last executing test programs: 3.034074213s ago: executing program 3 (id=6498): epoll_create1(0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f40)=ANY=[@ANYBLOB="4000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="81ffffff00000000180012800e0001007769726567756172640000000400028008000a00bca75fdc7accc038baafb8c2ab7a5293a3617fc6d0e1", @ANYRES32=0x0], 0x40}}, 0x2400484c) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000a0db000000000000000000850000000e000000d50000002a00c50095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f00000000c0)='netlink_extack\x00', r1}, 0x11) bpf$MAP_CREATE(0x0, 0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./file2\x00', 0x8000c2, &(0x7f0000000000), 0x1, 0x5ba, &(0x7f0000000140)="$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") r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) close_range(r3, 0xffffffffffffffff, 0x0) openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18}}}]}, 0x48}}, 0x0) 2.666091192s ago: executing program 3 (id=6503): perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'team_slave_0\x00', 0x0}) bind$packet(r0, &(0x7f00000000c0)={0x11, 0xc, r1, 0x1, 0x3f, 0x6, @random="401666fdd2d8"}, 0x14) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xe, &(0x7f00000001c0)={0x0, &(0x7f00000002c0)}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000500)) ftruncate(0xffffffffffffffff, 0xc1fa) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000480)) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x882) write$sndseq(r3, &(0x7f0000000140)=[{0x80, 0x0, 0x0, 0xfd, @tick=0x7, {0x0, 0xfc}, {}, @raw8={"00000047000000f900"}}], 0x1c) 1.978098089s ago: executing program 1 (id=6521): open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0) socket$pptp(0x18, 0x1, 0x2) socket$inet_sctp(0x2, 0x1, 0x84) r0 = socket$inet_udplite(0x2, 0x2, 0x88) socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x2, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="891000000000000095"], &(0x7f0000000280)='GPL\x00'}, 0x90) socket$igmp(0x2, 0x3, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f000000a300)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r1}, 0x10) socket$nl_route(0x10, 0x3, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r3, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16=r4, @ANYRES32=r4], 0x44}}, 0x0) 1.977182119s ago: executing program 1 (id=6522): perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'team_slave_0\x00', 0x0}) bind$packet(r1, &(0x7f00000000c0)={0x11, 0xc, r2, 0x1, 0x3f, 0x6, @random="401666fdd2d8"}, 0x14) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000002c0)={0x0, &(0x7f0000000140)}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xe, &(0x7f00000001c0)={0x0, &(0x7f00000002c0)}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000500)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r3, 0xc0182101, &(0x7f0000000180)={r4, 0x5}) ftruncate(0xffffffffffffffff, 0xc1fa) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000480)={0x0}) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000580), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x1, 'queue1\x00'}) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x882) write$sndseq(r7, &(0x7f0000000140)=[{0x80, 0x0, 0x0, 0xfd, @tick=0x7, {0x0, 0xfc}, {0x8}, @raw8={"00000047000000f900"}}], 0x1c) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f0000000080)={r5, 0x3, r3, 0x5}) pipe2$watch_queue(&(0x7f0000000240), 0x80) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000005c0)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0) r9 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='blkio.bfq.dequeue\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f00000016c0), 0x3af4701e) r10 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$KDFONTOP_SET(r10, 0x4b72, &(0x7f0000000000)={0x0, 0x0, 0xa, 0x0, 0xa00, &(0x7f0000000880)="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"}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x10010, r8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) 1.639943716s ago: executing program 3 (id=6525): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) 1.606021599s ago: executing program 3 (id=6526): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000100)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000540)="$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") perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext2\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f00000002c0)={[{@noauto_da_alloc}, {@jqfmt_vfsold}, {@noquota}, {@min_batch_time={'min_batch_time', 0x3d, 0x3}}, {@delalloc}]}, 0x1, 0x4be, &(0x7f0000000540)="$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") r1 = socket(0x2, 0x1, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) r2 = socket$inet(0x2, 0x2000080001, 0x84) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(r2, &(0x7f00000000c0)="18", 0x1, 0x0, &(0x7f0000000000)={0x2, 0x0, @private=0xa010100}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000300)="99", 0x1, 0x0, &(0x7f0000000040)={0x2, 0x4e20, @local}, 0x10) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000340)="4800000014001d0d09074beafd0d8c560284606080ffe0064e204e20590000a2bc5603ca00000f7f8907000020008d42188fedc22e47ad8f75edc6d100000101ff0000000309ff5b", 0x48}], 0x1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) dup2(r3, r4) io_setup(0x7f, &(0x7f0000000100)) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0xa00000000000000, 0x80, &(0x7f00000000c0)=@broute={'broute\x00', 0x20, 0x1, 0x990, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000e00], 0x0, 0x0, &(0x7f0000000e00)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff010000000b00000000000000000062726964676530000000000000000000766c616e300000000000000000000000736974300000000000000000000000007465716c3000000000000000000000000000000000000000000000000180c20000000000000000000000b8080000b808000030090000616d6f6e670000000000000000000000000000002000000000000000000000002008000000000000140400000c000000000000000a000000000000040000000000000000000000000000080000000000000000000000000000b085da05d603888318a0cce400000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000fdffffffff00000000000000000000e4ff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000000000000000000000000000000000000000000000000000000000000000006fb7cd02b734bcce41ef6e95bd000000008000000000000000000000000000000000000000000000000000000000000000eeff3f000000008fc7660c490587b3ab213098a6767c000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f8f0000000000000000dbd5a834b3ab2a0cc27081310000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000440a05000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000f18a0afe993500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4f016fa70c1255400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008c7f8f1b44f000000000feffffff00000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000062f75a00627f34dd71012eed00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e0ffffff00000000000000000000000000000000000000000000001b00000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000f200000000000000000000000000000000000000000000000000000000000000fffffff90000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f2573bd04a330000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000ff7f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000cb33322c9c564ae5f8eef74d5aa7cc9c000000000000000000000000000000000000000000000000000000000500000000000000000000000000000000000000003f7f1c00000000000000000000000000000000ecffffffffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000afe96d981b6f119c000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d3d2e85100000000000000000000000000000000000000000000000000844caab24e79bd260000000000000000000000000000000000000000005080000000000000000000000000000000010000a600a9e85725d89818472e65aba21d9bbc1b20e8331c6fd24a5aceaeefe102e42a013ac2c00eeb782c34eab997013e0506220c21a44cc58ff5bc83d5e4066c7700"/2448]}, 0xa08) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = socket$inet6(0xa, 0x0, 0x0) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2}, 0x1c) syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000180)='./bus\x00', 0x400000, &(0x7f0000000500)=ANY=[@ANYBLOB="666c7573682c6e6f646f74732c646973636172642c646d61736b3d30303030303030303030303030303030303030303030322c646d61736b3d30303030303030303030303030303030303030303137372c646f74732c6e6f646f74732c71756965742c646f74732c0023c3cb4d2e3cbf18508098ee0de2af38db67d42d1bc4ab714d52f019082433fc9ca2d7174b2c4e5531c9f4c7a4d53914e100"/167], 0x1, 0x140, &(0x7f0000000000)="$eJzs27Fq21AUBuDj2m3ddvFcOgi6dDJtn6CluFAqaEnwkEwJOFnsYIgXJZMfJS8YCJ683ZAo2Imxhwy2IPq+RT/8CO4dpMMV6OjT2XAwnpyO/8+i3WhE60dkMW9EJ15FM0rTAABeknlKcZNSSm+n8e4qUkpVrwgA2DbzHwDqx/wHgPox/wGgfvYPDv/+zPPeXpa1I66nRb/ol9ey//0n733N7nWWd82Kot9c9N/KPnvav473D/33tf2b+PK57O+6X//ylf5DDLa/fQAAAKiFbraw9nzf7W7qy/To+8DK+b0VH1s72wYA8AyTi8vh8Wh0ci4IgrAIVb+ZgG1bPvRVrwQAAAAAAAAAAAAAANhkF78TVb1HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAWHUbAAD//0DvUik=") open(&(0x7f0000000000)='./bus\x00', 0x141b42, 0x0) link(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000340)='./bus\x00') 1.117727559s ago: executing program 0 (id=6534): perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'team_slave_0\x00', 0x0}) bind$packet(r0, &(0x7f00000000c0)={0x11, 0xc, r1, 0x1, 0x3f, 0x6, @random="401666fdd2d8"}, 0x14) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xe, &(0x7f00000001c0)={0x0, &(0x7f00000002c0)}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000500)) ftruncate(0xffffffffffffffff, 0xc1fa) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000480)) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x882) write$sndseq(r3, &(0x7f0000000140)=[{0x80, 0x0, 0x0, 0xfd, @tick=0x7, {0x0, 0xfc}, {}, @raw8={"00000047000000f900"}}], 0x1c) 1.064056613s ago: executing program 4 (id=6535): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) 1.045212925s ago: executing program 1 (id=6536): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) 990.1584ms ago: executing program 1 (id=6537): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000b80)='./file2\x00', 0x20005e, &(0x7f0000000c80)={[{@jqfmt_vfsold}, {@lazytime}, {@abort}, {@errors_remount}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x80000}}, {@minixdf}, {@nolazytime}, {@nojournal_checksum}, {@norecovery}, {@usrquota}, {@block_validity}]}, 0x1, 0x476, &(0x7f0000001900)="$eJzs3MtvVNUfAPDvvX3w4/XriPjgoVTRSDS2tKCycAFGExeamOgCl7UtBCnU0JoIIVpc4NKQuDcuTfwLXOnGqCsTt7o3JMSwAV1dc2fu7WM6MxmGgWmZzye59Jz7yDnfnntmzj2H2wD61mj+TxKxIyL+iIiRWnbtCaO1H7dvXp7+5+bl6SSy7N2/k+p5t25eni5PLa/bXmaWavl9DcpduHjp7NTc3OyFIj++eO6j8YWLl148c27q9Ozp2fOTx44dPTLxysuTLzWvfNJ+nHmdbu39dH7/njffv/b29MlrH/zyXVLGXxdHl4w22DdQJp7tcmG9tnNVOhksEgM9qgxty5sob66hav8fiYEYXD42Em983tPKAfdUlmXZlmYHk1jKgAdYEr2uAdAb5Vd9/vxbbvdt8LEB3DhRewDK475dbLUjg5EW5wzVPd92U/60dXLp36/zLe7NPAQAwBo/nKj9XD/+S+PRVecdL9aGKhHxUETsioiHI2J3RDwSUT33sYh4fOWSrJ3lmfpFkvXjn/R6h6G1JR//vVqsba0d/5Wjv6gMFLmd1fiHklNn5mYPR8T/I+JQDG3J8xMtyvjx9d+/bHZsNCIrx3/5lpdfjgWLeqT118xMLU51HvFaN65E7B1sFH+yvBKQt+OeiNh7oLMyzjz/7f5mx0ZXjX8bx9/CYGf1WS37JuK5WvsvRV38paT1+uT4/2Ju9vB4eVes9+tvV99pVv5dxd8Feftva3j/L8dfSVav1y5U9627J1u5+ucXDZ9phtqKP70+WDdBnd//w8l71fRwse+TqcXFCxMRw8lbxf7jK/snV64t8+X5efyHDjbu/7ti5TexLyLym/iJiHgyIg4UdX8qIp6OiIMt4v/5tWc+bHZsI7T/zB21/50nBs7+9P2aQist4k+iQfsfraYOFXva+fxrXp2VOY88rE5/bwAAALCZpBGxI5J0bDmdpmNjtf8vvzu2pXPzC4svnJr/+PxM7R2BSgyl5UzXyKr50IlixqDMTxaP+WX+SDFv/NXA1mp+bHp+bqbXwUOf296k/+f+8v4GPPi6sI4GbFKd9v8syz7rclWA+8z3P/Qv/R/6V4P+v7Uu3/RvBACbW6Pvfw/20B+M/6F/6f/Qv/R/6F/6P/Slu3mvv0hcafGyfXuJ/PPnrqtxHxNZ1qPSh3sf+3Ii0g1RjXuViMpGqEald6X3+pMJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgO/4LAAD//wYf47Q=") r0 = io_uring_setup(0x1d7b, &(0x7f00000002c0)) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x140}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01080000000000000000010000000900010073797a300000000070000000090a010400000000000000000100000008000a40000000000900020073797a31000000000900010073797a3000000a000800054000000021340011800a0001006c696d6974000000240002800c000240000000000000000008000340000000000c0001400000000000000007140000001000010000000000000000000000000a3f5959d56ca2e4f17a214b4b9237"], 0xb8}}, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000040), &(0x7f0000000100)}, 0x20) eventfd(0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000080), 0x1) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x3008042, &(0x7f0000000480), 