b0093210f55cdd55a6f14e882434b4f4b634d9ea7c62fbf7656d12344b6169b84797ff1899e1f421156a0328c5cf1c76", 0xdd}, {&(0x7f00000008c0)="6cdc9395edbd0af18c8f70d492bd1f84d6dddd95e1fe0594a4e7afe14d2fb176a85f6d2dbad9b5aaecd952fb234cd5a05cd943cfb2a9c0d04bdc0cdfc79b4b", 0x3f}, {&(0x7f0000000900)="ff93261d680acdb135f97facbe882dce29e7bd66aa17e1a5720c6b366dee35222c4b867669ff4756701726405a3730ce5e8ff56c00c566731dcb862a79b1d83cb32d2f7ebd8ffc2c33515310153e182eb72e45d9", 0x54}], 0x4, &(0x7f00000009c0)=[@dstopts={{0x28, 0x29, 0x37, {0x21, 0x1, '\x00', [@padn={0x1, 0x1, [0x0]}, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0xe4}}], 0x40}, 0x9c1b092c4a71f92a) (async) ioctl$sock_SIOCGIFCONF(r3, 0x8912, &(0x7f0000000a80)=@req={0x28, &(0x7f0000000a40)={'veth0_to_hsr\x00', @ifru_ivalue=0x5}}) (async) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000b00)={0x3, &(0x7f0000000ac0)=[{0x8, 0x7, 0x1, 0xd7}, {0x8, 0x9, 0x1, 0x7}, {0xd517, 0x7, 0xea, 0x4}]}) socket$nl_audit(0x10, 0x3, 0x9) pipe2$watch_queue(&(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001000)={r2, 0xe0, &(0x7f0000000f00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000d40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, &(0x7f0000000d80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000dc0)=[0x0, 0x0], 0x0, 0x8b, &(0x7f0000000e00)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000e40), &(0x7f0000000e80), 0x8, 0x8c, 0x8, 0x8, &(0x7f0000000ec0)}}, 0x10) (async) pipe(&(0x7f0000001040)={0xffffffffffffffff, 0xffffffffffffffff}) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001180)={{0x1, 0xffffffffffffffff}, &(0x7f0000001100), &(0x7f0000001140)=r2}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001280)=@bpf_tracing={0x1a, 0xf, &(0x7f0000000b80)=@raw=[@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r8}}, @call={0x85, 0x0, 0x0, 0x11}, @generic={0x80, 0x8, 0x0, 0x2, 0x1}], &(0x7f0000000c00)='syzkaller\x00', 0x6, 0xfd, &(0x7f0000000c40)=""/253, 0x41000, 0x8, '\x00', r9, 0x18, r10, 0x8, &(0x7f0000001080)={0xa, 0x5}, 0x8, 0x10, &(0x7f00000010c0)={0x5, 0x4, 0x80000001, 0x401}, 0x10, 0x2e076, r6, 0x5, &(0x7f00000011c0)=[r1, r2, r2, r2, r12, r3], &(0x7f0000001200)=[{0x5, 0x2, 0x7, 0x5}, {0x5, 0x3, 0x9, 0x4}, {0x1, 0x2, 0x10, 0x8}, {0x5, 0x4, 0x8, 0xc}, {0x2, 0x5, 0x3, 0x6}], 0x10, 0x9, @void, @value}, 0x94) r13 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001680)={0x11, 0x34, &(0x7f0000001380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r10}}, {}, [@cb_func={0x18, 0x4}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffb}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r10}}, @alu={0x4, 0x0, 0xc, 0x5, 0x4, 0x10, 0x8}, @alu={0x4, 0x0, 0x4, 0x6, 0x2, 0xfffffffffffffffc, 0x4}, @generic={0x2, 0x7, 0x0, 0x5, 0xf57}, @printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x1}, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001540)='GPL\x00', 0x80, 0x0, 0x0, 0x41000, 0x36, '\x00', r9, 0x0, r1, 0x8, &(0x7f0000001580)={0x8, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f00000015c0)=[r5, r11], &(0x7f0000001600)=[{0x1, 0x1, 0xa, 0x2}, {0x3, 0x4, 0xa, 0xc}, {0x4, 0x4, 0x0, 0x5}, {0x2, 0x5, 0xd, 0x7}, {0x1, 0x1, 0x8, 0xc}], 0x10, 0x8001, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001740)={&(0x7f0000001340)='fsi_master_write\x00', r13, 0x0, 0x2}, 0x18) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000001780)=[@in={0x2, 0x4e23, @remote}, @in6={0xa, 0x4e23, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}, @in6={0xa, 0x4e21, 0x3, @mcast1, 0x6}, @in={0x2, 0x4e22, @broadcast}, @in6={0xa, 0x4e20, 0xf144, @mcast1, 0x5}], 0x74) (async) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000001800)={{0x1, 0x1, 0x18, r1, {0x4}}, './file0\x00'}) (async) r15 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001880), r11) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r14, &(0x7f0000001a00)={&(0x7f0000001840)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000019c0)={&(0x7f00000018c0)={0xfc, r15, 0x10, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r9}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r9}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xffffffff}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x48, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1b}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010101}]}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x18}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r9}]}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010100}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4004000}, 0x4001) 891.855048ms ago: executing program 3 (id=1684): socket$kcm(0x2d, 0x7, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x0, @perf_bp={0x0, 0x1}, 0x14125, 0x2e, 0xfffffbff, 0x0, 0x2, 0x0, 0xe, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0xce56fe61a68fc369, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00'}, 0x18) socket$nl_route(0x10, 0x3, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000640)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r3, 0x0, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(0x0, r4) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, 0x0, 0x0) 890.978508ms ago: executing program 4 (id=1685): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0xfe, 0x0, 0x7ffc0002}]}) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x1) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000cc0)={0x11, 0x5, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8}, [@btf_id={0x18, 0x0, 0x3, 0x0, 0x3}]}, &(0x7f0000000380)='syzkaller\x00', 0x6098, 0x1d, &(0x7f00000003c0)=""/29, 0x40f00, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000ac0)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000000bc0)={0x3, 0x9, 0x8, 0x5}, 0x10, 0x0, 0x0, 0xa, 0x0, &(0x7f0000000c00)=[{0x4, 0x1, 0xa, 0x2}, {0x2, 0x1, 0x2}, {0x4, 0x4, 0x2, 0x7}, {0x4, 0x4, 0xe, 0x1}, {0x2, 0x2, 0xc, 0x7}, {0x1, 0x5, 0x6, 0x7}, {0x5, 0x5, 0x6, 0x2}, {0x0, 0x1, 0xd, 0x2}, {0x1, 0x2, 0x1, 0x3}, {0x1, 0x2, 0xa, 0xa}], 0x10, 0x80000001, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000d80)={&(0x7f00000002c0)='afs_notify_call\x00', r2, 0x0, 0x100}, 0x18) ioctl$PTP_EXTTS_REQUEST2(0xffffffffffffffff, 0x40103d0b, &(0x7f0000000000)={0x3, 0x3}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000380), 0x1, r3}, 0x38) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x8, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x57, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f000001a240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=r3, @ANYBLOB="00000100"/18, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="05000000aedbe0ba0500000004000000000000000000000000000000000000003e578f4067038b44d885d4ac006dd008d48b98954d6e0740bb564a2109171fae9138fcb92bcac3c126f0f0fc29e007c60c91f6b3e70924bca2e5af4ba3fe1149920858207a85b35369c03a0dbd999a7bd4d632b454203a5394908ec60f2a1dee277068243edeffa847a5e081f908c0ded2edefed5217fc6ea22e3814f122538d704908cfc8f4db"], 0x50) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r5, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r6, &(0x7f0000001240)=""/102400, 0x200000, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000700)={r4, 0x20, &(0x7f0000000680)={&(0x7f0000000580)=""/128, 0x80, 0x0, &(0x7f0000000600)=""/100, 0x64}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x14, 0xd, &(0x7f0000000400)=ANY=[@ANYRES32=r3, @ANYBLOB="0000000000000000b7020000000000008500000086000000ff5f030006000000d95af0ffffffffff18110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70200000000000085000000861000009500000000000000"], 0x0, 0x9, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @lirc_mode2=0x10, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000000480)={0x5, 0x6, 0x4, 0x3}, 0x10, r7, r4, 0x1, &(0x7f0000000a80)=[r6, r3, r5, r6], &(0x7f0000000140)=[{0x3, 0x5, 0x9, 0x2}], 0x10, 0x8, @void, @value}, 0x94) linkat(r5, &(0x7f0000000080)='./file0\x00', 0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x1400) socket$igmp6(0xa, 0x3, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000030000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'lblcr\x00', 0x0, 0x85, 0x1000004f}, 0x2c) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x1018e58, &(0x7f0000000440), 0x1, 0x5fc, &(0x7f0000000600)="$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") r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r8) ptrace$getregset(0x4204, r8, 0x2, &(0x7f0000000740)={0x0, 0x60}) 850.580568ms ago: executing program 2 (id=1686): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x2008042, &(0x7f00000000c0), 0x1, 0x571, &(0x7f0000000780)="$eJzs3c+PG1cdAPDvzP5yk7SbQA9QAQlQCCiKnXXaqOql5QJCVSVExQFxSJddZ7XEjkPsLd0lUrd/A0ggcYI/gQMSB6SeOHDjiMQBEOWAVCACJUgcBs3Yu+ts7MSNvXaz/nykybyZN+Pve/bOvOdnxy+AmXUuInYjYjEi3oyI5e7+pLvEq50lP+7undtr9+7cXksiy974Z1Lk5/ui55zcye5jliLim1+L+G7yYNzW9s711Xq9dqu7XWk3blZa2zsXNxurG7WN2o1q9crKlUsvXX6xOra6nm388oOvbr72rd/8+tPv/373yz/Mi3Wqm9dbj3HqVH1hP05uPiJeO4pgUzDXXS9OuRw8njQiPhYRnyuu/+WYK/46AYDjLMuWI1vu3QYAjru0GANL0nJEpGm3E1DujOE9GyfSerPVvnCtuXVjvTNWdjoW0mub9dqlM0t//H5x8EKSb68UeUV+sV09tH05Is5ExI+Xniq2y2vN+vp0ujwAMPNO9rb/EfGfpTQtl4c6tc+negDAE6M07QIAABOn/QeA2aP9B4DZM0T73/2wf/fIywIATIb3/wAwe7T/ADB7tP8AMFO+8frr+ZLd6/7+9fpb21vXm29dXK+1rpcbW2vlteatm+WNZnOj+M2exqMer95s3lx5IbberrRrrXaltb1ztdHcutG+Wvyu99XawkRqBQA8zJmz7/0hiYjdl58qluiZy0FbDcdbOsajgCfL3Cgn6yDAE81sXzC7hmrCi07C7468LMB09P0x71Lf5P1++iGC+J4RfKSc/+Tw4//meIbjxcg+zK7HG/9/ZezlACbvscf//zzecgCTl2XJ4Tn/F/ezAIBjaYSv8GXvjKsTAkzVoybzHsvn/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHDMnIqI70WSlou5wNP837Rcjng6Ik7HQnJts167FBHPxNmIWFjKt1emXWgAYETp35Pu/F/nl58/dTh3MfnvUrGOiB/87I2fvL3abt9ayff/a3//0t70YdWD80aYVxAAGN5fhzmoaL+r3XXPG/m7d26v7S1HWMYHfPCV/clH1+7duV0snZz5yLIsiygVfYkT/05ivntOKSKei4i5McTffTciPtGv/kkxNnK6O/Npb/zoxn56ovHT++KnRV5nnT99Hx9DWWDWvJfff149fP3NFVfWueKI/td/qbhDja64/5Ui9u59B/e/veu9VJTmcPz8mj83bIwXfvv1B3Zmy528dyOem+8XP9mPnwyI//yQ8f/0qc/86JUBednPI85H//i9sSrtxs1Ka3vn4mZjdaO2UbtRrV5ZuXLppcsvVivFGHVlb6T6Qf94+cIzg8qW1//EgPidV/7kofov7p/7hSHr/4v/vfmdzx5sLh2O/6XP93/9ny3W/Z//vE384pDxV0/8auD03Xn89QH1f9Trf2HI+O//bWd9yEMBgAlobe9cX63Xa7dGSuTvQj/8WVmWvZOX4SHH5NnDPeBed3G06vwlisTB05JEEqM/P/cn8s7YMAcvjFyd+xJ7wyXjrk6fxPx+X3G8j/zth/+1DEosjhI0HXstHicRp7uJu5MKOpXbETBBBxf9tEsCAAAAAAAAAAAAAAAMMon/wzTtOgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHB8/T8AAP//Z1e+LQ==") setxattr$system_posix_acl(&(0x7f0000000140)='.\x00', &(0x7f0000000240)='system.posix_acl_default\x00', &(0x7f0000000200)={{}, {0x1, 0x3}, [], {0x4, 0x5}, [], {}, {0x20, 0x1}}, 0x24, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r0 = socket(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x50) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00'}, 0x10) write(r0, &(0x7f0000000080)="240000001e005f0214fffffffffffff807000000000000000039068e2e15a5158a000000", 0x24) 600.008321ms ago: executing program 0 (id=1687): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'macvlan1\x00', 0x0}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="400000001000030500000000fddbdf", @ANYRES32=0x0, @ANYBLOB="02880100373004002000128008000100687372001400028008000100", @ANYRES32=r1, @ANYBLOB="08000200", @ANYRES32=r3], 0x40}}, 0x4) 588.796212ms ago: executing program 2 (id=1688): bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1018e58, &(0x7f0000000440)={[{@bsdgroups}, {@noblock_validity}, {@grpjquota}, {@init_itable_val={'init_itable', 0x3d, 0x6}}, {@debug}, {@errors_remount}]}, 0x1, 0x5fc, &(0x7f0000000600)="$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") 551.701962ms ago: executing program 0 (id=1689): quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x0, 0x0) 453.093804ms ago: executing program 0 (id=1690): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') renameat(r2, &(0x7f0000000080)='./mnt\x00', r2, &(0x7f0000000100)='./mnt\x00') unlinkat(r2, &(0x7f00000000c0)='./mnt\x00', 0x200) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$SEG6_CMD_DUMPHMAC(r2, &(0x7f0000000600)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000005c0)={&(0x7f0000000400)={0x1c, r3, 0x0, 0x70bd2a, 0x25dfdbfe, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10d0}, 0x20010) r4 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000300)={0x0, 0x0}, &(0x7f0000000180)=0xc) sendmsg$nl_generic(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x1e, 0x305, 0x0, 0x0, {}, [@typed={0x8, 0x0, 0x0, 0x0, @pid}, @typed={0x8, 0x9, 0x0, 0x0, @uid=r5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a841}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, 0x0, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x4, 0x0, @mcast1={0xff, 0x7}, 0x8a4}}, {{0xa, 0x4e20, 0x100, @remote}}}, 0x108) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x300, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a320000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a31000000004c000000050a01020000000000000000010020000c00024000000000000000010900010073797a3100000000200004801400030076657468315f6d6163767461700000000800014000000005"], 0xe8}, 0x1, 0x0, 0x0, 0x40040000}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000010900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000025940000000c0a01030000000000000000070000080900020073797a31000000000900010073797a30000000006800038064000080080003400000000258000b802c0001800a0001006c696d69740000001c0002800c00014000000000000000030c0002400000000000000010140001800c0001"], 0x118}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x48, 0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x80000, 0x1}) io_uring_enter(0xffffffffffffffff, 0x3516, 0x0, 0x0, 0x0, 0x0) 414.459834ms ago: executing program 2 (id=1691): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) mmap$IORING_OFF_SQ_RING(&(0x7f0000999000/0x3000)=nil, 0x3000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000b2b000/0x1000)=nil, 0x1000, 0x0, 0x600, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) 382.708514ms ago: executing program 0 (id=1692): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000010000000800000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000318110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x18) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r2}, &(0x7f0000000080), &(0x7f00000006c0)='%-010d \x00'}, 0x20) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x1c, r5, 0x1, 0x0, 0x0, {{}, {0x0, 0x6}}}, 0x1c}}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x18) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'vxcan0\x00', 0x0}) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r10}, 0x10) r11 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r11, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB="020300030c00000000070000000000000200090008000000e90000000000000003000600000000000200000000000000000000000000000002000100000000004700000d00000000030005000000000002"], 0x60}, 0x1, 0x7}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000980)=@bloom_filter={0x1e, 0x40, 0x401, 0x2, 0x400, r1, 0xffffffff, '\x00', r8, 0xffffffffffffffff, 0x2, 0x3, 0x2, 0xf, @void, @value, @void, @value}, 0x50) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0xffffffffffffffff, 0x408c5333, &(0x7f0000000880)={0x4, 0x3, 0x0, 'queue0\x00', 0x6}) socket$nl_xfrm(0x10, 0x3, 0x6) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000060000000000000000008500000007000000850000000e00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000012c0)={&(0x7f0000000040)='kfree\x00', r12}, 0x10) syz_read_part_table(0x5e4, &(0x7f0000000000)="$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") ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) quotactl_fd$Q_QUOTAOFF(r7, 0xffffffff80000301, 0x0, 0x0) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x200000000000000d, &(0x7f0000000700)=[{0x6}]}) r13 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000, 0x0) ioctl$TUNSETQUEUE(r13, 0x400454d9, &(0x7f0000000100)={'macsec0\x00', 0x400}) 194.086227ms ago: executing program 0 (id=1693): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4b, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000780)=ANY=[@ANYBLOB="e099bbb932e699e6a247f23f26142949aefb020ccf6fa60f20a5f48ef1cd48a6"], 0x118) add_key$user(0x0, &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffa) r2 = socket$inet6(0xa, 0x805, 0x0) getsockopt$bt_hci(r2, 0x84, 0x25, &(0x7f0000000080)=""/4076, &(0x7f0000000040)=0xfec) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x400e, &(0x7f0000000300)={[{@i_version}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@block_validity}, {@sysvgroups}]}, 0x1, 0x42f, &(0x7f0000000940)="$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") r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) setxattr$security_ima(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140), &(0x7f0000001f00)=ANY=[], 0xe00f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x242, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x12, r1, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x483, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'none\x00', 0x3a, 0x0, 0x7f}, 0x2c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r6 = openat$cgroup_subtree(r1, &(0x7f0000000640), 0x2, 0x0) fcntl$setlease(r6, 0x400, 0x2) recvmmsg$unix(r5, &(0x7f0000003f40)=[{{&(0x7f0000000180), 0x6e, &(0x7f0000000080)=[{&(0x7f0000000240)=""/153, 0x99}], 0x1, &(0x7f0000000300)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa0}}, {{&(0x7f00000003c0)=@abs, 0x6e, &(0x7f000001a240)=[{&(0x7f0000000440)=""/16, 0x10}, {&(0x7f0000000480)=""/146, 0x92}, {&(0x7f0000000580)=""/178, 0xb2}], 0x3, &(0x7f0000000680)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x18}}, {{0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f00000006c0)=""/208, 0xd0}, {&(0x7f00000007c0)=""/144, 0x90}, {&(0x7f0000000880)=""/227, 0xe3}, {&(0x7f0000000a40)=""/183, 0xb7}, {&(0x7f0000000b00)=""/96, 0x60}, {&(0x7f0000000980)=""/20, 0x14}, {&(0x7f0000000b80)=""/9, 0x9}, {&(0x7f0000000bc0)=""/204, 