last executing test programs: 1m3.417908846s ago: executing program 3 (id=18): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000180000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000f0850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x4, 0x7ffc1ffb}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xa, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="587840d0b9c6f603b6c64f1469196710a0cc89a658f0dc1b208e69082d8488abbbe5253132058fc900602771333b53172497f9c4f31d019f95c665edc60602a0a648bd1b62fe8431dedf972177a3062a066c8cad79e6ce1aa1a85ee3313922ee6a32e95b102bacfebfd74faa4a58c554b9ba79698a8ccb6f5978d7798c632f521d3d69c906dc64cd93ac96742f6a2a1aeee8079244cfddd0dcd00de673"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000480)={0x0, &(0x7f0000000380)}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000280)='./file1\x00', 0x14552, &(0x7f0000000480)=ANY=[], 0xfb, 0x1222, &(0x7f0000002340)="$eJzs20FrHGUYB/AnSdO0qclGrdUWxBe9VJChycGLXoKkIF1Q2kZoBWFqJrpk3A2ZJbAiVk9e/RwiiOBNEG96ycVvIHjLxWMFcSS7WhPdiFtCNpbf77IPPPN/dnZ2GZjlfXdf/vS9jfUqW8+7MTkxEZObEeleihST8aeP4vmXvvv+6Ru3bl9bbjZXrqd0dfnm4osppflnvnnzg8+f/bZ77o2v5r+eiZ2Ft3Z/Xvpp58LOxd3fbr7bqlKrSu1ON+XpTqfTze+URVprVRtZSq+XRV4VabpdFVsH+utlZ3Ozl/L22tzs5lZRVSlv99JG0UvdTupu9VL+Tt5qpyzL0txsMLpT96vVz+7VdR1R19NxOuq6rs/GbJyLR2Iu5qMRC/FoPBaPx/l4Ii7Ek/FUfPnjF729BAAAAAAAAAAAAAAAAAAAAHB0Rt3/f7F/1LjPGgAAAAAAAAAAAAAAAAAAAB4uN27dvrbcbK5cT+lMRPnJ9ur26uB10F9ej1aUUcSVaMSv0d/9PzCor77aXLmS+hbi4/LuH/m726tTB/OL0YgXhucXB/l0MD8Ts/vzS9GI88Py07E0NH8mLj+3L59FI354OzpRxlrsZf96/w8XU3rltebf8pf6xx1u6ji+HgAAADgSWbpv6PN7lh3WH+RH+H/gwPP1XvbSqbF+dCKi6r2/kZdlsTVaETGsNfngA09qcflknEa/OH2UA6cjYrTUL3Vdj/8i/Kfi7JFPPvyHPRMRDzx5IiJOxBX7ZzHuOxPHYf8tHQAAAAAAAAAAgP+PQ5cBzvzbCsGpERcLAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/M4OHAgAAAAACPK3XmCEAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAVwAAAP//5knMdg==") r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x5, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x1000003, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, 0x25, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r4 = socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0xffdd, &(0x7f0000000ac0)={0x0}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32, @ANYBLOB="01d90000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00f7ffffffffffff130012800b00010062617461647600000400028008000a00", @ANYRES32=0xffffffffffffffff], 0x3c}}, 0x0) r6 = socket(0x10, 0x3, 0x0) sendmsg$TIPC_NL_LINK_SET(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x4000000000001f2, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f00000004c0)=ANY=[@ANYRES64, @ANYRESDEC=r3, @ANYRES16=r5], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) pipe2$9p(0x0, 0x0) r8 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) sendfile(r8, r8, 0x0, 0x800000009) r9 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r9, &(0x7f0000000080)={0x23, 0x0, 0x3, 0x1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000004000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000050000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000a1ce4d0e25e7e239bbff62a766bb233572e42a3228ffc8f00100000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m2.867100271s ago: executing program 3 (id=24): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0xd9}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) r2 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) fchdir(r2) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90) getdents64(r3, &(0x7f0000000f80)=""/4096, 0x1000) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000f7143757cbac9df0480a4989a8937df6bf825756d12238762d859893ef41c17172a89fa2f6c8df4088134184951a72c087be33acbe41c2eedaf7257895f434"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000004700008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r7}, 0x18) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), r8) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r8, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000640)=ANY=[@ANYBLOB="2c00d0e5", @ANYRES16=r9, @ANYBLOB="01002dbd7000fbdbdf2502000000180001801400020076657468305f746f5f68737200000000"], 0x2c}, 0x1, 0x0, 0x0, 0x2000000}, 0x4000) sendmsg$NL80211_CMD_SET_TID_CONFIG(r5, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002ec0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="5953fdfffffffddbdf256b000000080043"], 0x28}}, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000540), 0x1, 0x4a3, &(0x7f0000000580)="$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") r10 = socket$inet6_udplite(0xa, 0x2, 0x88) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x44000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int={0x1, 0x0, 0x0, 0x1, 0x0, 0x7c, 0x0, 0x5a, 0x3}]}}, &(0x7f0000000f40)=""/4096, 0x2a, 0x1000, 0x1}, 0x28) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000000)={'sit0\x00', &(0x7f0000000340)={'erspan0\x00', 0x0, 0x0, 0x7, 0x0, 0x5, {{0xb, 0x4, 0x3, 0x1, 0x2c, 0x64, 0x0, 0xfd, 0x29, 0x0, @remote, @private=0xa010101, {[@rr={0x7, 0x17, 0xad, [@private=0xa010101, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @broadcast]}]}}}}}) r12 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r12, 0x0, 0x2e, &(0x7f0000000340)={0x8, {{0x2, 0x8000, @multicast2}}, {{0x2, 0x0, @multicast2}}}, 0x108) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r10, 0x89f3, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f00000003c0)={'ip6_vti0\x00', r11, 0x29, 0xb3, 0x0, 0xfffffff3, 0x4d, @mcast1, @remote, 0x8000, 0x8000, 0x7, 0xfffffffa}}) lsetxattr$security_ima(&(0x7f0000000300)='./file0\x00', &(0x7f0000000080), &(0x7f00000000c0)=@sha1={0x1, "ca46bb42f431c3e0a36fd25058505cb8e13b6aee"}, 0xfd3f, 0x0) r13 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r13, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) shmget$private(0x0, 0x11000, 0x8, &(0x7f0000fec000/0x11000)=nil) 1m2.75508355s ago: executing program 3 (id=25): statfs(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)=""/72) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000400)=[{0x6, 0x1, 0x2, 0x7fff7ffc}]}) 1m2.719132033s ago: executing program 3 (id=26): syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000040)={[{@noquota}]}, 0x1, 0x775, &(0x7f0000001180)="$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") r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r0, &(0x7f0000000a40)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000680)="dbb3", 0x2}], 0x1}}], 0x1, 0x40040) sendmmsg(r0, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)='$', 0x1}], 0x1, &(0x7f0000001a80)=[{0x10, 0x1}], 0x10}}], 0x1, 0x4004804) lsetxattr$security_capability(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000100), &(0x7f0000000140)=@v2={0x2000000, [{0x8d, 0xfffffff9}, {0x2, 0x2}]}, 0x14, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f00000007c0)={0x1f, 0x0, @any, 0x4}, 0xe) setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000040)={0xe, 0x9, 0x2, 0x8, 0x0, 0x5, 0xd4c}, 0xc) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x9, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x50, 0x4}, 0x4, 0x10000, 0xc, 0x1, 0x6, 0x6, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0x1, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ptrace$getregset(0x4204, r2, 0x202, &(0x7f0000000200)={&(0x7f0000000380)=""/112, 0x70}) truncate(&(0x7f0000000180)='./file1\x00', 0x121) 1m2.518473139s ago: executing program 3 (id=27): syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = syz_io_uring_setup(0x49c, &(0x7f00000003c0)={0x0, 0x79ac, 0x400, 0x7ffc, 0x70}, &(0x7f0000000340)=0x0, &(0x7f0000000900)=0x0) syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00') bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x10) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) r4 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$selinux_attr(r4, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x8c36, 0x3c00, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) r7 = socket(0x1e, 0x1, 0x0) connect$tipc(r7, &(0x7f0000000040)=@id, 0x10) shutdown(r7, 0x2) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0x7fffffff, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x2007, @fd, 0x6, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1}) io_uring_enter(r0, 0x1fa5, 0x4c4, 0x43, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r8 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x23, 0x1, 0x0, 0x0, 0x0, 0x9, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x9, 0x0, 0x1, 0x5, 0x20005, 0xb, 0x0, 0x40, 0x0, 0x20000009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) writev(r8, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}], 0x1) 1m1.900245419s ago: executing program 3 (id=36): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0800034000000004640000000e0a01020000000000000000010000000900020073797a32000000000900010073"], 0xf0}, 0x1, 0x0, 0x0, 0x80}, 0x0) 1m1.860178102s ago: executing program 32 (id=36): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0800034000000004640000000e0a01020000000000000000010000000900020073797a32000000000900010073"], 0xf0}, 0x1, 0x0, 0x0, 0x80}, 0x0) 59.66646709s ago: executing program 0 (id=61): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="060000000400000099000000"], 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000007c0)={r0, 0x0, &(0x7f0000000700)=""/182}, 0x20) 59.564155988s ago: executing program 0 (id=65): bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) capset(&(0x7f0000000ac0)={0x19980330}, &(0x7f0000000180)={0x0, 0x10000, 0xc898, 0x0, 0x0, 0x2}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB], 0x4c}}, 0x0) 59.535002621s ago: executing program 0 (id=67): r0 = memfd_create(&(0x7f0000000a80)='\x00\xc76\xbe\x91\x8d\x182)!\x9a%\xd9\x19\x17\xb0\xed|\xb3\xc2\x017h\xe9kL\xa2\xd28\xd6\x06\a\x0e\xfc\xfe\x12\x8f&\x13\xae%@T\xa3\xb0>\\\xec\xa9\xf9Q@6A\x10\x8cn|\x00\x00\x00\x00\x00\x00\x00\x00\xeb0\xdd\xe8\x87\x05=\xfb\x8b$\xdcQ\xee\xc5\x1f\x8bQ\xf7fo\"i\xa1hk\x1d\xf5z\xc1\x7f\xa4\\]\xc4\xbe3\xf9\xa8\t?:\xd8\xda\x84\xeepI[\x1c\x00\x00\x00\x00\xf9v\x00\x00\x00\x00\x00T\xb6\xbe\x0f~\xc0\x92\xe9O{\xa8\x81(\x01\x14\xfc\x83\xf9\xfb\x05\x94Tr@Lq]\xf9\x15zj\x87\xc4\x8e\xe8/\xb9-&R\x8e\xb2\xb3bBx\x1e1\x18\x8f2\xf7]#\xed,\xc7\x03\x00\x00\x00\xa3\xee\xcb\xaf\xb3\xe3\'}\x18\xe8O\xa8#K\xb6\xe4R$\xaa\x00U\x92\xd2\x99\xb8\\\xec\xa9\xf9Q@6A\x10\x8cn|\x00\x00\x00\x00\x00\x00\x00\x00\xeb0\xdd\xe8\x87\x05=\xfb\x8b$\xdcQ\xee\xc5\x1f\x8bQ\xf7fo\"i\xa1hk\x1d\xf5z\xc1\x7f\xa4\\]\xc4\xbe3\xf9\xa8\t?:\xd8\xda\x84\xeepI[\x1c\x00\x00\x00\x00\xf9v\x00\x00\x00\x00\x00T\xb6\xbe\x0f~\xc0\x92\xe9O{\xa8\x81(\x01\x14\xfc\x83\xf9\xfb\x05\x94Tr@Lq]\xf9\x15zj\x87\xc4\x8e\xe8/\xb9-&R\x8e\xb2\xb3bBx\x1e1\x18\x8f2\xf7]#\xed,\xc7\x03\x00\x00\x00\xa3\xee\xcb\xaf\xb3\xe3\'}\x18\xe8O\xa8#K\xb6\xe4R$\xaa\x00U\x92\xd2\x99\xb80x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r8, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x300, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x5c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{0x8, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x7, 0x14, 0x1}, {0x8, 0x9, 0x2}}}]}}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x400c040}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x18, &(0x7f0000000000)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x13, '\x00', r8, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x1, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000240)=[r2], &(0x7f0000000280)=[{0x1, 0x3, 0xf, 0x9}, {0x3, 0x5, 0x9, 0x53c63cd6b7f11975}, {0x2, 0x2, 0x0, 0xc}, {0x2, 0x2, 0x2, 0xb}, {0x3, 0x2, 0xe, 0x6}, {0x5, 0x5, 0x3, 0xb}, {0x0, 0x5, 0x9, 0x8}, {0x3, 0x3, 0x5}], 0x10, 0x4}, 0x94) 57.140811134s ago: executing program 33 (id=94): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r0}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) r1 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) writev(r1, &(0x7f00000000c0), 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000740)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x65, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000001afc180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000090000850000000400000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x1000000, {0x0, 0x0, 0x0, 0x0, {0x9}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x691, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x8c0}, 0x0) r7 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r7) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r8, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x300, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x5c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{0x8, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x7, 0x14, 0x1}, {0x8, 0x9, 0x2}}}]}}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x400c040}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x18, &(0x7f0000000000)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x13, '\x00', r8, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x1, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000240)=[r2], &(0x7f0000000280)=[{0x1, 0x3, 0xf, 0x9}, {0x3, 0x5, 0x9, 0x53c63cd6b7f11975}, {0x2, 0x2, 0x0, 0xc}, {0x2, 0x2, 0x2, 0xb}, {0x3, 0x2, 0xe, 0x6}, {0x5, 0x5, 0x3, 0xb}, {0x0, 0x5, 0x9, 0x8}, {0x3, 0x3, 0x5}], 0x10, 0x4}, 0x94) 3.5863355s ago: executing program 1 (id=992): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00"/13], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_io_uring_setup(0x499, &(0x7f0000000400)={0x0, 0xd146, 0x1000, 0xc, 0x288}, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r2, 0x0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='0'], 0x30}}) io_uring_enter(r3, 0x3516, 0x0, 0x4, 0x0, 0x0) 3.378405817s ago: executing program 1 (id=994): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000001700)={[{@discard}, {@auto_da_alloc}], [{@euid_gt}, {@permit_directio}, {@fsuuid={'fsuuid', 0x3d, {[0x69, 0x30, 0x65, 0x5e, 0x39, 0x36, 0x32, 0x36], 0x2d, [0x62, 0x64, 0x63, 0x32], 0x2d, [0xe3d7eca6065efdbe, 0x39, 0x39, 0x62], 0x2d, [0x38, 0x38, 0x30, 0x38], 0x2d, [0x38, 0x37, 0x35, 0x9c, 0x63, 0x31, 0x64, 0x35]}}}]}, 0x1, 0x53b, &(0x7f00000011c0)="$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") ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000000)={0x401, 0x0, 0x10000, 0xb998, 0x0, "194f2f83c2e798c3584770116cddc8819592b1"}) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440000000010c00014000000000000080010c00024000000000000000090800034000000fba0c00024000000000000000000c000140000000000000000714000000110001"], 0xdc}}, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r1, 0xffffffffffffffff, 0x0) 3.161602914s ago: executing program 1 (id=997): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0200000004000000080000000100"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b707000008000000850000006900000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000280)='./file1\x00', 0x0, &(0x7f0000000240)=ANY=[], 0x1, 0x1237, &(0x7f00000006c0)="$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") mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) rename(&(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0x40, 0x0, 0x0, 0x70bd26, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x14}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x8581366}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x400cd}, 0x40) socket$netlink(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b0000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffc01}, 0x94) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADD(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000006c0)=ANY=[@ANYBLOB="fa000000", @ANYRES16=r2, @ANYBLOB="cd3e0000000002000000010000000800020005000000ce0001"], 0x114}}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2.075912162s ago: executing program 4 (id=1007): sendmsg$tipc(0xffffffffffffffff, 0x0, 0x20040810) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000000085000000720000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x300000a, 0x12, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00'}, 0x10) sigaltstack(0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) open(&(0x7f0000000000)='./bus\x00', 0x1050c1, 0x170) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000300)={[{@nolazytime}, {@lazytime}, {@journal_path={'journal_path', 0x3d, './bus'}}, {@dax_always}, {@lazytime}, {@noload}]}, 0x3, 0x45c, &(0x7f0000002400)="$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") 1.986460479s ago: executing program 1 (id=1009): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000002c0)=ANY=[@ANYBLOB='H\x00\x00', @ANYRES16=r1, @ANYBLOB="0100d0000000fbdbdf25010000001800018014000200766574683100000000000000000000001c0002800c"], 0x48}, 0x1, 0x0, 0x0, 0x840}, 0x4008800) 1.830093832s ago: executing program 4 (id=1010): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0200000004000000080000000100"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b707000008000000850000006900000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000280)='./file1\x00', 0x0, &(0x7f0000000240)=ANY=[], 0x1, 0x1237, &(0x7f00000006c0)="$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") mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) rename(&(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r5, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0x40, 0x0, 0x0, 0x70bd26, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x14}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x8581366}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x400cd}, 0x40) r6 = socket$netlink(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x34, r7, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x20008000) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r8}, 0x10) sendmsg$NLBL_MGMT_C_ADD(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000006c0)=ANY=[@ANYBLOB="fa000000", @ANYRES16=r2, @ANYBLOB="cd3e0000000002000000010000000800020005000000ce0001"], 0x114}}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) 1.765593767s ago: executing program 1 (id=1011): sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) rseq(0x0, 0x0, 0x0, 0x0) preadv(r0, 0x0, 0x0, 0x80000001, 0x7f) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r1 = socket$key(0xf, 0x3, 0x2) syz_mount_image$ext4(&(0x7f00000007c0)='ext4\x00', &(0x7f00000006c0)='./file1\x00', 