0x1, 0x60a, &(0x7f00000012c0)="$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") ppoll(0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000080)=ANY=[@ANYRES8], 0x118) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000100)='./bus\x00', 0x143142, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000bc0)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000307006500000000000000670000000000000095"], &(0x7f0000000100)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='tlb_flush\x00', r3}, 0x10) unshare(0x24020400) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000002a00)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34664c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbcebddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cfd7c3a1d37a6ab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ed8dba2f23b01a9aeb980aff9fa3a64709270c701db801f44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af4c0eb97fca585ec6bf58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef3b7cda42013d53046da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b13ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216eca6fd0f8cb26e22a2a998de5eaeadea2a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f76062adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b441233151122b41a8d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd1f539bd43007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711d7219ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a26c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29754f928c59306ce105ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc05fea8dc3c7a5b3b6fa1c81707479db1833d593a271253aa11efdb36b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800000000000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351ba332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a139d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fcc49a729f11ab377f7132c543d29646a9378eea0761b7ed9d2172e33ed87c6513c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828bf209d064d5d15c2015d633e2d3a50acaacac5ae1921cea3d5f78438868aa97824bd2e2eb389deb09a466b423bb44eecc896878d7b58b72ea247508841fa99fc3f4f3dba117"], &(0x7f0000000100)='GPL\x00'}, 0x48) ftruncate(0xffffffffffffffff, 0x20cf01) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSW2(r4, 0x4b6a, &(0x7f0000000000)={0x5, 0x0, 0x21, 0x0, 0x0, "37cfe200"}) 951.542893ms ago: executing program 4 (id=6538): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000020c0)=ANY=[], 0x590}}], 0x1, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="3800000055002f0302000000000000", @ANYRES32, @ANYBLOB="200001"], 0x38}}, 0x0) 927.397545ms ago: executing program 4 (id=6539): r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f00000000c0)="240000005a001f021007f4f9002304000a04f51108000500020100020800038005000000", 0x24) (fail_nth: 2) 870.284109ms ago: executing program 4 (id=6540): perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) syz_read_part_table(0x609, &(0x7f0000000d40)="$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") 840.830792ms ago: executing program 4 (id=6542): socket$unix(0x1, 0x0, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0) socket$pptp(0x18, 0x1, 0x2) socket$inet_sctp(0x2, 0x1, 0x84) r0 = socket$inet_udplite(0x2, 0x2, 0x88) socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x2, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="891000000000000095"], &(0x7f0000000280)='GPL\x00'}, 0x90) socket$igmp(0x2, 0x3, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f000000a300)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r1}, 0x10) socket$nl_route(0x10, 0x3, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r3, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16=r4, @ANYRES32=r4], 0x44}}, 0x0) 792.125205ms ago: executing program 4 (id=6543): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x118) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000240), 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x1800441, &(0x7f0000000600)={[{@i_version}, {@nobh}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@grpjquota_path={'grpjquota', 0x3d, './bus'}}, {@quota}]}, 0x1, 0x42f, &(0x7f0000000940)="$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") 638.105458ms ago: executing program 3 (id=6545): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) 597.668071ms ago: executing program 3 (id=6546): perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'team_slave_0\x00', 0x0}) bind$packet(r1, &(0x7f00000000c0)={0x11, 0xc, r2, 0x1, 0x3f, 0x6, @random="401666fdd2d8"}, 0x14) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000002c0)={0x0, &(0x7f0000000140)}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xe, &(0x7f00000001c0)={0x0, &(0x7f00000002c0)}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000500)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r3, 0xc0182101, &(0x7f0000000180)={r4, 0x5}) ftruncate(0xffffffffffffffff, 0xc1fa) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000480)={0x0}) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000580), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x1, 'queue1\x00'}) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x882) write$sndseq(r7, &(0x7f0000000140)=[{0x80, 0x0, 0x0, 0xfd, @tick=0x7, {0x0, 0xfc}, {0x8}, @raw8={"00000047000000f900"}}], 0x1c) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f0000000080)={r5, 0x3, r3, 0x5}) pipe2$watch_queue(&(0x7f0000000240), 0x80) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000005c0)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0) r9 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='blkio.bfq.dequeue\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f00000016c0), 0x3af4701e) r10 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$KDFONTOP_SET(r10, 0x4b72, &(0x7f0000000000)={0x0, 0x0, 0xa, 0x0, 0xa00, &(0x7f0000000880)="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"}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x10010, r8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) 511.777638ms ago: executing program 2 (id=6547): r0 = socket(0x10, 0x3, 0x0) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0xfffff000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000300)={'veth0_to_team\x00', 0x8000}) bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'veth0_vlan\x00', 0x0}) unshare(0x62040200) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r4, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$netlink(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)={0x1c, 0x5a, 0x30d, 0x0, 0x0, "", [@nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x4, 0x0, 0x0, @ipv4=@broadcast}]}]}, 0x1c}], 0x1}, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r5, 0x8982, &(0x7f0000000140)={0x1, 'veth1\x00', {}, 0xd917}) setsockopt$SO_TIMESTAMP(r4, 0x1, 0x3f, &(0x7f0000000080)=0x1, 0x4) bind$inet(r5, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000340)='./file0\x00', 0x1e, 0xfffffffffffffffe, 0x2, 0x446, &(0x7f0000000380)="$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") setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x15, &(0x7f00000003c0)=@raw={'raw\x00', 0x4001, 0x3, 0x208, 0x180, 0x0, 0x148, 0x0, 0x148, 0x218, 0x240, 0x240, 0x218, 0x240, 0x7fffffe, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'ip6gretap0\x00', 'veth1_to_batadv\x00'}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x268) sendmsg$inet(r5, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x41, &(0x7f0000000040)=0x193a, 0x4) recvmmsg(r5, &(0x7f00000005c0), 0x40000000000026c, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x58, 0x58, 0x7, [@union={0x5}, @datasec={0x0, 0x0, 0x0, 0xf, 0x3, [], "1a85a3"}, @datasec={0x0, 0x4, 0x0, 0xf, 0x1, [{0x4, 0x3c9, 0x7}, {0x4, 0x7, 0x3}, {0x1, 0x0, 0x2}, {0x4, 0xf, 0x9}], '['}]}, {0x0, [0x0, 0x0, 0x2e, 0x2e, 0x3e]}}, 0x0, 0x77}, 0x20) r6 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "90737f000000009cf8dc420f2b1e277fffffeb"}) syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) dup(r6) ioctl$PIO_FONTRESET(r6, 0x4b6d, 0x0) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000800)=ANY=[@ANYBLOB="2800000010000100"/20, @ANYRES32=r3, @ANYBLOB="6d3082610000000008001300", @ANYRES32, @ANYRES64=r1, @ANYBLOB="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", @ANYRES8=r5], 0x28}}, 0x0) write(r0, &(0x7f00000000c0)="240000005a001f021007f4f9002304000a04f51108000500020100020800038005000000", 0x24) 398.322247ms ago: executing program 2 (id=6548): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) 375.89335ms ago: executing program 2 (id=6549): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000020c0)=ANY=[], 0x590}}], 0x1, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="3800000055002f0302000000000000", @ANYRES32, @ANYBLOB="200001"], 0x38}}, 0x0) 364.62682ms ago: executing program 2 (id=6550): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="540000201000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100766c616e000000001400028006000100000000000600050088a8000008000500", @ANYRES32=r1], 0x54}}, 0x0) 306.247805ms ago: executing program 2 (id=6551): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed, 0x0, 0x1}, 0xe) r1 = socket$inet(0x2, 0x2, 0x1) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x14, 0x19}, 0x14}}, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$inet(r1, &(0x7f0000000600)={&(0x7f0000000000)={0x2, 0x0, @dev}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="96bc1480bb58", 0x6}], 0x2, &(0x7f0000000240)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @rand_addr, @multicast2}}}], 0x20}, 0x0) 305.959605ms ago: executing program 2 (id=6552): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file2\x00', 0x200801f, &(0x7f00000000c0), 0xfe, 0x4ec, &(0x7f0000000380)="$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") bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x102000, 0x0, 0x1, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x1}, 0x62) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x5, 0x0, 0x0}, 0x90) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0xf000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r3, 0x0) bpf$BPF_BTF_LOAD(0x8, &(0x7f0000000300)={0x0, 0x0, 0x55}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r0, 0xf505, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$NL802154_CMD_GET_SEC_LEVEL(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, 0x0}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYRES16], 0xb8}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$nl_xfrm(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="8801000014"], 0x188}, 0x1, 0x0, 0x0, 0x4040014}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f00000002c0)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f00000003c0)='./bus\x00') openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SET_VMA(0x23, 0x0, &(0x7f000098b000/0x2000)=nil, 0x2000, 0x0) r7 = socket$inet(0x2, 0x6, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'team_slave_0\x00', 0x0}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x54, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0x9}, {0xffff, 0xe}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x15}, {0x4}}]}, @qdisc_kind_options=@q_clsact={0xb}]}, 0x54}}, 0x0) 228.045992ms ago: executing program 0 (id=6553): socket$unix(0x1, 0x0, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0) socket$pptp(0x18, 0x1, 0x2) socket$inet_sctp(0x2, 0x1, 0x84) r0 = socket$inet_udplite(0x2, 0x2, 0x88) socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x2, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="891000000000000095"], &(0x7f0000000280)='GPL\x00'}, 0x90) socket$igmp(0x2, 0x3, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f000000a300)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r1}, 0x10) socket$nl_route(0x10, 0x3, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r3, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16=r4, @ANYRES32=r4], 0x44}}, 0x0) 165.521507ms ago: executing program 0 (id=6554): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000010008105e9c51c000000000000000000", @ANYRES32=r3, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES64=r1], 0x50}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000780)=ANY=[@ANYBLOB="500000001000810500"/20, @ANYRES32=0x0, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100030000000c0002001c0000000f00000008000500", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x1b) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=ANY=[@ANYBLOB="2000000011000d0400000000080000", @ANYRES32=r5], 