0xcc}, {&(0x7f0000000cc0)}], 0x9, &(0x7f0000000dc0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x58}}, {{&(0x7f0000000e40)=@abs, 0x6e, &(0x7f0000000f80)=[{&(0x7f0000000ec0)=""/141, 0x8d}], 0x1, &(0x7f0000000fc0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb0}}, {{&(0x7f0000001080)=@abs, 0x6e, &(0x7f00000013c0)=[{&(0x7f0000001100)=""/198, 0xc6}, {&(0x7f0000001200)=""/43, 0x2b}, {&(0x7f0000001240)=""/146, 0x92}, {&(0x7f0000001300)=""/177, 0xb1}], 0x4, &(0x7f0000001400)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0x70}}, {{&(0x7f0000001480)=@abs, 0x6e, &(0x7f0000002780), 0x0, &(0x7f0000002800)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x78}}, {{&(0x7f0000002880), 0x6e, &(0x7f0000003bc0)=[{&(0x7f0000002900)=""/189, 0xbd}, {&(0x7f00000029c0)=""/4096, 0x1000}, {&(0x7f00000039c0)=""/240, 0xf0}, {&(0x7f0000003ac0)=""/15, 0xf}, {&(0x7f0000003b00)=""/181, 0xb5}], 0x5, &(0x7f0000003c40)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x20}}, {{0x0, 0x0, &(0x7f0000003e40)=[{&(0x7f0000003c80)=""/67, 0x43}, {&(0x7f0000003d00)=""/89, 0x59}, {&(0x7f0000003d80)=""/158, 0x9e}], 0x3, &(0x7f0000003e80)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x98}}], 0x8, 0x20, &(0x7f0000004140)) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r8}, 0x10) r9 = socket$inet6(0xa, 0x3, 0x4) ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, &(0x7f000001a2c0)={r9, r7, 0x0, 0x5, &(0x7f000001a280)="75cde6cdd1", 0xa, 0x1, 0x0, 0x8, 0x21, 0x0, 0xc, 'syz1\x00'}) r10 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r10, &(0x7f0000001240)=""/102400, 0x200000, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), 0xffffffffffffffff) r11 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r11, &(0x7f0000000000)=ANY=[@ANYBLOB="364000002600913e"], 0xfe33) 63.770989ms ago: executing program 1 (id=1694): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x1) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000cc0)={0x11, 0x5, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8}, [@btf_id={0x18, 0x0, 0x3, 0x0, 0x3}]}, &(0x7f0000000380)='syzkaller\x00', 0x6098, 0x1d, &(0x7f00000003c0)=""/29, 0x40f00, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000ac0)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000000bc0)={0x3, 0x9, 0x8, 0x5}, 0x10, 0x0, 0x0, 0xa, 0x0, &(0x7f0000000c00)=[{0x4, 0x1, 0xa, 0x2}, {0x2, 0x1, 0x2}, {0x4, 0x4, 0x2, 0x7}, {0x4, 0x4, 0xe, 0x1}, {0x2, 0x2, 0xc, 0x7}, {0x1, 0x5, 0x6, 0x7}, {0x5, 0x5, 0x6, 0x2}, {0x0, 0x1, 0xd, 0x2}, {0x1, 0x2, 0x1, 0x3}, {0x1, 0x2, 0xa, 0xa}], 0x10, 0x80000001, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000d80)={&(0x7f00000002c0)='afs_notify_call\x00', r2, 0x0, 0x100}, 0x18) ioctl$PTP_EXTTS_REQUEST2(0xffffffffffffffff, 0x40103d0b, &(0x7f0000000000)={0x3, 0x3}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000380), 0x1, r3}, 0x38) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x8, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x57, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f000001a240)=ANY=[@ANYRES32=r3, @ANYBLOB="00000100"/18, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="05000000aedbe0ba0500000004000000000000000000000000000000000000003e578f4067038b44d885d4ac006dd008d48b98954d6e0740bb564a2109171fae9138fcb92bcac3c126f0f0fc29e007c60c91f6b3e70924bca2e5af4ba3fe1149920858207a85b35369c03a0dbd999a7bd4d632b454203a5394908ec60f2a1dee277068243edeffa847a5e081f908c0ded2edefed5217fc6ea22e3814f122538d704908cfc8f4db"], 0x50) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r5, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r6, &(0x7f0000001240)=""/102400, 0x200000, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000700)={r4, 0x20, &(0x7f0000000680)={&(0x7f0000000580)=""/128, 0x80, 0x0, &(0x7f0000000600)=""/100, 0x64}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x14, 0xd, &(0x7f0000000400)=ANY=[@ANYRES32=r3, @ANYBLOB="0000000000000000b7020000000000008500000086000000ff5f030006000000d95af0ffffffffff18110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70200000000000085000000861000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @lirc_mode2=0x10, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000000480)={0x5, 0x6, 0x4, 0x3}, 0x10, r7, r4, 0x1, &(0x7f0000000a80)=[r6, r3, r5, r6], &(0x7f0000000140)=[{0x3, 0x5, 0x9, 0x2}], 0x10, 0x8, @void, @value}, 0x94) linkat(r5, &(0x7f0000000080)='./file0\x00', 0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x1400) socket$igmp6(0xa, 0x3, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000030000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'lblcr\x00', 0x0, 0x85, 0x1000004f}, 0x2c) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x1018e58, &(0x7f0000000440), 0x1, 0x5fc, &(0x7f0000000600)="$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") r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r8) ptrace$getregset(0x4204, r8, 0x2, &(0x7f0000000740)={0x0, 0x60}) 35.42147ms ago: executing program 3 (id=1695): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=@updpolicy={0x13c, 0x19, 0x1, 0x0, 0x3, {{@in=@private, @in6=@remote, 0x0, 0xfffd, 0x4e22, 0x0, 0xa, 0x0, 0x0, 0x32}, {0xfffffffffffffff8, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x8000000000}, 0x0, 0x0, 0x0, 0x0, 0x4}, [@tmpl={0x84, 0x5, [{{@in6=@mcast1, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x3504, 0x0, 0x0, 0x21}, {{@in6=@remote, 0xbffffffd, 0x3c}, 0xa, @in6=@dev={0xfe, 0x80, '\x00', 0xc3}, 0x3501, 0x3, 0x0, 0x7, 0x7, 0x0, 0x4}]}]}, 0x13c}}, 0x4040000) r1 = open(0x0, 0x64842, 0x0) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x1200, 0x30, 0x3) openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x143a82, 0x2) r2 = open(&(0x7f0000000040)='./bus\x00', 0x40d00, 0x20) sendfile(0xffffffffffffffff, r2, 0x0, 0x8000fffffffe) r3 = socket$inet(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x7}, 0x18) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bond0\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000040)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r3, 0xc0c89425, &(0x7f0000000380)={"d0b77ac9235c1c2d6e4b42938de75135", 0x0, r4, {0x9, 0x81}, {0x7, 0x2}, 0xfffffffffffffffd, [0x5000000000, 0x7, 0x7, 0x0, 0x1, 0xc, 0x0, 0x9, 0x1, 0xe, 0x6, 0xf8, 0x3, 0x1, 0x0, 0x7]}) ioctl$BTRFS_IOC_SUBVOL_CREATE(0xffffffffffffffff, 0x5000940e, &(0x7f0000000880)={{r3}, "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"}) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) syz_clone3(&(0x7f0000001980)={0x800000, &(0x7f0000000240), &(0x7f0000000280), &(0x7f0000000700), {0x30}, &(0x7f0000001880)=""/168, 0xa8, &(0x7f0000000740)=""/95, &(0x7f0000001940)=[0xffffffffffffffff], 0x1}, 0x58) 7.29156ms ago: executing program 4 (id=1696): mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x4, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000000)=0x5, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x408, 0xcd, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r1}, 0x10) r2 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r2, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @loopback={0x2}}, 0x1c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000f00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) 0s ago: executing program 3 (id=1697): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0xfe, 0x0, 0x7ffc0002}]}) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x1) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000cc0)={0x11, 0x5, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8}, [@btf_id={0x18, 0x0, 0x3, 0x0, 0x3}]}, &(0x7f0000000380)='syzkaller\x00', 0x6098, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000ac0)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000000bc0)={0x3, 0x9, 0x8, 0x5}, 0x10, 0x0, 0x0, 0xa, 0x0, &(0x7f0000000c00)=[{0x4, 0x1, 0xa, 0x2}, {0x2, 0x1, 0x2}, {0x4, 0x4, 0x2, 0x7}, {0x4, 0x4, 0xe, 0x1}, {0x2, 0x2, 0xc, 0x7}, {0x1, 0x5, 0x6, 0x7}, {0x5, 0x5, 0x6, 0x2}, {0x0, 0x1, 0xd, 0x2}, {0x1, 0x2, 0x1, 0x3}, {0x1, 0x2, 0xa, 0xa}], 0x10, 0x80000001, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000d80)={&(0x7f00000002c0)='afs_notify_call\x00', r2, 0x0, 0x100}, 0x18) ioctl$PTP_EXTTS_REQUEST2(0xffffffffffffffff, 0x40103d0b, &(0x7f0000000000)={0x3, 0x3}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000380), 0x1, r3}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x8, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x57, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f000001a240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=r3, @ANYBLOB="00000100"/16, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="05000000aedbe0ba0500000004000000000000000000000000000000000000003e578f4067038b44d885d4ac006dd008d48b98954d6e0740bb564a2109171fae9138fcb92bcac3c126f0f0fc29e007c60c91f6b3e70924bca2e5af4ba3fe1149920858207a85b35369c03a0dbd999a7bd4d632b454203a5394908ec60f2a1dee277068243edeffa847a5e081f908c0ded2edefed5217fc6ea22e3814f122538d704908cfc8f4db"], 0x50) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r4, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') kernel console output (not intermixed with test programs): [ 84.922734][ T7221] 9pnet_fd: Insufficient options for proto=fd [ 84.989881][ T7225] loop3: detected capacity change from 0 to 1024 [ 85.036269][ T7225] EXT4-fs error (device loop3): mb_free_blocks:1948: group 0, inode 18: block 177:freeing already freed block (bit 11); block bitmap corrupt. [ 85.160142][ T7240] loop4: detected capacity change from 0 to 1024 [ 85.320767][ T7258] loop3: detected capacity change from 0 to 8192 [ 85.420805][ T7267] loop3: detected capacity change from 0 to 1024 [ 85.450048][ T7267] EXT4-fs error (device loop3): mb_free_blocks:1948: group 0, inode 18: block 177:freeing already freed block (bit 11); block bitmap corrupt. [ 85.522397][ T7278] loop0: detected capacity change from 0 to 128 [ 85.649554][ T7289] loop1: detected capacity change from 0 to 1024 [ 85.702241][ T7294] 9pnet_fd: Insufficient options for proto=fd [ 85.757704][ T7287] loop2: detected capacity change from 0 to 8192 [ 85.784346][ T7297] ipip0: entered promiscuous mode [ 85.910572][ T7305] team0: Port device geneve1 removed [ 85.943568][ T7314] netlink: 'syz.3.1064': attribute type 27 has an invalid length. [ 85.943701][ T1079] hid-generic 0000:0000:0000.003C: unknown main item tag 0x0 [ 85.959363][ T7314] 0ªî{X¹¦: left allmulticast mode [ 85.964835][ T1079] hid-generic 0000:0000:0000.003C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 86.048308][ T7322] loop2: detected capacity change from 0 to 512 [ 86.062585][ T7322] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 86.087457][ T7322] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 86.103617][ T7322] EXT4-fs (loop2): 1 truncate cleaned up [ 86.166089][ T7333] macvlan1: entered promiscuous mode [ 86.173328][ T7333] ipvlan0: entered promiscuous mode [ 86.182858][ T7333] ipvlan0: left promiscuous mode [ 86.192579][ T10] hid-generic 0000:0000:0000.003D: unknown main item tag 0x0 [ 86.202551][ T7333] macvlan1: left promiscuous mode [ 86.206300][ T10] hid-generic 0000:0000:0000.003D: hidraw1: HID v0.00 Device [syz1] on syz0 [ 86.238918][ T7336] fido_id[7336]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 86.279744][ T7332] loop2: detected capacity change from 0 to 8192 [ 86.434615][ T7354] loop1: detected capacity change from 0 to 512 [ 86.466622][ T7354] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 86.508041][ T7354] ext4 filesystem being mounted at /195/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 86.564822][ T7344] loop3: detected capacity change from 0 to 512 [ 86.593238][ T7344] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 86.620480][ T7344] ext4 filesystem being mounted at /218/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 86.719844][ T7361] ªªªªªª: renamed from tunl0 [ 86.791077][ T7381] loop4: detected capacity change from 0 to 512 [ 86.798852][ T7381] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 86.836884][ T7381] ext4 filesystem being mounted at /218/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 86.909607][ T7389] loop1: detected capacity change from 0 to 1024 [ 86.915122][ T7391] loop2: detected capacity change from 0 to 1024 [ 86.936116][ T7393] loop4: detected capacity change from 0 to 128 [ 86.998268][ T7391] EXT4-fs error (device loop2): mb_free_blocks:1948: group 0, inode 18: block 177:freeing already freed block (bit 11); block bitmap corrupt. [ 87.541365][ T7407] loop0: detected capacity change from 0 to 512 [ 87.621914][ T7407] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 87.651188][ T7407] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 87.667082][ T7407] EXT4-fs (loop0): 1 truncate cleaned up [ 87.734049][ T7418] xt_hashlimit: size too large, truncated to 1048576 [ 87.740913][ T7418] xt_hashlimit: Unknown mode mask 80FF, kernel too old? [ 87.780784][ T7418] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=10 sclass=netlink_route_socket pid=7418 comm=syz.3.1102 [ 87.918075][ T7443] loop0: detected capacity change from 0 to 512 [ 87.928986][ T7442] netlink: 'syz.4.1110': attribute type 27 has an invalid length. [ 87.937934][ T7443] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 87.948934][ T7442] __nla_validate_parse: 44 callbacks suppressed [ 87.948951][ T7442] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1110'. [ 87.964255][ T7442] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1110'. [ 87.998288][ T7443] ext4 filesystem being mounted at /229/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 88.016758][ T7442] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1110'. [ 88.090852][ T7442] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1110'. [ 88.099828][ T7442] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1110'. [ 88.123446][ T7447] loop2: detected capacity change from 0 to 1024 [ 88.176639][ T7442] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1110'. [ 88.190113][ T10] hid-generic 0000:0000:0000.003E: unknown main item tag 0x0 [ 88.209935][ T10] hid-generic 0000:0000:0000.003E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 88.277933][ T7442] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1110'. [ 88.286997][ T7442] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1110'. [ 88.301202][ T7459] fido_id[7459]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 88.318078][ T7442] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1110'. [ 88.814539][ T7507] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1125'. [ 88.837289][ T7511] loop0: detected capacity change from 0 to 128 [ 88.850458][ T7514] loop2: detected capacity change from 0 to 512 [ 88.861660][ T7510] IPVS: Error joining to the multicast group [ 88.879626][ T29] kauditd_printk_skb: 329 callbacks suppressed [ 88.879686][ T29] audit: type=1326 audit(1749134083.816:4154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7505 comm="syz.0.1126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24114fe929 code=0x7ffc0000 [ 88.909434][ T29] audit: type=1326 audit(1749134083.816:4155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7505 comm="syz.0.1126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=292 compat=0 ip=0x7f24114fe929 code=0x7ffc0000 [ 88.932880][ T29] audit: type=1326 audit(1749134083.816:4156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7505 comm="syz.0.1126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24114fe929 code=0x7ffc0000 [ 88.956343][ T29] audit: type=1326 audit(1749134083.816:4157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7505 comm="syz.0.1126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f24114fe929 code=0x7ffc0000 [ 88.980180][ T29] audit: type=1326 audit(1749134083.816:4158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7505 comm="syz.0.1126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24114fe929 code=0x7ffc0000 [ 88.981705][ T7514] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 89.003841][ T29] audit: type=1326 audit(1749134083.816:4159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7505 comm="syz.0.1126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f24114fe929 code=0x7ffc0000 [ 89.003881][ T29] audit: type=1326 audit(1749134083.816:4160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7505 comm="syz.0.1126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24114fe929 code=0x7ffc0000 [ 89.041570][ T7514] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, [ 89.060980][ T29] audit: type=1326 audit(1749134083.816:4161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7505 comm="syz.0.1126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f24114fe929 code=0x7ffc0000 [ 89.061019][ T29] audit: type=1326 audit(1749134083.816:4162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7505 comm="syz.0.1126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24114fe929 code=0x7ffc0000 [ 89.069295][ T7514] block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 89.072264][ T7514] EXT4-fs (loop2): 1 truncate cleaned up [ 89.189416][ T29] audit: type=1400 audit(1749134084.106:4163): avc: denied { create } for pid=7508 comm="syz.1.1127" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 89.281331][ T7541] ipvlan0: entered promiscuous mode [ 89.290958][ T7541] ipvlan0: left promiscuous mode [ 89.480545][ T7561] loop3: detected capacity change from 0 to 1024 [ 89.544877][ T7574] loop1: detected capacity change from 0 to 1024 [ 89.586420][ T7574] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 89.637618][ T7574] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 89.667867][ T7574] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c840e02c, mo2=0000] [ 89.705274][ T7574] EXT4-fs error (device loop1): ext4_map_blocks:780: inode #3: block 2: comm syz.1.1140: lblock 2 mapped to illegal pblock 2 (length 1) [ 89.790327][ T7574] EXT4-fs (loop1): Remounting filesystem read-only [ 89.841712][ T7574] EXT4-fs (loop1): 1 