0x40, &(0x7f00000000c0)={[{@user_xattr}, {@nodioread_nolock}]}, 0x1, 0x576, &(0x7f0000000140)="$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") pwrite64(0xffffffffffffffff, 0x0, 0x0, 0xe7c) close_range(0xffffffffffffffff, r1, 0x2) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cc, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2000002, 0x42032, 0xffffffffffffffff, 0x80000000) request_key(0x0, 0x0, 0x0, 0x0) 1.661316826s ago: executing program 5 (id=1014): bpf$MAP_CREATE(0x0, 0x0, 0x48) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a030000000000000000f0070000000900010073797a300000000080000000090a01040000000000000000070000"], 0xc8}, 0x1, 0x0, 0x0, 0x40000}, 0x20050800) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_io_uring_setup(0x499, &(0x7f0000000400)={0x0, 0xd146, 0x1000, 0xc, 0x288}, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r1, 0x0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='0'], 0x30}}) io_uring_enter(r2, 0x3516, 0x0, 0x4, 0x0, 0x0) 1.459733412s ago: executing program 5 (id=1015): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCSTI(r0, 0x5412, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000100)='kfree\x00', r1, 0x0, 0x8000000000}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0100000004000000080000000b"], 0x48) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r2, 0x40089413, &(0x7f0000000040)=0x1) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x203, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}], {0x14}}, 0x68}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000840)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x48, 0x16, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0xd, 0x1, 'batadv_slave_1\x00'}]}]}]}], {0xfffffffffffffc4a}}, 0x70}}, 0x24040880) vmsplice(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f00000004c0)='|', 0xffffffffffffff18}], 0x1, 0x0) 1.434110454s ago: executing program 1 (id=1016): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000240)='rtc_irq_set_freq\x00', 0xffffffffffffffff, 0x0, 0x8}, 0x18) r0 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dccb) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b0000000700000008000000a6ad6a1a05"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'team0\x00'}) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x89a1, &(0x7f0000000040)={'syzkaller0\x00'}) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1018e58, &(0x7f0000000380)={[{@nodioread_nolock}, {@noblock_validity}, {@data_err_ignore}, {@max_batch_time={'max_batch_time', 0x3d, 0x8c9}}, {@nodiscard}, {@inlinecrypt}, {@i_version}]}, 0x6, 0x5fc, &(0x7f0000000600)="$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") 1.326339772s ago: executing program 6 (id=1020): mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f00000000c0)='nfs\x00', 0x8c, &(0x7f0000000000)='\x06\x00\x00\x00\x04\xb0\xfe\x98\x9a!s\x91]\xab\xc9\xa2IV\xb6-\xd9z\x81\x91\x8aP}I\xc6\x0e\xd9\v\xda\xbfS\x16 \x04\r\xcd\xdb\x9a\xd4\xaf\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\x02\x000x0}) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_int(r2, 0x0, 0x5, &(0x7f0000000080)=0x9, 0x4) setsockopt$inet_int(r2, 0x0, 0x5, &(0x7f0000000000)=0xf, 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@ipv4_newroute={0x2c, 0x1a, 0x1, 0x0, 0x0, {}, [@RTA_SPORT={0x6, 0x1c, 0x4e20}, @RTA_DPORT={0x6, 0x1d, 0x4e21}]}, 0x2c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0xb4}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.123642669s ago: executing program 6 (id=1024): socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) pwritev(0xffffffffffffffff, &(0x7f0000004240)=[{&(0x7f0000002fc0)='v', 0x1}], 0x1, 0x4, 0x4) sendmsg$nl_xfrm(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000640)=@migrate={0xec, 0x21, 0x1, 0x0, 0x0, {{@in6=@private2, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@migrate={0x9c, 0x11, [{@in=@dev={0xac, 0x14, 0x14, 0x41}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@local, 0x32, 0x0, 0x0, 0x2, 0x2, 0xa}, {@in6=@ipv4={'\x00', '\xff\xff', @loopback}, @in6=@private2, @in=@rand_addr=0x64010102, @in6=@private2, 0x3c, 0x0, 0x0, 0x2000, 0x8, 0x2}]}]}, 0xec}}, 0x0) 1.069361473s ago: executing program 4 (id=1026): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000140)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb904}, 0x94) r1 = syz_io_uring_setup(0xbc3, &(0x7f0000000440)={0x0, 0xaf1f, 0x80, 0x44, 0x1a8}, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000500), 0xffffffffffffffff) syz_io_uring_submit(r2, r3, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r1, 0x47f8, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0, 0x0, 0xfffffffffffffffe}, 0x18) setpriority(0x2, 0x0, 0x1) 1.064386994s ago: executing program 6 (id=1027): ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000180)={0x4, 0x8, 0x9, 0x7, 0x4, "6e92def7227c1389b2f77c1c6c2dd50c87ea64", 0x2, 0x1}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x79, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0, 0x81, 0x1080a422012f758f}) r0 = syz_io_uring_setup(0x17dc, &(0x7f0000000100)={0x0, 0xdafd, 0x0, 0x3, 0x343}, &(0x7f0000000300)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000200)=[{0x30, 0x4, 0x0, 0x2}]}, 0xffffffffffffff0e) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_ACCEPT={0xd, 0x4, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x81800, 0x1}) io_uring_enter(r0, 0x749f, 0x4, 0x0, 0x0, 0xfffffffffffffef5) lremovexattr(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440)=@known='user.incfs.size\x00') 1.050882265s ago: executing program 2 (id=1028): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000080)={0x0, &(0x7f0000000580)=""/241, &(0x7f0000000680)="ba9aff20bab017b11eba06294efa6f4a621fe7f2ae1c9478b25f06b7d5d3d60547a8b0d32140b880ec6dd53d4ded6196724fe1001dd0161ff261154914359a3aa1ac8e9c09281d232b0a456113f106f24873639f703266165b0f024dec986d7e947e09148049d431469ac3505dbfd090af5b1aaae4afc633eacd4a3f4de11e65b255b7df16fd7f4922d2ec2a86301c741165c3c31f2d50320f1d7290d124eb899c75d7be7057ee54d8b56c629f90dbd4adbdb01b5d0590f0b9554708f69d89edbfe8d5d192842a3e30a58fc0185a55b1e55a97ffed6369ae8977157f36cd29ca05515c1ce9a57587aba6bbb8c3cd0ceab7", &(0x7f0000000780)="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", 0x8, r0}, 0x38) 1.004215689s ago: executing program 2 (id=1029): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x840}, 0x4008800) 1.003511079s ago: executing program 6 (id=1030): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0200000004000000080000000100"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b707000008000000850000006900000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000280)='./file1\x00', 0x0, &(0x7f0000000240)=ANY=[], 0x1, 0x1237, &(0x7f00000006c0)="$eJzs3E1rXFUYAOB3kon5qPlQ61cXeqgbV5cmC1eCBklBMgupRmgFcWonOOQ6E3KHQERtXbkV/Bfi0p0g/gE3/gWX3bjsQrjivZNk0qStlTJj6fNs7ptz3jfnXA4MnMs99/ab332+s11k2+1BTDUaMbUbke6kSDEVh17ZrK9Xr22ut1obV1K6vP7B6hsppaVXf/noyx8v/jo49+FPSz/Pxm8rH9/+cy0ibv2T/1m3SN0i9fqD1E7X+/1B+3remY5usZOl9F7eaRed1O0Vnb3R/rSd93d3D1K7d2NxYXevUxSp3TtIO52DNOin5nBKvZRlWVpcCO5p5lTLJ3c3bv1wpyzLiLKciaeiLMtyPhbiXDwdi7FULeIz8Ww8F+fj+XghXoyX4uUqa4x3AQAAAAAAAAAAAAAAAAAAAE+A+53/X44V5/8BAAAAAAAAAAAAAAAAAABgDN6/em1zvdXauJLSXET+7f7W/lZ9rfvXt6MbeXTiUizHX1Gd/q/V8eV3WxuXUmUlvslvDutv7m9Nn6xfrT4nMKxvVn2H9at1fTpZPxsLo/VrsRznzx5/7Yz6me8jXn9tpD6L5fj90+hHHjeqsY/rv15N6Z1b9ZziaPwLVd6xRjRG/2yOZ30AAADgUcjSkaP9+9sj+/csO91f74/r+od4PnDX/r4ZF+yhJ644+GKnneedvZPB3KmWBwWNiPjXyfcKGsNHLGfmxFzEf/7PYw2mHrZqerga908+/O7m5G/wcQvm/x/TeKyCif0kMUbHi36y/Y+LR+H8+GcFAAAAAAAAAADAgzyydwajcdb7v82o3yybHR3zrfgqm9wdAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPA3O3AsAAAAACDM3zqNjg0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgpAAAAP//d+24Qg==") mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) rename(&(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r6, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0x40, 0x0, 0x0, 0x70bd26, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x14}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x8581366}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x400cd}, 0x40) socket$netlink(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b0000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffc01}, 0x94) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADD(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000006c0)=ANY=[@ANYBLOB="fa000000", @ANYRES16=r2, @ANYBLOB="cd3e0000000002000000010000000800020005000000ce0001"], 0x114}}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 910.911596ms ago: executing program 2 (id=1031): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_pidfd_open(0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001340)={&(0x7f0000000340)='kfree\x00', 0xffffffffffffffff, 0x0, 0x6}, 0x18) r1 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)={0x10, 0x1403, 0x1, 0x70bd2d}, 0x10}, 0x1, 0x0, 0x0, 0x854}, 0x0) 865.86327ms ago: executing program 2 (id=1032): bpf$PROG_LOAD(0x5, &(0x7f0000001e00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000400000018110000", @ANYRES16=0x0, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000207020000f8ffffffb703000008000000b70400000080000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000020b70400000000000085000000c3"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x30, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfeffffff}, 0x94) openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)={0xa0341, 0xdf, 0x16}, 0x18) r1 = syz_create_resource$binfmt(&(0x7f0000000380)='./file1\x00') openat$binfmt(0xffffffffffffff9c, r1, 0x42, 0x1ff) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1800403, &(0x7f0000000940), 0x2, 0x5ad, &(0x7f0000000180)="$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") mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f00000000c0)='nfs\x00', 0x8c, &(0x7f0000000000)='\x06\x00\x00\x00\x04\xb0\xfe\x98\x9a!s\x91]\xab\xc9\xa2IV\xb6-\xd9z\x81\x91\x8aP}I\xc6\x0e\xd9\v\xda\xbfS\x16 \x04\r\xcd\xdb\x9a\xd4\xaf\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\x02\x000x0, 0x10, &(0x7f0000000300)=[@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000280)=0x10) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000040)={r2}, &(0x7f00000000c0)=0x8) listen(r1, 0x9) listen(r1, 0x2c) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000007"], 0x50) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@type_tag={0xb, 0x0, 0x0, 0x12, 0x1}]}, {0x0, [0x0, 0x0]}}, &(0x7f00000003c0)=""/165, 0x28, 0xa5, 0x1, 0x3}, 0x28) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x17, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='kfree\x00', r5, 0x0, 0x8000000000000}, 0x18) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='setgroups\x00') r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x80) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000210000000000000000000000000a6c000000160a3f360000000000000000020000000900010073797a30000000004000038008000240000000002c0003801400010076657468305f746f5f626f6e64000000140001007665746830000000000000000000000008000140000000000900020073797a300000000014000000110001"], 0x94}}, 0x8000) close_range(r6, 0xffffffffffffffff, 0x0) clock_getres(0xeaffffff, 0x0) 520.678468ms ago: executing program 2 (id=1036): write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x33fe0) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, 0x0, 0x20048000) socket$tipc(0x1e, 0x2, 0x0) socket$tipc(0x1e, 0x5, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x161042, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x3ff, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(0xffffffffffffffff, 0x404c534a, &(0x7f0000000040)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00'}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000002c80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000200)='percpu_free_percpu\x00', r3}, 0x10) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000b00)=ANY=[@ANYBLOB="0600000004000000be7000005c00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\a\x00'], 0x48) 168.155606ms ago: executing program 5 (id=1037): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) 167.451337ms ago: executing program 2 (id=1038): bpf$MAP_CREATE(0x0, 0x0, 0x48) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a030000000000000000f0070000000900010073797a300000000080000000090a01040000000000000000070000"], 0xc8}, 0x1, 0x0, 0x0, 0x40000}, 0x20050800) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_io_uring_setup(0x499, &(0x7f0000000400)={0x0, 0xd146, 0x1000, 0xc, 0x288}, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r2, 0x0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='0'], 0x30}}) io_uring_enter(r3, 0x3516, 0x0, 0x4, 0x0, 0x0) 79.782573ms ago: executing program 6 (id=1039): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)="ba9aff20bab017b11eba06294efa6f4a621fe7f2ae1c9478b25f06b7d5d3d60547a8b0d32140b880ec6dd53d4ded6196724fe1001dd0161ff261154914359a3aa1ac8e9c09281d232b0a456113f106f24873639f703266165b0f024dec986d7e947e09148049d431469ac3505dbfd090af5b1aaae4afc633eacd4a3f4de11e65b255b7df16fd7f4922d2ec2a86301c741165c3c31f2d50320f1d7290d124eb899c75d7be7057ee54d8b56c629f90dbd4adbdb01b5d0590f0b9554708f69d89edbfe8d5d192842a3e30a58fc0185a55b1e55a97ffed6369ae8977157f36cd29ca05515c1ce9a57587aba6bbb8c3cd0ceab7", &(0x7f0000000780)="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", 0x8, r0}, 0x38) 0s ago: executing program 5 (id=1040): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000202300800000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4}, 0x94) r1 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r1, 0x84, 0x24, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xe}}, 0x10) sendmmsg$inet(r2, &(0x7f0000001000)=[{{&(0x7f0000000680)={0x2, 0x4e22, @multicast2}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000940)="b3fe109a0a0e5fbf3f4e8ce314c9dee2296599bb37db484506f7f4a1fab11782e0e1581812720001a80b9a0f3b1906d25b5efb254a1119eafe8167fa354fb03a066c8733d91c9127a8c77f2d647fbee113e52351c782ebfba85879d9482fd52ff178111c30472dc8243f1e28fc4d6127452b0d5b98c225054f78c4db08b2aaa9275252150a05682058a0c2b50728dd04c8040000007233", 0x97}, {&(0x7f0000000ec0)="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", 0x13a}], 0x2}}, {{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="8c0c3d1d67c8bb03bb8583a03c80782dc91b7645b65ba2116c9e64ddbb0545cdc56ee7374538a65fd04d97df001c29c9b087138af146ce11e88845bc9556ab54ea3af37d14905a6715cb3d95950e673158092189a4ff888056524a743276bdca4c98e171c7731c42fa63f4a589800a0bc1da8d669bab3f7e49551957c66ce65a558c84b2cf257a964904d659cd", 0x8d}, {&(0x7f0000000b00)="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", 0x159}, {&(0x7f0000000740)="c319cf272fefa48c3b8cc08760fd9d24a8b12249fa4a45c25032799042725eecb77e0d2a0191df2cd9ae72b7da6d9e5c2fb728a282ff50f4fd50488884bc66311445e2a7478c886c290dd3c0872c392e0c8145fe311cd88e6bad9f26c22b283a9d4812c3a4a1325e19be229046f9e452e3332092e806b7341f3152580d5996c980ba838a87d89f312a9486d0e2e9c280ac59d1aeebfa73970b74729ffb4dfea35e2dca68b2c2373f50315f22e443738d303584816bd35dec87", 0xb9}], 0x3}}, {{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000002c0)="ebd3f898a9f35f9f0687d56ed757eabb1ec4ae6ca742bca169389dc37b2bc6ea3018aaf5dde0b57f2e7c698da0de72d64894959dc5372a0defdf9d10a5fca8e5ec1a4813cc45e7a4a69bba49d31c2c40babd27642c8e81130cc35ee25ea5109a5b52ea11a044e158ed8f1d423847a9a497", 0x71}, {&(0x7f00000004c0)="7db538fba9d9a69edc1c8cdb7f78bdaf5a5b51158241af9a003eaca18f44be8ea83257d89d62f68cefad6c78998e0e2588b39df32d114b68c3e9f82c7c4343cd86efebf269f9c14356b1afc657700f6342ecec6cf6c24d82f412dcaac5cb0034955cf6b9292e554af52158fd559ebda9f2ded42beaa68dd1345376214fc553a3cae6dd55cc3b437e588ba64d7bf9f209a949d31a226860c14ced149be2ce4eb88b40b47e6970871824f4e1a98e9764588f0b178117a6d4d4471adbd30ba3e5a40de0ef50b307c318", 0xc8}], 0x2}}], 0x4, 0xc044) write$binfmt_misc(r2, &(0x7f0000000300), 0x5b0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0, 0x0, 0x10001}, 0x18) r3 = socket$kcm(0x10, 0x2, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180200000020702500000000002020207b1af8ff00000000bfa100000000000007010000dbffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kfree\x00', r4, 0x0, 0xfffffffffffffffc}, 0x18) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x8, 0x2, 0x2400, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r5, &(0x7f0000000300), &(0x7f0000000000)=""/10, 0x2}, 0x20) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)="2e00000038000511d25a80698c63940d0124fc602f6e35400c000200001ec00037153e370a00018025581d00d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x39c}, 0x0) kernel console output (not intermixed with test programs): isabled state [ 59.368030][ T4546] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 59.383466][ T4546] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 59.453100][ T4546] bond1: left promiscuous mode [ 59.462525][ T4546] batadv1: left promiscuous mode [ 59.467930][ T4546] batadv1: left allmulticast mode [ 59.473920][ T4546] batadv2: left promiscuous mode [ 59.480235][ T4546] batadv2: left allmulticast mode [ 59.489057][ T4546] bond2: left promiscuous mode [ 59.495425][ T4546] batadv3: left promiscuous mode [ 59.500956][ T4546] batadv3: left allmulticast mode [ 59.507410][ T4546] batadv4: left promiscuous mode [ 59.513956][ T4546] batadv4: left allmulticast mode [ 59.529450][ T51] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.566422][ T51] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.579251][ T51] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.594464][ T51] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.638496][ T4558] loop1: detected capacity change from 0 to 8192 [ 59.649035][ T4558] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 59.663361][ T4564] lo speed is unknown, defaulting to 1000 [ 59.686775][ T29] kauditd_printk_skb: 684 callbacks suppressed [ 59.686791][ T29] audit: type=1400 audit(1754633045.467:2305): avc: denied { block_suspend } for pid=4562 comm="syz.6.242" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 59.900376][ T29] audit: type=1326 audit(1754633045.677:2306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4562 comm="syz.6.242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c48f8ebe9 code=0x7ffc0000 [ 59.928548][ T29] audit: type=1326 audit(1754633045.677:2307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4562 