0x20}, 0x1, 0x6}, 0x0) 85.559813ms ago: executing program 0 (id=6555): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x5, 0xffffff84}}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x64}, 0x48) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000000)=r3, 0x4) sendmsg$nl_netfilter(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x14, 0x0, 0x7, 0x3}, 0x14}}, 0x0) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000080)=0xae3, 0x4) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000280)={0x1, &(0x7f0000000040)=[{0x6, 0xfc, 0x0, 0x11}]}, 0x10) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000100000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r4}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = accept$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000180)=0x14) setsockopt$packet_tx_ring(r6, 0x107, 0xd, &(0x7f00000001c0)=@req={0x7ff, 0x80000001, 0x10000, 0xe}, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NL80211_CMD_ADD_TX_TS(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000a00)={0x20, r7, 0xb21, 0x0, 0x0, {{0x67}, {@void, @val={0xc, 0x12a}}}}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x0) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) 84.864624ms ago: executing program 1 (id=6556): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) 75.424104ms ago: executing program 0 (id=6557): r0 = socket$inet(0x2, 0x4000000805, 0x0) sendmmsg(r0, &(0x7f0000000e40)=[{{&(0x7f0000000000)=@l2tp={0x2, 0x0, @local}, 0x80, &(0x7f0000000300)=[{&(0x7f00000000c0)="ae", 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1000fd"], 0x10}}], 0x2, 0x0) 25.366028ms ago: executing program 0 (id=6558): epoll_create1(0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f40)=ANY=[@ANYBLOB="4000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="81ffffff00000000180012800e0001007769726567756172640000000400028008000a00bca75fdc7accc038baafb8c2ab7a5293a3617fc6d0e1", @ANYRES32=0x0], 0x40}}, 0x2400484c) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000a0db000000000000000000850000000e000000d50000002a00c50095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f00000000c0)='netlink_extack\x00', r1}, 0x11) bpf$MAP_CREATE(0x0, 0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./file2\x00', 0x8000c2, &(0x7f0000000000), 0x1, 0x5ba, &(0x7f0000000140)="$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") r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) close_range(r3, 0xffffffffffffffff, 0x0) openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18}}}, @TCA_STAB={0x4}]}, 0x4c}}, 0x0) 0s ago: executing program 1 (id=6559): perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) memfd_create(0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000200)=ANY=[], 0x10132) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000bc0)={0x1, &(0x7f0000000b80)=[{0x5, 0x8, 0x7, 0x8}]}) dup3(0xffffffffffffffff, r1, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000380)='ext4_es_find_extent_range_enter\x00', r2}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'veth0_virt_wifi\x00'}) syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f00000008c0)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@noquota}, {@abort}, {@noload}, {@noload}]}, 0x64, 0x50a, &(0x7f0000000200)="$eJzs3VFrHFsdAPD/bHZr06Y3ueqDXvB6tZW0aHeTxrbBh1pB9Kmg1vcak00I2WRDdtM2oWiKH0AQUcEnffFF8AMIUvDFRxEK+qyoKKKtPvigncvuTtI03U227TabZn8/mMw5Z2b2f86GmZ0zc5gJYGC9FxHXI+JJmqYXImI0K89lU2y1psZ6jx/dm21MSaTpzX8mkWRl25+VZPPT2WYnI+JrX474ZvJ83NrG5tJMpVJey/Kl+vJqqbaxeXFxeWahvFBemZqavDJ9dfry9ERP2nkmIq598a8/+O7PvnTtV5+586dbfz//rUa1RrLlu9vxgvL7LWw1vdD8LnZvsPaSwY6ifLOFmeF2aww9V3L/NdcJAID2Guf4H4yIT0bEhRiNof1PZwEAAIA3UPr5kfhfEpG2d6JDOQAAAPAGyTXHwCa5YjYWYCRyuWKxNYb3w3EqV6nW6p+er66vzLXGyo5FITe/WClPZGOFx6KQNPKTzfTT/KU9+amIeDsivj863MwXZ6uVuX5f/AAAAIABcXpP//8/o63+PwAAAHDMjPW7AgAAAMBrp/8PAAAAx5/+PwAAABxrX7lxozGl2++/nru9sb5UvX1xrlxbKi6vzxZnq2urxYVqdaH5zL7lgz6vUq2ufjZW1u+W6uVavVTb2Ly1XF1fqd9afOYV2AAAAMAhevvjD/6QRMTW54abU8OJ7jbtcjXgqMrvpJJs3ma3/uNbrflfDqlSwKEY6ncFgL7J97sCQN8U+l0BoO+SA5Z3HLzz22z+id7WBwAA6L3xj3a+/5/bd8ut/RcDR56dGAaX+/8wuJr3/7sdyetkAY6VgjMAGHivfP//QGn6QhUCAAB6bqQ5JblidnlvJHK5YjHiTPO1AIVkfrFSnoiItyLi96OFDzTyk80tkwP7DAAAAAAAAAAAAAAAAAAAAAAAAABAS5omkQIAAADHWkTub8mvW8/yHx89N7L3+sCJ5L+jkb0i9M6Pb/7w7ky9vjbZKP/XTnn9R1n5pX5cwQAAAICB8EIv8N/up2/34wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACglx4/uje7PR1m3H98ISLG2sXPx8nm/GQUIuLUv5PI79ouiYihHsQfbvz5SLv4SaNaOyHbxR/uQfyt+/vGj7HsW2gX/3QP4sMge9A4/lxvt//l4r3mvP3+l494Jv+yOh//Yuf4N9Rh/z/TZYx3Hv6i1DH+/Yh38u2PP9vxkw7xz3YZ/xtf39zstCz9ScR429+f5JlYpfryaqm2sXlxcXlmobxQXpmamrwyfXX68vREaX6xUs7+to3xvY/98sl+7T/VIf7YAe0/12X7///w7qMPtZKFdvHPn20T/zc/zdZ4Pn4u++37VJZuLB/fTm+10ru9+/Pfvbtf++c6tP+g///5Ltt/4avf+XOXqwIAh6C2sbk0U6mU145totFLPwLVkDiCiW/39APTNE0b+9QrfE4SR+FraSb6fWQCAAB67elJf79rAgAAAAAAAAAAAAAAAAAAAIPrMB4ntjfm1k4q6cUjtAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeuL9AAAA//+GAdlV") munlockall() kernel console output (not intermixed with test programs): 3146] ? __kfree_skb+0x102/0x150 [ 438.102843][T23146] ? consume_skb+0x57/0x180 [ 438.107372][T23146] ? nlmon_xmit+0x51/0x60 [ 438.111776][T23146] ? dev_hard_start_xmit+0x3c1/0x3f0 [ 438.117172][T23146] ? __dev_queue_xmit+0xb21/0x1e50 [ 438.122288][T23146] ? ref_tracker_free+0x3a5/0x410 [ 438.127429][T23146] netlink_rcv_skb+0x12c/0x230 [ 438.132322][T23146] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 438.137994][T23146] rtnetlink_rcv+0x1c/0x30 [ 438.142420][T23146] netlink_unicast+0x58d/0x660 [ 438.147266][T23146] netlink_sendmsg+0x5ca/0x6e0 [ 438.152147][T23146] ? __pfx_netlink_sendmsg+0x10/0x10 [ 438.157602][T23146] __sock_sendmsg+0x140/0x180 [ 438.162380][T23146] ____sys_sendmsg+0x312/0x410 [ 438.167170][T23146] __sys_sendmsg+0x1e9/0x280 [ 438.171778][T23146] __x64_sys_sendmsg+0x46/0x50 [ 438.176577][T23146] x64_sys_call+0xb25/0x2d70 [ 438.181267][T23146] do_syscall_64+0xc9/0x1c0 [ 438.185916][T23146] ? clear_bhb_loop+0x55/0xb0 [ 438.190628][T23146] ? clear_bhb_loop+0x55/0xb0 [ 438.195313][T23146] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 438.201221][T23146] RIP: 0033:0x7f4403319bd9 [ 438.205688][T23146] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 438.225399][T23146] RSP: 002b:00007f440259b048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 438.233884][T23146] RAX: ffffffffffffffda RBX: 00007f44034a7f60 RCX: 00007f4403319bd9 [ 438.241881][T23146] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000003 [ 438.249912][T23146] RBP: 00007f440259b0a0 R08: 0000000000000000 R09: 0000000000000000 [ 438.257927][T23146] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 438.265900][T23146] R13: 000000000000000b R14: 00007f44034a7f60 R15: 00007ffebe9cd368 [ 438.273882][T23146] [ 438.278884][T23146] workqueue: Failed to create a rescuer kthread for wq "bond1": -ENOMEM [ 438.291242][T23148] loop4: detected capacity change from 0 to 512 [ 438.315941][T23148] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 438.349947][T23148] ext4 filesystem being mounted at /62/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 438.382514][T23160] loop1: detected capacity change from 0 to 512 [ 438.399761][T23148] ebt_among: dst integrity fail: 101 [ 438.419818][T23160] EXT4-fs error (device loop1): ext4_acquire_dquot:6860: comm syz.1.5929: Failed to acquire dquot type 1 [ 438.457730][T23160] EXT4-fs (loop1): 1 truncate cleaned up [ 438.464048][T23171] loop3: detected capacity change from 0 to 2048 [ 438.466966][T23160] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 438.483151][T23160] ext4 filesystem being mounted at /238/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 438.494788][T22095] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 438.510918][T23171] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 438.525686][T23176] netlink: 'syz.0.5930': attribute type 3 has an invalid length. [ 438.533750][T23176] sctp: [Deprecated]: syz.0.5930 (pid 23176) Use of int in max_burst socket option. [ 438.533750][T23176] Use struct sctp_assoc_value instead [ 438.566109][T19739] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 438.604981][T19695] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 438.630261][T22852] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 438.649716][T23185] loop3: detected capacity change from 0 to 512 [ 438.659378][T23185] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 438.680422][T23182] loop1: detected capacity change from 0 to 1024 [ 438.687540][T23185] EXT4-fs (loop3): Remounting filesystem read-only [ 438.696154][T23185] EXT4-fs (loop3): 1 truncate cleaned up [ 438.702304][T23185] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 438.715051][T23185] SELinux: (dev loop3, type ext4) getxattr errno 5 [ 438.716978][T23192] gretap0: entered promiscuous mode [ 438.722276][T23185] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 438.748245][T23192] 0猉功D: renamed from gretap0 [ 438.754797][T23192] 0猉功D: left promiscuous mode [ 438.759751][T23192] 0猉功D: entered allmulticast mode [ 438.767238][T23192] A link change request failed with some changes committed already. Interface 30猉功D may have been left with an inconsistent configuration, please check. [ 438.797212][T23185] loop3: detected capacity change from 0 to 1024 [ 438.807899][T23185] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 438.839455][T23194] loop1: detected capacity change from 0 to 1024 [ 438.846403][T23194] ext4: Unknown parameter 'appraise_type' [ 438.890698][T23194] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16) [ 438.898821][T23194] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 438.987964][T23202] netlink: 'syz.1.5940': attribute type 10 has an invalid length. [ 439.054444][T23206] loop1: detected capacity change from 0 to 8192 [ 439.121011][T23213] tmpfs: Bad value for 'mpol' [ 439.185456][T23221] loop1: detected capacity change from 0 to 512 [ 439.193130][T23221] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 439.202840][T23221] EXT4-fs (loop1): Errors on filesystem, clearing orphan list. [ 439.210810][T23221] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 439.338214][T23224] EXT4-fs error (device loop1): ext4_map_blocks:580: inode #2: block 3: comm syz.1.5948: lblock 0 mapped to illegal pblock 3 (length 1) [ 439.352491][T23224] EXT4-fs warning (device loop1): dx_probe:822: inode #2: lblock 0: comm syz.1.5948: error -117 reading directory block [ 439.391118][T23224] syzkaller0: entered promiscuous mode [ 439.396679][T23224] syzkaller0: entered allmulticast mode [ 439.513582][T23234] netlink: 'syz.4.5953': attribute type 10 has an invalid length. [ 439.531697][T23234] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 439.561068][T23234] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 439.575951][T19695] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 439.639596][T23241] loop3: detected capacity change from 0 to 512 [ 439.691727][T23242] __nla_validate_parse: 10 callbacks suppressed [ 439.691747][T23242] netlink: 52 bytes leftover after parsing attributes in process `syz.2.5956'. [ 440.053692][T23270] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5963'. [ 440.155517][T19739] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 440.228612][T23275] FAULT_INJECTION: forcing a failure. [ 440.228612][T23275] name failslab, interval 1, probability 0, space 0, times 0 [ 440.241304][T23275] CPU: 1 PID: 23275 Comm: syz.1.5965 Not tainted 6.10.0-rc6-syzkaller-00067-g8a9c6c40432e #0 [ 440.251486][T23275] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 440.261565][T23275] Call Trace: [ 440.264859][T23275] [ 440.267890][T23275] dump_stack_lvl+0xf2/0x150 [ 440.272523][T23275] dump_stack+0x15/0x20 [ 440.276765][T23275] should_fail_ex+0x229/0x230 [ 440.281543][T23275] ? __alloc_skb+0x10b/0x300 [ 440.286179][T23275] __should_failslab+0x92/0xa0 [ 440.290990][T23275] should_failslab+0x9/0x20 [ 440.295511][T23275] kmem_cache_alloc_node_noprof+0x51/0x2b0 [ 440.301349][T23275] __alloc_skb+0x10b/0x300 [ 440.305841][T23275] netlink_alloc_large_skb+0xad/0xe0 [ 440.311162][T23275] netlink_sendmsg+0x3b4/0x6e0 [ 440.315961][T23275] ? __pfx_netlink_sendmsg+0x10/0x10 [ 440.321361][T23275] __sock_sendmsg+0x140/0x180 [ 440.326074][T23275] ____sys_sendmsg+0x312/0x410 [ 440.330932][T23275] __sys_sendmsg+0x1e9/0x280 [ 440.335548][T23275] __x64_sys_sendmsg+0x46/0x50 [ 440.340399][T23275] x64_sys_call+0xb25/0x2d70 [ 440.345013][T23275] do_syscall_64+0xc9/0x1c0 [ 440.349557][T23275] ? clear_bhb_loop+0x55/0xb0 [ 440.354313][T23275] ? clear_bhb_loop+0x55/0xb0 [ 440.359068][T23275] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 440.365020][T23275] RIP: 0033:0x7f4403319bd9 [ 440.369516][T23275] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 440.389161][T23275] RSP: 002b:00007f440259b048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 440.397652][T23275] RAX: ffffffffffffffda RBX: 00007f44034a7f60 RCX: 00007f4403319bd9 [ 440.405642][T23275] RDX: 0000000000000000 RSI: 0000000020000600 RDI: 0000000000000004 [ 440.413659][T23275] RBP: 00007f440259b0a0 R08: 0000000000000000 R09: 0000000000000000 [ 440.421702][T23275] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 440.429762][T23275] R13: 000000000000000b R14: 00007f44034a7f60 R15: 00007ffebe9cd368 [ 440.437762][T23275] [ 440.439696][T23277] netlink: 9 bytes leftover after parsing attributes in process `syz.3.5966'. [ 440.450667][T23277] 0猉功D: entered promiscuous mode [ 440.455860][T23277] 0猉功D: left allmulticast mode [ 440.467406][T23277] netlink: 5 bytes leftover after parsing attributes in process `syz.3.5966'. [ 440.478887][T23277] 1猉功D: renamed from 30猉功D [ 440.486220][T23277] 1猉功D: left promiscuous mode [ 440.491219][T23277] 1猉功D: entered allmulticast mode [ 440.497968][T23277] A link change request failed with some changes committed already. Interface 31猉功D may have been left with an inconsistent configuration, please check. [ 440.606763][T23291] loop2: detected capacity change from 0 to 512 [ 440.615367][T23291] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2234: inode #12: comm syz.2.5971: corrupted in-inode xattr: invalid ea_ino [ 440.629448][T23291] EXT4-fs error (device loop2): ext4_orphan_get:1399: comm syz.2.5971: couldn't read orphan inode 12 (err -117) [ 440.641977][T23291] EXT4-fs (loop2): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 440.663406][T23294] loop4: detected capacity change from 0 to 512 [ 440.671406][T23294] EXT4-fs error (device loop4): ext4_clear_blocks:883: inode #13: comm syz.4.5970: attempt to clear invalid blocks 1 len 1 [ 440.685059][T23294] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.5970: bg 0: block 125: padding at end of block bitmap is not set [ 440.701574][T23294] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 440.710860][T23294] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.5970: invalid indirect mapped block 1819239214 (level 0) [ 440.727393][T23294] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.5970: invalid indirect mapped block 1819239214 (level 1) [ 440.742406][T23294] EXT4-fs (loop4): 1 truncate cleaned up [ 440.748533][T23294] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 440.767324][T22852] EXT4-fs (loop2): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 440.910280][T23309] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5973'. [ 440.921683][T23310] loop2: detected capacity change from 0 to 164 [ 441.006860][T23316] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 441.018979][T23316] xt_connbytes: Forcing CT accounting to be enabled [ 441.025940][T23316] Cannot find add_set index 0 as target [ 441.102797][T23320] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5976'. [ 441.112148][T23320] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5976'. [ 441.474765][T23322] loop3: detected capacity change from 0 to 2048 [ 441.493073][T22095] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 441.500833][T23322] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 441.515592][T23322] netlink: 232 bytes leftover after parsing attributes in process `syz.3.5977'. [ 441.525140][T23322] netlink: 72 bytes leftover after parsing attributes in process `syz.3.5977'. [ 441.570784][T19695] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 441.647602][T23334] loop3: detected capacity change from 0 to 256 [ 441.660707][T23338] netlink: 84 bytes leftover after parsing attributes in process `syz.1.5982'. [ 441.687370][T23343] loop1: detected capacity change from 0 to 512 [ 441.694721][T23343] /dev/loop1: Can't open blockdev [ 441.811833][T23348] loop4: detected capacity change from 0 to 2048 [ 441.827453][T23350] 1猉功D: entered promiscuous mode [ 441.832627][T23350] 1猉功D: left allmulticast mode [ 441.841274][T23350] 0猉功D: renamed from 31猉功D [ 441.848451][T23350] 0猉功D: left promiscuous mode [ 441.853486][T23350] 0猉功D: entered allmulticast mode [ 441.859149][T23348] loop4: p1 p2 < > p3 p4 < p5 > [ 441.861732][T23350] A link change request failed with some changes committed already. Interface 30猉功D may have been left with an inconsistent configuration, please check. [ 441.864088][T23348] loop4: partition table partially beyond EOD, truncated [ 441.887730][T23348] loop4: p1 start 2305 is beyond EOD, truncated [ 441.888157][ T29] kauditd_printk_skb: 38 callbacks suppressed [ 441.888174][ T29] audit: type=1326 audit(1720044063.606:2363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23349 comm="syz.3.5987" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd461395bd9 code=0x0 [ 441.894048][T23348] loop4: p2 start 4294902784 is beyond EOD, truncated [ 441.930274][T23348] loop4: p3 start 4278191616 is beyond EOD, truncated [ 441.938190][T23348] loop4: p5 start 2305 is beyond EOD, truncated [ 441.963483][T23352] loop2: detected capacity change from 0 to 512 [ 442.028218][T23364] loop4: detected capacity change from 0 to 128 [ 442.053203][T23366] loop2: detected capacity change from 0 to 512 [ 442.064418][T23366] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 442.077720][T23366] ext4 filesystem being mounted at /20/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 442.096392][T23366] ebt_among: dst integrity fail: 101 [ 442.144184][T22852] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 442.252244][T23375] loop4: detected capacity change from 0 to 2048 [ 442.272074][T23375] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 442.306069][T23380] loop2: detected capacity change from 0 to 256 [ 442.329894][T22095] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 442.426104][T23387] loop4: detected capacity change from 0 to 8192 [ 442.454021][T23389] loop2: detected capacity change from 0 to 8192 [ 442.464305][T23389] FAULT_INJECTION: forcing a failure. [ 442.464305][T23389] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 442.477552][T23389] CPU: 1 PID: 23389 Comm: syz.2.6001 Not tainted 6.10.0-rc6-syzkaller-00067-g8a9c6c40432e #0 [ 442.487758][T23389] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 442.497859][T23389] Call Trace: [ 442.501141][T23389] [ 442.504074][T23389] dump_stack_lvl+0xf2/0x150 [ 442.508684][T23389] dump_stack+0x15/0x20 [ 442.512932][T23389] should_fail_ex+0x229/0x230 [ 442.517674][T23389] __should_fail_alloc_page+0xfd/0x110 [ 442.523156][T23389] __alloc_pages_noprof+0x109/0x360 [ 442.528388][T23389] alloc_pages_mpol_noprof+0xb1/0x1e0 [ 442.533789][T23389] folio_alloc_noprof+0xee/0x130 [ 442.538817][T23389] filemap_alloc_folio_noprof+0x69/0x220 [ 442.544465][T23389] __filemap_get_folio+0x298/0x5b0 [ 442.549651][T23389] pagecache_get_page+0x2a/0xa0 [ 442.554507][T23389] ? __pfx_fat_get_block+0x10/0x10 [ 442.559644][T23389] grab_cache_page_write_begin+0x2e/0x40 [ 442.565414][T23389] block_write_begin+0x31/0x170 [ 442.570354][T23389] cont_write_begin+0x486/0x6b0 [ 442.575213][T23389] fat_write_begin+0x61/0xf0 [ 442.579817][T23389] ? __pfx_fat_get_block+0x10/0x10 [ 442.584947][T23389] cont_write_begin+0x186/0x6b0 [ 442.589803][T23389] fat_write_begin+0x61/0xf0 [ 442.594453][T23389] ? __pfx_fat_get_block+0x10/0x10 [ 442.599776][T23389] generic_cont_expand_simple+0xaa/0x150 [ 442.605487][T23389] fat_cont_expand+0x3a/0x160 [ 442.610179][T23389] fat_fallocate+0x182/0x1d0 [ 442.614906][T23389] vfs_fallocate+0x380/0x3e0 [ 442.619544][T23389] __x64_sys_fallocate+0x79/0xc0 [ 442.624545][T23389] x64_sys_call+0x27b3/0x2d70 [ 442.629242][T23389] do_syscall_64+0xc9/0x1c0 [ 442.633770][T23389] ? clear_bhb_loop+0x55/0xb0 [ 442.638463][T23389] ? clear_bhb_loop+0x55/0xb0 [ 442.643225][T23389] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 442.649131][T23389] RIP: 0033:0x7f37bb110bd9 [ 442.653548][T23389] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 442.673250][T23389] RSP: 002b:00007f37ba392048 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 442.681756][T23389] RAX: ffffffffffffffda RBX: 00007f37bb29ef60 RCX: 00007f37bb110bd9 [ 442.689757][T23389] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 442.697748][T23389] RBP: 00007f37ba3920a0 R08: 0000000000000000 R09: 0000000000000000 [ 442.706017][T23389] R10: 00000000001000f4 R11: 0000000000000246 R12: 0000000000000002 [ 442.714013][T23389] R13: 000000000000000b R14: 00007f37bb29ef60 R15: 00007ffde11c0798 [ 442.722011][T23389] [ 442.808882][T23399] loop4: detected capacity change from 0 to 128 [ 442.813357][T23400] loop3: detected capacity change from 0 to 512 [ 442.836054][T23400] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 442.849458][T23400] ext4 filesystem being mounted at /262/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 442.903713][T23418] loop1: detected capacity change from 0 to 512 [ 442.913649][T23418] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 442.946878][T23400] ebt_among: dst integrity fail: 101 [ 442.952547][T23418] EXT4-fs (loop1): Remounting filesystem read-only [ 442.980646][T23418] EXT4-fs (loop1): 1 truncate cleaned up [ 442.999489][T23418] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 443.020911][T23418] SELinux: (dev loop1, type ext4) getxattr errno 5 [ 443.039914][T23418] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 443.041200][T23422] FAULT_INJECTION: forcing a failure. [ 443.041200][T23422] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 443.062200][T23422] CPU: 0 PID: 23422 Comm: syz.2.6014 Not tainted 6.10.0-rc6-syzkaller-00067-g8a9c6c40432e #0 [ 443.072461][T23422] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 443.082582][T23422] Call Trace: [ 443.085902][T23422] [ 443.088851][T23422] dump_stack_lvl+0xf2/0x150 [ 443.093481][T23422] dump_stack+0x15/0x20 [ 443.097715][T23422] should_fail_ex+0x229/0x230 [ 443.102425][T23422] should_fail+0xb/0x10 [ 443.106715][T23422] should_fail_usercopy+0x1a/0x20 [ 443.111751][T23422] _copy_to_user+0x1e/0xa0 [ 443.116227][T23422] simple_read_from_buffer+0xa0/0x110 [ 443.121689][T23422] proc_fail_nth_read+0xfc/0x140 [ 443.126779][T23422] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 443.132348][T23422] vfs_read+0x1a2/0x6e0 [ 443.136602][T23422] ? __rcu_read_unlock+0x4e/0x70 [ 443.141642][T23422] ? __fget_files+0x1da/0x210 [ 443.146333][T23422] ksys_read+0xeb/0x1b0 [ 443.150534][T23422] __x64_sys_read+0x42/0x50 [ 443.155091][T23422] x64_sys_call+0x27e5/0x2d70 [ 443.159808][T23422] do_syscall_64+0xc9/0x1c0 [ 443.164418][T23422] ? clear_bhb_loop+0x55/0xb0 [ 443.169114][T23422] ? clear_bhb_loop+0x55/0xb0 [ 443.173835][T23422] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 443.179750][T23422] RIP: 0033:0x7f37bb10f6bc [ 443.184249][T23422] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 1f 8d 02 00 48 [ 443.203872][T23422] RSP: 002b:00007f37ba392040 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 443.212287][T23422] RAX: ffffffffffffffda RBX: 00007f37bb29ef60 RCX: 00007f37bb10f6bc [ 443.220319][T23422] RDX: 000000000000000f RSI: 00007f37ba3920b0 RDI: 0000000000000004 [ 443.228364][T23422] RBP: 00007f37ba3920a0 R08: 0000000000000000 R09: 0000000000000000 [ 443.236336][T23422] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 443.244310][T23422] R13: 000000000000000b R14: 00007f37bb29ef60 R15: 00007ffde11c0798 [ 443.252287][T23422] [ 443.259917][T19695] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 443.282646][T23433] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 443.337619][T23418] loop1: detected capacity change from 0 to 1024 [ 443.351237][T23439] loop4: detected capacity change from 0 to 128 [ 443.372510][T23418] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 443.424289][T23447] loop2: detected capacity change from 0 to 512 [ 443.437308][T23447] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 443.450831][T23449] loop4: detected capacity change from 0 to 128 [ 443.471683][T23447] EXT4-fs (loop2): orphan cleanup on readonly fs [ 