orphan inode deleted [ 89.934772][ T7574] loop1: detected capacity change from 0 to 512 [ 89.980306][ T7574] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.1140: Failed to acquire dquot type 1 [ 89.994778][ T7574] EXT4-fs (loop1): 1 truncate cleaned up [ 90.002677][ T7574] ext4 filesystem being mounted at /204/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 90.341186][ T1079] hid-generic 0000:0000:0000.003F: unknown main item tag 0x0 [ 90.349614][ T1079] hid-generic 0000:0000:0000.003F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 90.394644][ T7609] fido_id[7609]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 90.457098][ T7612] loop4: detected capacity change from 0 to 512 [ 90.483884][ T7612] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 90.508167][ T7612] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 90.527434][ T7612] EXT4-fs (loop4): 1 truncate cleaned up [ 90.592011][ T7616] macvlan1: entered promiscuous mode [ 90.603753][ T7616] ipvlan0: entered promiscuous mode [ 90.609917][ T7616] ipvlan0: left promiscuous mode [ 90.615357][ T7616] macvlan1: left promiscuous mode [ 90.658580][ T7618] loop2: detected capacity change from 0 to 1024 [ 90.689920][ T7618] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 90.701213][ T7620] loop4: detected capacity change from 0 to 1024 [ 90.707955][ T7618] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 90.720580][ T7620] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 90.731526][ T7620] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 90.743809][ T7618] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c840e02c, mo2=0000] [ 90.754615][ T7623] 0ªî{X¹¦: renamed from gretap0 [ 90.762273][ T7620] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c840e02c, mo2=0000] [ 90.771562][ T7618] EXT4-fs error (device loop2): ext4_map_blocks:780: inode #3: block 2: comm syz.2.1154: lblock 2 mapped to illegal pblock 2 (length 1) [ 90.787466][ T7623] 0ªî{X¹¦: entered allmulticast mode [ 90.793699][ T7618] EXT4-fs (loop2): Remounting filesystem read-only [ 90.801189][ T7620] EXT4-fs error (device loop4): ext4_map_blocks:780: inode #3: block 2: comm syz.4.1155: lblock 2 mapped to illegal pblock 2 (length 1) [ 90.815757][ T7623] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 90.833155][ T7620] EXT4-fs (loop4): Remounting filesystem read-only [ 90.841776][ T7620] EXT4-fs (loop4): 1 orphan inode deleted [ 90.853635][ T7623] loop1: detected capacity change from 0 to 1024 [ 90.861194][ T7618] EXT4-fs (loop2): 1 orphan inode deleted [ 90.870103][ T7623] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 90.878896][ T7623] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 90.900397][ T7618] loop2: detected capacity change from 0 to 512 [ 90.909541][ T7623] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c840e02c, mo2=0000] [ 90.931329][ T7618] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.1154: Failed to acquire dquot type 1 [ 90.946700][ T7623] EXT4-fs error (device loop1): ext4_map_blocks:780: inode #3: block 2: comm syz.1.1156: lblock 2 mapped to illegal pblock 2 (length 1) [ 90.952957][ T7630] netlink: 'syz.4.1157': attribute type 27 has an invalid length. [ 90.969535][ T7623] EXT4-fs (loop1): Remounting filesystem read-only [ 90.976780][ T7618] EXT4-fs (loop2): 1 truncate cleaned up [ 90.987465][ T7618] ext4 filesystem being mounted at /240/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 91.003518][ T7623] EXT4-fs (loop1): 1 orphan inode deleted [ 91.053141][ T7623] loop1: detected capacity change from 0 to 512 [ 91.080250][ T7638] loop2: detected capacity change from 0 to 1024 [ 91.109811][ T7623] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.1156: Failed to acquire dquot type 1 [ 91.149730][ T7643] loop0: detected capacity change from 0 to 512 [ 91.167713][ T7638] EXT4-fs error (device loop2): mb_free_blocks:1948: group 0, inode 18: block 177:freeing already freed block (bit 11); block bitmap corrupt. [ 91.190750][ T7623] EXT4-fs (loop1): 1 truncate cleaned up [ 91.207178][ T7623] ext4 filesystem being mounted at /210/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 91.225719][ T7643] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 91.274741][ T7643] ext4 filesystem being mounted at /242/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 91.391837][ T7670] loop0: detected capacity change from 0 to 1024 [ 91.401705][ T7670] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 91.437188][ T7670] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 91.457042][ T7670] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c840e02c, mo2=0000] [ 91.485096][ T7670] EXT4-fs error (device loop0): ext4_map_blocks:780: inode #3: block 2: comm syz.0.1168: lblock 2 mapped to illegal pblock 2 (length 1) [ 91.504790][ T7670] EXT4-fs (loop0): Remounting filesystem read-only [ 91.514965][ T7670] EXT4-fs (loop0): 1 orphan inode deleted [ 91.542734][ T7666] loop4: detected capacity change from 0 to 512 [ 91.568500][ T7666] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 91.621594][ T7666] ext4 filesystem being mounted at /235/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 91.743349][ T7673] loop2: detected capacity change from 0 to 512 [ 91.782819][ T7673] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 91.805044][ T7673] ext4 filesystem being mounted at /243/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 91.927562][ T7693] loop4: detected capacity change from 0 to 1024 [ 91.989887][ T7695] macvlan1: entered promiscuous mode [ 92.006105][ T7695] ipvlan0: entered promiscuous mode [ 92.012082][ T7695] ipvlan0: left promiscuous mode [ 92.038887][ T7695] macvlan1: left promiscuous mode [ 92.103317][ T7706] 9pnet_fd: Insufficient options for proto=fd [ 92.287566][ T7704] ªªªªªª: renamed from tunl0 [ 92.307583][ T7718] loop0: detected capacity change from 0 to 512 [ 92.321310][ T7718] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 92.349434][ T7718] ext4 filesystem being mounted at /247/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 92.429554][ T1079] hid (null): unknown global tag 0xc [ 92.437252][ T1079] hid-generic 0009:0000:01FF.0040: unknown main item tag 0x1 [ 92.444794][ T1079] hid-generic 0009:0000:01FF.0040: unknown main item tag 0x3 [ 92.452323][ T1079] hid-generic 0009:0000:01FF.0040: unknown main item tag 0x1 [ 92.459796][ T1079] hid-generic 0009:0000:01FF.0040: unknown main item tag 0x6 [ 92.467327][ T1079] hid-generic 0009:0000:01FF.0040: unknown global tag 0xc [ 92.474482][ T1079] hid-generic 0009:0000:01FF.0040: item 0 1 1 12 parsing failed [ 92.482321][ T1079] hid-generic 0009:0000:01FF.0040: probe with driver hid-generic failed with error -22 [ 92.519011][ T7727] loop2: detected capacity change from 0 to 128 [ 92.578779][ T7729] loop2: detected capacity change from 0 to 512 [ 92.598867][ T7725] loop0: detected capacity change from 0 to 8192 [ 92.638599][ T7729] ext4 filesystem being mounted at /250/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 92.664599][ T7729] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #2: comm syz.2.1186: corrupted inode contents [ 92.716056][ T7729] EXT4-fs error (device loop2): ext4_dirty_inode:6459: inode #2: comm syz.2.1186: mark_inode_dirty error [ 92.736223][ T7729] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #2: comm syz.2.1186: corrupted inode contents [ 92.748502][ T7739] loop1: detected capacity change from 0 to 1024 [ 92.769875][ T7729] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #2: comm syz.2.1186: corrupted inode contents [ 92.819045][ T7729] EXT4-fs error (device loop2): ext4_dirty_inode:6459: inode #2: comm syz.2.1186: mark_inode_dirty error [ 92.854907][ T7729] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #2: comm syz.2.1186: corrupted inode contents [ 92.874472][ T7729] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #2: comm syz.2.1186: mark_inode_dirty error [ 92.896335][ T7729] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #2: comm syz.2.1186: corrupted inode contents [ 92.909818][ T7729] EXT4-fs error (device loop2): ext4_dirty_inode:6459: inode #2: comm syz.2.1186: mark_inode_dirty error [ 92.956985][ T7761] loop4: detected capacity change from 0 to 512 [ 92.983004][ T7761] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 93.016735][ T7761] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 93.035401][ T7765] __nla_validate_parse: 51 callbacks suppressed [ 93.035421][ T7765] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1196'. [ 93.036124][ T7761] EXT4-fs (loop4): 1 truncate cleaned up [ 93.228910][ T7768] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1196'. [ 93.239336][ T7775] loop4: detected capacity change from 0 to 8192 [ 93.300860][ T7777] loop0: detected capacity change from 0 to 1024 [ 93.367972][ T7782] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1200'. [ 93.393728][ T7782] IPVS: Error joining to the multicast group [ 93.445857][ T10] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0 [ 93.454183][ T10] hid-generic 0000:0000:0000.0041: hidraw0: HID v0.00 Device [syz1] on syz0 [ 93.495627][ T7785] fido_id[7785]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 93.514451][ T7787] loop4: detected capacity change from 0 to 1024 [ 93.575603][ T7787] EXT4-fs error (device loop4): mb_free_blocks:1948: group 0, inode 18: block 177:freeing already freed block (bit 11); block bitmap corrupt. [ 93.616781][ T7795] loop1: detected capacity change from 0 to 512 [ 93.628467][ T7795] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 93.657356][ T7795] ext4 filesystem being mounted at /215/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 93.659166][ T7799] vlan2: entered allmulticast mode [ 93.975240][ T7811] loop3: detected capacity change from 0 to 8192 [ 93.999726][ T7815] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1211'. [ 94.014719][ T7815] 0ªî{X¹¦: renamed from gretap0 [ 94.025572][ T7815] 0ªî{X¹¦: entered allmulticast mode [ 94.042546][ T7815] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 94.063483][ T7817] ipvlan0: entered promiscuous mode [ 94.074150][ T7815] loop0: detected capacity change from 0 to 1024 [ 94.077582][ T7817] ipvlan0: left promiscuous mode [ 94.090582][ T7815] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 94.104740][ T7815] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 94.120395][ T7815] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c840e02c, mo2=0000] [ 94.130796][ T7815] EXT4-fs error (device loop0): ext4_map_blocks:780: inode #3: block 2: comm syz.0.1211: lblock 2 mapped to illegal pblock 2 (length 1) [ 94.145561][ T7815] EXT4-fs (loop0): Remounting filesystem read-only [ 94.152256][ T7815] __quota_error: 289 callbacks suppressed [ 94.152270][ T7815] Quota error (device loop0): qtree_write_dquot: dquota write failed [ 94.174030][ T7815] Quota error (device loop0): v2_write_file_info: Can't write info structure [ 94.186425][ T7815] EXT4-fs (loop0): 1 orphan inode deleted [ 94.203894][ T7824] netlink: 'syz.2.1214': attribute type 10 has an invalid length. [ 94.211926][ T7824] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1214'. [ 94.231074][ T7824] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.239923][ T7824] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.248974][ T7824] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.257956][ T7824] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.269666][ T7824] team0: Port device geneve1 added [ 94.340756][ T7837] netlink: 'syz.3.1218': attribute type 27 has an invalid length. [ 94.439541][ T7845] loop0: detected capacity change from 0 to 8192 [ 94.634708][ T10] hid (null): unknown global tag 0xc [ 94.635403][ T7852] loop4: detected capacity change from 0 to 1024 [ 94.644158][ T10] hid-generic 0009:0000:01FF.0042: unknown main item tag 0x1 [ 94.654209][ T10] hid-generic 0009:0000:01FF.0042: unknown main item tag 0x3 [ 94.661749][ T10] hid-generic 0009:0000:01FF.0042: unknown main item tag 0x1 [ 94.669244][ T10] hid-generic 0009:0000:01FF.0042: unknown main item tag 0x6 [ 94.676731][ T10] hid-generic 0009:0000:01FF.0042: unknown global tag 0xc [ 94.683867][ T10] hid-generic 0009:0000:01FF.0042: item 0 1 1 12 parsing failed [ 94.699596][ T10] hid-generic 0009:0000:01FF.0042: probe with driver hid-generic failed with error -22 [ 94.709432][ T29] audit: type=1326 audit(1749134089.636:4437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7855 comm="syz.0.1227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24114fe929 code=0x7ffc0000 [ 94.732997][ T29] audit: type=1326 audit(1749134089.636:4438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7855 comm="syz.0.1227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24114fe929 code=0x7ffc0000 [ 94.756450][ T29] audit: type=1326 audit(1749134089.636:4439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7855 comm="syz.0.1227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=115 compat=0 ip=0x7f24114fe929 code=0x7ffc0000 [ 94.779896][ T29] audit: type=1326 audit(1749134089.636:4440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7855 comm="syz.0.1227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24114fe929 code=0x7ffc0000 [ 94.779932][ T29] audit: type=1326 audit(1749134089.636:4441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7855 comm="syz.0.1227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f24114fe929 code=0x7ffc0000 [ 94.779965][ T29] audit: type=1326 audit(1749134089.636:4442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7855 comm="syz.0.1227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24114fe929 code=0x7ffc0000 [ 94.807189][ T7860] macvlan1: entered promiscuous mode [ 94.826921][ T29] audit: type=1326 audit(1749134089.636:4443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7855 comm="syz.0.1227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f24114fe929 code=0x7ffc0000 [ 94.826950][ T29] audit: type=1326 audit(1749134089.636:4444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7855 comm="syz.0.1227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24114fe929 code=0x7ffc0000 [ 94.908695][ T7860] ipvlan0: entered promiscuous mode [ 94.914542][ T7860] ipvlan0: left promiscuous mode [ 94.921564][ T7852] EXT4-fs error (device loop4): mb_free_blocks:1948: group 0, inode 18: block 177:freeing already freed block (bit 11); block bitmap corrupt. [ 94.938971][ T7860] macvlan1: left promiscuous mode [ 95.100112][ T7873] loop1: detected capacity change from 0 to 1024 [ 95.178826][ T7875] loop0: detected capacity change from 0 to 8192 [ 95.253675][ T7882] team0: Port device geneve1 removed [ 95.360445][ T3391] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 95.371998][ T3391] hid-generic 0000:0000:0000.0043: hidraw0: HID v0.00 Device [syz1] on syz0 [ 95.386484][ T7895] vlan2: entered allmulticast mode [ 95.470436][ T7899] loop4: detected capacity change from 0 to 1024 [ 95.504137][ T7899] EXT4-fs error (device loop4): mb_free_blocks:1948: group 0, inode 18: block 177:freeing already freed block (bit 11); block bitmap corrupt. [ 95.712448][ T7915] loop4: detected capacity change from 0 to 512 [ 95.720027][ T7915] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 95.739359][ T7915] ext4 filesystem being mounted at /260/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 95.786816][ T7919] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1247'. [ 95.826009][ T7923] loop4: detected capacity change from 0 to 1024 [ 95.835867][ T7923] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 95.844806][ T7923] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 95.855777][ T7923] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c840e02c, mo2=0000] [ 95.865045][ T7923] EXT4-fs error (device loop4): ext4_map_blocks:780: inode #3: block 2: comm syz.4.1249: lblock 2 mapped to illegal pblock 2 (length 1) [ 95.879534][ T7923] EXT4-fs (loop4): Remounting filesystem read-only [ 95.886243][ T7923] EXT4-fs (loop4): 1 orphan inode deleted [ 95.951027][ T7929] netlink: 'syz.4.1251': attribute type 10 has an invalid length. [ 95.959023][ T7929] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1251'. [ 95.968572][ T7929] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.977514][ T7929] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.986394][ T7929] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.995133][ T7929] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.005669][ T7929] team0: Port device geneve1 added [ 96.281105][ T7965] macvlan1: entered promiscuous mode [ 96.297847][ T7965] ipvlan0: entered promiscuous mode [ 96.303961][ T7965] ipvlan0: left promiscuous mode [ 96.318132][ T7965] macvlan1: left promiscuous mode [ 96.319043][ T7975] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1259'. [ 96.395958][ T7984] loop3: detected capacity change from 0 to 512 [ 96.415306][ T7987] netlink: 'syz.2.1262': attribute type 10 has an invalid length. [ 96.423341][ T7987] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1262'. [ 96.439181][ T7984] ext4 filesystem being mounted at /246/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 96.449919][ T7987] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.459089][ T7987] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.468030][ T7987] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.476960][ T7987] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.480799][ T7984] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #2: comm syz.3.1260: corrupted inode contents [ 96.547452][ T7984] EXT4-fs error (device loop3): ext4_dirty_inode:6459: inode #2: comm syz.3.1260: mark_inode_dirty error [ 96.573276][ T7984] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #2: comm syz.3.1260: corrupted inode contents [ 96.594728][ T8000] netlink: 'syz.4.1264': attribute type 27 has an invalid length. [ 96.601437][ T7997] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #2: comm syz.3.1260: corrupted inode contents [ 96.614802][ T7997] EXT4-fs error (device loop3): ext4_dirty_inode:6459: inode #2: comm syz.3.1260: mark_inode_dirty error [ 96.626662][ T8000] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.635615][ T8000] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.644597][ T8000] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.653535][ T8000] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.666049][ T7997] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #2: comm syz.3.1260: corrupted inode contents [ 96.682460][ T7997] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #2: comm syz.3.1260: mark_inode_dirty error [ 96.682819][ T8004] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1264'. [ 96.702947][ T7997] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #2: comm syz.3.1260: corrupted inode contents [ 96.715044][ T7997] EXT4-fs error (device loop3): ext4_dirty_inode:6459: inode #2: comm syz.3.1260: mark_inode_dirty error [ 96.789033][ T8011] loop0: detected capacity change from 0 to 512 [ 96.818701][ T8011] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 96.840559][ T8011] ext4 filesystem being mounted at /267/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 96.864550][ T8023] netlink: 'syz.4.1271': attribute type 27 has an invalid length. [ 96.935724][ T8033] loop1: detected capacity change from 0 to 1024 [ 96.963246][ T8035] ipvlan0: entered promiscuous mode [ 96.977205][ T8035] ipvlan0: left promiscuous mode [ 96.999932][ T8033] EXT4-fs error (device loop1): mb_free_blocks:1948: group 0, inode 18: block 177:freeing already freed block (bit 11); block bitmap corrupt. [ 97.037014][ T8042] netlink: 'syz.0.1274': attribute type 10 has an invalid length. [ 97.045304][ T8042] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.054197][ T8042] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.062975][ T8042] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.071734][ T8042] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.089955][ T8042] team0: Port device geneve1 added [ 97.095591][ T8014] ªªªªªª: renamed from tunl0 [ 97.137175][ T8042] syz.0.1274 (8042) used greatest stack depth: 10104 bytes left [ 97.205201][ T8055] loop0: detected capacity change from 0 to 128 [ 97.260428][ T8058] loop4: detected capacity change from 0 to 1024 [ 97.505138][ T8077] loop0: detected capacity change from 0 to 1024 [ 97.530429][ T8080] 1ªî{X¹¦: renamed from 30ªî{X¹¦ [ 97.545579][ T8080] 1ªî{X¹¦: entered allmulticast mode [ 97.578727][ T8080] A link change request failed with some changes committed already. Interface 31ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 97.607105][ T8083] loop3: detected capacity change from 0 to 1024 [ 97.617225][ T8083] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 97.641252][ T8083] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 97.681834][ T8083] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c840e02c, mo2=0000] [ 97.703076][ T8083] EXT4-fs error (device loop3): ext4_map_blocks:780: inode #3: block 2: comm syz.3.1284: lblock 2 mapped to illegal pblock 2 (length 1) [ 97.717874][ T8083] EXT4-fs (loop3): Remounting filesystem read-only [ 97.724581][ T8083] EXT4-fs (loop3): 1 orphan inode deleted [ 97.733278][ T8083] EXT4-fs mount: 90 callbacks suppressed [ 97.733358][ T8083] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 97.773263][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.788291][ T8088] loop1: detected capacity change from 0 to 1024 [ 97.818037][ T8088] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 97.870999][ T8088] EXT4-fs error (device loop1): mb_free_blocks:1948: group 0, inode 18: block 177:freeing already freed block (bit 11); block bitmap corrupt. [ 97.962379][ T8102] macvlan1: entered promiscuous mode [ 97.965702][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.971763][ T8102] ipvlan0: entered promiscuous mode [ 97.982923][ T8102] ipvlan0: left promiscuous mode [ 97.992455][ T8102] macvlan1: left promiscuous mode [ 98.048786][ T8106] __nla_validate_parse: 33 callbacks suppressed [ 98.048806][ T8106] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1291'. [ 98.064880][ T8106] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1291'. [ 98.105287][ T8106] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1291'. [ 98.154811][ T8106] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1291'. [ 98.163813][ T8106] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1291'. [ 98.195921][ T8106] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1291'. [ 98.262134][ T8120] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1297'. [ 98.349766][ T8130] netlink: 'syz.2.1299': attribute type 27 has an invalid length. [ 98.377172][ T8130] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1299'. [ 98.386508][ T8130] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1299'. [ 98.398549][ T8130] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1299'. [ 98.414607][ T8135] loop0: detected capacity change from 0 to 1024 [ 98.422852][ T8133] loop4: detected capacity change from 0 to 1024 [ 98.435445][ T8135] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 98.439179][ T8133] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 98.454757][ T8133] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 98.475902][ T8133] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c840e02c, mo2=0000] [ 98.478829][ T8135] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 98.485307][ T8133] EXT4-fs error (device loop4): ext4_map_blocks:780: inode #3: block 2: comm syz.4.1300: lblock 2 mapped to illegal pblock 2 (length 1) [ 98.509912][ T8133] EXT4-fs (loop4): Remounting filesystem read-only [ 98.510545][ T8135] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c840e02c, mo2=0000] [ 98.524971][ T8133] EXT4-fs (loop4): 1 orphan inode deleted [ 98.526532][ T8135] EXT4-fs error (device loop0): ext4_map_blocks:780: inode #3: block 2: comm syz.0.1301: lblock 2 mapped to illegal pblock 2 (length 1) [ 98.545172][ T8133] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 98.557878][ T8133] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.573610][ T8135] EXT4-fs (loop0): Remounting filesystem read-only [ 98.573988][ T8143] loop2: detected capacity change from 0 to 1024 [ 98.588029][ T8135] EXT4-fs (loop0): 1 orphan inode deleted [ 98.609369][ T8135] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 98.609466][ T8143] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 98.665756][ T3321] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.667708][ T8143] EXT4-fs error (device loop2): mb_free_blocks:1948: group 0, inode 18: block 177:freeing already freed block (bit 11); block bitmap corrupt. [ 98.675620][ T8147] team0: Port device geneve1 removed [ 98.721427][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.776243][ T8149] loop0: detected capacity change from 0 to 8192 [ 98.804743][ T8153] team0: Port device geneve1 removed [ 98.869139][ T8155] loop2: detected capacity change from 0 to 1024 [ 98.878561][ T8155] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 98.890171][ T8157] loop0: detected capacity change from 0 to 512 [ 98.899196][ T8157] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 98.915209][ T8155] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 98.932364][ T8155] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c840e02c, mo2=0000] [ 98.942989][ T8157] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.961884][ T8155] EXT4-fs error (device loop2): ext4_map_blocks:780: inode #3: block 2: comm syz.2.1307: lblock 2 mapped to illegal pblock 2 (length 1) [ 98.984211][ T8151] ªªªªªª: renamed from tunl0 [ 98.998125][ T8155] EXT4-fs (loop2): Remounting filesystem read-only [ 99.004860][ T8157] ext4 filesystem being mounted at /275/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 99.015423][ T8155] EXT4-fs (loop2): 1 orphan inode deleted [ 99.022838][ T8155] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 99.042686][ T8155] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.066375][ T3321] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.148474][ T8174] loop2: detected capacity change from 0 to 1024 [ 99.160541][ T8174] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 99.179045][ T8174] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 99.218157][ T8174] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c840e02c, mo2=0000] [ 99.230610][ T8181] loop0: detected capacity change from 0 to 512 [ 99.248302][ T8181] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 99.273303][ T8174] EXT4-fs error (device loop2): ext4_map_blocks:780: inode #3: block 2: comm syz.2.1313: lblock 2 mapped to illegal pblock 2 (length 1) [ 99.289223][ T8174] EXT4-fs (loop2): Remounting filesystem read-only [ 99.295770][ T8174] __quota_error: 130 callbacks suppressed [ 99.295786][ T8174] Quota error (device loop2): qtree_write_dquot: dquota write failed [ 99.308587][ T8181] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.322231][ T8174] Quota error (device loop2): v2_write_file_info: Can't write info structure [ 99.331144][ T8174] EXT4-fs (loop2): 1 orphan inode deleted [ 99.337446][ T8174] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 99.344407][ T8181] ext4 filesystem being mounted at /277/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 99.358140][ T8174] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.414064][ T8188] loop3: detected capacity change from 0 to 1024 [ 99.422057][ T3321] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.450133][ T8188] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 99.461907][ T8188] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 99.473628][ T8188] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c840e02c, mo2=0000] [ 99.495167][ T8188] EXT4-fs error (device loop3): ext4_map_blocks:780: inode #3: block 2: comm syz.3.1316: lblock 2 mapped to illegal pblock 2 (length 1) [ 99.509657][ T8188] EXT4-fs (loop3): Remounting filesystem read-only [ 99.516247][ T8188] Quota error (device loop3): qtree_write_dquot: dquota write failed [ 99.528018][ T8188] Quota error (device loop3): v2_write_file_info: Can't write info structure [ 99.537090][ T8188] EXT4-fs (loop3): 1 orphan inode deleted [ 99.543560][ T8188] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 99.565377][ T8196] IPVS: Error joining to the multicast group [ 99.579549][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.647780][ T8203] loop2: detected capacity change from 0 to 2048 [ 99.664807][ T8208] loop3: detected capacity change from 0 to 512 [ 99.740324][ T8216] IPVS: Error joining to the multicast group [ 99.754312][ T8208] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 99.768464][ T8208] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.771970][ T8203] loop2: p3 < > p4 < > [ 99.781771][ T8208] ext4 filesystem being mounted at /258/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 99.785137][ T8203] loop2: partition table partially beyond EOD, truncated [ 99.802983][ T8203] loop2: p3 start 4284289 is beyond EOD, truncated [ 99.828266][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.845796][ T8223] 9pnet_fd: Insufficient options for proto=fd [ 99.904859][ T8227] loop3: detected capacity change from 0 to 1024 [ 99.933749][ T8225] loop4: detected capacity change from 0 to 8192 [ 99.937566][ T8227] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 99.969172][ T8227] EXT4-fs error (device loop3): mb_free_blocks:1948: group 0, inode 18: block 177:freeing already freed block (bit 11); block bitmap corrupt. [ 100.005681][ T3391] hid (null): unknown global tag 0xc [ 100.017951][ T3391] hid-generic 0009:0000:01FF.0044: unknown main item tag 0x1 [ 100.025404][ T3391] hid-generic 0009:0000:01FF.0044: unknown main item tag 0x3 [ 100.033036][ T3391] hid-generic 0009:0000:01FF.0044: unknown main item tag 0x1 [ 100.033194][ T8233] loop4: detected capacity change from 0 to 512 [ 100.040664][ T3391] hid-generic 0009:0000:01FF.0044: unknown main item tag 0x6 [ 100.040695][ T3391] hid-generic 0009:0000:01FF.0044: unknown global tag 0xc [ 100.061538][ T3391] hid-generic 0009:0000:01FF.0044: item 0 1 1 12 parsing failed [ 100.061877][ T8233] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 100.073789][ T3391] hid-generic 0009:0000:01FF.0044: probe with driver hid-generic failed with error -22 [ 100.079421][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.099560][ T8233] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.112803][ T8233] ext4 filesystem being mounted at /280/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 100.156374][ T8237] loop2: detected capacity change from 0 to 512 [ 100.165301][ T29] audit: type=1326 audit(1749134095.096:4565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8240 comm="syz.3.1332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca0298e929 code=0x7ffc0000 [ 100.185451][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.191215][ T29] audit: type=1326 audit(1749134095.096:4566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8240 comm="syz.3.1332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fca0298e929 code=0x7ffc0000 [ 100.221177][ T29] audit: type=1326 audit(1749134095.096:4567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8240 comm="syz.3.1332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca0298e929 code=0x7ffc0000 [ 100.244614][ T29] audit: type=1326 audit(1749134095.096:4568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8240 comm="syz.3.1332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fca0298e929 code=0x7ffc0000 [ 100.268167][ T29] audit: type=1326 audit(1749134095.096:4569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8240 comm="syz.3.1332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca0298e929 code=0x7ffc0000 [ 100.291749][ T29] audit: type=1326 audit(1749134095.096:4570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8240 comm="syz.3.1332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fca0298e929 code=0x7ffc0000 [ 100.357297][ T8237] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.379277][ T8249] 9pnet: Could not find request transport: fd€ [ 100.385654][ T8237] ext4 filesystem being mounted at /276/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 100.400402][ T8253] loop3: detected capacity change from 0 to 1024 [ 100.443051][ T8237] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #2: comm syz.2.1331: corrupted inode contents [ 100.460047][ T8237] EXT4-fs error (device loop2): ext4_dirty_inode:6459: inode #2: comm syz.2.1331: mark_inode_dirty error [ 100.472347][ T8237] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #2: comm syz.2.1331: corrupted inode contents [ 100.496622][ T8237] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #2: comm syz.2.1331: corrupted inode contents [ 100.516206][ T8237] EXT4-fs error (device loop2): ext4_dirty_inode:6459: inode #2: comm syz.2.1331: mark_inode_dirty error [ 100.527891][ T8237] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #2: comm syz.2.1331: corrupted inode contents [ 100.544794][ T8237] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #2: comm syz.2.1331: mark_inode_dirty error [ 100.559135][ T8237] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #2: comm syz.2.1331: corrupted inode contents [ 100.572862][ T8237] EXT4-fs error (device loop2): ext4_dirty_inode:6459: inode #2: comm syz.2.1331: mark_inode_dirty error [ 100.652887][ T3391] hid (null): unknown global tag 0xc [ 100.660261][ T3391] hid-generic 0009:0000:01FF.0045: unknown main item tag 0x1 [ 100.667893][ T3391] hid-generic 0009:0000:01FF.0045: unknown main item tag 0x3 [ 100.675381][ T3391] hid-generic 0009:0000:01FF.0045: unknown main item tag 0x1 [ 100.682918][ T3391] hid-generic 0009:0000:01FF.0045: unknown main item tag 0x6 [ 100.690381][ T3391] hid-generic 0009:0000:01FF.0045: unknown global tag 0xc [ 100.697656][ T3391] hid-generic 0009:0000:01FF.0045: item 0 1 1 12 parsing failed [ 100.716395][ T3391] hid-generic 0009:0000:01FF.0045: probe with driver hid-generic failed with error -22 [ 100.764677][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.819855][ T8286] loop1: detected capacity change from 0 to 1024 [ 100.855918][ T8286] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 100.864720][ T8286] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 100.888274][ T8286] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c840e02c, mo2=0000] [ 100.891260][ T8290] syz.2.1347 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 100.897747][ T8286] EXT4-fs error (device loop1): ext4_map_blocks:780: inode #3: block 2: comm syz.1.1346: lblock 2 mapped to illegal pblock 2 (length 1) [ 100.921304][ T8286] EXT4-fs (loop1): Remounting filesystem read-only [ 100.930624][ T8286] EXT4-fs (loop1): 1 orphan inode deleted [ 100.937048][ T8286] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 100.969566][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.058011][ T1079] hid (null): unknown global tag 0xc [ 101.064538][ T1079] hid-generic 0009:0000:01FF.0046: unknown main item tag 0x1 [ 101.072137][ T1079] hid-generic 0009:0000:01FF.0046: unknown main item tag 0x3 [ 101.080104][ T1079] hid-generic 0009:0000:01FF.0046: unknown main item tag 0x1 [ 101.087582][ T1079] hid-generic 0009:0000:01FF.0046: unknown main item tag 0x6 [ 101.095290][ T1079] hid-generic 0009:0000:01FF.0046: unknown global tag 0xc [ 101.102499][ T1079] hid-generic 0009:0000:01FF.0046: item 0 1 1 12 parsing failed [ 101.114215][ T1079] hid-generic 0009:0000:01FF.0046: probe with driver hid-generic failed with error -22 [ 101.187057][ T8320] xt_recent: hitcount (4294967295) is larger than allowed maximum (65535) [ 101.243096][ T8326] loop1: detected capacity change from 0 to 512 [ 101.263796][ T3391] hid-generic 0000:0000:0000.0047: unknown main item tag 0x0 [ 101.272436][ T3391] hid-generic 0000:0000:0000.0047: hidraw0: HID v0.00 Device [syz1] on syz0 [ 101.284366][ T8326] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.297407][ T8326] ext4 filesystem being mounted at /239/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 101.310296][ T8326] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #2: comm syz.1.1361: corrupted inode contents [ 101.322429][ T8326] EXT4-fs error (device loop1): ext4_dirty_inode:6459: inode #2: comm syz.1.1361: mark_inode_dirty error [ 101.334351][ T8326] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #2: comm syz.1.1361: corrupted inode contents [ 101.348387][ T8326] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #2: comm syz.1.1361: corrupted inode contents [ 101.360469][ T8326] EXT4-fs error (device loop1): ext4_dirty_inode:6459: inode #2: comm syz.1.1361: mark_inode_dirty error [ 101.372216][ T8326] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #2: comm syz.1.1361: corrupted inode contents [ 101.384275][ T8326] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #2: comm syz.1.1361: mark_inode_dirty error [ 101.395858][ T8326] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #2: comm syz.1.1361: corrupted inode contents [ 101.407930][ T8326] EXT4-fs error (device loop1): ext4_dirty_inode:6459: inode #2: comm syz.1.1361: mark_inode_dirty error [ 101.431743][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.608639][ T8343] loop1: detected capacity change from 0 to 1024 [ 101.703468][ T8350] loop4: detected capacity change from 0 to 8192 [ 101.928578][ T8361] netlink: 'syz.3.1373': attribute type 27 has an invalid length. [ 101.936820][ T8361] 1ªî{X¹¦: left allmulticast mode [ 102.621927][ T8379] loop4: detected capacity change from 0 to 1024 [ 102.630358][ T8379] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 102.639166][ T8379] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 102.650420][ T8379] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c840e02c, mo2=0000] [ 102.659530][ T8379] EXT4-fs error (device loop4): ext4_map_blocks:780: inode #3: block 2: comm syz.4.1378: lblock 2 mapped to illegal pblock 2 (length 1) [ 102.673788][ T8379] EXT4-fs (loop4): Remounting filesystem read-only [ 102.680727][ T8379] EXT4-fs (loop4): 1 orphan inode deleted [ 102.687055][ T8379] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 102.710484][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.757392][ T8382] loop4: detected capacity change from 0 to 8192 [ 102.796015][ T8384] 9pnet_fd: Insufficient options for proto=fd [ 102.825527][ T8387] netlink: 'syz.4.1382': attribute type 27 has an invalid length. [ 102.912814][ T8397] netlink: 'syz.2.1385': attribute type 27 has an invalid length. [ 102.923914][ T8399] netlink: 'syz.4.1386': attribute type 10 has an invalid length. [ 102.934535][ T8399] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.943325][ T8399] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.952096][ T8399] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.960421][ T8402] loop3: detected capacity change from 0 to 1024 [ 102.960837][ T8399] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.995439][ T8402] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 102.999157][ T8399] team0: Port device geneve1 added [ 103.056758][ T8402] EXT4-fs error (device loop3): mb_free_blocks:1948: group 0, inode 18: block 177:freeing already freed block (bit 11); block bitmap corrupt. [ 103.080927][ T8414] loop0: detected capacity change from 0 to 1024 [ 103.132115][ T8419] loop4: detected capacity change from 0 to 2048 [ 103.142408][ T8414] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 103.152132][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.157722][ T8420] loop2: detected capacity change from 0 to 8192 [ 103.163575][ T8414] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 103.191843][ T8414] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c840e02c, mo2=0000] [ 103.200491][ T3306] loop4: p3 < > p4 < > [ 103.204687][ T3306] loop4: partition table partially beyond EOD, truncated [ 103.213150][ T8414] EXT4-fs error (device loop0): ext4_map_blocks:780: inode #3: block 2: comm syz.0.1390: lblock 2 mapped to illegal pblock 2 (length 1) [ 103.229762][ T8414] EXT4-fs (loop0): Remounting filesystem read-only [ 103.236711][ T8414] EXT4-fs (loop0): 1 orphan inode deleted [ 103.244704][ T8414] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.258522][ T3306] loop4: p3 start 4284289 is beyond EOD, truncated [ 103.269730][ T8414] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.283184][ T8425] loop1: detected capacity change from 0 to 1024 [ 103.292319][ T8425] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 103.304844][ T8425] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 103.313005][ T8429] __nla_validate_parse: 63 callbacks suppressed [ 103.313031][ T8429] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1395'. [ 103.333678][ T8419] loop4: p3 < > p4 < > [ 103.338032][ T8419] loop4: partition table partially beyond EOD, truncated [ 103.360337][ T8425] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c840e02c, mo2=0000] [ 103.369390][ T8419] loop4: p3 start 4284289 is beyond EOD, truncated [ 103.382940][ T8425] EXT4-fs error (device loop1): ext4_map_blocks:780: inode #3: block 2: comm syz.1.1394: lblock 2 mapped to illegal pblock 2 (length 1) [ 103.416235][ T3309] udevd[3309]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 103.440129][ T8425] EXT4-fs (loop1): Remounting filesystem read-only [ 103.447136][ T8425] EXT4-fs (loop1): 1 orphan inode deleted [ 103.457687][ T8437] loop0: detected capacity change from 0 to 1024 [ 103.467441][ T3309] udevd[3309]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 103.479569][ T8425] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.506962][ T8437] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.507297][ T8425] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.550908][ T3321] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.563032][ T8447] loop2: detected capacity change from 0 to 512 [ 103.614682][ T8447] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.628934][ T8447] ext4 filesystem being mounted at /292/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 103.650543][ T8456] netlink: 'syz.0.1403': attribute type 10 has an invalid length. [ 103.658556][ T8456] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1403'. [ 103.671762][ T8456] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.680778][ T8456] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.681611][ T8447] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #2: comm syz.2.1402: corrupted inode contents [ 103.689752][ T8456] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.689835][ T8456] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.722586][ T8447] EXT4-fs error (device loop2): ext4_dirty_inode:6459: inode #2: comm syz.2.1402: mark_inode_dirty error [ 103.741976][ T8447] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #2: comm syz.2.1402: corrupted inode contents [ 103.768229][ T8447] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #2: comm syz.2.1402: corrupted inode contents [ 103.792432][ T8447] EXT4-fs error (device loop2): ext4_dirty_inode:6459: inode #2: comm syz.2.1402: mark_inode_dirty error [ 103.814510][ T8469] loop1: detected capacity change from 0 to 512 [ 103.822757][ T8470] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1408'. [ 103.840658][ T8447] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #2: comm syz.2.1402: corrupted inode contents [ 103.860562][ T8471] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1402'. [ 103.870154][ T8447] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #2: comm syz.2.1402: mark_inode_dirty error [ 103.870977][ T8469] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.895378][ T8447] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #2: comm syz.2.1402: corrupted inode contents [ 103.900317][ T8469] ext4 filesystem being mounted at /246/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 103.926082][ T8447] EXT4-fs error (device loop2): ext4_dirty_inode:6459: inode #2: comm syz.2.1402: mark_inode_dirty error [ 103.969015][ T8475] loop0: detected capacity change from 0 to 2048 [ 103.970230][ T8469] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #2: comm syz.1.1407: corrupted inode contents [ 103.990344][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.000787][ T8469] EXT4-fs error (device loop1): ext4_dirty_inode:6459: inode #2: comm syz.1.1407: mark_inode_dirty error [ 104.017843][ T8475] loop0: p3 < > p4 < > [ 104.019485][ T8469] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #2: comm syz.1.1407: corrupted inode contents [ 104.022011][ T8475] loop0: partition table partially beyond EOD, truncated [ 104.022077][ T8475] loop0: p3 start 4284289 is beyond EOD, truncated [ 104.050114][ T8478] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #2: comm syz.1.1407: corrupted inode contents [ 104.070269][ T3007] loop0: p3 < > p4 < > [ 104.074485][ T3007] loop0: partition table partially beyond EOD, truncated [ 104.087067][ T8478] EXT4-fs error (device loop1): ext4_dirty_inode:6459: inode #2: comm syz.1.1407: mark_inode_dirty error [ 104.098660][ T8477] loop2: detected capacity change from 0 to 1024 [ 104.104893][ T3007] loop0: p3 start 4284289 is beyond EOD, truncated [ 104.123321][ T8478] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #2: comm syz.1.1407: corrupted inode contents [ 104.137504][ T8477] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 104.149542][ T8477] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 104.161341][ T8478] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #2: comm syz.1.1407: mark_inode_dirty error [ 104.185569][ T8478] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #2: comm syz.1.1407: corrupted inode contents [ 104.198778][ T8477] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c840e02c, mo2=0000] [ 104.207940][ T8477] EXT4-fs error (device loop2): ext4_map_blocks:780: inode #3: block 2: comm syz.2.1410: lblock 2 mapped to illegal pblock 2 (length 1) [ 104.223639][ T8478] EXT4-fs error (device loop1): ext4_dirty_inode:6459: inode #2: comm syz.1.1407: mark_inode_dirty error [ 104.236930][ T8477] EXT4-fs (loop2): Remounting filesystem read-only [ 104.248583][ T8477] EXT4-fs (loop2): 1 orphan inode deleted [ 104.254801][ T8477] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 104.257668][ T3309] udevd[3309]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 104.283953][ T3309] udevd[3309]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 104.347711][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.357483][ T8487] loop4: detected capacity change from 0 to 1024 [ 104.382463][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.382493][ T8488] loop0: detected capacity change from 0 to 1024 [ 104.403436][ T8487] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 104.461416][ T8494] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1414'. [ 104.470510][ T8494] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1414'. [ 104.495479][ T8494] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1414'. [ 104.513542][ T8494] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1414'. [ 104.522569][ T8494] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1414'. [ 104.542812][ T8500] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1417'. [ 104.554117][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.613044][ T8507] netlink: 'syz.4.1418': attribute type 10 has an invalid length. [ 104.639284][ T8507] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.648404][ T8507] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.657493][ T8507] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.666449][ T8507] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.706783][ T8513] loop3: detected capacity change from 0 to 2048 [ 104.746400][ T8522] netlink: 'syz.1.1424': attribute type 27 has an invalid length. [ 104.746553][ T8521] xt_recent: hitcount (4294967295) is larger than allowed maximum (65535) [ 104.762976][ T8522] 0ªî{X¹¦: left allmulticast mode [ 104.770033][ T3306] loop3: p3 < > p4 < > [ 104.774218][ T3306] loop3: partition table partially beyond EOD, truncated [ 104.795584][ T29] kauditd_printk_skb: 107 callbacks suppressed [ 104.795603][ T29] audit: type=1326 audit(1749134099.726:4668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8523 comm="syz.4.1426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcfa4ce929 code=0x7ffc0000 [ 104.825534][ T3306] loop3: p3 start 4284289 is beyond EOD, truncated [ 104.834093][ T29] audit: type=1326 audit(1749134099.726:4669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8523 comm="syz.4.1426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcfa4ce929 code=0x7ffc0000 [ 104.857859][ T29] audit: type=1326 audit(1749134099.736:4670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8523 comm="syz.4.1426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fbcfa4ce929 code=0x7ffc0000 [ 104.881276][ T29] audit: type=1326 audit(1749134099.736:4671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8523 comm="syz.4.1426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcfa4ce929 code=0x7ffc0000 [ 104.904843][ T29] audit: type=1326 audit(1749134099.736:4672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8523 comm="syz.4.1426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcfa4ce929 code=0x7ffc0000 [ 104.928307][ T29] audit: type=1326 audit(1749134099.736:4673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8523 comm="syz.4.1426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fbcfa4ce929 code=0x7ffc0000 [ 104.951735][ T29] audit: type=1326 audit(1749134099.736:4674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8523 comm="syz.4.1426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcfa4ce929 code=0x7ffc0000 [ 104.975255][ T29] audit: type=1326 audit(1749134099.736:4675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8523 comm="syz.4.1426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcfa4ce929 code=0x7ffc0000 [ 104.998849][ T29] audit: type=1326 audit(1749134099.736:4676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8523 comm="syz.4.1426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fbcfa4ce929 code=0x7ffc0000 [ 105.022460][ T29] audit: type=1326 audit(1749134099.736:4677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8523 comm="syz.4.1426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcfa4ce929 code=0x7ffc0000 [ 105.047844][ T8513] loop3: p3 < > p4 < > [ 105.052077][ T8513] loop3: partition table partially beyond EOD, truncated [ 105.079853][ T8513] loop3: p3 start 4284289 is beyond EOD, truncated [ 105.136243][ T3007] loop3: p3 < > p4 < > [ 105.140454][ T3007] loop3: partition table partially beyond EOD, truncated [ 105.152639][ T8537] loop1: detected capacity change from 0 to 1024 [ 105.159988][ T3007] loop3: p3 start 4284289 is beyond EOD, truncated [ 105.229400][ T8537] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.262596][ T3309] udevd[3309]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 105.308585][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.333332][ T8557] netlink: 'syz.1.1436': attribute type 10 has an invalid length. [ 105.342444][ T8555] loop0: detected capacity change from 0 to 512 [ 105.391002][ T8555] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.412284][ T8565] loop1: detected capacity change from 0 to 1024 [ 105.420437][ T8555] ext4 filesystem being mounted at /299/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 105.432522][ T8565] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 105.434006][ T8555] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #2: comm syz.0.1435: corrupted inode contents [ 105.456625][ T8565] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 105.466162][ T8555] EXT4-fs error (device loop0): ext4_dirty_inode:6459: inode #2: comm syz.0.1435: mark_inode_dirty error [ 105.478957][ T8555] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #2: comm syz.0.1435: corrupted inode contents [ 105.491271][ T8565] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c840e02c, mo2=0000] [ 105.502160][ T8569] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #2: comm syz.0.1435: corrupted inode contents [ 105.510688][ T8565] EXT4-fs error (device loop1): ext4_map_blocks:780: inode #3: block 2: comm syz.1.1438: lblock 2 mapped to illegal pblock 2 (length 1) [ 105.514602][ T8569] EXT4-fs error (device loop0): ext4_dirty_inode:6459: inode #2: comm syz.0.1435: mark_inode_dirty error [ 105.528883][ T8565] EXT4-fs (loop1): Remounting filesystem read-only [ 105.539701][ T8569] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #2: comm syz.0.1435: corrupted inode contents [ 105.559542][ T8565] EXT4-fs (loop1): 1 orphan inode deleted [ 105.565736][ T8565] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.580645][ T8569] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #2: comm syz.0.1435: mark_inode_dirty error [ 105.614230][ T8569] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #2: comm syz.0.1435: corrupted inode contents [ 105.656359][ T8569] EXT4-fs error (device loop0): ext4_dirty_inode:6459: inode #2: comm syz.0.1435: mark_inode_dirty error [ 105.680902][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.748214][ T3321] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.801080][ T8588] loop4: detected capacity change from 0 to 1024 [ 105.825533][ T8591] loop0: detected capacity change from 0 to 1024 [ 105.845683][ T8588] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.857513][ T8591] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 105.901742][ T8591] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 105.914755][ T8596] netlink: 'syz.1.1450': attribute type 