comm="syz.6.242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c48f8ebe9 code=0x7ffc0000 [ 60.009730][ T4580] netlink: 96 bytes leftover after parsing attributes in process `syz.5.245'. [ 60.106312][ T4581] netlink: 14 bytes leftover after parsing attributes in process `syz.1.240'. [ 60.523571][ T4592] loop2: detected capacity change from 0 to 1024 [ 60.586802][ T4592] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 60.620228][ T29] audit: type=1326 audit(1754633045.687:2308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4562 comm="syz.6.242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f1c48f8ebe9 code=0x7ffc0000 [ 60.648160][ T29] audit: type=1400 audit(1754633045.987:2309): avc: denied { read open } for pid=4582 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=482 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 60.676362][ T29] audit: type=1400 audit(1754633046.097:2310): avc: denied { create } for pid=4583 comm="syz.2.247" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 60.696880][ T4592] ext4 filesystem being mounted at /43/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 60.814923][ T4614] siw: device registration error -23 [ 60.832385][ T4584] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 60.872357][ T4584] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 21 with max blocks 1 with error 28 [ 60.886786][ T4584] EXT4-fs (loop2): This should not happen!! Data will be lost [ 60.886786][ T4584] [ 60.897122][ T4584] EXT4-fs (loop2): Total free blocks count 0 [ 60.903911][ T4584] EXT4-fs (loop2): Free/Dirty block details [ 60.910521][ T4584] EXT4-fs (loop2): free_blocks=4293918720 [ 60.916421][ T4584] EXT4-fs (loop2): dirty_blocks=16 [ 60.922396][ T4584] EXT4-fs (loop2): Block reservation details [ 60.928466][ T4584] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 60.930224][ T29] audit: type=1400 audit(1754633046.477:2311): avc: denied { mount } for pid=4583 comm="syz.2.247" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 60.942034][ T4612] loop6: detected capacity change from 0 to 8192 [ 60.958170][ T29] audit: type=1326 audit(1754633046.537:2312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4588 comm="syz.4.248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f371eaeebe9 code=0x7ffc0000 [ 60.965759][ T4604] loop4: detected capacity change from 0 to 512 [ 60.989664][ T29] audit: type=1326 audit(1754633046.547:2313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4588 comm="syz.4.248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f371eaeebe9 code=0x7ffc0000 [ 61.007967][ T4591] EXT4-fs error (device loop2): ext4_map_blocks:814: inode #15: block 3: comm syz.2.247: lblock 3 mapped to illegal pblock 3 (length 13) [ 61.022690][ T29] audit: type=1326 audit(1754633046.547:2314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4588 comm="syz.4.248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f371eaeebe9 code=0x7ffc0000 [ 61.042876][ T4612] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 61.097610][ T4604] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 61.124338][ T4604] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 61.248150][ T4591] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 13 with error 117 [ 61.298827][ T4604] EXT4-fs (loop4): 1 truncate cleaned up [ 61.399245][ T4604] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 62.136818][ T4673] loop5: detected capacity change from 0 to 8192 [ 62.184652][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.241073][ T4673] netlink: 'syz.5.262': attribute type 1 has an invalid length. [ 62.298334][ T4698] __nla_validate_parse: 3 callbacks suppressed [ 62.298351][ T4698] netlink: 3 bytes leftover after parsing attributes in process `syz.5.262'. [ 62.306059][ T4678] loop2: detected capacity change from 0 to 512 [ 62.354097][ T4673] bond3: entered promiscuous mode [ 62.359660][ T4673] 8021q: adding VLAN 0 to HW filter on device bond3 [ 62.373602][ T4698] batadv5: entered promiscuous mode [ 62.379571][ T4698] batadv5: entered allmulticast mode [ 62.385500][ T4687] loop1: detected capacity change from 0 to 1024 [ 62.388506][ T4673] netlink: 3 bytes leftover after parsing attributes in process `syz.5.262'. [ 62.420320][ T4673] batadv6: entered promiscuous mode [ 62.424126][ T4705] loop6: detected capacity change from 0 to 1024 [ 62.425802][ T4673] batadv6: entered allmulticast mode [ 62.455512][ T4704] loop4: detected capacity change from 0 to 1024 [ 62.481122][ T4705] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 62.512378][ T4678] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 62.561965][ T4704] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 62.590758][ T4687] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 62.620520][ T4678] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 62.636965][ T4704] ext4 filesystem being mounted at /53/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 62.662589][ T4705] ext4 filesystem being mounted at /32/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 62.691163][ T4687] ext4 filesystem being mounted at /54/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 62.708268][ T4716] siw: device registration error -23 [ 62.740387][ T4678] EXT4-fs (loop2): 1 truncate cleaned up [ 62.752100][ T4678] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 62.766374][ T4705] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 62.774703][ T4687] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 62.813007][ T4705] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 21 with max blocks 1 with error 28 [ 62.814691][ T4704] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, [ 62.830052][ T4705] EXT4-fs (loop6): This should not happen!! Data will be lost [ 62.830052][ T4705] [ 62.830073][ T4705] EXT4-fs (loop6): Total free blocks count 0 [ 62.830089][ T4705] EXT4-fs (loop6): Free/Dirty block details [ 62.830126][ T4705] EXT4-fs (loop6): free_blocks=4293918720 [ 62.838665][ T4704] block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 62.851230][ T4705] EXT4-fs (loop6): dirty_blocks=16 [ 62.863038][ T4687] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 21 with max blocks 1 with error 28 [ 62.865106][ T4705] EXT4-fs (loop6): Block reservation details [ 62.871517][ T4687] EXT4-fs (loop1): This should not happen!! Data will be lost [ 62.871517][ T4687] [ 62.883129][ T4705] EXT4-fs (loop6): i_reserved_data_blocks=1 [ 62.889720][ T4687] EXT4-fs (loop1): Total free blocks count 0 [ 62.919954][ T4704] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 21 with max blocks 1 with error 28 [ 62.923321][ T4687] EXT4-fs (loop1): Free/Dirty block details [ 62.930238][ T4704] EXT4-fs (loop4): This should not happen!! Data will be lost [ 62.930238][ T4704] [ 62.930257][ T4704] EXT4-fs (loop4): Total free blocks count 0 [ 62.936469][ T4687] EXT4-fs (loop1): free_blocks=4293918720 [ 62.950371][ T4704] EXT4-fs (loop4): Free/Dirty block details [ 62.950388][ T4704] EXT4-fs (loop4): free_blocks=4293918720 [ 62.957398][ T4687] EXT4-fs (loop1): dirty_blocks=16 [ 62.957414][ T4687] EXT4-fs (loop1): Block reservation details [ 62.957424][ T4687] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 63.012168][ T4704] EXT4-fs (loop4): dirty_blocks=16 [ 63.018717][ T4704] EXT4-fs (loop4): Block reservation details [ 63.027988][ T4704] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 63.042040][ T4726] EXT4-fs error (device loop4): ext4_map_blocks:814: inode #15: block 3: comm syz.4.268: lblock 3 mapped to illegal pblock 3 (length 13) [ 63.073284][ T4726] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 13 with error 117 [ 63.084518][ T4687] EXT4-fs error (device loop1): ext4_map_blocks:814: inode #15: block 3: comm syz.1.264: lblock 3 mapped to illegal pblock 3 (length 13) [ 63.110156][ T4705] EXT4-fs error (device loop6): ext4_map_blocks:814: inode #15: block 3: comm syz.6.269: lblock 3 mapped to illegal pblock 3 (length 13) [ 63.150303][ T4705] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 13 with error 117 [ 63.179124][ T4687] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 13 with error 117 [ 63.261051][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.265012][ T4743] netlink: 'syz.4.275': attribute type 13 has an invalid length. [ 63.382350][ T4758] netlink: 12 bytes leftover after parsing attributes in process `syz.4.275'. [ 63.553655][ T4743] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.599714][ T4743] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.649280][ T4743] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 63.673417][ T4795] netlink: 24 bytes leftover after parsing attributes in process `syz.2.274'. [ 63.710532][ T4798] netlink: 4 bytes leftover after parsing attributes in process `syz.1.285'. [ 63.842803][ T4812] loop1: detected capacity change from 0 to 512 [ 63.849563][ T4812] EXT4-fs: dax option not supported [ 64.276041][ T4830] lo speed is unknown, defaulting to 1000 [ 64.524645][ T4852] loop2: detected capacity change from 0 to 512 [ 64.697324][ T4852] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 64.717211][ T4827] loop5: detected capacity change from 0 to 512 [ 64.733498][ T4873] netlink: 'syz.1.300': attribute type 13 has an invalid length. [ 64.765276][ T4827] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2 [ 64.770091][ T4852] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 64.797359][ T4827] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -2 [ 64.797586][ T4883] netlink: 12 bytes leftover after parsing attributes in process `syz.1.300'. [ 64.810332][ T4827] EXT4-fs (loop5): 1 truncate cleaned up [ 64.824347][ T4827] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 64.834529][ T4852] EXT4-fs (loop2): 1 truncate cleaned up [ 64.852856][ T4873] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.865355][ T4873] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.875790][ T4873] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 64.897161][ T4852] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 65.210590][ T3598] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.233170][ T29] kauditd_printk_skb: 349 callbacks suppressed [ 65.233186][ T29] audit: type=1326 audit(1754633051.017:2664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4903 comm="syz.4.304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f371eaeebe9 code=0x7ffc0000 [ 65.374376][ T29] audit: type=1326 audit(1754633051.017:2665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4903 comm="syz.4.304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f371eaeebe9 code=0x7ffc0000 [ 65.402247][ T29] audit: type=1326 audit(1754633051.017:2666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4903 comm="syz.4.304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f371eaeebe9 code=0x7ffc0000 [ 65.427657][ T29] audit: type=1326 audit(1754633051.017:2667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4903 comm="syz.4.304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f371eaeebe9 code=0x7ffc0000 [ 65.451444][ T29] audit: type=1326 audit(1754633051.017:2668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4903 comm="syz.4.304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f371eaeebe9 code=0x7ffc0000 [ 65.477075][ T29] audit: type=1326 audit(1754633051.017:2669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4903 comm="syz.4.304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f371eaeebe9 code=0x7ffc0000 [ 65.502900][ T29] audit: type=1326 audit(1754633051.017:2670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4903 comm="syz.4.304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=460 compat=0 ip=0x7f371eaeebe9 code=0x7ffc0000 [ 65.528069][ T29] audit: type=1326 audit(1754633051.017:2671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4903 comm="syz.4.304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f371eaeebe9 code=0x7ffc0000 [ 65.555764][ T29] audit: type=1326 audit(1754633051.017:2672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4903 comm="syz.4.304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f371eaeebe9 code=0x7ffc0000 [ 65.581985][ T29] audit: type=1326 audit(1754633051.017:2673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4903 comm="syz.4.304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f371eaeebe9 code=0x7ffc0000 [ 65.629006][ T4927] loop6: detected capacity change from 0 to 512 [ 65.637046][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.647990][ T4939] loop5: detected capacity change from 0 to 1024 [ 65.657435][ T4927] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -2 [ 65.666384][ T4927] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -2 [ 65.676988][ T4927] EXT4-fs (loop6): 1 truncate cleaned up [ 65.696727][ T4927] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 65.738951][ T4939] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 65.780492][ T4939] ext4 filesystem being mounted at /60/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 65.859090][ T4931] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 65.864611][ T4951] netlink: 8 bytes leftover after parsing attributes in process `syz.2.318'. [ 65.884917][ T4951] netlink: 8 bytes leftover after parsing attributes in process `syz.2.318'. [ 65.907522][ T3862] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.910800][ T4931] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 21 with max blocks 1 with error 28 [ 65.931608][ T4931] EXT4-fs (loop5): This should not happen!! Data will be lost [ 65.931608][ T4931] [ 65.942100][ T4931] EXT4-fs (loop5): Total free blocks count 0 [ 65.948265][ T4931] EXT4-fs (loop5): Free/Dirty block details [ 65.954678][ T4931] EXT4-fs (loop5): free_blocks=4293918720 [ 65.960702][ T4931] EXT4-fs (loop5): dirty_blocks=16 [ 65.966247][ T4931] EXT4-fs (loop5): Block reservation details [ 65.972365][ T4931] EXT4-fs (loop5): i_reserved_data_blocks=1 [ 65.972558][ T4904] loop4: detected capacity change from 0 to 512 [ 66.022370][ T4904] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 66.029273][ T4931] EXT4-fs error (device loop5): ext4_map_blocks:814: inode #15: block 3: comm syz.5.311: lblock 3 mapped to illegal pblock 3 (length 13) [ 66.053598][ T4931] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 13 with error 117 [ 66.069392][ T4904] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 66.123601][ T4904] EXT4-fs (loop4): 1 truncate cleaned up [ 66.149409][ T4904] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.168085][ T4968] netlink: 8 bytes leftover after parsing attributes in process `syz.1.325'. [ 66.177815][ T4968] netlink: 8 bytes leftover after parsing attributes in process `syz.1.325'. [ 66.184234][ T4970] siw: device registration error -23 [ 66.358624][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.387814][ T4992] loop2: detected capacity change from 0 to 736 [ 66.406415][ T4984] loop1: detected capacity change from 0 to 8192 [ 66.424640][ T4998] siw: device registration error -23 [ 66.445414][ T4992] netlink: 'syz.2.335': attribute type 27 has an invalid length. [ 66.457857][ T4984] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 66.546531][ T5008] siw: device registration error -23 [ 66.577107][ T4992] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.585316][ T4992] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.791658][ T4992] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 66.803505][ T4992] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 66.928033][ T31] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.106087][ T31] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.219977][ T31] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.238351][ T3396] lo speed is unknown, defaulting to 1000 [ 67.244435][ T3396] syz2: Port: 1 Link DOWN [ 67.252213][ T31] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.329365][ T5038] loop6: detected capacity change from 0 to 736 [ 67.341087][ T5042] loop4: detected capacity change from 0 to 1024 [ 67.355434][ T5038] netlink: 'syz.6.346': attribute type 27 has an invalid length. [ 67.383794][ T5042] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 67.416462][ T5042] ext4 filesystem being mounted at /65/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 67.437138][ T5042] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 67.457715][ T5042] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 21 with max blocks 1 with error 28 [ 67.471609][ T5042] EXT4-fs (loop4): This should not happen!! Data will be lost [ 67.471609][ T5042] [ 67.481715][ T5042] EXT4-fs (loop4): Total free blocks count 0 [ 67.488437][ T5042] EXT4-fs (loop4): Free/Dirty block details [ 67.495665][ T5042] EXT4-fs (loop4): free_blocks=4293918720 [ 67.502070][ T5042] EXT4-fs (loop4): dirty_blocks=16 [ 67.507587][ T5042] EXT4-fs (loop4): Block reservation details [ 67.513878][ T5042] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 67.524820][ T5062] EXT4-fs error (device loop4): ext4_map_blocks:814: inode #15: block 3: comm syz.4.348: lblock 3 mapped to illegal pblock 3 (length 13) [ 67.588775][ T5066] siw: device registration error -23 [ 67.600050][ T5062] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 13 with error 117 [ 67.650953][ T5076] __nla_validate_parse: 5 callbacks suppressed [ 67.650970][ T5076] netlink: 4 bytes leftover after parsing attributes in process `syz.6.356'. [ 67.678661][ T5042] syz.4.348 (5042) used greatest stack depth: 9760 bytes left [ 67.693461][ T5079] loop2: detected capacity change from 0 to 736 [ 67.713574][ T5079] netlink: 'syz.2.357': attribute type 27 has an invalid length. [ 67.830830][ T5044] loop5: detected capacity change from 0 to 512 [ 67.913955][ T5044] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2 [ 67.946760][ T5091] loop4: detected capacity change from 0 to 8192 [ 67.958838][ T5044] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -2 [ 67.982599][ T5101] loop2: detected capacity change from 0 to 736 [ 67.995015][ T5091] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 68.011344][ T5104] FAULT_INJECTION: forcing a failure. [ 68.011344][ T5104] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 68.026271][ T5104] CPU: 0 UID: 0 PID: 5104 Comm: syz.6.362 Not tainted 6.16.0-syzkaller-12016-gbec077162bd0 #0 PREEMPT(voluntary) [ 68.026305][ T5104] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 68.026320][ T5104] Call Trace: [ 