443.483093][T23447] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.6023: bg 0: block 248: padding at end of block bitmap is not set [ 443.500952][T23447] Quota error (device loop2): write_blk: dquota write failed [ 443.508426][T23447] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 443.518404][T23447] EXT4-fs error (device loop2): ext4_acquire_dquot:6860: comm syz.2.6023: Failed to acquire dquot type 1 [ 443.531192][T23447] EXT4-fs (loop2): 1 truncate cleaned up [ 443.539436][T23447] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 443.578059][T22852] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 443.705109][T23467] loop3: detected capacity change from 0 to 512 [ 443.734718][T23467] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 443.747393][T23467] ext4 filesystem being mounted at /266/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 443.828609][T23467] loop3: detected capacity change from 512 to 0 [ 443.835357][T23467] bio_check_eod: 34 callbacks suppressed [ 443.835386][T23467] syz.3.6031: attempt to access beyond end of device [ 443.835386][T23467] loop3: rw=12288, sector=84, nr_sectors = 4 limit=0 [ 443.860378][T23467] syz.3.6031: attempt to access beyond end of device [ 443.860378][T23467] loop3: rw=12288, sector=80, nr_sectors = 4 limit=0 [ 443.876059][T23467] Quota error (device loop3): qtree_write_dquot: dquota write failed [ 443.884270][T23467] EXT4-fs error (device loop3): ext4_write_dquot:6840: comm syz.3.6031: Failed to commit dquot type 1 [ 443.895998][T23467] syz.3.6031: attempt to access beyond end of device [ 443.895998][T23467] loop3: rw=14337, sector=0, nr_sectors = 4 limit=0 [ 443.909225][T23467] Buffer I/O error on dev loop3, logical block 0, lost sync page write [ 443.917823][T23467] EXT4-fs (loop3): I/O error while writing superblock [ 443.925175][T23480] syz.3.6031: attempt to access beyond end of device [ 443.925175][T23480] loop3: rw=12288, sector=12, nr_sectors = 4 limit=0 [ 443.938766][T23467] syz.3.6031: attempt to access beyond end of device [ 443.938766][T23467] loop3: rw=524288, sector=136, nr_sectors = 4 limit=0 [ 443.945688][T23479] loop2: detected capacity change from 0 to 512 [ 443.958822][T23480] EXT4-fs error (device loop3): __ext4_find_entry:1684: inode #2: comm syz.3.6031: reading directory lblock 0 [ 443.964014][T23467] syz.3.6031: attempt to access beyond end of device [ 443.964014][T23467] loop3: rw=524288, sector=144, nr_sectors = 4 limit=0 [ 443.984755][T23480] syz.3.6031: attempt to access beyond end of device [ 443.984755][T23480] loop3: rw=14337, sector=0, nr_sectors = 4 limit=0 [ 443.986341][T23479] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2234: inode #12: comm syz.2.6034: corrupted in-inode xattr: invalid ea_ino [ 443.997930][T23480] Buffer I/O error on dev loop3, logical block 0, lost sync page write [ 443.998028][T23480] EXT4-fs (loop3): I/O error while writing superblock [ 444.014741][T23479] EXT4-fs error (device loop2): ext4_orphan_get:1399: comm syz.2.6034: couldn't read orphan inode 12 (err -117) [ 444.038823][T23467] syz.3.6031: attempt to access beyond end of device [ 444.038823][T23467] loop3: rw=12288, sector=140, nr_sectors = 4 limit=0 [ 444.054240][T23467] EXT4-fs error (device loop3): ext4_get_inode_loc:4495: inode #19: block 35: comm syz.3.6031: unable to read itable block [ 444.067269][T23467] syz.3.6031: attempt to access beyond end of device [ 444.067269][T23467] loop3: rw=14337, sector=0, nr_sectors = 4 limit=0 [ 444.080509][T23467] Buffer I/O error on dev loop3, logical block 0, lost sync page write [ 444.088838][T23467] EXT4-fs (loop3): I/O error while writing superblock [ 444.095687][T23467] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5731: IO failure [ 444.104502][T23467] syz.3.6031: attempt to access beyond end of device [ 444.104502][T23467] loop3: rw=14337, sector=0, nr_sectors = 4 limit=0 [ 444.117709][T23467] Buffer I/O error on dev loop3, logical block 0, lost sync page write [ 444.126318][T23467] EXT4-fs (loop3): I/O error while writing superblock [ 444.133242][T23467] EXT4-fs error (device loop3): ext4_ext_truncate:4432: inode #19: comm syz.3.6031: mark_inode_dirty error [ 444.145072][T23467] Buffer I/O error on dev loop3, logical block 0, lost sync page write [ 444.153450][T23467] EXT4-fs (loop3): I/O error while writing superblock [ 444.160275][T23467] EXT4-fs error (device loop3): ext4_get_inode_loc:4495: inode #19: block 35: comm syz.3.6031: unable to read itable block [ 444.173252][T23467] Buffer I/O error on dev loop3, logical block 0, lost sync page write [ 444.181859][T23467] EXT4-fs (loop3): I/O error while writing superblock [ 444.188738][T23467] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5731: IO failure [ 444.197806][T23467] Buffer I/O error on dev loop3, logical block 0, lost sync page write [ 444.206947][T23467] EXT4-fs (loop3): I/O error while writing superblock [ 444.213866][T23467] EXT4-fs error (device loop3): ext4_truncate:4162: inode #19: comm syz.3.6031: mark_inode_dirty error [ 444.233720][T23467] Buffer I/O error on dev loop3, logical block 0, lost sync page write [ 444.242094][T23467] EXT4-fs (loop3): I/O error while writing superblock [ 444.257358][T19695] EXT4-fs error (device loop3): ext4_get_inode_loc:4495: inode #2: block 34: comm syz-executor: unable to read itable block [ 444.270677][T19695] Buffer I/O error on dev loop3, logical block 0, lost sync page write [ 444.279364][T19695] EXT4-fs (loop3): I/O error while writing superblock [ 444.286280][T19695] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5731: IO failure [ 444.298033][T19695] Buffer I/O error on dev loop3, logical block 0, lost sync page write [ 444.403832][T23509] loop2: detected capacity change from 0 to 512 [ 444.412034][T23509] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 444.426802][T23509] EXT4-fs (loop2): Remounting filesystem read-only [ 444.433477][T23509] EXT4-fs (loop2): 1 truncate cleaned up [ 444.439682][T23509] SELinux: (dev loop2, type ext4) getxattr errno 5 [ 444.542257][T23509] loop2: detected capacity change from 0 to 1024 [ 444.570855][T11351] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 444.631988][ T29] audit: type=1400 audit(1720044066.144:2364): avc: denied { open } for pid=23518 comm="syz.4.6047" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=94083 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 444.666617][T11351] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 444.725563][T11351] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 444.753154][T11351] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 444.824517][T23520] chnl_net:caif_netlink_parms(): no params data found [ 444.852953][T11351] bridge_slave_1: left allmulticast mode [ 444.858825][T11351] bridge_slave_1: left promiscuous mode [ 444.864604][T11351] bridge0: port 2(bridge_slave_1) entered disabled state [ 444.872451][T11351] bridge_slave_0: left allmulticast mode [ 444.878182][T11351] bridge_slave_0: left promiscuous mode [ 444.883892][T11351] bridge0: port 1(bridge_slave_0) entered disabled state [ 444.990794][T11351] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 445.001895][T11351] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 445.012849][T11351] bond0 (unregistering): Released all slaves [ 445.022944][T11351] bond1 (unregistering): (slave lo): Releasing active interface [ 445.031724][T11351] bond1 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 445.045200][T11351] bond1 (unregistering): Released all slaves [ 445.072082][T23520] bridge0: port 1(bridge_slave_0) entered blocking state [ 445.079362][T23520] bridge0: port 1(bridge_slave_0) entered disabled state [ 445.086772][T23520] bridge_slave_0: entered allmulticast mode [ 445.093553][T23520] bridge_slave_0: entered promiscuous mode [ 445.100862][T23520] bridge0: port 2(bridge_slave_1) entered blocking state [ 445.108052][T23520] bridge0: port 2(bridge_slave_1) entered disabled state [ 445.115456][T23520] bridge_slave_1: entered allmulticast mode [ 445.122063][T23520] bridge_slave_1: entered promiscuous mode [ 445.145050][T23520] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 445.156574][T11351] hsr_slave_0: left promiscuous mode [ 445.164872][T11351] hsr_slave_1: left promiscuous mode [ 445.170712][T11351] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 445.178304][T11351] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 445.186113][T11351] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 445.193673][T11351] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 445.204380][T11351] veth1_macvtap: left promiscuous mode [ 445.210010][T11351] veth0_macvtap: left promiscuous mode [ 445.215631][T11351] veth1_vlan: left promiscuous mode [ 445.220944][T11351] veth0_vlan: left allmulticast mode [ 445.226270][T11351] veth0_vlan: left promiscuous mode [ 445.323986][T11351] team0 (unregistering): Port device team_slave_1 removed [ 445.334951][T11351] team0 (unregistering): Port device team_slave_0 removed [ 445.354299][T23563] __nla_validate_parse: 13 callbacks suppressed [ 445.354315][T23563] netlink: 232 bytes leftover after parsing attributes in process `syz.2.6058'. [ 445.369784][T23563] netlink: 72 bytes leftover after parsing attributes in process `syz.2.6058'. [ 445.379262][T11351] team0 (unregistering): Port device batadv0 removed [ 445.403061][T23520] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 445.418142][T23561] gre0: Master is either lo or non-ether device [ 445.430090][T23565] FAULT_INJECTION: forcing a failure. [ 445.430090][T23565] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 445.443287][T23565] CPU: 0 PID: 23565 Comm: syz.2.6059 Not tainted 6.10.0-rc6-syzkaller-00067-g8a9c6c40432e #0 [ 445.453524][T23565] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 445.463675][T23565] Call Trace: [ 445.467016][T23565] [ 445.469982][T23565] dump_stack_lvl+0xf2/0x150 [ 445.474594][T23565] dump_stack+0x15/0x20 [ 445.478773][T23565] should_fail_ex+0x229/0x230 [ 445.483509][T23565] should_fail+0xb/0x10 [ 445.487748][T23565] should_fail_usercopy+0x1a/0x20 [ 445.492780][T23565] _copy_to_iter+0x246/0xaf0 [ 445.497444][T23565] ? __virt_addr_valid+0x1dd/0x240 [ 445.502598][T23565] ? __check_object_size+0x35b/0x510 [ 445.507905][T23565] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 445.513797][T23565] __skb_datagram_iter+0xd2/0x5d0 [ 445.518854][T23565] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 445.524498][T23565] skb_copy_datagram_iter+0x41/0x130 [ 445.529838][T23565] netlink_recvmsg+0x1a4/0x780 [ 445.534628][T23565] ? __pfx_netlink_recvmsg+0x10/0x10 [ 445.540061][T23565] sock_recvmsg+0x13f/0x170 [ 445.544607][T23565] ____sys_recvmsg+0xf9/0x280 [ 445.549304][T23565] do_recvmmsg+0x2eb/0x720 [ 445.553780][T23565] __x64_sys_recvmmsg+0xf9/0x170 [ 445.558788][T23565] x64_sys_call+0x271d/0x2d70 [ 445.563583][T23565] do_syscall_64+0xc9/0x1c0 [ 445.568112][T23565] ? clear_bhb_loop+0x55/0xb0 [ 445.572802][T23565] ? clear_bhb_loop+0x55/0xb0 [ 445.577496][T23565] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 445.583578][T23565] RIP: 0033:0x7f37bb110bd9 [ 445.588029][T23565] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 445.607701][T23565] RSP: 002b:00007f37ba392048 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 445.616178][T23565] RAX: ffffffffffffffda RBX: 00007f37bb29ef60 RCX: 00007f37bb110bd9 [ 445.624244][T23565] RDX: 04000000000003b4 RSI: 00000000200037c0 RDI: 0000000000000003 [ 445.632223][T23565] RBP: 00007f37ba3920a0 R08: 0000000020003700 R09: 0000000000000000 [ 445.640201][T23565] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 445.648176][T23565] R13: 000000000000000b R14: 00007f37bb29ef60 R15: 00007ffde11c0798 [ 445.656234][T23565] [ 445.666754][T23520] team0: Port device team_slave_0 added [ 445.675956][T23520] team0: Port device team_slave_1 added [ 445.709073][T23520] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 445.716105][T23520] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 445.742328][T23520] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 445.773082][T23567] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=23567 comm=syz.1.6060 [ 445.781347][T23520] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 445.792930][T23520] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 445.819275][T23520] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 445.860315][T23581] loop4: detected capacity change from 0 to 512 [ 445.868637][T23520] hsr_slave_0: entered promiscuous mode [ 445.875364][T23581] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 445.889392][T23581] EXT4-fs (loop4): orphan cleanup on readonly fs [ 445.892106][T23585] loop2: detected capacity change from 0 to 1024 [ 445.896559][T23581] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.6065: bg 0: block 248: padding at end of block bitmap is not set [ 445.910258][T23520] hsr_slave_1: entered promiscuous mode [ 445.924282][T23581] Quota error (device loop4): write_blk: dquota write failed [ 445.931802][T23581] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 445.941851][T23581] EXT4-fs error (device loop4): ext4_acquire_dquot:6860: comm syz.4.6065: Failed to acquire dquot type 1 [ 445.961957][T23585] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (24866!