27 has an invalid length. [ 105.923298][ T8591] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c840e02c, mo2=0000] [ 105.936533][ T8597] netlink: 'syz.3.1449': attribute type 10 has an invalid length. [ 105.945178][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.012668][ T8591] EXT4-fs error (device loop0): ext4_map_blocks:780: inode #3: block 2: comm syz.0.1445: lblock 2 mapped to illegal pblock 2 (length 1) [ 106.028495][ T8591] EXT4-fs (loop0): Remounting filesystem read-only [ 106.055155][ T8612] loop3: detected capacity change from 0 to 1024 [ 106.062176][ T8591] EXT4-fs (loop0): 1 orphan inode deleted [ 106.073107][ T8591] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 106.086011][ T8612] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 106.101119][ T8616] xt_recent: hitcount (4294967295) is larger than allowed maximum (65535) [ 106.112060][ T8612] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 106.123319][ T8591] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.140446][ T8612] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c840e02c, mo2=0000] [ 106.176324][ T8612] EXT4-fs error (device loop3): ext4_map_blocks:780: inode #3: block 2: comm syz.3.1453: lblock 2 mapped to illegal pblock 2 (length 1) [ 106.201654][ T8612] EXT4-fs (loop3): Remounting filesystem read-only [ 106.208414][ T8612] EXT4-fs (loop3): 1 orphan inode deleted [ 106.221043][ T8612] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 106.260794][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.273047][ T8633] loop0: detected capacity change from 0 to 512 [ 106.282050][ T8633] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 106.310287][ T8633] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.337329][ T8633] ext4 filesystem being mounted at /303/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 106.374328][ T3321] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.449320][ T8653] loop0: detected capacity change from 0 to 512 [ 106.456993][ T8653] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 106.477617][ T8653] ext4 filesystem being mounted at /305/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 106.597638][ T8668] loop0: detected capacity change from 0 to 1024 [ 106.605239][ T8668] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 106.617033][ T8668] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 106.628108][ T8668] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c840e02c, mo2=0000] [ 106.637644][ T8668] EXT4-fs error (device loop0): ext4_map_blocks:780: inode #3: block 2: comm syz.0.1472: lblock 2 mapped to illegal pblock 2 (length 1) [ 106.652909][ T8668] EXT4-fs (loop0): Remounting filesystem read-only [ 106.653021][ T8671] loop2: detected capacity change from 0 to 1024 [ 106.666000][ T8668] EXT4-fs (loop0): 1 orphan inode deleted [ 106.677601][ T8671] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 106.699697][ T8671] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 106.711612][ T8671] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c840e02c, mo2=0000] [ 106.721487][ T8671] EXT4-fs error (device loop2): ext4_map_blocks:780: inode #3: block 2: comm syz.2.1474: lblock 2 mapped to illegal pblock 2 (length 1) [ 106.765167][ T8671] EXT4-fs (loop2): Remounting filesystem read-only [ 106.773255][ T8671] EXT4-fs (loop2): 1 orphan inode deleted [ 106.850817][ T8691] loop0: detected capacity change from 0 to 1024 [ 106.863166][ T8689] loop2: detected capacity change from 0 to 512 [ 106.882278][ T8689] ext4 filesystem being mounted at /300/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 106.959960][ T8689] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #2: comm syz.2.1480: corrupted inode contents [ 106.979206][ T8689] EXT4-fs error (device loop2): ext4_dirty_inode:6459: inode #2: comm syz.2.1480: mark_inode_dirty error [ 106.993408][ T8700] loop3: detected capacity change from 0 to 1024 [ 107.012867][ T8701] loop1: detected capacity change from 0 to 2048 [ 107.027365][ T8689] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #2: comm syz.2.1480: corrupted inode contents [ 107.043392][ T3391] hid (null): unknown global tag 0xc [ 107.046773][ T8702] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #2: comm syz.2.1480: corrupted inode contents [ 107.050064][ T3391] hid-generic 0009:0000:01FF.0048: unknown main item tag 0x1 [ 107.062633][ T3306] loop1: p3 < > p4 < > [ 107.068022][ T3391] hid-generic 0009:0000:01FF.0048: unknown main item tag 0x3 [ 107.072179][ T3306] loop1: partition table partially beyond EOD, [ 107.079555][ T3391] hid-generic 0009:0000:01FF.0048: unknown main item tag 0x1 [ 107.079588][ T3391] hid-generic 0009:0000:01FF.0048: unknown main item tag 0x6 [ 107.085792][ T3306] truncated [ 107.095207][ T8702] EXT4-fs error (device loop2): ext4_dirty_inode:6459: inode #2: comm syz.2.1480: mark_inode_dirty error [ 107.100601][ T3391] hid-generic 0009:0000:01FF.0048: unknown global tag 0xc [ 107.107150][ T3306] loop1: p3 start 4284289 is beyond EOD, [ 107.114990][ T3391] hid-generic 0009:0000:01FF.0048: item 0 1 1 12 parsing failed [ 107.122130][ T3306] truncated [ 107.141118][ T8702] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #2: comm syz.2.1480: corrupted inode contents [ 107.141416][ T3391] hid-generic 0009:0000:01FF.0048: probe with driver hid-generic failed with error -22 [ 107.165537][ T8702] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #2: comm syz.2.1480: mark_inode_dirty error [ 107.179297][ T8702] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #2: comm syz.2.1480: corrupted inode contents [ 107.192374][ T8702] EXT4-fs error (device loop2): ext4_dirty_inode:6459: inode #2: comm syz.2.1480: mark_inode_dirty error [ 107.214904][ T8701] loop1: p3 < > p4 < > [ 107.219132][ T8701] loop1: partition table partially beyond EOD, truncated [ 107.251247][ T8701] loop1: p3 start 4284289 is beyond EOD, truncated [ 107.264244][ T3007] loop1: p3 < > p4 < > [ 107.268517][ T3007] loop1: partition table partially beyond EOD, truncated [ 107.277364][ T3007] loop1: p3 start 4284289 is beyond EOD, truncated [ 107.358522][ T8713] team0: Port device geneve1 removed [ 107.371312][ T8717] validate_nla: 1 callbacks suppressed [ 107.371330][ T8717] netlink: 'syz.2.1490': attribute type 27 has an invalid length. [ 107.399676][ T3309] udevd[3309]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 107.441360][ T3309] udevd[3309]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 107.516252][ T8723] loop0: detected capacity change from 0 to 2048 [ 107.540027][ T3306] loop0: p3 < > p4 < > [ 107.544266][ T3306] loop0: partition table partially beyond EOD, truncated [ 107.554915][ T3306] loop0: p3 start 4284289 is beyond EOD, truncated [ 107.584068][ T8723] loop_reread_partitions: partition scan of loop0 () failed (rc=-16) [ 107.629167][ T1079] hid (null): unknown global tag 0xc [ 107.635342][ T1079] hid-generic 0009:0000:01FF.0049: unknown main item tag 0x1 [ 107.642912][ T1079] hid-generic 0009:0000:01FF.0049: unknown main item tag 0x3 [ 107.650462][ T1079] hid-generic 0009:0000:01FF.0049: unknown main item tag 0x1 [ 107.657964][ T1079] hid-generic 0009:0000:01FF.0049: unknown main item tag 0x6 [ 107.665566][ T1079] hid-generic 0009:0000:01FF.0049: unknown global tag 0xc [ 107.672824][ T1079] hid-generic 0009:0000:01FF.0049: item 0 1 1 12 parsing failed [ 107.684446][ T8744] loop3: detected capacity change from 0 to 1024 [ 107.692843][ T1079] hid-generic 0009:0000:01FF.0049: probe with driver hid-generic failed with error -22 [ 107.694269][ T8744] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 107.724354][ T8744] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 107.742789][ T8744] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c840e02c, mo2=0000] [ 107.756632][ T8744] EXT4-fs error (device loop3): ext4_map_blocks:780: inode #3: block 2: comm syz.3.1499: lblock 2 mapped to illegal pblock 2 (length 1) [ 107.775325][ T8744] EXT4-fs (loop3): Remounting filesystem read-only [ 107.783992][ T8744] EXT4-fs (loop3): 1 orphan inode deleted [ 107.887536][ T8761] loop3: detected capacity change from 0 to 1024 [ 107.901677][ T8765] FAULT_INJECTION: forcing a failure. [ 107.901677][ T8765] name failslab, interval 1, probability 0, space 0, times 0 [ 107.914474][ T8765] CPU: 0 UID: 0 PID: 8765 Comm: syz.2.1508 Not tainted 6.15.0-syzkaller-12141-gec7714e49479 #0 PREEMPT(voluntary) [ 107.914538][ T8765] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 107.914554][ T8765] Call Trace: [ 107.914563][ T8765] [ 107.914574][ T8765] __dump_stack+0x1d/0x30 [ 107.914602][ T8765] dump_stack_lvl+0xe8/0x140 [ 107.914625][ T8765] dump_stack+0x15/0x1b [ 107.914694][ T8765] should_fail_ex+0x265/0x280 [ 107.914721][ T8765] should_failslab+0x8c/0xb0 [ 107.914750][ T8765] kmem_cache_alloc_node_noprof+0x57/0x320 [ 107.914809][ T8765] ? __alloc_skb+0x101/0x320 [ 107.914917][ T8765] __alloc_skb+0x101/0x320 [ 107.914949][ T8765] netlink_alloc_large_skb+0xba/0xf0 [ 107.915009][ T8765] netlink_sendmsg+0x3cf/0x6b0 [ 107.915052][ T8765] ? __pfx_netlink_sendmsg+0x10/0x10 [ 107.915093][ T8765] __sock_sendmsg+0x145/0x180 [ 107.915178][ T8765] ____sys_sendmsg+0x31e/0x4e0 [ 107.915218][ T8765] ___sys_sendmsg+0x17b/0x1d0 [ 107.915298][ T8765] __x64_sys_sendmsg+0xd4/0x160 [ 107.915429][ T8765] x64_sys_call+0x2999/0x2fb0 [ 107.915458][ T8765] do_syscall_64+0xd2/0x200 [ 107.915502][ T8765] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 107.915547][ T8765] ? clear_bhb_loop+0x40/0x90 [ 107.915575][ T8765] ? clear_bhb_loop+0x40/0x90 [ 107.915648][ T8765] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.915704][ T8765] RIP: 0033:0x7fa7d5a2e929 [ 107.915719][ T8765] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 107.915737][ T8765] RSP: 002b:00007fa7d4097038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 107.915754][ T8765] RAX: ffffffffffffffda RBX: 00007fa7d5c55fa0 RCX: 00007fa7d5a2e929 [ 107.915770][ T8765] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 107.915786][ T8765] RBP: 00007fa7d4097090 R08: 0000000000000000 R09: 0000000000000000 [ 107.915844][ T8765] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 107.915932][ T8765] R13: 0000000000000000 R14: 00007fa7d5c55fa0 R15: 00007ffe8ebe74f8 [ 107.915958][ T8765] [ 108.216555][ T3391] hid (null): unknown global tag 0xc [ 108.222657][ T3391] hid-generic 0009:0000:01FF.004A: unknown main item tag 0x1 [ 108.230269][ T3391] hid-generic 0009:0000:01FF.004A: unknown main item tag 0x3 [ 108.237723][ T3391] hid-generic 0009:0000:01FF.004A: unknown main item tag 0x1 [ 108.245209][ T3391] hid-generic 0009:0000:01FF.004A: unknown main item tag 0x6 [ 108.252771][ T3391] hid-generic 0009:0000:01FF.004A: unknown global tag 0xc [ 108.259939][ T3391] hid-generic 0009:0000:01FF.004A: item 0 1 1 12 parsing failed [ 108.268011][ T3391] hid-generic 0009:0000:01FF.004A: probe with driver hid-generic failed with error -22 [ 108.303704][ T8779] loop2: detected capacity change from 0 to 1024 [ 108.327885][ T8781] bridge_slave_0: left promiscuous mode [ 108.333719][ T8781] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.342201][ T8781] bridge_slave_1: left allmulticast mode [ 108.347914][ T8781] bridge_slave_1: left promiscuous mode [ 108.353626][ T8781] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.366889][ T8781] bond0: (slave bond_slave_0): Releasing backup interface [ 108.376661][ T8781] bond0: (slave bond_slave_1): Releasing backup interface [ 108.385238][ T8781] team0: Port device team_slave_0 removed [ 108.392879][ T8781] team0: Port device team_slave_1 removed [ 108.399005][ T8781] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 108.407768][ T8781] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 108.416414][ T8781] team0: Port device geneve1 removed [ 108.485709][ T8794] loop1: detected capacity change from 0 to 512 [ 108.524002][ T8796] loop3: detected capacity change from 0 to 1024 [ 108.541375][ T8794] ext4 filesystem being mounted at /262/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 108.561991][ T8794] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #2: comm syz.1.1519: corrupted inode contents [ 108.586490][ T8794] EXT4-fs error (device loop1): ext4_dirty_inode:6459: inode #2: comm syz.1.1519: mark_inode_dirty error [ 108.607652][ T8794] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #2: comm syz.1.1519: corrupted inode contents [ 108.636811][ T8807] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #2: comm syz.1.1519: corrupted inode contents [ 108.684749][ T8807] EXT4-fs error (device loop1): ext4_dirty_inode:6459: inode #2: comm syz.1.1519: mark_inode_dirty error [ 108.697738][ T8809] team0: Port device geneve1 removed [ 108.703548][ T8794] __nla_validate_parse: 109 callbacks suppressed [ 108.703565][ T8794] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1519'. [ 108.706287][ T8807] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #2: comm syz.1.1519: corrupted inode contents [ 108.726547][ T8813] loop3: detected capacity change from 0 to 1024 [ 108.732772][ T8807] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #2: comm syz.1.1519: mark_inode_dirty error [ 108.750188][ T8807] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #2: comm syz.1.1519: corrupted inode contents [ 108.763151][ T8813] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 108.789766][ T8813] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 108.790397][ T8807] EXT4-fs error (device loop1): ext4_dirty_inode:6459: inode #2: comm syz.1.1519: mark_inode_dirty error [ 108.815739][ T8816] xt_recent: hitcount (4294967295) is larger than allowed maximum (65535) [ 108.827080][ T8813] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c840e02c, mo2=0000] [ 108.849871][ T8813] EXT4-fs error (device loop3): ext4_map_blocks:780: inode #3: block 2: comm syz.3.1524: lblock 2 mapped to illegal pblock 2 (length 1) [ 108.907266][ T8813] EXT4-fs (loop3): Remounting filesystem read-only [ 108.971778][ T8813] EXT4-fs (loop3): 1 orphan inode deleted [ 109.056709][ T8834] loop4: detected capacity change from 0 to 1024 [ 109.078397][ T8834] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 109.097280][ T8838] bridge_slave_0: left promiscuous mode [ 109.102982][ T8838] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.112462][ T8834] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 109.124551][ T8834] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c840e02c, mo2=0000] [ 109.133965][ T8834] EXT4-fs error (device loop4): ext4_map_blocks:780: inode #3: block 2: comm syz.4.1534: lblock 2 mapped to illegal pblock 2 (length 1) [ 109.149376][ T8838] bridge_slave_1: left allmulticast mode [ 109.155159][ T8838] bridge_slave_1: left promiscuous mode [ 109.158680][ T23] hid (null): unknown global tag 0xc [ 109.160962][ T8838] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.166220][ T8834] EXT4-fs (loop4): Remounting filesystem read-only [ 109.181553][ T8834] EXT4-fs (loop4): 1 orphan inode deleted [ 109.182769][ T23] hid-generic 0009:0000:01FF.004B: unknown main item tag 0x1 [ 109.189537][ T8838] bond0: (slave bond_slave_0): Releasing backup interface [ 109.194758][ T23] hid-generic 0009:0000:01FF.004B: unknown main item tag 0x3 [ 109.209529][ T23] hid-generic 0009:0000:01FF.004B: unknown main item tag 0x1 [ 109.217018][ T23] hid-generic 0009:0000:01FF.004B: unknown main item tag 0x6 [ 109.224463][ T23] hid-generic 0009:0000:01FF.004B: unknown global tag 0xc [ 109.231662][ T23] hid-generic 0009:0000:01FF.004B: item 0 1 1 12 parsing failed [ 109.239739][ T23] hid-generic 0009:0000:01FF.004B: probe with driver hid-generic failed with error -22 [ 109.253452][ T8838] bond0: (slave bond_slave_1): Releasing backup interface [ 109.282183][ T8838] team0: Port device team_slave_0 removed [ 109.293474][ T8838] team0: Port device team_slave_1 removed [ 109.298057][ T8849] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1541'. [ 109.299673][ T8838] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 109.316284][ T8838] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 109.324707][ T8838] team0: Port device geneve1 removed [ 109.422877][ T8852] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1541'. [ 109.436008][ T8864] loop1: detected capacity change from 0 to 512 [ 109.446623][ T8864] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 109.465683][ T8866] loop4: detected capacity change from 0 to 1024 [ 109.473210][ T8864] ext4 filesystem being mounted at /269/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 109.477415][ T8866] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 109.492658][ T8866] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 109.503550][ T8866] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c840e02c, mo2=0000] [ 109.512810][ T8866] EXT4-fs error (device loop4): ext4_map_blocks:780: inode #3: block 2: comm syz.4.1546: lblock 2 mapped to illegal pblock 2 (length 1) [ 109.528201][ T8866] EXT4-fs (loop4): Remounting filesystem read-only [ 109.534917][ T8866] EXT4-fs (loop4): 1 orphan inode deleted [ 109.568816][ T8871] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1547'. [ 109.604561][ T8875] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1549'. [ 109.618419][ T8877] loop1: detected capacity change from 0 to 1024 [ 109.627814][ T8877] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 109.640190][ T8877] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 109.657554][ T8877] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c840e02c, mo2=0000] [ 109.669592][ T8877] EXT4-fs error (device loop1): ext4_map_blocks:780: inode #3: block 2: comm syz.1.1550: lblock 2 mapped to illegal pblock 2 (length 1) [ 109.688895][ T8877] EXT4-fs (loop1): Remounting filesystem read-only [ 109.698373][ T8877] EXT4-fs (loop1): 1 orphan inode deleted [ 109.719771][ T8884] loop0: detected capacity change from 0 to 2048 [ 109.786321][ T3306] loop0: p3 < > p4 < > [ 109.790638][ T3306] loop0: partition table partially beyond EOD, truncated [ 109.798200][ T3306] loop0: p3 start 4284289 is beyond EOD, truncated [ 109.824507][ T8884] loop0: p3 < > p4 < > [ 109.828785][ T8884] loop0: partition table partially beyond EOD, truncated [ 109.831868][ T8895] loop2: detected capacity change from 0 to 512 [ 109.842364][ T8884] loop0: p3 start 4284289 is beyond EOD, truncated [ 109.870164][ T8895] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 109.871415][ T8884] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1553'. [ 109.935066][ T8897] loop4: detected capacity change from 0 to 1024 [ 109.948790][ T8895] ext4 filesystem being mounted at /311/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 110.025481][ T29] kauditd_printk_skb: 204 callbacks suppressed [ 110.025498][ T29] audit: type=1326 audit(1749134104.956:4862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8903 comm="syz.0.1559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24114fe929 code=0x7ffc0000 [ 110.077974][ T29] audit: type=1326 audit(1749134105.006:4863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8903 comm="syz.0.1559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=115 compat=0 ip=0x7f24114fe929 code=0x7ffc0000 [ 110.101509][ T29] audit: type=1326 audit(1749134105.006:4864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8903 comm="syz.0.1559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24114fe929 code=0x7ffc0000 [ 110.125159][ T29] audit: type=1326 audit(1749134105.006:4865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8903 comm="syz.0.1559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f24114fe929 code=0x7ffc0000 [ 110.148599][ T29] audit: type=1326 audit(1749134105.006:4866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8903 comm="syz.0.1559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24114fe929 code=0x7ffc0000 [ 110.172138][ T29] audit: type=1326 audit(1749134105.006:4867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8903 comm="syz.0.1559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f24114fe929 code=0x7ffc0000 [ 110.195508][ T29] audit: type=1326 audit(1749134105.006:4868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8903 comm="syz.0.1559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24114fe929 code=0x7ffc0000 [ 110.331978][ T8914] netlink: 'syz.2.1561': attribute type 27 has an invalid length. [ 110.341780][ T29] audit: type=1400 audit(1749134105.276:4869): avc: denied { create } for pid=8913 comm="syz.2.1561" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 110.364923][ T29] audit: type=1400 audit(1749134105.296:4870): avc: denied { write } for pid=8913 comm="syz.2.1561" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 110.387852][ T8914] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1561'. [ 110.396938][ T8914] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1561'. [ 110.432234][ T8914] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1561'. [ 110.441175][ T29] audit: type=1326 audit(1749134105.366:4871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8916 comm="syz.3.1564" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fca0298e929 code=0x0 [ 110.508119][ T8914] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1561'. [ 110.695065][ T8941] loop1: detected capacity change from 0 to 512 [ 110.703494][ T8941] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 110.718812][ T8941] ext4 filesystem being mounted at /279/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 110.775883][ T8948] loop4: detected capacity change from 0 to 1024 [ 110.783999][ T8948] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 110.792685][ T8948] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 110.803768][ T8948] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c840e02c, mo2=0000] [ 110.812888][ T8948] EXT4-fs error (device loop4): ext4_map_blocks:780: inode #3: block 2: comm syz.4.1574: lblock 2 mapped to illegal pblock 2 (length 1) [ 110.837175][ T8948] EXT4-fs (loop4): Remounting filesystem read-only [ 110.843790][ T8948] EXT4-fs (loop4): 1 orphan inode deleted [ 110.937597][ T8953] loop1: detected capacity change from 0 to 1024 [ 111.286775][ T8958] loop0: detected capacity change from 0 to 1024 [ 111.313771][ T8958] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 111.345956][ T8958] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 111.374055][ T8958] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c840e02c, mo2=0000] [ 111.444638][ T8958] EXT4-fs error (device loop0): ext4_map_blocks:780: inode #3: block 2: comm syz.0.1577: lblock 2 mapped to illegal pblock 2 (length 1) [ 111.466063][ T8958] EXT4-fs (loop0): Remounting filesystem read-only [ 111.472672][ T8958] EXT4-fs (loop0): 1 orphan inode deleted [ 111.472858][ T8975] loop3: detected capacity change from 0 to 2048 [ 111.490824][ T8978] loop2: detected capacity change from 0 to 512 [ 111.501407][ T8978] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 111.518710][ T3306] loop3: p3 < > p4 < > [ 111.522913][ T3306] loop3: partition table partially beyond EOD, truncated [ 111.556294][ T3306] loop3: p3 start 4284289 is beyond EOD, truncated [ 111.563033][ T8976] loop4: detected capacity change from 0 to 1024 [ 111.576896][ T8975] loop3: p3 < > p4 < > [ 111.581159][ T8975] loop3: partition table partially beyond EOD, truncated [ 111.591090][ T8978] ext4 filesystem being mounted at /316/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 111.602677][ T8975] loop3: p3 start 4284289 is beyond EOD, truncated [ 111.714830][ T8990] loop2: detected capacity change from 0 to 512 [ 111.772039][ T8990] ext4 filesystem being mounted at /317/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 111.808639][ T8999] loop3: detected capacity change from 0 to 512 [ 111.832885][ T8990] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #2: comm syz.2.1588: corrupted inode contents [ 111.853127][ T8990] EXT4-fs error (device loop2): ext4_dirty_inode:6459: inode #2: comm syz.2.1588: mark_inode_dirty error [ 111.868554][ T8990] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #2: comm syz.2.1588: corrupted inode contents [ 111.887987][ T8999] ext4 filesystem being mounted at /317/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 111.908807][ T8999] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #2: comm syz.3.1590: corrupted inode contents [ 111.928401][ T9002] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #2: comm syz.2.1588: corrupted inode contents [ 111.944861][ T8999] EXT4-fs error (device loop3): ext4_dirty_inode:6459: inode #2: comm syz.3.1590: mark_inode_dirty error [ 111.957812][ T9002] EXT4-fs error (device loop2): ext4_dirty_inode:6459: inode #2: comm syz.2.1588: mark_inode_dirty error [ 111.985783][ T8999] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #2: comm syz.3.1590: corrupted inode contents [ 111.998340][ T9002] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #2: comm syz.2.1588: corrupted inode contents [ 112.011138][ T9003] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #2: comm syz.3.1590: corrupted inode contents [ 112.013579][ T9002] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #2: comm syz.2.1588: mark_inode_dirty error [ 112.035895][ T9003] EXT4-fs error (device loop3): ext4_dirty_inode:6459: inode #2: comm syz.3.1590: mark_inode_dirty error [ 112.054891][ T9002] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #2: comm syz.2.1588: corrupted inode contents [ 112.084508][ T9002] EXT4-fs error (device loop2): ext4_dirty_inode:6459: inode #2: comm syz.2.1588: mark_inode_dirty error [ 112.099533][ T9003] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #2: comm syz.3.1590: corrupted inode contents [ 112.111814][ T9003] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #2: comm syz.3.1590: mark_inode_dirty error [ 112.124167][ T9003] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #2: comm syz.3.1590: corrupted inode contents [ 112.147734][ T9003] EXT4-fs error (device loop3): ext4_dirty_inode:6459: inode #2: comm syz.3.1590: mark_inode_dirty error [ 112.261705][ T9021] netlink: 'syz.4.1599': attribute type 10 has an invalid length. [ 112.270115][ T9021] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.279004][ T9021] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.287791][ T9021] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.296556][ T9021] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.307934][ T9021] team0: Port device geneve1 added [ 112.381549][ T9028] loop3: detected capacity change from 0 to 2048 [ 112.404324][ T9030] loop2: detected capacity change from 0 to 1024 [ 112.429790][ T9031] loop4: detected capacity change from 0 to 512 [ 112.437646][ T9031] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 112.446056][ T3309] loop3: p3 < > p4 < > [ 112.450255][ T3309] loop3: partition table partially beyond EOD, truncated [ 112.458114][ T3309] loop3: p3 start 4284289 is beyond EOD, truncated [ 112.467087][ T9031] EXT4-fs error (device loop4): ext4_orphan_get:1419: comm syz.4.1601: bad orphan inode 15 [ 112.479176][ T9031] ext4_test_bit(bit=14, block=18) = 1 [ 112.484607][ T9031] is_bad_inode(inode)=0 [ 112.488829][ T9031] NEXT_ORPHAN(inode)=1023 [ 112.493179][ T9031] max_ino=32 [ 112.496427][ T9031] i_nlink=0 [ 112.503964][ T9028] loop3: p3 < > p4 < > [ 112.508196][ T9028] loop3: partition table partially beyond EOD, truncated [ 112.515769][ T9031] ext2 filesystem being mounted at /341/éq‰Y’3aK supports timestamps until 2038-01-19 (0x7fffffff) [ 112.537704][ T9028] loop3: p3 start 4284289 is beyond EOD, truncated [ 112.575549][ T3007] loop3: p3 < > p4 < > [ 112.579838][ T3007] loop3: partition table partially beyond EOD, truncated [ 112.590962][ T3007] loop3: p3 start 4284289 is beyond EOD, truncated [ 113.023485][ T9088] loop0: detected capacity change from 0 to 1024 [ 113.032477][ T9088] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 113.041490][ T9088] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 113.053889][ T9088] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c840e02c, mo2=0000] [ 113.063315][ T9088] EXT4-fs error (device loop0): ext4_map_blocks:780: inode #3: block 2: comm syz.0.1605: lblock 2 mapped to illegal pblock 2 (length 1) [ 113.085627][ T9088] EXT4-fs (loop0): Remounting filesystem read-only [ 113.093802][ T9088] EXT4-fs (loop0): 1 orphan inode deleted [ 113.149532][ T9099] loop0: detected capacity change from 0 to 512 [ 113.179489][ T9099] ext4 filesystem being mounted at /337/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 113.191935][ T9099] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #2: comm syz.0.1607: corrupted inode contents [ 113.205746][ T9099] EXT4-fs error (device loop0): ext4_dirty_inode:6459: inode #2: comm syz.0.1607: mark_inode_dirty error [ 113.224448][ T9099] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #2: comm syz.0.1607: corrupted inode contents [ 113.246623][ T9112] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #2: comm syz.0.1607: corrupted inode contents [ 113.265286][ T9112] EXT4-fs error (device loop0): ext4_dirty_inode:6459: inode #2: comm syz.0.1607: mark_inode_dirty error [ 113.278876][ T9112] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #2: comm syz.0.1607: corrupted inode contents [ 113.317010][ T9112] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #2: comm syz.0.1607: mark_inode_dirty error [ 113.335379][ T9112] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #2: comm syz.0.1607: corrupted inode contents [ 113.379136][ T9123] loop2: detected capacity change from 0 to 1024 [ 113.425250][ T9112] EXT4-fs error (device loop0): ext4_dirty_inode:6459: inode #2: comm syz.0.1607: mark_inode_dirty error [ 113.437129][ T1079] hid (null): unknown global tag 0xc [ 113.443215][ T1079] hid-generic 0009:0000:01FF.004C: unknown main item tag 0x1 [ 113.450760][ T1079] hid-generic 0009:0000:01FF.004C: unknown main item tag 0x3 [ 113.458308][ T1079] hid-generic 0009:0000:01FF.004C: unknown main item tag 0x1 [ 113.465734][ T1079] hid-generic 0009:0000:01FF.004C: unknown main item tag 0x6 [ 113.473253][ T1079] hid-generic 0009:0000:01FF.004C: unknown global tag 0xc [ 113.480427][ T1079] hid-generic 0009:0000:01FF.004C: item 0 1 1 12 parsing failed [ 113.526073][ T1079] hid-generic 0009:0000:01FF.004C: probe with driver hid-generic failed with error -22 [ 113.674499][ T9147] xt_recent: hitcount (4294967295) is larger than allowed maximum (65535) [ 114.472481][ T9176] loop3: detected capacity change from 0 to 1024 [ 114.488168][ T9176] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 114.508871][ T9176] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 114.576139][ T9176] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c840e02c, mo2=0000] [ 114.588920][ T9176] EXT4-fs error (device loop3): ext4_map_blocks:780: inode #3: block 2: comm syz.3.1624: lblock 2 mapped to illegal pblock 2 (length 1) [ 114.593218][ T9183] __nla_validate_parse: 20 callbacks suppressed [ 114.593242][ T9183] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1628'. [ 114.626369][ T9176] EXT4-fs (loop3): Remounting filesystem read-only [ 114.648404][ T9176] EXT4-fs (loop3): 1 orphan inode deleted [ 114.673038][ T9189] loop1: detected capacity change from 0 to 2048 [ 114.786562][ T9189] loop1: p3 < > p4 < > [ 114.790853][ T9189] loop1: partition table partially beyond EOD, truncated [ 114.802508][ T9189] loop1: p3 start 4284289 is beyond EOD, truncated [ 114.855015][ T9203] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1635'. [ 114.881991][ T3309] udevd[3309]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 114.957909][ T9206] netlink: 'syz.1.1636': attribute type 10 has an invalid length. [ 114.965834][ T9206] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1636'. [ 114.977251][ T9206] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.986099][ T9206] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.994885][ T9206] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.003671][ T9206] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.025454][ T9206] team0: Port device geneve1 added [ 115.034075][ T9209] netlink: 'syz.3.1638': attribute type 27 has an invalid length. [ 115.043603][ T9209] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1638'. [ 115.052698][ T9209] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1638'. [ 115.062504][ T9209] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1638'. [ 115.082377][ T9209] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1638'. [ 115.091359][ T9209] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1638'. [ 115.111457][ T9209] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1638'. [ 115.132348][ T9205] loop0: detected capacity change from 0 to 1024 [ 115.147545][ T9220] loop2: detected capacity change from 0 to 512 [ 115.161513][ T9220] ext4 filesystem being mounted at /325/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 115.228459][ T9209] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1638'. [ 115.292045][ T9232] loop2: detected capacity change from 0 to 2048 [ 115.305316][ T9236] loop3: detected capacity change from 0 to 1024 [ 115.331203][ T9232] loop2: p3 < > p4 < > [ 115.335479][ T9232] loop2: partition table partially beyond EOD, truncated [ 115.340859][ T9236] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 115.346045][ T9232] loop2: p3 start 4284289 is beyond EOD, truncated [ 115.375977][ T9236] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 115.376121][ T3007] loop2: p3 < > p4 < > [ 115.388496][ T9236] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c840e02c, mo2=0000] [ 115.390448][ T3007] loop2: partition table partially beyond EOD, truncated [ 115.399770][ T9239] loop1: detected capacity change from 0 to 512 [ 115.407555][ T9236] EXT4-fs error (device loop3): ext4_map_blocks:780: inode #3: block 2: comm syz.3.1643: lblock 2 mapped to illegal pblock 2 (length 1) [ 115.412056][ T3007] loop2: p3 start 4284289 is beyond EOD, truncated [ 115.427486][ T9236] EXT4-fs (loop3): Remounting filesystem read-only [ 115.439013][ T9236] __quota_error: 234 callbacks suppressed [ 115.439028][ T9236] Quota error (device loop3): qtree_write_dquot: dquota write failed [ 115.455877][ T9236] Quota error (device loop3): v2_write_file_info: Can't write info structure [ 115.465257][ T9236] EXT4-fs (loop3): 1 orphan inode deleted [ 115.471908][ T9239] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 115.501262][ T3309] udevd[3309]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 115.583735][ T9239] ext4 filesystem being mounted at /295/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 115.626030][ T9247] 9pnet: Could not find request transport: f [ 115.641665][ T29] audit: type=1326 audit(1749134110.576:5098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9249 comm="syz.0.1647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24114fe929 code=0x7ffc0000 [ 115.665165][ T29] audit: type=1326 audit(1749134110.576:5099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9249 comm="syz.0.1647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24114fe929 code=0x7ffc0000 [ 115.692937][ T29] audit: type=1326 audit(1749134110.636:5100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9249 comm="syz.0.1647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f24114fe929 code=0x7ffc0000 [ 115.720883][ T9255] loop3: detected capacity change from 0 to 512 [ 115.737794][ T29] audit: type=1326 audit(1749134110.636:5101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9249 comm="syz.0.1647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24114fe929 code=0x7ffc0000 [ 115.761477][ T29] audit: type=1326 audit(1749134110.636:5102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9249 comm="syz.0.1647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24114fe929 