68.026327][ T5104] [ 68.026337][ T5104] __dump_stack+0x1d/0x30 [ 68.026369][ T5104] dump_stack_lvl+0xe8/0x140 [ 68.026428][ T5104] dump_stack+0x15/0x1b [ 68.026553][ T5104] should_fail_ex+0x265/0x280 [ 68.026596][ T5104] should_fail+0xb/0x20 [ 68.026742][ T5104] should_fail_usercopy+0x1a/0x20 [ 68.026765][ T5104] _copy_to_user+0x20/0xa0 [ 68.026794][ T5104] simple_read_from_buffer+0xb5/0x130 [ 68.026820][ T5104] proc_fail_nth_read+0x10e/0x150 [ 68.026930][ T5104] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 68.026987][ T5104] vfs_read+0x1a0/0x6f0 [ 68.027010][ T5104] ? __rcu_read_unlock+0x4f/0x70 [ 68.027075][ T5104] ? __rcu_read_unlock+0x4f/0x70 [ 68.027137][ T5104] ? __fget_files+0x184/0x1c0 [ 68.027169][ T5104] ksys_read+0xda/0x1a0 [ 68.027195][ T5104] __x64_sys_read+0x40/0x50 [ 68.027274][ T5104] x64_sys_call+0x27bc/0x2ff0 [ 68.027299][ T5104] do_syscall_64+0xd2/0x200 [ 68.027328][ T5104] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 68.027356][ T5104] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 68.027401][ T5104] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.027425][ T5104] RIP: 0033:0x7f1c48f8d5fc [ 68.027458][ T5104] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 68.027486][ T5104] RSP: 002b:00007f1c479f7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 68.027508][ T5104] RAX: ffffffffffffffda RBX: 00007f1c491b5fa0 RCX: 00007f1c48f8d5fc [ 68.027588][ T5104] RDX: 000000000000000f RSI: 00007f1c479f70a0 RDI: 0000000000000005 [ 68.027603][ T5104] RBP: 00007f1c479f7090 R08: 0000000000000000 R09: 0000000000000000 [ 68.027617][ T5104] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 68.027632][ T5104] R13: 00007f1c491b6038 R14: 00007f1c491b5fa0 R15: 00007ffc5ffa3f48 [ 68.027655][ T5104] [ 68.291160][ T5101] netlink: 'syz.2.361': attribute type 27 has an invalid length. [ 68.316517][ T5080] loop1: detected capacity change from 0 to 512 [ 68.361215][ T5044] EXT4-fs (loop5): 1 truncate cleaned up [ 68.369262][ T5044] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.394630][ T5114] netlink: 8 bytes leftover after parsing attributes in process `syz.2.364'. [ 68.403784][ T5114] netlink: 8 bytes leftover after parsing attributes in process `syz.2.364'. [ 68.422189][ T5080] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 68.433736][ T5080] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2 [ 68.469553][ T5116] netlink: 14 bytes leftover after parsing attributes in process `syz.4.358'. [ 68.615607][ T5080] EXT4-fs (loop1): 1 truncate cleaned up [ 68.690940][ T5080] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.865049][ T3598] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.088564][ T5148] loop2: detected capacity change from 0 to 1024 [ 69.103730][ T3307] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.150921][ T5148] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.181240][ T5152] loop6: detected capacity change from 0 to 1024 [ 69.229938][ T5165] lo speed is unknown, defaulting to 1000 [ 69.231271][ T5170] loop4: detected capacity change from 0 to 8192 [ 69.244481][ T5148] ext4 filesystem being mounted at /67/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 69.259795][ T5148] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 69.282128][ T5148] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 21 with max blocks 1 with error 28 [ 69.296918][ T5148] EXT4-fs (loop2): This should not happen!! Data will be lost [ 69.296918][ T5148] [ 69.307072][ T5148] EXT4-fs (loop2): Total free blocks count 0 [ 69.313270][ T5148] EXT4-fs (loop2): Free/Dirty block details [ 69.321224][ T5148] EXT4-fs (loop2): free_blocks=4293918720 [ 69.327490][ T5148] EXT4-fs (loop2): dirty_blocks=16 [ 69.333573][ T5148] EXT4-fs (loop2): Block reservation details [ 69.340073][ T5148] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 69.347653][ T5170] netlink: 'syz.4.380': attribute type 1 has an invalid length. [ 69.361527][ T5152] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.365947][ T5170] bond3: entered promiscuous mode [ 69.380417][ T5152] ext4 filesystem being mounted at /59/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 69.386506][ T5176] EXT4-fs error (device loop2): ext4_map_blocks:814: inode #15: block 3: comm syz.2.375: lblock 3 mapped to illegal pblock 3 (length 13) [ 69.409282][ T5170] 8021q: adding VLAN 0 to HW filter on device bond3 [ 69.417107][ T5181] netlink: 8 bytes leftover after parsing attributes in process `syz.5.381'. [ 69.426765][ T5181] netlink: 8 bytes leftover after parsing attributes in process `syz.5.381'. [ 69.428852][ T5170] netlink: 3 bytes leftover after parsing attributes in process `syz.4.380'. [ 69.455260][ T5170] batadv5: entered promiscuous mode [ 69.460819][ T5170] batadv5: entered allmulticast mode [ 69.466046][ T5152] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 69.472947][ T5170] netlink: 3 bytes leftover after parsing attributes in process `syz.4.380'. [ 69.487035][ T5176] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 13 with error 117 [ 69.530119][ T5152] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 21 with max blocks 1 with error 28 [ 69.543871][ T5152] EXT4-fs (loop6): This should not happen!! Data will be lost [ 69.543871][ T5152] [ 69.555126][ T5152] EXT4-fs (loop6): Total free blocks count 0 [ 69.555161][ T5152] EXT4-fs (loop6): Free/Dirty block details [ 69.555175][ T5152] EXT4-fs (loop6): free_blocks=4293918720 [ 69.555202][ T5152] EXT4-fs (loop6): dirty_blocks=16 [ 69.555215][ T5152] EXT4-fs (loop6): Block reservation details [ 69.555227][ T5152] EXT4-fs (loop6): i_reserved_data_blocks=1 [ 69.579907][ T5170] batadv6: entered promiscuous mode [ 69.579927][ T5170] batadv6: entered allmulticast mode [ 69.631596][ T5184] EXT4-fs error (device loop6): ext4_map_blocks:814: inode #15: block 3: comm syz.6.374: lblock 3 mapped to illegal pblock 3 (length 13) [ 69.684260][ T5196] loop5: detected capacity change from 0 to 736 [ 69.704177][ T5196] netlink: 'syz.5.385': attribute type 27 has an invalid length. [ 69.729219][ T5184] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 13 with error 117 [ 69.767188][ T5201] loop4: detected capacity change from 0 to 736 [ 69.776999][ T5201] netlink: 'syz.4.384': attribute type 27 has an invalid length. [ 69.824446][ T5196] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.832903][ T5196] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.913321][ T5196] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 69.929922][ T5196] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 69.985395][ T5196] bond1: left promiscuous mode [ 69.991493][ T5196] batadv1: left promiscuous mode [ 69.996534][ T5196] batadv1: left allmulticast mode [ 70.002005][ T5196] batadv2: left promiscuous mode [ 70.007294][ T5196] batadv2: left allmulticast mode [ 70.012837][ T5196] batadv3: left promiscuous mode [ 70.017795][ T5196] batadv3: left allmulticast mode [ 70.023162][ T5196] bond2: left promiscuous mode [ 70.028373][ T5196] batadv4: left promiscuous mode [ 70.033485][ T5196] batadv4: left allmulticast mode [ 70.038948][ T5196] bond3: left promiscuous mode [ 70.044290][ T5196] batadv5: left promiscuous mode [ 70.050405][ T5196] batadv5: left allmulticast mode [ 70.056687][ T5196] batadv6: left promiscuous mode [ 70.069031][ T5196] batadv6: left allmulticast mode [ 70.094871][ T5201] bond3: left promiscuous mode [ 70.111816][ T5201] batadv5: left promiscuous mode [ 70.117412][ T5201] batadv5: left allmulticast mode [ 70.122829][ T5201] batadv6: left promiscuous mode [ 70.127975][ T5201] batadv6: left allmulticast mode [ 70.167875][ T3420] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.184241][ T3420] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.199600][ T3420] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.229231][ T3420] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.230486][ T5235] netlink: 4 bytes leftover after parsing attributes in process `syz.5.391'. [ 70.260684][ T5237] netlink: 8 bytes leftover after parsing attributes in process `syz.6.393'. [ 70.323940][ T29] kauditd_printk_skb: 449 callbacks suppressed [ 70.323957][ T29] audit: type=1326 audit(1754633056.097:3123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5230 comm="syz.2.392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0f3657ebe9 code=0x7ffc0000 [ 70.355758][ T29] audit: type=1326 audit(1754633056.097:3124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5230 comm="syz.2.392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f3657ebe9 code=0x7ffc0000 [ 70.380101][ T29] audit: type=1326 audit(1754633056.097:3125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5230 comm="syz.2.392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f3657ebe9 code=0x7ffc0000 [ 70.405256][ T29] audit: type=1326 audit(1754633056.097:3126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5230 comm="syz.2.392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0f3657d550 code=0x7ffc0000 [ 70.430207][ T29] audit: type=1326 audit(1754633056.097:3127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5230 comm="syz.2.392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f3657ebe9 code=0x7ffc0000 [ 70.454846][ T29] audit: type=1326 audit(1754633056.097:3128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5230 comm="syz.2.392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f3657ebe9 code=0x7ffc0000 [ 70.479302][ T29] audit: type=1326 audit(1754633056.097:3129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5230 comm="syz.2.392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=295 compat=0 ip=0x7f0f3657ebe9 code=0x7ffc0000 [ 70.504428][ T29] audit: type=1326 audit(1754633056.097:3130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5230 comm="syz.2.392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f3657ebe9 code=0x7ffc0000 [ 70.530059][ T29] audit: type=1326 audit(1754633056.107:3131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5230 comm="syz.2.392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f3657ebe9 code=0x7ffc0000 [ 70.555531][ T29] audit: type=1326 audit(1754633056.107:3132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5230 comm="syz.2.392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f0f3657ebe9 code=0x7ffc0000 [ 70.690068][ T5253] loop6: detected capacity change from 0 to 8192 [ 70.736374][ T5262] loop5: detected capacity change from 0 to 1024 [ 70.746603][ T5262] EXT4-fs: inline encryption not supported [ 70.754729][ T5262] EXT4-fs: Ignoring removed i_version option [ 70.769479][ T5253] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 70.785510][ T5262] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 70.892334][ T5271] loop1: detected capacity change from 0 to 1024 [ 70.925733][ T5247] loop4: detected capacity change from 0 to 8192 [ 70.935844][ T5262] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 2: comm syz.5.398: lblock 2 mapped to illegal pblock 2 (length 1) [ 70.978806][ T5262] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 48: comm syz.5.398: lblock 0 mapped to illegal pblock 48 (length 1) [ 70.990694][ T5271] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.030580][ T5262] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.398: Failed to acquire dquot type 0 [ 71.043044][ T5262] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 71.054511][ T5262] EXT4-fs error (device loop5): ext4_evict_inode:254: inode #11: comm syz.5.398: mark_inode_dirty error [ 71.085787][ T5271] ext4 filesystem being mounted at /86/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 71.149441][ T5247] netlink: 'syz.4.394': attribute type 1 has an invalid length. [ 71.168352][ T5262] EXT4-fs warning (device loop5): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 71.256920][ T5262] EXT4-fs (loop5): 1 orphan inode deleted [ 71.317300][ T5262] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.368206][ T5271] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 71.401381][ T5247] bond4: entered promiscuous mode [ 71.448772][ T5247] 8021q: adding VLAN 0 to HW filter on device bond4 [ 71.620502][ T5271] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 21 with max blocks 1 with error 28 [ 71.633237][ T5271] EXT4-fs (loop1): This should not happen!! Data will be lost [ 71.633237][ T5271] [ 71.643346][ T5271] EXT4-fs (loop1): Total free blocks count 0 [ 71.649407][ T5271] EXT4-fs (loop1): Free/Dirty block details [ 71.655580][ T5271] EXT4-fs (loop1): free_blocks=4293918720 [ 71.661426][ T5271] EXT4-fs (loop1): dirty_blocks=16 [ 71.667117][ T5271] EXT4-fs (loop1): Block reservation details [ 71.669385][ T791] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:5: lblock 1 mapped to illegal pblock 1 (length 1) [ 71.673291][ T5271] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 71.691587][ T791] EXT4-fs error (device loop5): ext4_release_dquot:6969: comm kworker/u8:5: Failed to release dquot type 0 [ 71.723520][ T5262] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.736532][ T5257] batadv7: entered promiscuous mode [ 71.742383][ T5257] batadv7: entered allmulticast mode [ 71.743517][ T5297] EXT4-fs error (device loop1): ext4_map_blocks:814: inode #15: block 3: comm syz.1.402: lblock 3 mapped to illegal pblock 3 (length 13) [ 71.761344][ T5288] batadv8: entered promiscuous mode [ 71.767730][ T5288] batadv8: entered allmulticast mode [ 71.786509][ T5262] EXT4-fs error (device loop5): __ext4_get_inode_loc:4861: comm syz.5.398: Invalid inode table block 1 in block_group 0 [ 71.804018][ T5297] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 13 with error 117 [ 71.828271][ T5262] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 71.847365][ T5309] FAULT_INJECTION: forcing a failure. [ 71.847365][ T5309] name failslab, interval 1, probability 0, space 0, times 1 [ 71.852924][ T5262] EXT4-fs error (device loop5): ext4_quota_off:7217: inode #3: comm syz.5.398: mark_inode_dirty error [ 71.864441][ T5309] CPU: 0 UID: 0 PID: 5309 Comm: syz.2.408 Not tainted 6.16.0-syzkaller-12016-gbec077162bd0 #0 PREEMPT(voluntary) [ 71.864525][ T5309] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 71.864611][ T5309] Call Trace: [ 71.864618][ T5309] [ 71.864626][ T5309] __dump_stack+0x1d/0x30 [ 71.864650][ T5309] dump_stack_lvl+0xe8/0x140 [ 71.864702][ T5309] dump_stack+0x15/0x1b [ 71.864719][ T5309] should_fail_ex+0x265/0x280 [ 71.864755][ T5309] should_failslab+0x8c/0xb0 [ 71.864781][ T5309] kmem_cache_alloc_lru_noprof+0x55/0x310 [ 71.864817][ T5309] ? shmem_alloc_inode+0x34/0x50 [ 71.864842][ T5309] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 71.864907][ T5309] shmem_alloc_inode+0x34/0x50 [ 71.864978][ T5309] alloc_inode+0x3d/0x170 [ 71.865002][ T5309] new_inode+0x1d/0xe0 [ 71.865027][ T5309] shmem_get_inode+0x244/0x750 [ 71.865121][ T5309] __shmem_file_setup+0x113/0x210 [ 71.865158][ T5309] shmem_file_setup+0x3b/0x50 [ 71.865192][ T5309] __se_sys_memfd_create+0x2c3/0x590 [ 71.865284][ T5309] __x64_sys_memfd_create+0x31/0x40 [ 71.865346][ T5309] x64_sys_call+0x2abe/0x2ff0 [ 71.865370][ T5309] do_syscall_64+0xd2/0x200 [ 71.865540][ T5309] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 71.865565][ T5309] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.865588][ T5309] RIP: 0033:0x7f0f3657ebe9 [ 71.865605][ T5309] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 71.865625][ T5309] RSP: 002b:00007f0f34fdee18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 71.865653][ T5309] RAX: ffffffffffffffda RBX: 00000000000003e7 RCX: 00007f0f3657ebe9 [ 71.865666][ T5309] RDX: 00007f0f34fdeef0 RSI: 0000000000000000 RDI: 00007f0f366027e8 [ 71.865679][ T5309] RBP: 0000200000000480 R08: 00007f0f34fdebb7 R09: 00007f0f34fdee40 [ 71.865693][ T5309] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000440 [ 71.865706][ T5309] R13: 00007f0f34fdeef0 R14: 00007f0f34fdeeb0 R15: 0000200000000040 [ 71.865788][ T5309] [ 72.275380][ T5348] loop4: detected capacity change from 0 to 512 [ 72.328254][ T5348] EXT4-fs: dax option not supported [ 72.539513][ T5377] loop2: detected capacity change from 0 to 1024 [ 72.574937][ T5377] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.594600][ T5372] loop6: detected capacity change from 0 to 8192 [ 72.604229][ T5377] ext4 filesystem being mounted at /82/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 72.624439][ T5372] netlink: 'syz.6.421': attribute type 1 has an invalid length. [ 72.680315][ T5401] __nla_validate_parse: 8 callbacks suppressed [ 72.680359][ T5401] netlink: 3 bytes leftover after parsing attributes in process `syz.6.421'. [ 72.704975][ T5372] bond1: entered promiscuous mode [ 72.711101][ T5372] 8021q: adding VLAN 0 to HW filter on device bond1 [ 72.729458][ T5377] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 72.760078][ T5401] batadv1: entered promiscuous mode [ 72.763182][ T5372] netlink: 3 bytes leftover after parsing attributes in process `syz.6.421'. [ 72.766187][ T5401] batadv1: entered allmulticast mode [ 72.776124][ T5377] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 21 with max blocks 1 with error 28 [ 72.796097][ T5377] EXT4-fs (loop2): This should not happen!! Data will be lost [ 72.796097][ T5377] [ 72.814601][ T5377] EXT4-fs (loop2): Total free blocks count 0 [ 72.822399][ T5377] EXT4-fs (loop2): Free/Dirty block details [ 72.831975][ T5377] EXT4-fs (loop2): free_blocks=4293918720 [ 72.838752][ T5377] EXT4-fs (loop2): dirty_blocks=16 [ 72.844130][ T5377] EXT4-fs (loop2): Block reservation details [ 72.850737][ T5377] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 72.864825][ T5372] batadv2: entered promiscuous mode [ 72.865563][ T5409] EXT4-fs error (device loop2): ext4_map_blocks:814: inode #15: block 3: comm syz.2.422: lblock 3 mapped to illegal pblock 3 (length 13) [ 72.872791][ T5372] batadv2: entered allmulticast mode [ 72.937561][ T5409] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 13 with error 117 [ 73.103628][ T5431] siw: device registration error -23 [ 73.168411][ T5447] netlink: 8 bytes leftover after parsing attributes in process `syz.4.431'. [ 73.177987][ T5447] netlink: 8 bytes leftover after parsing attributes in process `syz.4.431'. [ 73.252918][ T5455] netlink: 4 bytes leftover after parsing attributes in process `syz.4.433'. [ 73.270082][ T5450] loop6: detected capacity change from 0 to 1024 [ 73.324213][ T5450] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.370517][ T5450] ext4 filesystem being mounted at /69/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 73.409016][ T5450] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 73.425138][ T5450] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 21 with max blocks 1 with error 28 [ 73.439058][ T5450] EXT4-fs (loop6): This should not happen!! Data will be lost [ 73.439058][ T5450] [ 73.451084][ T5450] EXT4-fs (loop6): Total free blocks count 0 [ 73.457302][ T5450] EXT4-fs (loop6): Free/Dirty block details [ 73.463586][ T5450] EXT4-fs (loop6): free_blocks=4293918720 [ 73.469507][ T5450] EXT4-fs (loop6): dirty_blocks=16 [ 73.474798][ T5450] EXT4-fs (loop6): Block reservation details [ 73.481683][ T5450] EXT4-fs (loop6): i_reserved_data_blocks=1 [ 73.504769][ T5471] loop4: detected capacity change from 0 to 512 [ 73.512365][ T5473] EXT4-fs error (device loop6): ext4_map_blocks:814: inode #15: block 3: comm syz.6.432: lblock 3 mapped to illegal pblock 3 (length 13) [ 73.548391][ T5471] EXT4-fs: dax option not supported [ 73.587970][ T5478] loop5: detected capacity change from 0 to 512 [ 73.596550][ T5478] EXT4-fs: dax option not supported [ 73.605549][ T5473] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 13 with error 117 [ 73.714833][ T5480] loop2: detected capacity change from 0 to 8192 [ 73.727505][ T5480] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 73.823250][ T5494] netlink: 8 bytes leftover after parsing attributes in process `syz.6.441'. [ 73.835774][ T5494] netlink: 8 bytes leftover after parsing attributes in process `syz.6.441'. [ 74.033997][ T5501] netlink: 14 bytes leftover after parsing attributes in process `syz.2.438'. [ 74.375645][ T5507] netlink: 28 bytes leftover after parsing attributes in process `syz.1.445'. [ 74.531708][ T5513] netlink: 12 bytes leftover after parsing attributes in process `syz.4.448'. [ 74.705483][ T5517] loop5: detected capacity change from 0 to 512 [ 74.762482][ T5536] netlink: 'syz.6.456': attribute type 13 has an invalid length. [ 74.825282][ T5517] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2 [ 74.847830][ T5517] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -2 [ 74.857610][ T5517] EXT4-fs (loop5): 1 truncate cleaned up [ 74.864439][ T5517] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.903365][ T5543] siw: device registration error -23 [ 75.121970][ T5566] siw: device registration error -23 [ 75.177494][ T5556] loop2: detected capacity change from 0 to 8192 [ 75.239955][ T5556] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 75.317525][ T3598] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.493432][ T29] kauditd_printk_skb: 416 callbacks suppressed [ 75.493448][ T29] audit: type=1326 audit(1754633061.277:3546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5591 comm="syz.1.471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa20096ebe9 code=0x7ffc0000 [ 75.828722][ T29] audit: type=1326 audit(1754633061.337:3547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5591 comm="syz.1.471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa20096ebe9 code=0x7ffc0000 [ 75.861356][ T29] audit: type=1326 audit(1754633061.337:3548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5591 comm="syz.1.471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa20096ebe9 code=0x7ffc0000 [ 75.896666][ T29] audit: type=1326 audit(1754633061.337:3549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5591 comm="syz.1.471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa20096ebe9 code=0x7ffc0000 [ 75.921910][ T29] audit: type=1326 audit(1754633061.337:3550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5591 comm="syz.1.471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa20096ebe9 code=0x7ffc0000 [ 75.956042][ T29] audit: type=1326 audit(1754633061.337:3551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5591 comm="syz.1.471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa20096ebe9 code=0x7ffc0000 [ 75.990606][ T29] audit: type=1326 audit(1754633061.337:3552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5591 comm="syz.1.471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa20096ebe9 code=0x7ffc0000 [ 76.020146][ T29] audit: type=1326 audit(1754633061.337:3553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5591 comm="syz.1.471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa20096ebe9 code=0x7ffc0000 [ 76.049365][ T29] audit: type=1326 audit(1754633061.337:3554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5591 comm="syz.1.471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa20096ebe9 code=0x7ffc0000 [ 76.080055][ T29] audit: type=1326 audit(1754633061.337:3555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5591 comm="syz.1.471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=108 compat=0 ip=0x7fa20096ebe9 code=0x7ffc0000 [ 76.275513][ T5598] loop4: detected capacity change from 0 to 8192 [ 76.332353][ T5598] netlink: 'syz.4.473': attribute type 1 has an invalid length. [ 76.355630][ T5621] loop6: detected capacity change from 0 to 512 [ 76.389994][ T5619] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 76.418211][ T5598] bond5: entered promiscuous mode [ 76.468266][ T5621] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -2 [ 76.479405][ T5598] 8021q: adding VLAN 0 to HW filter on device bond5 [ 76.489670][ T5621] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -2 [ 76.500608][ T5621] EXT4-fs (loop6): 1 truncate cleaned up [ 76.514942][ T5621] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.519763][ T5601] batadv9: entered promiscuous mode [ 76.535881][ T5601] batadv9: entered allmulticast mode [ 76.542173][ T5625] loop1: detected capacity change from 0 to 8192 [ 76.566686][ T5625] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 76.571912][ T5632] batadv10: entered promiscuous mode [ 76.589305][ T5632] batadv10: entered allmulticast mode [ 76.599279][ T5619] netlink: 'syz.2.479': attribute type 13 has an invalid length. [ 76.619382][ T5629] lo speed is unknown, defaulting to 1000 [ 76.762779][ T5619] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.862292][ T5619] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.943279][ T5619] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 77.415342][ T3404] lo speed is unknown, defaulting to 1000 [ 77.421458][ T3404] syz2: Port: 1 Link ACTIVE [ 77.457422][ T3862] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.735054][ T5683] __nla_validate_parse: 8 callbacks suppressed [ 77.735070][ T5683] netlink: 24 bytes leftover after parsing attributes in process `syz.4.482'. [ 77.759320][ T5677] loop1: detected capacity change from 0 to 1024 [ 77.847088][ T5677] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.879520][ T5677] ext4 filesystem being mounted at /103/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 77.900063][ T5700] loop6: detected capacity change from 0 to 512 [ 77.986673][ T5700] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -2 [ 77.987280][ T5699] loop2: detected capacity change from 0 to 8192 [ 78.020797][ T5677] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 78.090353][ T5677] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 21 with max blocks 1 with error 28 [ 78.106003][ T5677] EXT4-fs (loop1): This should not happen!! Data will be lost [ 78.106003][ T5677] [ 78.119338][ T5677] EXT4-fs (loop1): Total free blocks count 0 [ 78.132672][ T5677] EXT4-fs (loop1): Free/Dirty block details [ 78.140613][ T5677] EXT4-fs (loop1): free_blocks=4293918720 [ 78.141845][ T5699] netlink: 'syz.2.492': attribute type 1 has an invalid length. [ 78.148116][ T5677] EXT4-fs (loop1): dirty_blocks=16 [ 78.148138][ T5677] EXT4-fs (loop1): Block reservation details [ 78.148151][ T5677] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 78.158252][ T5700] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -2 [ 78.201221][ T5710] netlink: 3 bytes leftover after parsing attributes in process `syz.2.492'. [ 78.232945][ T5705] EXT4-fs error (device loop1): ext4_map_blocks:814: inode #15: block 3: comm syz.1.489: lblock 3 mapped to illegal pblock 3 (length 13) [ 78.254689][ T5712] netlink: 3 bytes leftover after parsing attributes in process `syz.2.492'. [ 78.271401][ T5700] EXT4-fs (loop6): 1 truncate cleaned up [ 78.280070][ T5700] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.315416][ T5699] bond1: entered promiscuous mode [ 78.322489][ T5699] 8021q: adding VLAN 0 to HW filter on device bond1 [ 78.333243][ T5705] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 13 with error 117 [ 78.349283][ T5710] batadv1: entered promiscuous mode [ 78.356312][ T5710] batadv1: entered allmulticast mode [ 78.447997][ T5712] batadv2: entered promiscuous mode [ 78.453342][ T5712] batadv2: entered allmulticast mode [ 78.661358][ T5741] loop1: detected capacity change from 0 to 512 [ 78.680698][ T5741] EXT4-fs: dax option not supported [ 78.705608][ T5752] netlink: 12 bytes leftover after parsing attributes in process `syz.2.500'. [ 78.759642][ T5749] siw: device registration error -23 [ 78.797609][ T3862] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.975269][ T5771] loop2: detected capacity change from 0 to 1024 [ 78.995183][ T5782] netlink: 8 bytes leftover after parsing attributes in process `syz.1.510'. [ 79.005705][ T5782] netlink: 8 bytes leftover after parsing attributes in process `syz.1.510'. [ 79.060735][ T5771] EXT4-fs: inline encryption not supported [ 79.069946][ T5771] EXT4-fs: Ignoring removed i_version option [ 79.197102][ T5771] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 79.241766][ T5796] loop6: detected capacity change from 0 to 512 [ 79.286875][ T5796] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -2 [ 79.352401][ T5771] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 2: comm syz.2.507: lblock 2 mapped to illegal pblock 2 (length 1) [ 79.368428][ T5796] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #13: comm syz.6.512: invalid indirect mapped block 8 (level 2) [ 79.385620][ T5803] loop5: detected capacity change from 0 to 512 [ 79.411747][ T5771] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 48: comm syz.2.507: lblock 0 mapped to illegal pblock 48 (length 1) [ 79.427475][ T5796] EXT4-fs (loop6): Remounting filesystem read-only [ 79.435010][ T5796] EXT4-fs (loop6): 1 truncate cleaned up [ 79.439232][ T5771] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.507: Failed to acquire dquot type 0 [ 79.441536][ T5796] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.471910][ T5771] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 79.481920][ T5771] EXT4-fs error (device loop2): ext4_evict_inode:254: inode #11: comm syz.2.507: mark_inode_dirty error [ 79.482222][ T5803] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2 [ 79.496905][ T5771] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 79.523271][ T5771] EXT4-fs (loop2): 1 orphan inode deleted [ 79.530718][ T5771] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.550034][ T51] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:3: lblock 1 mapped to illegal pblock 1 (length 1) [ 79.573585][ T5803] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -2 [ 79.587617][ T5803] EXT4-fs (loop5): 1 truncate cleaned up [ 79.601386][ T51] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:3: Failed to release dquot type 0 [ 79.617557][ T5803] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.665350][ T5771] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.677812][ T3862] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.706277][ T5771] EXT4-fs error (device loop2): __ext4_get_inode_loc:4861: comm syz.2.507: Invalid inode table block 1 in block_group 0 [ 79.752246][ T5771] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 79.787573][ T5815] siw: device registration error -23 [ 79.794414][ T5771] EXT4-fs error (device loop2): ext4_quota_off:7217: inode #3: comm syz.2.507: mark_inode_dirty error [ 79.951115][ T3598] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.115076][ T5835] loop1: detected capacity change from 0 to 512 [ 80.133710][ T5840] netlink: 8 bytes leftover after parsing attributes in process `syz.5.527'. [ 80.156733][ T5843] FAULT_INJECTION: forcing a failure. [ 80.156733][ T5843] name failslab, interval 1, probability 0, space 0, times 0 [ 80.157541][ T5835] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 80.169621][ T5843] CPU: 1 UID: 0 PID: 5843 Comm: syz.4.528 Not tainted 6.16.0-syzkaller-12016-gbec077162bd0 #0 PREEMPT(voluntary) [ 80.169730][ T5843] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 80.169744][ T5843] Call Trace: [ 80.169751][ T5843] [ 80.169760][ T5843] __dump_stack+0x1d/0x30 [ 80.169782][ T5843] dump_stack_lvl+0xe8/0x140 [ 80.169803][ T5843] dump_stack+0x15/0x1b [ 80.169821][ T5843] should_fail_ex+0x265/0x280 [ 80.169925][ T5843] ? percpu_ref_init+0x9c/0x250 [ 80.169946][ T5843] should_failslab+0x8c/0xb0 [ 80.169996][ T5843] ? __pfx_free_ioctx_users+0x10/0x10 [ 80.170024][ T5843] __kmalloc_cache_noprof+0x4c/0x320 [ 80.170057][ T5843] ? __pfx_free_ioctx_users+0x10/0x10 [ 80.170124][ T5843] percpu_ref_init+0x9c/0x250 [ 80.170182][ T5843] ioctx_alloc+0x1be/0x4e0 [ 80.170208][ T5843] ? fput+0x8f/0xc0 [ 80.170239][ T5843] __se_sys_io_setup+0x6b/0x1b0 [ 80.170315][ T5843] __x64_sys_io_setup+0x31/0x40 [ 80.170339][ T5843] x64_sys_call+0x2eff/0x2ff0 [ 80.170362][ T5843] do_syscall_64+0xd2/0x200 [ 80.170388][ T5843] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 80.170413][ T5843] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 80.170502][ T5843] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.170524][ T5843] RIP: 0033:0x7f371eaeebe9 [ 80.170587][ T5843] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 80.170606][ T5843] RSP: 002b:00007f371d54f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 80.170638][ T5843] RAX: ffffffffffffffda RBX: 00007f371ed15fa0 RCX: 00007f371eaeebe9 [ 80.170651][ T5843] RDX: 0000000000000000 RSI: 0000200000000680 RDI: 0000000000002004 [ 80.170674][ T5843] RBP: 00007f371d54f090 R08: 0000000000000000 R09: 0000000000000000 [ 80.170687][ T5843] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 80.170700][ T5843] R13: 00007f371ed16038 R14: 00007f371ed15fa0 R15: 00007fff284b9158 [ 80.170720][ T5843] [ 80.269859][ T5849] netlink: 8 bytes leftover after parsing attributes in process `syz.4.531'. [ 80.290355][ T5848] netlink: 8 bytes leftover after parsing attributes in process `syz.5.530'. [ 80.294334][ T5849] netlink: 8 bytes leftover after parsing attributes in process `syz.4.531'. [ 80.302304][ T5835] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2 [ 80.376209][ T5854] lo speed is unknown, defaulting to 1000 [ 80.457741][ T5835] EXT4-fs (loop1): 1 truncate cleaned up [ 80.464230][ T5835] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.573747][ T29] kauditd_printk_skb: 357 callbacks suppressed [ 80.573762][ T29] audit: type=1400 audit(1754633066.357:3910): avc: denied { append } for pid=5864 comm="syz.4.538" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 80.606099][ T29] audit: type=1400 audit(1754633066.357:3911): avc: denied { open } for pid=5864 comm="syz.4.538" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 80.651802][ T3307] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.669307][ T29] audit: type=1400 audit(1754633066.357:3912): avc: denied { ioctl } for pid=5864 comm="syz.4.538" path="/dev/sg0" dev="devtmpfs" ino=135 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 80.709468][ T29] audit: type=1400 audit(1754633066.487:3913): avc: denied { execute } for pid=5864 comm="syz.4.538" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=11885 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 80.741249][ T29] audit: type=1400 audit(1754633066.487:3914): avc: denied { mount } for pid=5864 comm="syz.4.538" name="/" dev="configfs" ino=1022 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 80.765825][ T29] audit: type=1400 audit(1754633066.487:3915): avc: denied { search } for pid=5864 comm="syz.4.538" name="/" dev="configfs" ino=1022 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 80.791017][ T29] audit: type=1400 audit(1754633066.487:3916): avc: denied { search } for pid=5864 comm="syz.4.538" name="/" dev="configfs" ino=1022 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 80.817601][ T29] audit: type=1400 audit(1754633066.487:3917): avc: denied { read open } for pid=5864 comm="syz.4.538" path="/" dev="configfs" ino=1022 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 80.844275][ T5865] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2320 sclass=netlink_route_socket pid=5865 comm=syz.4.538 [ 80.874193][ T29] audit: type=1400 audit(1754633066.647:3918): avc: denied { read } for pid=5864 comm="syz.4.538" name="usbmon5" dev="devtmpfs" ino=157 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 80.900424][ T29] audit: type=1400 audit(1754633066.647:3919): avc: denied { open } for pid=5864 comm="syz.4.538" path="/dev/usbmon5" dev="devtmpfs" ino=157 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 81.092996][ T5888] loop2: detected capacity change from 0 to 1024 [ 81.107861][ T5888] EXT4-fs: inline encryption not supported [ 81.114818][ T5888] EXT4-fs: Ignoring removed i_version option [ 81.214630][ T5888] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 81.253551][ T5888] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 2: comm syz.2.547: lblock 2 mapped to illegal pblock 2 (length 1) [ 81.272599][ T5888] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 48: comm syz.2.547: lblock 0 mapped to illegal pblock 48 (length 1) [ 81.300227][ T5888] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.547: Failed to acquire dquot type 0 [ 81.306143][ T5927] loop5: detected capacity change from 0 to 132 [ 81.321627][ T5888] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 81.375485][ T5888] EXT4-fs error (device loop2): ext4_evict_inode:254: inode #11: comm syz.2.547: mark_inode_dirty error [ 81.392099][ T5888] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 81.410249][ T5888] EXT4-fs (loop2): 1 orphan inode deleted [ 81.417838][ T5888] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.435845][ T3420] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:6: lblock 1 mapped to illegal pblock 1 (length 1) [ 81.456956][ T3420] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:6: Failed to release