=20869) [ 445.971809][T23585] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 445.975847][T23581] EXT4-fs (loop4): 1 truncate cleaned up [ 445.992722][T23585] EXT4-fs (loop2): invalid journal inode [ 446.017470][T23582] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6064'. [ 446.067369][T23592] loop1: detected capacity change from 0 to 512 [ 446.081684][T23592] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 446.099609][T23594] netlink: 232 bytes leftover after parsing attributes in process `syz.4.6068'. [ 446.106296][T23592] EXT4-fs (loop1): Remounting filesystem read-only [ 446.108719][T23594] netlink: 72 bytes leftover after parsing attributes in process `syz.4.6068'. [ 446.120463][T23592] EXT4-fs (loop1): 1 truncate cleaned up [ 446.130337][T23598] wireguard0: entered promiscuous mode [ 446.130448][T23592] SELinux: (dev loop1, type ext4) getxattr errno 5 [ 446.136165][T23598] wireguard0: entered allmulticast mode [ 446.179219][T23601] loop4: detected capacity change from 0 to 512 [ 446.186699][T23601] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 446.205398][T23602] loop2: detected capacity change from 0 to 512 [ 446.205901][T23601] EXT4-fs (loop4): orphan cleanup on readonly fs [ 446.221870][T23602] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 446.225501][T23592] loop1: detected capacity change from 0 to 1024 [ 446.231044][T23602] EXT4-fs (loop2): Couldn't mount because of unsupported optional features (800) [ 446.233677][T23601] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.6070: bg 0: block 248: padding at end of block bitmap is not set [ 446.261517][T23601] Quota error (device loop4): write_blk: dquota write failed [ 446.268964][T23601] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 446.279153][T23601] EXT4-fs error (device loop4): ext4_acquire_dquot:6860: comm syz.4.6070: Failed to acquire dquot type 1 [ 446.291045][T23601] EXT4-fs (loop4): 1 truncate cleaned up [ 446.388961][T23520] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 446.398473][T23520] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 446.412787][T23520] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 446.423905][T23520] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 446.458648][T23614] loop4: detected capacity change from 0 to 128 [ 446.489114][T23520] 8021q: adding VLAN 0 to HW filter on device bond0 [ 446.501463][T23520] 8021q: adding VLAN 0 to HW filter on device team0 [ 446.513693][ T3593] bridge0: port 1(bridge_slave_0) entered blocking state [ 446.520972][ T3593] bridge0: port 1(bridge_slave_0) entered forwarding state [ 446.532710][ T3593] bridge0: port 2(bridge_slave_1) entered blocking state [ 446.539865][ T3593] bridge0: port 2(bridge_slave_1) entered forwarding state [ 446.566806][T23520] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 446.577251][T23520] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 446.628744][T23625] loop4: detected capacity change from 0 to 512 [ 446.636125][T23625] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 446.646247][T23625] EXT4-fs (loop4): orphan cleanup on readonly fs [ 446.654740][T23625] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.6077: bg 0: block 248: padding at end of block bitmap is not set [ 446.670802][T23625] Quota error (device loop4): write_blk: dquota write failed [ 446.675999][T23520] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 446.678357][T23625] EXT4-fs error (device loop4): ext4_acquire_dquot:6860: comm syz.4.6077: Failed to acquire dquot type 1 [ 446.680563][T23625] EXT4-fs (loop4): 1 truncate cleaned up [ 446.757409][T23636] netlink: 232 bytes leftover after parsing attributes in process `syz.0.6079'. [ 446.766654][T23636] netlink: 72 bytes leftover after parsing attributes in process `syz.0.6079'. [ 446.768531][T23520] veth0_vlan: entered promiscuous mode [ 446.785689][T23520] veth1_vlan: entered promiscuous mode [ 446.816596][T23520] veth0_macvtap: entered promiscuous mode [ 446.818113][T23641] loop4: detected capacity change from 0 to 512 [ 446.826543][T23520] veth1_macvtap: entered promiscuous mode [ 446.839285][T23642] wireguard0: entered promiscuous mode [ 446.843931][T23641] ext4 filesystem being mounted at /97/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 446.844949][T23642] wireguard0: entered allmulticast mode [ 446.882897][T23520] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 446.893560][T23520] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 446.903478][T23520] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 446.914033][T23520] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 446.924172][T23520] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 446.934658][T23520] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 446.944570][T23520] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 446.955205][T23520] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 446.965118][T23520] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 446.975586][T23520] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 446.985521][T23520] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 446.995991][T23520] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 447.005846][T23520] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 447.016271][T23520] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 447.026130][T23520] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 447.036674][T23520] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 447.047854][T23520] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 447.056931][T23520] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 447.067522][T23520] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 447.077652][T23520] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 447.088353][T23520] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 447.098314][T23520] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 447.108824][T23520] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 447.118668][T23520] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 447.129188][T23520] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 447.139016][T23520] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 447.149500][T23520] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 447.159365][T23520] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 447.169903][T23520] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 447.179812][T23520] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 447.190253][T23520] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 447.200080][T23520] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 447.210583][T23520] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 447.223993][T23520] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 447.239753][T23520] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 447.248725][T23520] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 447.257558][T23520] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 447.266361][T23520] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 447.325040][T23651] loop4: detected capacity change from 0 to 128 [ 447.346740][T23655] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 447.364666][T23654] loop2: detected capacity change from 0 to 128 [ 447.436561][T23667] netlink: 232 bytes leftover after parsing attributes in process `syz.1.6089'. [ 447.445654][T23667] netlink: 72 bytes leftover after parsing attributes in process `syz.1.6089'. [ 447.500198][T23676] loop2: detected capacity change from 0 to 512 [ 447.563902][T23676] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 447.596160][T23745] loop3: detected capacity change from 0 to 512 [ 447.607250][T23676] EXT4-fs (loop2): orphan cleanup on readonly fs [ 447.607448][T23669] loop4: detected capacity change from 0 to 8192 [ 447.617983][T23676] __quota_error: 1 callbacks suppressed [ 447.618001][T23676] Quota error (device loop2): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 447.642750][T23745] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 447.656143][T23748] loop1: detected capacity change from 0 to 512 [ 447.657592][T23676] EXT4-fs warning (device loop2): ext4_enable_quotas:7078: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 447.678551][T23745] EXT4-fs (loop3): Remounting filesystem read-only [ 447.685387][T23745] EXT4-fs (loop3): 1 truncate cleaned up [ 447.691307][T23676] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 447.696781][T23745] SELinux: (dev loop3, type ext4) getxattr errno 5 [ 447.713519][T23676] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.6090: bg 0: block 40: padding at end of block bitmap is not set [ 447.735320][T23748] ext4 filesystem being mounted at /271/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 447.737102][T23676] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 447.766909][T23676] EXT4-fs (loop2): 1 truncate cleaned up [ 447.802696][T23745] loop3: detected capacity change from 0 to 1024 [ 448.009780][T23763] netlink: 72 bytes leftover after parsing attributes in process `syz.4.6095'. [ 448.035146][T23765] loop4: detected capacity change from 0 to 512 [ 448.045096][T23765] ext4 filesystem being mounted at /102/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 448.100115][T23774] loop2: detected capacity change from 0 to 2048 [ 448.141199][T23774] loop2: p1 < > p4 [ 448.145679][T23774] loop2: p4 size 8388608 extends beyond EOD, truncated [ 448.175742][T23776] ebt_among: dst integrity fail: 101 [ 448.207214][T23780] loop2: detected capacity change from 0 to 128 [ 448.265921][T23782] loop2: detected capacity change from 0 to 128 [ 448.366142][T23788] loop2: detected capacity change from 0 to 512 [ 448.384923][T23788] ext4 filesystem being mounted at /54/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 448.654547][T23803] loop2: detected capacity change from 0 to 256 [ 448.664995][T23810] wireguard0: entered promiscuous mode [ 448.670269][T23808] loop3: detected capacity change from 0 to 8192 [ 448.670499][T23810] wireguard0: entered allmulticast mode [ 448.705289][T23808] loop3: p1 p2 p3 [ 448.707945][T23803] loop2: detected capacity change from 0 to 512 [ 448.765560][T23814] loop3: detected capacity change from 0 to 128 [ 448.793054][T23818] FAULT_INJECTION: forcing a failure. [ 448.793054][T23818] name failslab, interval 1, probability 0, space 0, times 0 [ 448.805784][T23818] CPU: 1 PID: 23818 Comm: syz.0.6116 Not tainted 6.10.0-rc6-syzkaller-00067-g8a9c6c40432e #0 [ 448.816156][T23818] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 448.826264][T23818] Call Trace: [ 448.829566][T23818] [ 448.832579][T23818] dump_stack_lvl+0xf2/0x150 [ 448.837200][T23818] dump_stack+0x15/0x20 [ 448.841373][T23818] should_fail_ex+0x229/0x230 [ 448.846164][T23818] ? vm_area_dup+0x98/0x130 [ 448.850679][T23818] __should_failslab+0x92/0xa0 [ 448.855516][T23818] should_failslab+0x9/0x20 [ 448.860076][T23818] kmem_cache_alloc_noprof+0x4c/0x290 [ 448.865494][T23818] vm_area_dup+0x98/0x130 [ 448.869868][T23818] __split_vma+0xf7/0x690 [ 448.874308][T23818] do_vmi_align_munmap+0x227/0xa60 [ 448.879463][T23818] do_vmi_munmap+0x1fb/0x250 [ 448.884106][T23818] mmap_region+0x52a/0x1620 [ 448.888638][T23818] ? security_mmap_addr+0x4c/0x70 [ 448.893798][T23818] ? __get_unmapped_area+0x2d1/0x300 [ 448.899156][T23818] do_mmap+0x6f9/0xb10 [ 448.903268][T23818] ? security_mmap_file+0x128/0x150 [ 448.908608][T23818] vm_mmap_pgoff+0x133/0x290 [ 448.913249][T23818] ksys_mmap_pgoff+0x292/0x340 [ 448.918104][T23818] x64_sys_call+0x1835/0x2d70 [ 448.922870][T23818] do_syscall_64+0xc9/0x1c0 [ 