code=0x7ffc0000 [ 115.785123][ T29] audit: type=1326 audit(1749134110.666:5103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9249 comm="syz.0.1647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f24114fe929 code=0x7ffc0000 [ 115.808723][ T29] audit: type=1326 audit(1749134110.666:5104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9249 comm="syz.0.1647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24114fe929 code=0x7ffc0000 [ 115.832371][ T29] audit: type=1326 audit(1749134110.666:5105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9249 comm="syz.0.1647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f24114fe929 code=0x7ffc0000 [ 115.841610][ T9256] netlink: 'syz.1.1649': attribute type 10 has an invalid length. [ 115.866443][ T9256] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.875401][ T9256] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.884465][ T9256] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.893456][ T9256] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.918316][ T9255] ext4 filesystem being mounted at /332/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 115.971415][ T9255] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #2: comm syz.3.1650: corrupted inode contents [ 115.996548][ T9255] EXT4-fs error (device loop3): ext4_dirty_inode:6459: inode #2: comm syz.3.1650: mark_inode_dirty error [ 116.020031][ T9255] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #2: comm syz.3.1650: corrupted inode contents [ 116.037810][ T3391] hid (null): unknown global tag 0xc [ 116.046998][ T3391] hid-generic 0009:0000:01FF.004D: unknown main item tag 0x1 [ 116.054466][ T3391] hid-generic 0009:0000:01FF.004D: unknown main item tag 0x3 [ 116.061988][ T3391] hid-generic 0009:0000:01FF.004D: unknown main item tag 0x1 [ 116.069599][ T3391] hid-generic 0009:0000:01FF.004D: unknown main item tag 0x6 [ 116.077059][ T3391] hid-generic 0009:0000:01FF.004D: unknown global tag 0xc [ 116.083641][ T9274] loop1: detected capacity change from 0 to 512 [ 116.084179][ T3391] hid-generic 0009:0000:01FF.004D: item 0 1 1 12 parsing failed [ 116.097167][ T9272] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #2: comm syz.3.1650: corrupted inode contents [ 116.107210][ T9275] netlink: 'syz.2.1655': attribute type 27 has an invalid length. [ 116.123767][ T3391] hid-generic 0009:0000:01FF.004D: probe with driver hid-generic failed with error -22 [ 116.137110][ T9272] EXT4-fs error (device loop3): ext4_dirty_inode:6459: inode #2: comm syz.3.1650: mark_inode_dirty error [ 116.170439][ T9272] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #2: comm syz.3.1650: corrupted inode contents [ 116.184176][ T9274] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 116.193685][ T9272] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #2: comm syz.3.1650: mark_inode_dirty error [ 116.206769][ T9272] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #2: comm syz.3.1650: corrupted inode contents [ 116.219800][ T9272] EXT4-fs error (device loop3): ext4_dirty_inode:6459: inode #2: comm syz.3.1650: mark_inode_dirty error [ 116.246546][ T9274] ext4 filesystem being mounted at /298/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 116.247268][ T9285] FAULT_INJECTION: forcing a failure. [ 116.247268][ T9285] name failslab, interval 1, probability 0, space 0, times 0 [ 116.269588][ T9285] CPU: 0 UID: 0 PID: 9285 Comm: syz.2.1658 Not tainted 6.15.0-syzkaller-12141-gec7714e49479 #0 PREEMPT(voluntary) [ 116.269625][ T9285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 116.269641][ T9285] Call Trace: [ 116.269649][ T9285] [ 116.269661][ T9285] __dump_stack+0x1d/0x30 [ 116.269687][ T9285] dump_stack_lvl+0xe8/0x140 [ 116.269713][ T9285] dump_stack+0x15/0x1b [ 116.269734][ T9285] should_fail_ex+0x265/0x280 [ 116.269769][ T9285] should_failslab+0x8c/0xb0 [ 116.269802][ T9285] kmem_cache_alloc_noprof+0x50/0x310 [ 116.269832][ T9285] ? mas_alloc_nodes+0x265/0x520 [ 116.269863][ T9285] mas_alloc_nodes+0x265/0x520 [ 116.269903][ T9285] mas_preallocate+0x32b/0x510 [ 116.269948][ T9285] vma_link+0x8b/0x220 [ 116.269977][ T9285] insert_vm_struct+0x113/0x1a0 [ 116.270005][ T9285] create_init_stack_vma+0x1a9/0x390 [ 116.270036][ T9285] alloc_bprm+0x2b9/0x350 [ 116.270063][ T9285] do_execveat_common+0x12e/0x750 [ 116.270092][ T9285] ? getname_flags+0x154/0x3b0 [ 116.270127][ T9285] __x64_sys_execveat+0x73/0x90 [ 116.270154][ T9285] x64_sys_call+0x2dae/0x2fb0 [ 116.270181][ T9285] do_syscall_64+0xd2/0x200 [ 116.270217][ T9285] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 116.270251][ T9285] ? clear_bhb_loop+0x40/0x90 [ 116.270273][ T9285] ? clear_bhb_loop+0x40/0x90 [ 116.270301][ T9285] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.270329][ T9285] RIP: 0033:0x7fa7d5a2e929 [ 116.270349][ T9285] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 116.270371][ T9285] RSP: 002b:00007fa7d4097038 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 116.270394][ T9285] RAX: ffffffffffffffda RBX: 00007fa7d5c55fa0 RCX: 00007fa7d5a2e929 [ 116.270410][ T9285] RDX: 00002000000001c0 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 116.270426][ T9285] RBP: 00007fa7d4097090 R08: 0000000000000000 R09: 0000000000000000 [ 116.270442][ T9285] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000001 [ 116.270458][ T9285] R13: 0000000000000000 R14: 00007fa7d5c55fa0 R15: 00007ffe8ebe74f8 [ 116.270478][ T9285] [ 116.576475][ T9295] loop4: detected capacity change from 0 to 1024 [ 116.606641][ T9299] netlink: 'syz.1.1663': attribute type 10 has an invalid length. [ 116.619649][ T9300] netlink: 'syz.0.1662': attribute type 10 has an invalid length. [ 116.632590][ T9300] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.641472][ T9300] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.662419][ T9304] FAULT_INJECTION: forcing a failure. [ 116.662419][ T9304] name failslab, interval 1, probability 0, space 0, times 0 [ 116.675184][ T9304] CPU: 1 UID: 0 PID: 9304 Comm: syz.3.1659 Not tainted 6.15.0-syzkaller-12141-gec7714e49479 #0 PREEMPT(voluntary) [ 116.675215][ T9304] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 116.675227][ T9304] Call Trace: [ 116.675232][ T9304] [ 116.675240][ T9304] __dump_stack+0x1d/0x30 [ 116.675261][ T9304] dump_stack_lvl+0xe8/0x140 [ 116.675317][ T9304] dump_stack+0x15/0x1b [ 116.675333][ T9304] should_fail_ex+0x265/0x280 [ 116.675355][ T9304] should_failslab+0x8c/0xb0 [ 116.675385][ T9304] kmem_cache_alloc_noprof+0x50/0x310 [ 116.675581][ T9304] ? security_inode_alloc+0x37/0x100 [ 116.675625][ T9304] security_inode_alloc+0x37/0x100 [ 116.675703][ T9304] inode_init_always_gfp+0x4b7/0x500 [ 116.675768][ T9304] ? __pfx_sock_alloc_inode+0x10/0x10 [ 116.675793][ T9304] alloc_inode+0x58/0x170 [ 116.675825][ T9304] __sock_create+0x122/0x5b0 [ 116.675905][ T9304] ? fput+0x8f/0xc0 [ 116.675932][ T9304] __sys_socket+0xb0/0x180 [ 116.675964][ T9304] __x64_sys_socket+0x3f/0x50 [ 116.675991][ T9304] x64_sys_call+0x285a/0x2fb0 [ 116.676033][ T9304] do_syscall_64+0xd2/0x200 [ 116.676068][ T9304] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 116.676100][ T9304] ? clear_bhb_loop+0x40/0x90 [ 116.676183][ T9304] ? clear_bhb_loop+0x40/0x90 [ 116.676210][ T9304] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.676232][ T9304] RIP: 0033:0x7fca0298e929 [ 116.676247][ T9304] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 116.676308][ T9304] RSP: 002b:00007fca00fd6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 116.676394][ T9304] RAX: ffffffffffffffda RBX: 00007fca02bb6080 RCX: 00007fca0298e929 [ 116.676408][ T9304] RDX: 0000000000000300 RSI: 0000000000000002 RDI: 0000000000000011 [ 116.676423][ T9304] RBP: 00007fca00fd6090 R08: 0000000000000000 R09: 0000000000000000 [ 116.676438][ T9304] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 116.676453][ T9304] R13: 0000000000000000 R14: 00007fca02bb6080 R15: 00007ffd7735e4e8 [ 116.676478][ T9304] [ 116.692813][ T9300] team0: Failed to send port change of device geneve1 via netlink (err -105) [ 116.698722][ T9304] socket: no more sockets [ 116.733198][ T9300] team0: Failed to send options change via netlink (err -105) [ 116.749147][ T9306] netlink: 'syz.3.1659': attribute type 10 has an invalid length. [ 116.754289][ T9300] team0: Port device geneve1 added [ 116.918441][ T9294] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.947019][ T9306] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.955998][ T9306] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.978914][ T9306] team0: Failed to send port change of device geneve1 via netlink (err -105) [ 116.992982][ T9306] team0: Failed to send options change via netlink (err -105) [ 117.000569][ T9306] team0: Port device geneve1 added [ 117.007607][ T9294] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.020766][ T9297] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.035404][ T9312] loop1: detected capacity change from 0 to 2048 [ 117.077172][ T9312] loop1: p3 < > p4 < > [ 117.081366][ T9312] loop1: partition table partially beyond EOD, truncated [ 117.089641][ T9312] loop1: p3 start 4284289 is beyond EOD, truncated [ 117.095901][ T9294] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.108408][ T9294] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.123094][ T9297] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.146641][ T9294] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.167360][ T9294] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.177957][ T9315] loop4: detected capacity change from 0 to 2048 [ 117.206491][ T9297] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.216831][ T3306] loop4: p3 < > p4 < > [ 117.221039][ T3306] loop4: partition table partially beyond EOD, truncated [ 117.230657][ T9297] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.242580][ T9297] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.246345][ T3306] loop4: p3 start 4284289 is beyond EOD, truncated [ 117.254975][ T9297] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.286505][ T9315] loop4: p3 < > p4 < > [ 117.290727][ T9315] loop4: partition table partially beyond EOD, truncated [ 117.300187][ T9325] FAULT_INJECTION: forcing a failure. [ 117.300187][ T9325] name failslab, interval 1, probability 0, space 0, times 0 [ 117.313073][ T9325] CPU: 1 UID: 0 PID: 9325 Comm: syz.3.1672 Not tainted 6.15.0-syzkaller-12141-gec7714e49479 #0 PREEMPT(voluntary) [ 117.313102][ T9325] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 117.313114][ T9325] Call Trace: [ 117.313185][ T9325] [ 117.313195][ T9325] __dump_stack+0x1d/0x30 [ 117.313239][ T9325] dump_stack_lvl+0xe8/0x140 [ 117.313258][ T9325] dump_stack+0x15/0x1b [ 117.313331][ T9325] should_fail_ex+0x265/0x280 [ 117.313351][ T9325] ? pagemap_read+0x184/0x5e0 [ 117.313369][ T9325] should_failslab+0x8c/0xb0 [ 117.313402][ T9325] __kmalloc_cache_noprof+0x4c/0x320 [ 117.313457][ T9325] pagemap_read+0x184/0x5e0 [ 117.313481][ T9325] ? __pfx_pagemap_read+0x10/0x10 [ 117.313576][ T9325] vfs_read+0x19d/0x6f0 [ 117.313595][ T9325] ? __rcu_read_unlock+0x4f/0x70 [ 117.313621][ T9325] ? __fget_files+0x184/0x1c0 [ 117.313653][ T9325] __x64_sys_pread64+0xfd/0x150 [ 117.313684][ T9325] x64_sys_call+0x296d/0x2fb0 [ 117.313762][ T9325] do_syscall_64+0xd2/0x200 [ 117.313797][ T9325] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 117.313828][ T9325] ? clear_bhb_loop+0x40/0x90 [ 117.313933][ T9325] ? clear_bhb_loop+0x40/0x90 [ 117.313958][ T9325] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.313985][ T9325] RIP: 0033:0x7fca0298e929 [ 117.314023][ T9325] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 117.314044][ T9325] RSP: 002b:00007fca00ff7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 117.314067][ T9325] RAX: ffffffffffffffda RBX: 00007fca02bb5fa0 RCX: 00007fca0298e929 [ 117.314083][ T9325] RDX: 0000000000200000 RSI: 0000200000001240 RDI: 0000000000000003 [ 117.314106][ T9325] RBP: 00007fca00ff7090 R08: 0000000000000000 R09: 0000000000000000 [ 117.314165][ T9325] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 117.314181][ T9325] R13: 0000000000000000 R14: 00007fca02bb5fa0 R15: 00007ffd7735e4e8 [ 117.314203][ T9325] [ 117.315020][ T9315] loop4: p3 start 4284289 is beyond EOD, truncated [ 117.558367][ T9337] loop1: detected capacity change from 0 to 1024 [ 117.565373][ T9337] EXT4-fs: Ignoring removed nobh option [ 117.571054][ T9337] EXT4-fs: Ignoring removed bh option [ 117.635599][ T9341] loop3: detected capacity change from 0 to 2048 [ 117.637714][ T9343] loop2: detected capacity change from 0 to 512 [ 117.666325][ T3306] loop3: p3 < > p4 < > [ 117.670705][ T3306] loop3: partition table partially beyond EOD, truncated [ 117.679928][ T9343] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 117.691331][ T3306] loop3: p3 start 4284289 is beyond EOD, truncated [ 117.708512][ T9341] loop3: p3 < > p4 < > [ 117.712745][ T9341] loop3: partition table partially beyond EOD, truncated [ 117.723892][ T9341] loop3: p3 start 4284289 is beyond EOD, truncated [ 117.727219][ T9343] ext4 filesystem being mounted at /333/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 117.784194][ T3309] udevd[3309]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 117.858544][ T3309] udevd[3309]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 117.894587][ T9353] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 117.919326][ T9368] loop2: detected capacity change from 0 to 512 [ 117.944600][ T9368] ext4 filesystem being mounted at /334/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 117.981518][ T9368] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #2: comm syz.2.1686: corrupted inode contents [ 118.003664][ T9368] EXT4-fs error (device loop2): ext4_dirty_inode:6459: inode #2: comm syz.2.1686: mark_inode_dirty error [ 118.017106][ T9372] loop4: detected capacity change from 0 to 1024 [ 118.021405][ T9368] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #2: comm syz.2.1686: corrupted inode contents [ 118.041015][ T9368] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #2: comm syz.2.1686: corrupted inode contents [ 118.060030][ T9368] EXT4-fs error (device loop2): ext4_dirty_inode:6459: inode #2: comm syz.2.1686: mark_inode_dirty error [ 118.071748][ T9368] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #2: comm syz.2.1686: corrupted inode contents [ 118.085477][ T9368] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #2: comm syz.2.1686: mark_inode_dirty error [ 118.098614][ T9368] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #2: comm syz.2.1686: corrupted inode contents [ 118.111213][ T9368] EXT4-fs error (device loop2): ext4_dirty_inode:6459: inode #2: comm syz.2.1686: mark_inode_dirty error [ 118.173357][ T9378] loop2: detected capacity change from 0 to 1024 [ 118.190388][ T9378] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 118.203938][ T9378] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 118.215237][ T9378] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c840e02c, mo2=0000] [ 118.224629][ T9378] EXT4-fs error (device loop2): ext4_map_blocks:780: inode #3: block 2: comm syz.2.1688: lblock 2 mapped to illegal pblock 2 (length 1) [ 118.239152][ T9378] EXT4-fs (loop2): Remounting filesystem read-only [ 118.246387][ T9378] EXT4-fs (loop2): 1 orphan inode deleted [ 118.375574][ T9390] loop0: detected capacity change from 0 to 2048 [ 118.426162][ T3309] loop0: p3 < > p4 < > [ 118.430432][ T3309] loop0: partition table partially beyond EOD, truncated [ 118.438068][ T3309] loop0: p3 start 4284289 is beyond EOD, truncated [ 118.446599][ T9390] loop0: p3 < > p4 < > [ 118.450803][ T9390] loop0: partition table partially beyond EOD, truncated [ 118.458050][ T9390] loop0: p3 start 4284289 is beyond EOD, truncated [ 118.473399][ T3007] loop0: p3 < > p4 < > [ 118.477642][ T3007] loop0: partition table partially beyond EOD, truncated [ 118.484878][ T3007] loop0: p3 start 4284289 is beyond EOD, truncated [ 118.555624][ T9392] loop0: detected capacity change from 0 to 512 [ 118.563419][ T9392] EXT4-fs: Ignoring removed i_version option [ 118.584986][ T9392] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 118.597492][ T9392] EXT4-fs (loop0): 1 truncate cleaned up [ 118.745001][ T3007] ================================================================== [ 118.753122][ T3007] BUG: KCSAN: data-race in dont_mount / lookup_fast [ 118.759738][ T3007] [ 118.762074][ T3007] read-write to 0xffff888106a9bcc0 of 4 bytes by task 3309 on cpu 0: [ 118.770154][ T3007] dont_mount+0x2a/0x40 [ 118.774326][ T3007] vfs_unlink+0x28f/0x420 [ 118.778673][ T3007] do_unlinkat+0x28e/0x4c0 [ 118.783111][ T3007] __x64_sys_unlink+0x2e/0x40 [ 118.787803][ T3007] x64_sys_call+0x22a6/0x2fb0 [ 118.792503][ T3007] do_syscall_64+0xd2/0x200 [ 118.797041][ T3007] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.802958][ T3007] [ 118.805294][ T3007] read to 0xffff888106a9bcc0 of 4 bytes by task 3007 on cpu 1: [ 118.812864][ T3007] lookup_fast+0xf0/0x320 [ 118.817236][ T3007] walk_component+0x3f/0x220 [ 118.821859][ T3007] path_lookupat+0xfe/0x2a0 [ 118.826392][ T3007] filename_lookup+0x147/0x340 [ 118.831191][ T3007] do_readlinkat+0x7d/0x320 [ 118.835720][ T3007] __x64_sys_readlink+0x47/0x60 [ 118.840595][ T3007] x64_sys_call+0x2cf3/0x2fb0 [ 118.845288][ T3007] do_syscall_64+0xd2/0x200 [ 118.849814][ T3007] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.855724][ T3007] [ 118.858052][ T3007] value changed: 0x00300008 -> 0x00004008 [ 118.863771][ T3007] [ 118.866097][ T3007] Reported by Kernel Concurrency Sanitizer on: [ 118.872251][ T3007] CPU: 1 UID: 0 PID: 3007 Comm: udevd Not tainted 6.15.0-syzkaller-12141-gec7714e49479 #0 PREEMPT(voluntary) [ 118.883891][ T3007] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 118.893961][ T3007] ================================================================== [ 118.905438][ T9399] loop1: detected capacity change from 0 to 1024