dquot type 0 [ 81.605518][ T5888] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.638439][ T5888] EXT4-fs error (device loop2): __ext4_get_inode_loc:4861: comm syz.2.547: Invalid inode table block 1 in block_group 0 [ 81.702454][ T5888] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 81.722859][ T5888] EXT4-fs error (device loop2): ext4_quota_off:7217: inode #3: comm syz.2.547: mark_inode_dirty error [ 81.774500][ T5968] loop6: detected capacity change from 0 to 736 [ 81.785976][ T5952] loop1: detected capacity change from 0 to 8192 [ 81.856514][ T5968] netlink: 'syz.6.564': attribute type 27 has an invalid length. [ 81.878677][ T5952] netlink: 'syz.1.560': attribute type 1 has an invalid length. [ 81.900685][ T5968] bond1: left promiscuous mode [ 81.905811][ T5968] batadv1: left promiscuous mode [ 81.912142][ T5968] batadv1: left allmulticast mode [ 81.917967][ T5968] batadv2: left promiscuous mode [ 81.923716][ T5968] batadv2: left allmulticast mode [ 81.949611][ T5952] bond1: entered promiscuous mode [ 81.968240][ T5952] 8021q: adding VLAN 0 to HW filter on device bond1 [ 82.030900][ T5958] batadv1: entered promiscuous mode [ 82.037599][ T5958] batadv1: entered allmulticast mode [ 82.104759][ T5952] batadv2: entered promiscuous mode [ 82.110736][ T5952] batadv2: entered allmulticast mode [ 82.165058][ T6012] loop2: detected capacity change from 0 to 512 [ 82.180780][ T6012] EXT4-fs: dax option not supported [ 82.335923][ T6024] loop4: detected capacity change from 0 to 128 [ 82.360294][ T6020] loop5: detected capacity change from 0 to 512 [ 82.369369][ T6020] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2 [ 82.392360][ T6020] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -2 [ 82.402976][ T6020] EXT4-fs (loop5): 1 truncate cleaned up [ 82.409337][ T6020] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.426888][ T6033] netlink: 'syz.1.583': attribute type 13 has an invalid length. [ 82.462425][ T6033] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 82.553044][ T6039] lo speed is unknown, defaulting to 1000 [ 82.675807][ T3598] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.754360][ T6053] __nla_validate_parse: 11 callbacks suppressed [ 82.754377][ T6053] netlink: 24 bytes leftover after parsing attributes in process `syz.2.590'. [ 82.780990][ T6052] loop5: detected capacity change from 0 to 512 [ 82.824948][ T6052] EXT4-fs: dax option not supported [ 83.206898][ T6089] siw: device registration error -23 [ 83.487545][ T6104] loop2: detected capacity change from 0 to 736 [ 83.549719][ T6104] netlink: 'syz.2.608': attribute type 27 has an invalid length. [ 83.610709][ T6102] lo speed is unknown, defaulting to 1000 [ 83.668480][ T6117] netlink: 8 bytes leftover after parsing attributes in process `syz.1.610'. [ 83.679559][ T6117] netlink: 8 bytes leftover after parsing attributes in process `syz.1.610'. [ 83.741772][ T6071] loop6: detected capacity change from 0 to 512 [ 83.780458][ T6071] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -2 [ 83.806428][ T6071] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -2 [ 83.859342][ T6071] EXT4-fs (loop6): 1 truncate cleaned up [ 83.874756][ T6104] bond1: left promiscuous mode [ 83.890628][ T6104] batadv1: left promiscuous mode [ 83.898497][ T6104] batadv1: left allmulticast mode [ 83.906541][ T6104] batadv2: left promiscuous mode [ 83.913862][ T6104] batadv2: left allmulticast mode [ 83.920841][ T6071] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.067470][ T6130] netlink: 12 bytes leftover after parsing attributes in process `syz.1.611'. [ 84.194202][ T3862] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.263693][ T4525] lo speed is unknown, defaulting to 1000 [ 84.271128][ T4525] syz2: Port: 1 Link DOWN [ 84.462331][ T6151] siw: device registration error -23 [ 84.498941][ T6143] loop5: detected capacity change from 0 to 8192 [ 84.549061][ T6143] netlink: 'syz.5.616': attribute type 1 has an invalid length. [ 84.608500][ T6143] bond4: entered promiscuous mode [ 84.614060][ T6165] netlink: 3 bytes leftover after parsing attributes in process `syz.5.616'. [ 84.632944][ T6143] 8021q: adding VLAN 0 to HW filter on device bond4 [ 84.646236][ T6165] batadv7: entered promiscuous mode [ 84.653131][ T6165] batadv7: entered allmulticast mode [ 84.717502][ T6143] netlink: 3 bytes leftover after parsing attributes in process `syz.5.616'. [ 84.742994][ T6143] batadv8: entered promiscuous mode [ 84.749208][ T6143] batadv8: entered allmulticast mode [ 84.768521][ T6173] netlink: 8 bytes leftover after parsing attributes in process `syz.6.620'. [ 84.780723][ T6173] netlink: 8 bytes leftover after parsing attributes in process `syz.6.620'. [ 84.810013][ T6175] netlink: 24 bytes leftover after parsing attributes in process `syz.4.618'. [ 84.953519][ T6184] loop6: detected capacity change from 0 to 1024 [ 85.000434][ T6184] EXT4-fs (loop6): couldn't mount as ext3 due to feature incompatibilities [ 85.187444][ T6189] loop5: detected capacity change from 0 to 8192 [ 85.196214][ T6200] siw: device registration error -23 [ 85.228604][ T6189] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 85.439543][ T6207] lo speed is unknown, defaulting to 1000 [ 85.491048][ T6201] loop2: detected capacity change from 0 to 512 [ 85.538338][ T6210] netlink: 14 bytes leftover after parsing attributes in process `syz.5.624'. [ 85.588207][ T6213] siw: device registration error -23 [ 85.899885][ T6218] loop6: detected capacity change from 0 to 736 [ 85.956908][ T6218] netlink: 'syz.6.632': attribute type 27 has an invalid length. [ 85.979934][ T29] kauditd_printk_skb: 484 callbacks suppressed [ 85.979955][ T29] audit: type=1400 audit(1754633071.757:4401): avc: denied { accept } for pid=6223 comm="syz.1.635" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 86.036847][ T6201] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 86.052747][ T6201] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 86.063004][ T29] audit: type=1326 audit(1754633071.827:4402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6217 comm="syz.6.632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c48f8ebe9 code=0x7ffc0000 [ 86.066100][ T6201] EXT4-fs (loop2): 1 truncate cleaned up [ 86.088427][ T29] audit: type=1326 audit(1754633071.827:4403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6217 comm="syz.6.632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1c48f8ebe9 code=0x7ffc0000 [ 86.119876][ T29] audit: type=1326 audit(1754633071.827:4404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6217 comm="syz.6.632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c48f8ebe9 code=0x7ffc0000 [ 86.151896][ T29] audit: type=1326 audit(1754633071.827:4405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6217 comm="syz.6.632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1c48f8ebe9 code=0x7ffc0000 [ 86.162664][ T6201] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.181722][ T29] audit: type=1326 audit(1754633071.827:4406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6217 comm="syz.6.632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c48f8ebe9 code=0x7ffc0000 [ 86.227421][ T29] audit: type=1326 audit(1754633071.827:4407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6217 comm="syz.6.632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1c48f8ebe9 code=0x7ffc0000 [ 86.261335][ T29] audit: type=1326 audit(1754633071.827:4408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6217 comm="syz.6.632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c48f8ebe9 code=0x7ffc0000 [ 86.292248][ T29] audit: type=1326 audit(1754633071.827:4409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6217 comm="syz.6.632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f1c48f8ebe9 code=0x7ffc0000 [ 86.324703][ T29] audit: type=1326 audit(1754633071.827:4410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6217 comm="syz.6.632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c48f8ebe9 code=0x7ffc0000 [ 86.556289][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.578911][ T6249] 0ªX¹¦À: renamed from caif0 [ 86.584937][ T6241] loop4: detected capacity change from 0 to 1024 [ 86.595791][ T6249] 0ªX¹¦À: entered allmulticast mode [ 86.602845][ T6249] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 86.791327][ T6241] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 86.847537][ T6262] loop2: detected capacity change from 0 to 736 [ 86.867274][ T6241] ext4 filesystem being mounted at /119/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 86.909383][ T6262] netlink: 'syz.2.651': attribute type 27 has an invalid length. [ 87.065868][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.270041][ T6289] loop5: detected capacity change from 0 to 512 [ 87.340082][ T6289] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2 [ 87.399169][ T6289] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -2 [ 87.425648][ T6307] loop2: detected capacity change from 0 to 512 [ 87.463120][ T6307] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 87.474745][ T6307] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.664: invalid indirect mapped block 8 (level 2) [ 87.503997][ T6289] EXT4-fs (loop5): 1 truncate cleaned up [ 87.515717][ T6307] EXT4-fs (loop2): Remounting filesystem read-only [ 87.534986][ T6289] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.564999][ T6307] EXT4-fs (loop2): 1 truncate cleaned up [ 87.626344][ T6307] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.733077][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.959944][ T6349] loop2: detected capacity change from 0 to 1024 [ 87.984252][ T6351] lo speed is unknown, defaulting to 1000 [ 87.992476][ T3598] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.042482][ T6349] EXT4-fs: inline encryption not supported [ 88.051630][ T6349] EXT4-fs: Ignoring removed i_version option [ 88.076387][ T6349] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 88.102327][ T6358] __nla_validate_parse: 3 callbacks suppressed [ 88.102344][ T6358] netlink: 3 bytes leftover after parsing attributes in process `syz.5.675'. [ 88.157365][ T6358] 0ªX¹¦À: renamed from caif0 [ 88.179643][ T6349] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 2: comm syz.2.673: lblock 2 mapped to illegal pblock 2 (length 1) [ 88.196232][ T6358] 0ªX¹¦À: entered allmulticast mode [ 88.201681][ T6358] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 88.206216][ T6349] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 48: comm syz.2.673: lblock 0 mapped to illegal pblock 48 (length 1) [ 88.250257][ T6349] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.673: Failed to acquire dquot type 0 [ 88.262824][ T6349] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 88.330444][ T6349] EXT4-fs error (device loop2): ext4_evict_inode:254: inode #11: comm syz.2.673: mark_inode_dirty error [ 88.363268][ T6349] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 88.386285][ T6349] EXT4-fs (loop2): 1 orphan inode deleted [ 88.405952][ T3420] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:6: lblock 1 mapped to illegal pblock 1 (length 1) [ 88.439286][ T6349] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 88.453201][ T3420] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:6: Failed to release dquot type 0 [ 88.467772][ T6378] loop4: detected capacity change from 0 to 512 [ 88.499266][ T6385] netlink: 4 bytes leftover after parsing attributes in process `syz.5.688'. [ 88.505523][ T6378] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 88.522203][ T6378] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.687: invalid indirect mapped block 8 (level 2) [ 88.527159][ T6349] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.557478][ T6378] EXT4-fs (loop4): Remounting filesystem read-only [ 88.581537][ T6378] EXT4-fs (loop4): 1 truncate cleaned up [ 88.587866][ T6378] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.602691][ T6349] EXT4-fs error (device loop2): __ext4_get_inode_loc:4861: comm syz.2.673: Invalid inode table block 1 in block_group 0 [ 88.643542][ T6349] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 88.663674][ T6375] loop6: detected capacity change from 0 to 8192 [ 88.680893][ T6349] EXT4-fs error (device loop2): ext4_quota_off:7217: inode #3: comm syz.2.673: mark_inode_dirty error [ 88.707010][ T6375] netlink: 'syz.6.685': attribute type 1 has an invalid length. [ 88.710621][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.768581][ T6397] netlink: 3 bytes leftover after parsing attributes in process `syz.6.685'. [ 88.818099][ T6375] bond2: entered promiscuous mode [ 88.824082][ T6375] 8021q: adding VLAN 0 to HW filter on device bond2 [ 88.835487][ T6397] batadv3: entered promiscuous mode [ 88.841652][ T6397] batadv3: entered allmulticast mode [ 88.857426][ T6375] netlink: 3 bytes leftover after parsing attributes in process `syz.6.685'. [ 88.874377][ T6375] batadv4: entered promiscuous mode [ 88.880117][ T6375] batadv4: entered allmulticast mode [ 88.919831][ T6401] loop2: detected capacity change from 0 to 1024 [ 88.996063][ T6396] loop5: detected capacity change from 0 to 512 [ 88.996709][ T6401] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 89.034437][ T6401] ext4 filesystem being mounted at /131/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 89.049046][ T6396] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2 [ 89.083357][ T6396] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -2 [ 89.103528][ T6396] EXT4-fs (loop5): 1 truncate cleaned up [ 89.109769][ T6396] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 89.122729][ T6417] netlink: 8 bytes leftover after parsing attributes in process `syz.6.698'. [ 89.135024][ T6417] netlink: 8 bytes leftover after parsing attributes in process `syz.6.698'. [ 89.146909][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.225027][ T6421] netlink: 4 bytes leftover after parsing attributes in process `syz.6.701'. [ 89.305592][ T3598] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.349507][ T6426] loop1: detected capacity change from 0 to 512 [ 89.457948][ T6426] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 89.469520][ T6426] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2 [ 89.480948][ T6426] EXT4-fs (loop1): 1 truncate cleaned up [ 89.510695][ T6426] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 89.545110][ T6444] loop6: detected capacity change from 0 to 1024 [ 89.567669][ T6444] EXT4-fs (loop6): couldn't mount as ext3 due to feature incompatibilities [ 89.607591][ T6454] netlink: 'syz.5.711': attribute type 13 has an invalid length. [ 89.663734][ T6457] netlink: 4 bytes leftover after parsing attributes in process `syz.2.715'. [ 89.696779][ T6459] loop6: detected capacity change from 0 to 512 [ 89.697686][ T6454] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.717134][ T6459] EXT4-fs: dax option not supported [ 89.747961][ T6454] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.764279][ T3307] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.793844][ T6454] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 89.851747][ T6462] loop6: detected capacity change from 0 to 512 [ 89.875745][ T6462] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -2 [ 89.904362][ T6473] loop1: detected capacity change from 0 to 512 [ 89.919316][ T6462] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #13: comm syz.6.717: invalid indirect mapped block 8 (level 2) [ 89.934203][ T6473] EXT4-fs: dax option not supported [ 89.942660][ T6462] EXT4-fs (loop6): Remounting filesystem read-only [ 89.950785][ T6462] EXT4-fs (loop6): 1 truncate cleaned up [ 89.987670][ T6462] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 90.032256][ T3862] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.162470][ T6480] loop2: detected capacity change from 0 to 8192 [ 90.210304][ T6480] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 90.226556][ T6496] loop6: detected capacity change from 0 to 1024 [ 90.238938][ T6496] EXT4-fs: inline encryption not supported [ 90.247315][ T6496] EXT4-fs: Ignoring removed i_version option [ 90.338386][ T6496] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 90.359228][ T6499] loop1: detected capacity change from 0 to 512 [ 90.370717][ T6499] ext4: Unknown parameter 'euid>00000000000000000000' [ 90.381748][ T6499] netlink: 48 bytes leftover after parsing attributes in process `syz.1.730'. [ 90.439919][ T6496] EXT4-fs error (device loop6): ext4_map_blocks:778: inode #3: block 2: comm syz.6.726: lblock 2 mapped to illegal pblock 2 (length 1) [ 90.498329][ T6508] netlink: 14 bytes leftover after parsing attributes in process `syz.2.723'. [ 90.707683][ T6496] EXT4-fs error (device loop6): ext4_map_blocks:778: inode #3: block 48: comm syz.6.726: lblock 0 mapped to illegal pblock 48 (length 1) [ 91.022378][ T29] kauditd_printk_skb: 400 callbacks suppressed [ 91.022392][ T29] audit: type=1400 audit(1754633076.807:4807): avc: denied { read } for pid=6518 comm="sed" name="eth0.dhcp" dev="tmpfs" ino=508 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 91.052592][ T29] audit: type=1400 audit(1754633076.807:4808): avc: denied { open } for pid=6518 comm="sed" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=508 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 91.089377][ T29] audit: type=1400 audit(1754633076.867:4809): avc: denied { unmount } for pid=3302 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 91.090278][ T6496] Quota error (device loop6): v2_write_file_info: Can't write info structure [ 91.125414][ T6496] EXT4-fs error (device loop6): ext4_acquire_dquot:6933: comm syz.6.726: Failed to acquire dquot type 0 [ 91.197581][ T29] audit: type=1400 audit(1754633076.937:4810): avc: denied { create } for pid=6523 comm="syz.1.736" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 91.198034][ T6496] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 91.218735][ T29] audit: type=1400 audit(1754633076.937:4811): avc: denied { ioctl } for pid=6523 comm="syz.1.736" path="socket:[14010]" dev="sockfs" ino=14010 ioctlcmd=0x89a0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 91.248079][ T6496] EXT4-fs error (device loop6): ext4_evict_inode:254: inode #11: comm syz.6.726: mark_inode_dirty error [ 91.255274][ T29] audit: type=1400 audit(1754633076.977:4812): avc: denied { create } for pid=6526 