448.927401][T23818] ? clear_bhb_loop+0x55/0xb0 [ 448.932114][T23818] ? clear_bhb_loop+0x55/0xb0 [ 448.936828][T23818] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 448.942832][T23818] RIP: 0033:0x7fced8fd9bd9 [ 448.947252][T23818] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 448.966873][T23818] RSP: 002b:00007fced825b048 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 448.975292][T23818] RAX: ffffffffffffffda RBX: 00007fced9167f60 RCX: 00007fced8fd9bd9 [ 448.983288][T23818] RDX: 0000000000000000 RSI: 0000000000400000 RDI: 0000000020000000 [ 448.991338][T23818] RBP: 00007fced825b0a0 R08: 0000000000000006 R09: 0000000000000000 [ 448.999323][T23818] R10: 0000000000011012 R11: 0000000000000246 R12: 0000000000000001 [ 449.008776][T23818] R13: 000000000000000b R14: 00007fced9167f60 R15: 00007ffda1b4a708 [ 449.016754][T23818] [ 449.134049][T23830] loop3: detected capacity change from 0 to 512 [ 449.145014][T23830] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 449.156993][T23830] EXT4-fs (loop3): orphan cleanup on readonly fs [ 449.165018][T23830] Quota error (device loop3): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 449.175907][T23830] EXT4-fs warning (device loop3): ext4_enable_quotas:7078: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 449.191185][T23830] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 449.204639][T23830] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.6122: bg 0: block 40: padding at end of block bitmap is not set [ 449.244590][T23830] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 449.254279][T23830] EXT4-fs (loop3): 1 truncate cleaned up [ 449.279251][T23835] loop1: detected capacity change from 0 to 8192 [ 449.338861][T23835] loop1: p1 p2 p3 [ 449.358502][T23844] loop4: detected capacity change from 0 to 128 [ 449.436356][T23846] loop4: detected capacity change from 0 to 512 [ 449.483221][T23846] ext4 filesystem being mounted at /107/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 449.516831][T23851] loop1: detected capacity change from 0 to 128 [ 449.557422][T23851] netlink: 'syz.1.6129': attribute type 10 has an invalid length. [ 449.571290][T23851] netlink: 'syz.1.6129': attribute type 10 has an invalid length. [ 449.580596][T23851] team0: Port device netdevsim1 removed [ 449.590943][T23851] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 449.646029][T23868] loop3: detected capacity change from 0 to 128 [ 449.669224][T23870] ebt_among: dst integrity fail: 101 [ 449.720809][T23874] wireguard0: entered promiscuous mode [ 449.726436][T23874] wireguard0: entered allmulticast mode [ 449.732933][T23877] loop1: detected capacity change from 0 to 128 [ 449.769144][T23878] loop3: detected capacity change from 0 to 512 [ 449.778725][T23878] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 449.787915][T23878] EXT4-fs (loop3): Couldn't mount because of unsupported optional features (800) [ 449.873606][T23881] loop1: detected capacity change from 0 to 8192 [ 449.879774][T23885] loop3: detected capacity change from 0 to 1024 [ 449.917605][T23881] loop1: p1 p2 p3 [ 449.932826][T23887] loop2: detected capacity change from 0 to 8192 [ 449.980706][T23887] loop2: p1 p2 p3 [ 449.986798][T23898] loop1: detected capacity change from 0 to 512 [ 449.994888][T23898] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 449.995679][ T3585] bridge0: port 2(bridge_slave_1) entered disabled state [ 450.002958][T23898] EXT4-fs (loop1): orphan cleanup on readonly fs [ 450.016726][T23898] Quota error (device loop1): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 450.029471][T23898] EXT4-fs warning (device loop1): ext4_enable_quotas:7078: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 450.044759][T23898] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 450.054435][T23898] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.6143: bg 0: block 40: padding at end of block bitmap is not set [ 450.068907][T23898] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 450.069551][T23903] loop3: detected capacity change from 0 to 512 [ 450.078359][T23898] EXT4-fs (loop1): 1 truncate cleaned up [ 450.091957][T23903] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 450.108258][T23903] EXT4-fs (loop3): Remounting filesystem read-only [ 450.115270][T23903] EXT4-fs (loop3): 1 truncate cleaned up [ 450.121567][T23903] SELinux: (dev loop3, type ext4) getxattr errno 5 [ 450.165222][T23910] loop2: detected capacity change from 0 to 128 [ 450.181765][T23903] loop3: detected capacity change from 0 to 1024 [ 450.416319][T23930] loop2: detected capacity change from 0 to 8192 [ 450.425073][T23927] loop1: detected capacity change from 0 to 8192 [ 450.445407][T23937] loop4: detected capacity change from 0 to 128 [ 450.470303][T23930] loop2: p1 p2 p3 [ 450.474350][T23927] loop1: p1 p2 p3 [ 450.542396][T23948] loop4: detected capacity change from 0 to 512 [ 450.560233][T23953] loop2: detected capacity change from 0 to 512 [ 450.569788][T23953] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 450.573769][T23956] FAULT_INJECTION: forcing a failure. [ 450.573769][T23956] name failslab, interval 1, probability 0, space 0, times 0 [ 450.577903][T23953] EXT4-fs (loop2): orphan cleanup on readonly fs [ 450.590383][T23956] CPU: 1 PID: 23956 Comm: syz.0.6165 Not tainted 6.10.0-rc6-syzkaller-00067-g8a9c6c40432e #0 [ 450.599188][T23953] Quota error (device loop2): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 450.606839][T23956] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 450.606920][T23956] Call Trace: [ 450.606929][T23956] [ 450.606938][T23956] dump_stack_lvl+0xf2/0x150 [ 450.606981][T23956] dump_stack+0x15/0x20 [ 450.617685][T23953] EXT4-fs warning (device loop2): ext4_enable_quotas:7078: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 450.627348][T23956] should_fail_ex+0x229/0x230 [ 450.627393][T23956] ? __pfx_cgroup_show_path+0x10/0x10 [ 450.627433][T23956] ? cgroup_show_path+0x6a/0x240 [ 450.627521][T23956] __should_failslab+0x92/0xa0 [ 450.631052][T23953] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 450.633713][T23956] should_failslab+0x9/0x20 [ 450.638722][T23953] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.6161: bg 0: block 40: padding at end of block bitmap is not set [ 450.642449][T23956] kmalloc_trace_noprof+0x4b/0x2a0 [ 450.660127][T23953] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 450.661697][T23956] cgroup_show_path+0x6a/0x240 [ 450.667397][T23953] EXT4-fs (loop2): 1 truncate cleaned up [ 450.672043][T23956] ? kernfs_sop_show_path+0x99/0xe0 [ 450.672079][T23956] ? __pfx_cgroup_show_path+0x10/0x10 [ 450.678916][T23948] ext4 filesystem being mounted at /111/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 450.683489][T23956] kernfs_sop_show_path+0xa8/0xe0 [ 450.683539][T23956] ? __pfx_kernfs_sop_show_path+0x10/0x10 [ 450.758382][T23956] show_path+0x57/0x80 [ 450.762502][T23956] show_mountinfo+0xd9/0x6a0 [ 450.767272][T23956] m_show+0x3b/0x50 [ 450.771080][T23956] seq_read_iter+0x65b/0x940 [ 450.775784][T23956] copy_splice_read+0x3a4/0x5d0 [ 450.780741][T23956] ? __pfx_copy_splice_read+0x10/0x10 [ 450.786130][T23956] splice_direct_to_actor+0x26c/0x670 [ 450.791522][T23956] ? __pfx_direct_splice_actor+0x10/0x10 [ 450.797237][T23956] do_splice_direct+0xd7/0x150 [ 450.802023][T23956] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 450.808117][T23956] do_sendfile+0x3ab/0x950 [ 450.812643][T23956] __x64_sys_sendfile64+0x110/0x150 [ 450.817861][T23956] x64_sys_call+0x2c9f/0x2d70 [ 450.822585][T23956] do_syscall_64+0xc9/0x1c0 [ 450.827107][T23956] ? clear_bhb_loop+0x55/0xb0 [ 450.831816][T23956] ? clear_bhb_loop+0x55/0xb0 [ 450.836570][T23956] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 450.842466][T23956] RIP: 0033:0x7fced8fd9bd9 [ 450.846926][T23956] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 450.866734][T23956] RSP: 002b:00007fced825b048 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 450.875204][T23956] RAX: ffffffffffffffda RBX: 00007fced9167f60 RCX: 00007fced8fd9bd9 [ 450.883207][T23956] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 [ 450.891271][T23956] RBP: 00007fced825b0a0 R08: 0000000000000000 R09: 0000000000000000 [ 450.899246][T23956] R10: 0000000100801700 R11: 0000000000000246 R12: 0000000000000001 [ 450.907284][T23956] R13: 000000000000000b R14: 00007fced9167f60 R15: 00007ffda1b4a708 [ 450.915284][T23956] [ 450.960201][T23962] loop1: detected capacity change from 0 to 512 [ 450.967457][T23962] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 450.977305][T23962] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 450.987502][T23962] EXT4-fs (loop1): group descriptors corrupted! [ 451.054152][T23972] atomic_op ffff88813dee3528 conn xmit_atomic 0000000000000000 [ 451.064157][T23973] ebt_among: dst integrity fail: 101 [ 451.102790][T23980] loop1: detected capacity change from 0 to 128 [ 451.170987][T23985] __nla_validate_parse: 18 callbacks suppressed [ 451.171006][T23985] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6173'. [ 451.206802][T23983] loop1: detected capacity change from 0 to 8192 [ 451.250259][T23983] loop1: p1 p2 p3 [ 451.270493][T23992] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6176'. [ 451.318304][T23995] loop3: detected capacity change from 0 to 512 [ 451.329077][T23995] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 451.330777][T23996] loop1: detected capacity change from 0 to 1024 [ 451.343917][T23995] EXT4-fs (loop3): Remounting filesystem read-only [ 451.356728][T23995] EXT4-fs (loop3): 1 truncate cleaned up [ 451.362898][T23995] SELinux: (dev loop3, type ext4) getxattr errno 5 [ 451.433476][T23995] loop3: detected capacity change from 0 to 1024 [ 451.441195][T24002] loop1: detected capacity change from 0 to 1024 [ 451.448272][T24002] EXT4-fs: Ignoring removed oldalloc option [ 451.458014][T24002] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2234: inode #15: comm syz.1.6179: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 451.475256][T24002] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2234: inode #15: comm syz.1.6179: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 451.551430][T24009] loop1: detected capacity change from 0 to 128 [ 451.556276][T24011] loop4: detected capacity change from 0 to 128 [ 451.596592][T24014] loop1: detected capacity change from 0 to 512 [ 451.604533][T24014] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 451.607949][T24015] loop4: detected capacity change from 0 to 512 [ 451.615012][T24014] EXT4-fs (loop1): orphan cleanup on readonly fs [ 451.625367][T24015] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 451.626355][T24015] EXT4-fs (loop4): orphan cleanup on readonly fs [ 451.634601][T24014] Quota error (device loop1): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 451.642569][T24015] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.6184: bg 0: block 248: padding at end of block bitmap is not set [ 451.650691][T24014] EXT4-fs warning (device loop1): ext4_enable_quotas:7078: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 451.667714][T24015] Quota error (device loop4): write_blk: dquota write failed [ 451.680038][T24014] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 451.687386][T24015] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 451.696712][T24014] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.6183: bg 0: block 40: padding at end of block bitmap is not set [ 451.703977][T24015] EXT4-fs error (device loop4): ext4_acquire_dquot:6860: comm syz.4.6184: Failed to acquire dquot type 1 [ 451.721097][T24014] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 451.730206][T24015] EXT4-fs (loop4): 1 truncate cleaned up [ 451.740616][T24014] EXT4-fs (loop1): 1 truncate cleaned up [ 451.942036][T24027] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6188'. [ 451.978515][T24030] loop4: detected capacity change from 0 to 128 [ 451.987103][T24030] ext4 filesystem being mounted at /117/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 452.028653][T24029] ebt_among: dst integrity fail: 101 [ 452.032187][T24032] loop1: detected capacity change from 0 to 8192 [ 452.084841][T24032] loop1: p1 p2 p3 [ 452.095295][ T29] audit: type=1400 audit(1720044073.027:2365): avc: denied { getattr } for pid=24037 comm="syz.2.6192" path="user:[4026531837]" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 452.124600][T24041] loop2: detected capacity change from 0 to 256 [ 