comm="syz.2.738" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 91.272478][ T6531] loop1: detected capacity change from 0 to 1024 [ 91.320920][ T6531] EXT4-fs: inline encryption not supported [ 91.331345][ T6531] EXT4-fs: Ignoring removed i_version option [ 91.346632][ T6496] EXT4-fs warning (device loop6): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 91.377409][ T6496] EXT4-fs (loop6): 1 orphan inode deleted [ 91.390307][ T160] EXT4-fs error (device loop6): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:4: lblock 1 mapped to illegal pblock 1 (length 1) [ 91.397699][ T29] audit: type=1400 audit(1754633077.017:4813): avc: denied { write } for pid=6526 comm="syz.2.738" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 91.410479][ T6531] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 91.430306][ T29] audit: type=1400 audit(1754633077.087:4814): avc: denied { open } for pid=6533 comm="syz.5.740" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 91.445166][ T6544] netlink: 'syz.5.740': attribute type 13 has an invalid length. [ 91.463830][ T29] audit: type=1400 audit(1754633077.087:4815): avc: denied { kernel } for pid=6533 comm="syz.5.740" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 91.471937][ T6496] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 91.501906][ T160] EXT4-fs error (device loop6): ext4_release_dquot:6969: comm kworker/u8:4: Failed to release dquot type 0 [ 91.541970][ T6544] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 91.576799][ T6531] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 2: comm syz.1.736: lblock 2 mapped to illegal pblock 2 (length 1) [ 91.602197][ T6496] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.658057][ T6496] EXT4-fs error (device loop6): __ext4_get_inode_loc:4861: comm syz.6.726: Invalid inode table block 1 in block_group 0 [ 91.673519][ T6531] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 48: comm syz.1.736: lblock 0 mapped to illegal pblock 48 (length 1) [ 91.697907][ T6531] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.736: Failed to acquire dquot type 0 [ 91.730775][ T6496] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 91.770859][ T6546] loop2: detected capacity change from 0 to 512 [ 91.785935][ T6531] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 91.798368][ T6496] EXT4-fs error (device loop6): ext4_quota_off:7217: inode #3: comm syz.6.726: mark_inode_dirty error [ 91.828915][ T6546] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 91.845050][ T6546] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 91.856008][ T6531] EXT4-fs error (device loop1): ext4_evict_inode:254: inode #11: comm syz.1.736: mark_inode_dirty error [ 91.857148][ T6546] EXT4-fs (loop2): 1 truncate cleaned up [ 91.874927][ T6546] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 91.978118][ T6531] EXT4-fs warning (device loop1): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 92.005787][ T6531] EXT4-fs (loop1): 1 orphan inode deleted [ 92.025052][ T6531] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 92.058858][ T3420] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:6: lblock 1 mapped to illegal pblock 1 (length 1) [ 92.123285][ T3420] EXT4-fs error (device loop1): ext4_release_dquot:6969: comm kworker/u8:6: Failed to release dquot type 0 [ 92.145868][ T6584] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 92.154984][ T6584] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 92.170322][ T6531] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.192980][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.205774][ T6592] vlan0: entered promiscuous mode [ 92.208053][ T6531] EXT4-fs error (device loop1): __ext4_get_inode_loc:4861: comm syz.1.736: Invalid inode table block 1 in block_group 0 [ 92.265148][ T6531] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 92.283077][ T6598] 0ªX¹¦À: renamed from caif0 [ 92.312837][ T6531] EXT4-fs error (device loop1): ext4_quota_off:7217: inode #3: comm syz.1.736: mark_inode_dirty error [ 92.338523][ T6598] 0ªX¹¦À: entered allmulticast mode [ 92.344680][ T6598] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 92.346686][ T6590] loop5: detected capacity change from 0 to 8192 [ 92.472514][ T6590] netlink: 'syz.5.751': attribute type 1 has an invalid length. [ 92.512343][ T6610] siw: device registration error -23 [ 92.531839][ T6616] batadv9: entered promiscuous mode [ 92.537735][ T6616] batadv9: entered allmulticast mode [ 92.599089][ T6590] bond5: entered promiscuous mode [ 92.619484][ T6590] 8021q: adding VLAN 0 to HW filter on device bond5 [ 92.655941][ T6623] batadv10: entered promiscuous mode [ 92.663139][ T6623] batadv10: entered allmulticast mode [ 92.775429][ T6630] loop2: detected capacity change from 0 to 512 [ 92.919010][ T6630] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 92.973316][ T6630] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 93.094329][ T6630] EXT4-fs (loop2): 1 truncate cleaned up [ 93.106501][ T6676] loop4: detected capacity change from 0 to 512 [ 93.126507][ T6630] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 93.176685][ T6676] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 93.225803][ T6676] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 93.240917][ T6676] EXT4-fs (loop4): 1 truncate cleaned up [ 93.249173][ T6676] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 93.285425][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.347150][ T6692] loop6: detected capacity change from 0 to 1024 [ 93.370591][ T6691] loop2: detected capacity change from 0 to 8192 [ 93.371521][ T6692] EXT4-fs: inline encryption not supported [ 93.388223][ T6692] EXT4-fs: Ignoring removed i_version option [ 93.403473][ T6691] netlink: 'syz.2.771': attribute type 1 has an invalid length. [ 93.427424][ T6692] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 93.452992][ T6695] __nla_validate_parse: 11 callbacks suppressed [ 93.453009][ T6695] netlink: 8 bytes leftover after parsing attributes in process `syz.1.773'. [ 93.469682][ T6695] netlink: 8 bytes leftover after parsing attributes in process `syz.1.773'. [ 93.470941][ T6691] bond2: entered promiscuous mode [ 93.480605][ T6696] netlink: 3 bytes leftover after parsing attributes in process `syz.2.771'. [ 93.491011][ T6691] 8021q: adding VLAN 0 to HW filter on device bond2 [ 93.504416][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.515204][ T6692] EXT4-fs error (device loop6): ext4_map_blocks:778: inode #3: block 2: comm syz.6.770: lblock 2 mapped to illegal pblock 2 (length 1) [ 93.518335][ T6696] batadv3: entered promiscuous mode [ 93.535777][ T6696] batadv3: entered allmulticast mode [ 93.545178][ T6691] netlink: 3 bytes leftover after parsing attributes in process `syz.2.771'. [ 93.556098][ T6692] EXT4-fs error (device loop6): ext4_map_blocks:778: inode #3: block 48: comm syz.6.770: lblock 0 mapped to illegal pblock 48 (length 1) [ 93.558046][ T6691] batadv4: entered promiscuous mode [ 93.579551][ T6691] batadv4: entered allmulticast mode [ 93.581996][ T6699] siw: device registration error -23 [ 93.600415][ T6692] EXT4-fs error (device loop6): ext4_acquire_dquot:6933: comm syz.6.770: Failed to acquire dquot type 0 [ 93.615620][ T6692] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 93.630326][ T6692] EXT4-fs error (device loop6): ext4_evict_inode:254: inode #11: comm syz.6.770: mark_inode_dirty error [ 93.645154][ T6692] EXT4-fs warning (device loop6): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 93.656297][ T6692] EXT4-fs (loop6): 1 orphan inode deleted [ 93.662902][ T6692] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 93.680803][ T160] EXT4-fs error (device loop6): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:4: lblock 1 mapped to illegal pblock 1 (length 1) [ 93.737523][ T160] EXT4-fs error (device loop6): ext4_release_dquot:6969: comm kworker/u8:4: Failed to release dquot type 0 [ 93.770008][ T6692] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.791415][ T6711] loop2: detected capacity change from 0 to 1024 [ 93.837973][ T6692] EXT4-fs error (device loop6): __ext4_get_inode_loc:4861: comm syz.6.770: Invalid inode table block 1 in block_group 0 [ 93.857820][ T6711] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 93.908867][ T6711] ext4 filesystem being mounted at /144/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 93.921821][ T6692] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 93.968048][ T6692] EXT4-fs error (device loop6): ext4_quota_off:7217: inode #3: comm syz.6.770: mark_inode_dirty error [ 93.969922][ T6725] netlink: 8 bytes leftover after parsing attributes in process `syz.5.784'. [ 93.992126][ T6725] netlink: 8 bytes leftover after parsing attributes in process `syz.5.784'. [ 94.001488][ T6719] loop4: detected capacity change from 0 to 8192 [ 94.009832][ T6719] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 94.065957][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.077579][ T6719] netlink: 14 bytes leftover after parsing attributes in process `syz.4.781'. [ 94.189269][ T6734] siw: device registration error -23 [ 94.323694][ T6750] loop1: detected capacity change from 0 to 512 [ 94.354040][ T6755] loop4: detected capacity change from 0 to 1024 [ 94.393140][ T6755] ext4 filesystem being mounted at /156/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 94.426408][ T6750] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 94.482223][ T6750] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2 [ 94.493166][ T6750] EXT4-fs (loop1): 1 truncate cleaned up [ 94.599901][ T6771] loop4: detected capacity change from 0 to 512 [ 94.619425][ T6771] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 94.632386][ T6771] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.803: invalid indirect mapped block 8 (level 2) [ 94.648577][ T6771] EXT4-fs (loop4): Remounting filesystem read-only [ 94.669812][ T6771] EXT4-fs (loop4): 1 truncate cleaned up [ 94.779225][ T6789] netlink: 3 bytes leftover after parsing attributes in process `syz.6.809'. [ 94.823011][ T6789] 0ªX¹¦À: renamed from caif0 [ 94.836380][ T6789] 0ªX¹¦À: entered allmulticast mode [ 94.842636][ T6789] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 95.302620][ T6835] siw: device registration error -23 [ 95.365752][ T6846] netlink: 8 bytes leftover after parsing attributes in process `syz.5.832'. [ 95.377507][ T6846] netlink: 8 bytes leftover after parsing attributes in process `syz.5.832'. [ 95.451128][ T6840] loop4: detected capacity change from 0 to 8192 [ 95.485700][ T6852] loop5: detected capacity change from 0 to 512 [ 95.529347][ T6840] netlink: 'syz.4.830': attribute type 1 has an invalid length. [ 95.569243][ T6840] bond6: entered promiscuous mode [ 95.577657][ T6840] 8021q: adding VLAN 0 to HW filter on device bond6 [ 95.595099][ T6840] batadv11: entered promiscuous mode [ 95.604314][ T6840] batadv11: entered allmulticast mode [ 95.624491][ T6852] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2 [ 95.645591][ T6852] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.834: invalid indirect mapped block 8 (level 2) [ 95.668098][ T6840] batadv12: entered promiscuous mode [ 95.670527][ T6852] EXT4-fs (loop5): Remounting filesystem read-only [ 95.676095][ T6840] batadv12: entered allmulticast mode [ 95.694380][ T6852] EXT4-fs (loop5): 1 truncate cleaned up [ 95.885191][ T6873] loop1: detected capacity change from 0 to 8192 [ 95.927082][ T6873] netlink: 'syz.1.841': attribute type 1 has an invalid length. [ 95.951161][ T6873] bond2: entered promiscuous mode [ 95.961801][ T6873] 8021q: adding VLAN 0 to HW filter on device bond2 [ 95.983470][ T6873] batadv3: entered promiscuous mode [ 95.991063][ T6873] batadv3: entered allmulticast mode [ 96.002163][ T6873] batadv4: entered promiscuous mode [ 96.007573][ T6873] batadv4: entered allmulticast mode [ 96.024243][ T6896] siw: device registration error -23 [ 96.040825][ T29] kauditd_printk_skb: 473 callbacks suppressed [ 96.040839][ T29] audit: type=1326 audit(1754633081.827:5282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6872 comm="syz.1.841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa20096ebe9 code=0x7ffc0000 [ 96.082102][ T29] audit: type=1326 audit(1754633081.827:5283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6872 comm="syz.1.841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa20096ebe9 code=0x7ffc0000 [ 96.110350][ T29] audit: type=1326 audit(1754633081.857:5284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6872 comm="syz.1.841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa20096ebe9 code=0x7ffc0000 [ 96.139375][ T29] audit: type=1326 audit(1754633081.857:5285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6872 comm="syz.1.841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa20096ebe9 code=0x7ffc0000 [ 96.167977][ T29] audit: type=1326 audit(1754633081.857:5286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6872 comm="syz.1.841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa20096ebe9 code=0x7ffc0000 [ 96.199283][ T29] audit: type=1326 audit(1754633081.867:5287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6872 comm="syz.1.841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fa20096ebe9 code=0x7ffc0000 [ 96.228991][ T29] audit: type=1326 audit(1754633081.867:5288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6872 comm="syz.1.841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa20096ebe9 code=0x7ffc0000 [ 96.229024][ T29] audit: type=1326 audit(1754633081.867:5289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6872 comm="syz.1.841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa20096ebe9 code=0x7ffc0000 [ 96.229050][ T29] audit: type=1400 audit(1754633081.867:5290): avc: denied { getopt } for pid=6901 comm="syz.5.854" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 96.229080][ T29] audit: type=1400 audit(1754633081.867:5291): avc: denied { name_connect } for pid=6901 comm="syz.5.854" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 96.395384][ T6911] lo speed is unknown, defaulting to 1000 [ 96.427945][ T6917] loop1: detected capacity change from 0 to 512 [ 96.440041][ T6915] loop6: detected capacity change from 0 to 8192 [ 96.450325][ T6915] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 96.460864][ T6917] EXT4-fs: dax option not supported [ 96.944543][ T6930] loop4: detected capacity change from 0 to 512 [ 96.978799][ T6939] 1ªX¹¦À: renamed from 60ªX¹¦À [ 96.988798][ T6930] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 96.999208][ T6939] A link change request failed with some changes committed already. Interface 61ªX¹¦À may have been left with an inconsistent configuration, please check. [ 97.001121][ T6930] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 97.048496][ T6930] EXT4-fs (loop4): 1 truncate cleaned up [ 97.289643][ T6955] loop2: detected capacity change from 0 to 512 [ 97.380467][ T6955] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 97.399576][ T6955] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.876: invalid indirect mapped block 8 (level 2) [ 97.426921][ T6955] EXT4-fs (loop2): Remounting filesystem read-only [ 97.440293][ T6955] EXT4-fs (loop2): 1 truncate cleaned up [ 97.565975][ T6988] loop2: detected capacity change from 0 to 1024 [ 97.624388][ T6988] EXT4-fs: inline encryption not supported [ 97.632029][ T6988] EXT4-fs: Ignoring removed i_version option [ 97.647745][ T6988] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 97.673162][ T6988] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 2: comm syz.2.886: lblock 2 mapped to illegal pblock 2 (length 1) [ 97.730242][ T6988] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 48: comm syz.2.886: lblock 0 mapped to illegal pblock 48 (length 1) [ 97.798653][ T6988] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.886: Failed to acquire dquot type 0 [ 97.815443][ T6987] loop6: detected capacity change from 0 to 512 [ 97.827147][ T6987] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -2 [ 97.848656][ T6987] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -2 [ 97.861288][ T6988] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 97.877082][ T6988] EXT4-fs error (device loop2): ext4_evict_inode:254: inode #11: comm syz.2.886: mark_inode_dirty error [ 97.909492][ T6987] EXT4-fs (loop6): 1 truncate cleaned up [ 97.919448][ T6988] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 97.936693][ T6988] EXT4-fs (loop2): 1 orphan inode deleted [ 97.948162][ T791] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:5: lblock 1 mapped to illegal pblock 1 (length 1) [ 97.970512][ T791] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:5: Failed to release dquot type 0 [ 97.989876][ T6988] EXT4-fs error (device loop2): __ext4_get_inode_loc:4861: comm syz.2.886: Invalid inode table block 1 in block_group 0 [ 98.013784][ T6988] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 98.032656][ T6988] EXT4-fs error (device loop2): ext4_quota_off:7217: inode #3: comm syz.2.886: mark_inode_dirty error [ 98.299936][ T7019] loop4: detected capacity change from 0 to 8192 [ 98.315352][ T7030] netlink: 'syz.6.906': attribute type 13 has an invalid length. [ 98.337326][ T7030] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.362615][ T7019] netlink: 'syz.4.902': attribute type 1 has an invalid length. [ 98.377374][ T7030] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.378218][ T7040] loop1: detected capacity change from 0 to 512 [ 98.399429][ T7030] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 98.413502][ T7040] EXT4-fs: dax option not supported [ 98.446614][ T7019] bond7: entered promiscuous mode [ 98.471265][ T7019] 8021q: adding VLAN 0 to HW filter on device bond7 [ 98.505658][ T7019] __nla_validate_parse: 15 callbacks suppressed [ 98.505676][ T7019] netlink: 3 bytes leftover after parsing attributes in process `syz.4.902'. [ 98.537442][ T7041] batadv13: entered promiscuous mode [ 98.543594][ T7041] batadv13: entered allmulticast mode [ 98.554765][ T7019] batadv14: entered promiscuous mode [ 98.560854][ T7019] batadv14: entered allmulticast mode [ 98.561973][ T7048] loop2: detected capacity change from 0 to 1024 [ 98.640419][ T7058] loop6: detected capacity change from 0 to 512 [ 98.665298][ T7064] siw: device registration error -23 [ 98.684809][ T7048] ext4 filesystem being mounted at /175/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 98.715246][ T7058] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -2 [ 98.740796][ T7058] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #13: comm syz.6.919: invalid indirect mapped block 8 (level 2) [ 98.757367][ T7058] EXT4-fs (loop6): Remounting filesystem read-only [ 98.767637][ T7058] EXT4-fs (loop6): 1 truncate cleaned up [ 98.920542][ T7092] netlink: 48 bytes leftover after parsing attributes in process `syz.2.933'. [ 99.207821][ T7122] netlink: 48 bytes leftover after parsing attributes in process `syz.6.946'. [ 99.252521][ T7112] loop5: detected capacity change from 0 to 512 [ 99.298374][ T7112] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2 [ 99.318050][ T7130] loop4: detected capacity change from 0 to 1024 [ 99.364973][ T7130] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 99.381312][ T7130] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 99.400400][ T7112] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -2 [ 99.422677][ T7138] siw: device registration error -23 [ 99.429049][ T7112] EXT4-fs (loop5): 1 truncate cleaned up [ 99.435272][ T7130] JBD2: no valid journal superblock found [ 99.441399][ T7130] EXT4-fs (loop4): Could not load journal inode [ 99.487095][ T7130] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 99.574805][ T7148] siw: device registration error -23 [ 99.596892][ T7149] loop2: detected capacity change from 0 to 512 [ 99.632748][ T7149] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 99.649422][ T7145] loop1: detected capacity change from 0 to 8192 [ 99.691581][ T7149] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 99.713207][ T7149] EXT4-fs (loop2): 1 truncate cleaned up [ 99.769781][ T7145] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 99.816564][ T7157] loop4: detected capacity change from 0 to 1024 [ 99.842454][ T7161] FAULT_INJECTION: forcing a failure. [ 99.842454][ T7161] name failslab, interval 1, probability 0, space 0, times 0 [ 99.843640][ T7160] siw: device registration error -23 [ 99.860290][ T7161] CPU: 0 UID: 0 PID: 7161 Comm: syz.5.963 Not tainted 6.16.0-syzkaller-12016-gbec077162bd0 #0 PREEMPT(voluntary) [ 99.860319][ T7161] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 99.860332][ T7161] Call Trace: [ 99.860338][ T7161] [ 99.860346][ T7161] __dump_stack+0x1d/0x30 [ 99.860390][ T7161] dump_stack_lvl+0xe8/0x140 [ 99.860414][ T7161] dump_stack+0x15/0x1b [ 99.860450][ T7161] should_fail_ex+0x265/0x280 [ 99.860481][ T7161] should_failslab+0x8c/0xb0 [ 99.860510][ T7161] kmem_cache_alloc_noprof+0x50/0x310 [ 99.860667][ T7161] ? prepare_creds+0x37/0x4c0 [ 99.860691][ T7161] ? __fget_files+0x184/0x1c0 [ 99.860774][ T7161] prepare_creds+0x37/0x4c0 [ 99.860821][ T7161] __sys_setreuid+0xdc/0x520 [ 99.860855][ T7161] ? ksys_write+0x192/0x1a0 [ 99.860936][ T7161] __x64_sys_setreuid+0x2d/0x40 [ 99.860991][ T7161] x64_sys_call+0x244c/0x2ff0 [ 99.861015][ T7161] do_syscall_64+0xd2/0x200 [ 99.861044][ T7161] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 99.861071][ T7161] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 99.861113][ T7161] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.861138][ T7161] RIP: 0033:0x7f84dcf4ebe9 [ 99.861155][ T7161] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 99.861175][ T7161] RSP: 002b:00007f84db9af038 EFLAGS: 00000246 ORIG_RAX: 0000000000000071 [ 99.861229][ T7161] RAX: ffffffffffffffda RBX: 00007f84dd175fa0 RCX: 00007f84dcf4ebe9 [ 99.861244][ T7161] RDX: 0000000000000000 RSI: 000000000000ee00 RDI: 0000000000000000 [ 99.861257][ T7161] RBP: 00007f84db9af090 R08: 0000000000000000 R09: 0000000000000000 [ 99.861271][ T7161] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 99.861315][ T7161] R13: 00007f84dd176038 R14: 00007f84dd175fa0 R15: 00007ffd29827328 [ 99.861337][ T7161] [ 99.963657][ T7157] EXT4-fs: inline encryption not supported [ 100.045999][ T7145] netlink: 14 bytes leftover after parsing attributes in process `syz.1.957'. [ 100.049740][ T7157] EXT4-fs: Ignoring removed i_version option [ 100.141218][ T7157] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 100.158532][ T7164] loop5: detected capacity change from 0 to 1024 [ 100.173755][ T7166] netlink: 48 bytes leftover after parsing attributes in process `syz.6.966'. [ 100.198450][ T7157] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 2: comm syz.4.959: lblock 2 mapped to illegal pblock 2 (length 1) [ 100.204170][ T7164] ext4 filesystem being mounted at /184/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 100.223539][ T7157] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 48: comm syz.4.959: lblock 0 mapped to illegal pblock 48 (length 1) [ 100.307086][ T7157] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.959: Failed to acquire dquot type 0 [ 100.337031][ T7177] loop6: detected capacity change from 0 to 512 [ 100.340328][ T7157] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 100.360846][ T7177] ext4: Unknown parameter 'euid>00000000000000000000' [ 100.394003][ T7181] loop5: detected capacity change from 0 to 512 [ 100.410463][ T7157] EXT4-fs error (device loop4): ext4_evict_inode:254: inode #11: comm syz.4.959: mark_inode_dirty error [ 100.437711][ T7157] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 100.444151][ T7181] EXT4-fs: dax option not supported [ 100.472847][ T7157] EXT4-fs (loop4): 1 orphan inode deleted [ 100.490456][ T31] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:1: lblock 1 mapped to illegal pblock 1 (length 1) [ 100.541132][ T31] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:1: Failed to release dquot type 0 [ 100.596696][ T7157] EXT4-fs error (device loop4): __ext4_get_inode_loc:4861: comm syz.4.959: Invalid inode table block 1 in block_group 0 [ 100.620368][ T7187] loop2: detected capacity change from 0 to 8192 [ 100.645572][ T7157] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 100.658720][ T7187] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 100.660605][ T7199] netlink: 24 bytes leftover after parsing attributes in process `syz.1.972'. [ 100.730419][ T7157] EXT4-fs error (device loop4): ext4_quota_off:7217: inode #3: comm syz.4.959: mark_inode_dirty error [ 100.966451][ T7207] netlink: 14 bytes leftover after parsing attributes in process `syz.2.973'. [ 101.147670][ T7209] loop6: detected capacity change from 0 to 1024 [ 101.185811][ T29] kauditd_printk_skb: 262 callbacks suppressed [ 101.185828][ T29] audit: type=1400 audit(1754633086.967:5548): avc: denied { accept } for pid=7210 comm="syz.5.982" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 101.219766][ T7211] lo speed is unknown, defaulting to 1000 [ 101.321002][ T7209] EXT4-fs: inline encryption not supported [ 101.327887][ T7209] EXT4-fs: Ignoring removed i_version option [ 101.417687][ T7209] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 101.480988][ T7209] EXT4-fs error (device loop6): ext4_map_blocks:778: inode #3: block 2: comm syz.6.981: lblock 2 mapped to illegal pblock 2 (length 1) [ 101.503366][ T7221] loop4: detected capacity change from 0 to 512 [ 101.534019][ T7209] Quota error (device loop6): qtree_write_dquot: dquota write failed [ 101.546071][ T7221] ext4: Unknown parameter 'euid>00000000000000000000' [ 101.589001][ T7209] EXT4-fs error (device loop6): ext4_map_blocks:778: inode #3: block 48: comm syz.6.981: lblock 0 mapped to illegal pblock 48 (length 1) [ 101.610623][ T7224] loop2: detected capacity change from 0 to 512 [ 101.653026][ T7224] EXT4-fs: dax option not supported [ 101.661242][ T7209] Quota error (device loop6): v2_write_file_info: Can't write info structure [ 101.671806][ T7209] EXT4-fs error (device loop6): ext4_acquire_dquot:6933: comm syz.6.981: Failed to acquire dquot type 0 [ 101.674449][ T7228] siw: device registration error -23 [ 101.729461][ T29] audit: type=1326 audit(1754633087.507:5549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7232 comm="syz.2.990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f3657ebe9 code=0x7ffc0000 [ 101.757387][ T29] audit: type=1326 audit(1754633087.507:5550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7232 comm="syz.2.990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f3657ebe9 code=0x7ffc0000 [ 101.803972][ T7209] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 101.822671][ T29] audit: type=1326 audit(1754633087.607:5551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7232 comm="syz.2.990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f0f3657ebe9 code=0x7ffc0000 [ 101.830422][ T7209] EXT4-fs error (device loop6): ext4_evict_inode:254: inode #11: comm syz.6.981: mark_inode_dirty error [ 101.849606][ T29] audit: type=1326 audit(1754633087.607:5552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7232 comm="syz.2.990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f0f3657ec23 code=0x7ffc0000 [ 101.894340][ T29] audit: type=1326 audit(1754633087.607:5553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7232 comm="syz.2.990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f0f3657ec23 code=0x7ffc0000 [ 101.919713][ T29] audit: type=1326 audit(1754633087.607:5554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7232 comm="syz.2.990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f3657ebe9 code=0x7ffc0000 [ 101.948491][ T29] audit: type=1326 audit(1754633087.607:5555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7232 comm="syz.2.990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f3657ebe9 code=0x7ffc0000 [ 101.991594][ T7209] EXT4-fs warning (device loop6): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 102.005711][ T7209] EXT4-fs (loop6): 1 orphan inode deleted [ 102.028249][ T160] EXT4-fs error (device loop6): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:4: lblock 1 mapped to illegal pblock 1 (length 1) [ 102.031916][ T7209] EXT4-fs mount: 28 callbacks suppressed [ 102.031939][ T7209] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 102.090327][ T160] EXT4-fs error (device loop6): ext4_release_dquot:6969: comm kworker/u8:4: Failed to release dquot type 0 [ 102.123599][ T7242] loop4: detected capacity change from 0 to 512 [ 102.180796][ T7242] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 102.193333][ T7247] loop1: detected capacity change from 0 to 512 [ 102.221273][ T3862] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.237205][ T3862] EXT4-fs error (device loop6): __ext4_get_inode_loc:4861: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 102.261404][ T7247] ext4: Unknown parameter 'euid>00000000000000000000' [ 102.290056][ T7242] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.993: invalid indirect mapped block 8 (level 2) [ 102.328909][ T3862] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 102.350464][ T7242] EXT4-fs (loop4): Remounting filesystem read-only [ 102.368789][ T7242] EXT4-fs (loop4): 1 truncate cleaned up [ 102.374740][ T3862] EXT4-fs error (device loop6): ext4_quota_off:7217: inode #3: comm syz-executor: mark_inode_dirty error [ 102.402315][ T7242] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.490126][ T7258] netlink: 24 bytes leftover after parsing attributes in process `syz.5.996'. [ 102.501802][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.579180][ T7254] loop1: detected capacity change from 0 to 8192 [ 102.619718][ T7254] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 102.672604][ T7269] bond0: entered promiscuous mode [ 102.678942][ T7269] bond_slave_0: entered promiscuous mode [ 102.685555][ T7269] bond_slave_1: entered promiscuous mode [ 102.713540][ T7269] batadv0: entered promiscuous mode [ 102.719395][ T7269] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 102.729926][ T7269] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 102.784972][ T7269] hsr1: entered allmulticast mode [ 102.790327][ T7269] bond0: entered allmulticast mode [ 102.796438][ T7269] bond_slave_0: entered allmulticast mode [ 102.803356][ T7269] bond_slave_1: entered allmulticast mode [ 102.810752][ T7269] batadv0: entered allmulticast mode [ 102.853565][ T7269] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 102.925075][ T7274] siw: device registration error -23 [ 102.949849][ T7272] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(12) [ 102.957398][ T7272] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 102.965314][ T7272] vhci_hcd vhci_hcd.0: Device attached [ 103.022904][ T7280] netlink: 14 bytes leftover after parsing attributes in process `syz.1.997'. [ 103.148263][ T7269] bond0: left promiscuous mode [ 103.155891][ T7269] bond_slave_0: left promiscuous mode [ 103.162994][ T7269] bond_slave_1: left promiscuous mode [ 103.230310][ T3768] usb 5-1: new high-speed USB device number 2 using vhci_hcd [ 103.379364][ T7269] batadv0: left promiscuous mode [ 103.503878][ T7273] vhci_hcd: connection reset by peer [ 103.509934][ T31] vhci_hcd: stop threads [ 103.514954][ T31] vhci_hcd: release socket [ 103.519641][ T31] vhci_hcd: disconnect device [ 103.554198][ T7288] loop4: detected capacity change from 0 to 512 [ 103.600748][ T7288] EXT4-fs: dax option not supported [ 103.615420][ T7291] loop6: detected capacity change from 0 to 512 [ 103.671286][ T7291] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -2 [ 103.690667][ T7291] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #13: comm syz.6.1008: invalid indirect mapped block 8 (level 2) [ 103.759916][ T7299] loop4: detected capacity change from 0 to 8192 [ 103.768988][ T7291] EXT4-fs (loop6): Remounting filesystem read-only [ 103.776870][ T7291] EXT4-fs (loop6): 1 truncate cleaned up [ 103.786096][ T7291] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.821446][ T7299] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 103.856009][ T3862] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.857600][ T7301] loop1: detected capacity change from 0 to 1024 [ 103.946823][ T7301] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 104.018407][ T7301] ext4 filesystem being mounted at /208/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 104.044498][ T7307] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1010'. [ 104.110698][ T3307] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.243416][ T7323] loop1: detected capacity change from 0 to 1024 [ 104.256444][ T7323] EXT4-fs: inline encryption not supported [ 104.262702][ T7323] EXT4-fs: Ignoring removed i_version option [ 104.295106][ T7323] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 104.337517][ T7323] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 2: comm syz.1.1016: lblock 2 mapped to illegal pblock 2 (length 1) [ 104.361191][ T7323] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 48: comm syz.1.1016: lblock 0 mapped to illegal pblock 48 (length 1) [ 104.393225][ T7323] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.1016: Failed to acquire dquot type 0 [ 104.433834][ T7330] vlan2: entered allmulticast mode [ 104.486123][ T7323] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 104.512090][ T7323] EXT4-fs error (device loop1): ext4_evict_inode:254: inode #11: comm syz.1.1016: mark_inode_dirty error [ 104.570370][ T7323] EXT4-fs warning (device loop1): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 104.592881][ T7344] loop6: detected capacity change from 0 to 8192 [ 104.600742][ T7323] EXT4-fs (loop1): 1 orphan inode deleted [ 104.607565][ T7323] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 104.622180][ T3420] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:6: lblock 1 mapped to illegal pblock 1 (length 1) [ 104.657203][ T7344] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 104.661522][ T3420] EXT4-fs error (device loop1): ext4_release_dquot:6969: comm kworker/u8:6: Failed to release dquot type 0 [ 104.724506][ T7348] loop2: detected capacity change from 0 to 1024 [ 104.740752][ T7348] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 104.756462][ T7348] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 104.781856][ T7350] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1033'. [ 104.802983][ T7323] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.815666][ T7348] JBD2: no valid journal superblock found [ 104.825495][ T7348] EXT4-fs (loop2): Could not load journal inode [ 104.844102][ T7323] EXT4-fs error (device loop1): __ext4_get_inode_loc:4861: comm syz.1.1016: Invalid inode table block 1 in block_group 0 [ 104.906471][ T7352] netlink: 14 bytes leftover after parsing attributes in process `syz.6.1030'. [ 105.232705][ T7323] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 105.421382][ T7323] EXT4-fs error (device loop1): ext4_quota_off:7217: inode #3: comm syz.1.1016: mark_inode_dirty error [ 105.483244][ T2990] ================================================================== [ 105.495222][ T2990] BUG: KCSAN: data-race in dont_mount / step_into [ 105.504866][ T2990] [ 105.507977][ T2990] read-write to 0xffff8881072c1240 of 4 bytes by task 3512 on cpu 1: [ 105.519168][ T2990] dont_mount+0x2a/0x40 [ 105.524020][ T2990] vfs_unlink+0x28f/0x420 [ 105.532994][ T2990] do_unlinkat+0x24e/0x480 [ 105.538575][ T2990] __x64_sys_unlink+0x2e/0x40 [ 105.544748][ T2990] x64_sys_call+0x2dc0/0x2ff0 [ 105.551350][ T2990] do_syscall_64+0xd2/0x200 [ 105.556685][ T2990] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.564688][ T2990] [ 105.567534][ T2990] read to 0xffff8881072c1240 of 4 bytes by task 2990 on cpu 0: [ 105.578414][ T2990] step_into+0xe3/0x820 [ 105.584064][ T2990] walk_component+0x162/0x220 [ 105.589988][ T2990] path_lookupat+0xfe/0x2a0 [ 105.596764][ T2990] filename_lookup+0x147/0x340 [ 105.603976][ T2990] do_readlinkat+0x7d/0x320 [ 105.609993][ T2990] __x64_sys_readlink+0x47/0x60 [ 105.617011][ T2990] x64_sys_call+0x28da/0x2ff0 [ 105.623348][ T2990] do_syscall_64+0xd2/0x200 [ 105.628822][ T2990] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.636189][ T2990] [ 105.639569][ T2990] value changed: 0x00300080 -> 0x00004080 [ 105.647338][ T2990] [ 105.650532][ T2990] Reported by Kernel Concurrency Sanitizer on: [ 105.657971][ T2990] CPU: 0 UID: 0 PID: 2990 Comm: udevd Not tainted 6.16.0-syzkaller-12016-gbec077162bd0 #0 PREEMPT(voluntary) [ 105.671437][ T2990] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 105.684733][ T2990] ================================================================== [ 105.712634][ T7369] openvswitch: netlink: Message has 6 unknown bytes. [ 108.380321][ T3768] vhci_hcd: vhci_device speed not set