452.142546][T24032] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6189'. [ 452.191079][T24049] loop2: detected capacity change from 0 to 128 [ 452.307972][T24057] loop2: detected capacity change from 0 to 512 [ 452.323358][T24064] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6200'. [ 452.357410][T24057] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 452.385024][T24057] EXT4-fs (loop2): orphan cleanup on readonly fs [ 452.388917][T24067] loop1: detected capacity change from 0 to 128 [ 452.400402][T24057] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.6196: bg 0: block 248: padding at end of block bitmap is not set [ 452.431034][T24057] Quota error (device loop2): write_blk: dquota write failed [ 452.438556][T24057] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 452.448831][T24057] EXT4-fs error (device loop2): ext4_acquire_dquot:6860: comm syz.2.6196: Failed to acquire dquot type 1 [ 452.484431][T24057] EXT4-fs (loop2): 1 truncate cleaned up [ 452.545146][T24071] loop1: detected capacity change from 0 to 512 [ 452.585519][T24075] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6205'. [ 452.600251][T24071] ext4 filesystem being mounted at /296/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 452.723162][T24071] ebt_among: dst integrity fail: 101 [ 452.764589][T24094] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6211'. [ 452.860779][T24108] loop1: detected capacity change from 0 to 512 [ 452.870840][T24108] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 452.879471][T24108] EXT4-fs (loop1): orphan cleanup on readonly fs [ 452.886147][T24108] EXT4-fs warning (device loop1): ext4_enable_quotas:7078: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 452.901187][T24108] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 452.908593][T24108] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.6215: bg 0: block 40: padding at end of block bitmap is not set [ 452.923210][T24108] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 452.932809][T24108] EXT4-fs (loop1): 1 truncate cleaned up [ 453.145354][T24117] loop1: detected capacity change from 0 to 128 [ 453.216079][T24119] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6219'. [ 453.257861][T24127] loop1: detected capacity change from 0 to 128 [ 453.307017][T24131] loop1: detected capacity change from 0 to 512 [ 453.322312][T24131] ext4 filesystem being mounted at /303/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 453.360369][T24131] ebt_among: dst integrity fail: 101 [ 453.472430][T24139] loop1: detected capacity change from 0 to 1024 [ 453.542803][T24143] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6226'. [ 453.564947][T24145] loop1: detected capacity change from 0 to 512 [ 453.577906][T24145] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 453.589279][T24145] EXT4-fs (loop1): orphan cleanup on readonly fs [ 453.597033][T24145] __quota_error: 1 callbacks suppressed [ 453.597053][T24145] Quota error (device loop1): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 453.613563][T24145] EXT4-fs warning (device loop1): ext4_enable_quotas:7078: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 453.617217][T24151] loop2: detected capacity change from 0 to 128 [ 453.629423][T24145] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 453.642389][T24145] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.6227: bg 0: block 40: padding at end of block bitmap is not set [ 453.658027][T24145] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 453.667198][T24145] EXT4-fs (loop1): 1 truncate cleaned up [ 453.692718][T24155] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6232'. [ 453.742228][T24159] loop4: detected capacity change from 0 to 128 [ 453.800863][T24162] wireguard0: entered promiscuous mode [ 453.806414][T24162] wireguard0: entered allmulticast mode [ 453.837288][T24165] loop4: detected capacity change from 0 to 164 [ 453.844684][T24165] rock: directory entry would overflow storage [ 453.850916][T24165] rock: sig=0x5245, size=8, remaining=3 [ 453.923111][ T29] audit: type=1400 audit(1720044074.716:2366): avc: denied { accept } for pid=24164 comm="syz.4.6234" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 454.049279][T24179] loop1: detected capacity change from 0 to 128 [ 454.137542][T24183] loop1: detected capacity change from 0 to 128 [ 454.182396][T24185] ebt_among: dst integrity fail: 101 [ 454.250921][T24191] loop1: detected capacity change from 0 to 512 [ 454.258598][T24191] ext4: Unknown parameter 'noacl' [ 454.423945][T24211] loop1: detected capacity change from 0 to 128 [ 454.499052][T24217] loop1: detected capacity change from 0 to 128 [ 454.513205][ T29] audit: type=1326 audit(1720044075.260:2367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24212 comm="syz.0.6253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fced8fd9bd9 code=0x7ffc0000 [ 454.536879][ T29] audit: type=1326 audit(1720044075.260:2368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24212 comm="syz.0.6253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fced8fd9bd9 code=0x7ffc0000 [ 454.560948][ T29] audit: type=1326 audit(1720044075.260:2369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24212 comm="syz.0.6253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=166 compat=0 ip=0x7fced8fd9bd9 code=0x7ffc0000 [ 454.584691][ T29] audit: type=1326 audit(1720044075.260:2370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24212 comm="syz.0.6253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fced8fd9bd9 code=0x7ffc0000 [ 454.608394][ T29] audit: type=1326 audit(1720044075.260:2371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24212 comm="syz.0.6253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fced8fd9bd9 code=0x7ffc0000 [ 454.632123][ T29] audit: type=1326 audit(1720044075.260:2372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24212 comm="syz.0.6253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=97 compat=0 ip=0x7fced8fd9bd9 code=0x7ffc0000 [ 454.655538][ T29] audit: type=1326 audit(1720044075.260:2373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24212 comm="syz.0.6253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fced8fd9bd9 code=0x7ffc0000 [ 454.679164][ T29] audit: type=1326 audit(1720044075.260:2374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24212 comm="syz.0.6253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7fced8fd9bd9 code=0x7ffc0000 [ 454.730561][T24220] loop2: detected capacity change from 0 to 128 [ 454.743602][T24218] support for cryptoloop has been removed. Use dm-crypt instead. [ 454.805725][T24230] loop2: detected capacity change from 0 to 164 [ 454.822658][T24237] loop1: detected capacity change from 0 to 128 [ 454.846181][T24241] loop4: detected capacity change from 0 to 512 [ 454.856229][T24241] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 454.864716][T24241] EXT4-fs (loop4): orphan cleanup on readonly fs [ 454.874092][T24241] EXT4-fs warning (device loop4): ext4_enable_quotas:7078: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 454.889938][T24241] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 454.899598][T24241] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.6264: bg 0: block 40: padding at end of block bitmap is not set [ 454.914169][T24241] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 454.932308][T24241] EXT4-fs (loop4): 1 truncate cleaned up [ 454.939254][T24251] loop2: detected capacity change from 0 to 128 [ 455.032316][T24256] loop2: detected capacity change from 0 to 128 [ 455.177923][T24269] loop1: detected capacity change from 0 to 128 [ 455.178924][T24267] loop2: detected capacity change from 0 to 512 [ 455.192868][T24267] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 455.207493][T24267] EXT4-fs (loop2): Remounting filesystem read-only [ 455.214730][T24267] EXT4-fs (loop2): 1 truncate cleaned up [ 455.221293][T24267] SELinux: (dev loop2, type ext4) getxattr errno 5 [ 455.257779][T24278] wireguard0: entered promiscuous mode [ 455.263348][T24278] wireguard0: entered allmulticast mode [ 455.289843][T24267] loop2: detected capacity change from 0 to 1024 [ 455.312472][T24284] loop4: detected capacity change from 0 to 128 [ 455.315565][T24283] loop1: detected capacity change from 0 to 512 [ 455.326237][T24283] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 455.335340][T24283] EXT4-fs (loop1): Couldn't mount because of unsupported optional features (800) [ 455.405278][T24287] loop4: detected capacity change from 0 to 128 [ 455.557152][T24308] loop1: detected capacity change from 0 to 512 [ 455.572713][T24308] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 455.585818][T24308] EXT4-fs (loop1): orphan cleanup on readonly fs [ 455.593098][T24308] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.6286: bg 0: block 248: padding at end of block bitmap is not set [ 455.607628][T24314] wireguard0: entered promiscuous mode [ 455.613144][T24314] wireguard0: entered allmulticast mode [ 455.613645][T24308] EXT4-fs error (device loop1): ext4_acquire_dquot:6860: comm syz.1.6286: Failed to acquire dquot type 1 [ 455.632928][T24308] EXT4-fs (loop1): 1 truncate cleaned up [ 455.663250][T24316] loop4: detected capacity change from 0 to 512 [ 455.670220][T24316] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 455.679328][T24316] EXT4-fs (loop4): Couldn't mount because of unsupported optional features (800) [ 455.762126][T24322] wireguard0: entered promiscuous mode [ 455.767683][T24322] wireguard0: entered allmulticast mode [ 455.818690][T24324] loop4: detected capacity change from 0 to 512 [ 455.825939][T24324] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 455.835085][T24324] EXT4-fs (loop4): Couldn't mount because of unsupported optional features (800) [ 455.954795][ T3370] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 455.958710][T24336] loop4: detected capacity change from 0 to 512 [ 455.963598][ T3370] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz0] on syz0 [ 456.096339][T24346] loop4: detected capacity change from 0 to 512 [ 456.104381][T24346] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 456.112450][T24346] EXT4-fs (loop4): orphan cleanup on readonly fs [ 456.119293][T24346] EXT4-fs warning (device loop4): ext4_enable_quotas:7078: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 456.134400][T24346] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 456.138149][T24351] loop2: detected capacity change from 0 to 128 [ 456.141951][T24346] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.6301: bg 0: block 40: padding at end of block bitmap is not set [ 456.161974][T24346] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 456.171686][T24346] EXT4-fs (loop4): 1 truncate cleaned up [ 456.245512][T24353] wireguard0: entered promiscuous mode [ 456.251089][T24353] wireguard0: entered allmulticast mode [ 456.300935][T24356] loop2: detected capacity change from 0 to 512 [ 456.307957][T24356] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 456.317113][T24356] EXT4-fs (loop2): Couldn't mount because of unsupported optional features (800) [ 456.403619][T24358] wireguard0: entered promiscuous mode [ 456.409187][T24358] wireguard0: entered allmulticast mode [ 456.416798][T24361] loop4: detected capacity change from 0 to 512 [ 456.433426][T24361] ext4 filesystem being mounted at /145/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 456.460298][T24365] loop2: detected capacity change from 0 to 512 [ 456.467626][T24365] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 456.476790][T24365] EXT4-fs (loop2): Couldn't mount because of unsupported optional features (800) [ 456.512789][T24376] ebt_among: dst integrity fail: 101 [ 456.540558][T24381] loop1: detected capacity change from 0 to 512 [ 456.556308][T24381] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 456.573423][T24381] EXT4-fs (loop1): Remounting filesystem read-only [ 456.582234][T24381] EXT4-fs (loop1): 1 truncate cleaned up [ 456.588629][T24381] SELinux: (dev loop1, type ext4) getxattr errno 5 [ 456.628747][T24390] __nla_validate_parse: 10 callbacks suppressed [ 456.628766][T24390] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6312'. [ 456.650090][T24381] loop1: detected capacity change from 0 to 1024 [ 456.664165][T24392] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6313'. [ 456.675300][T24392] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=60 sclass=netlink_route_socket pid=24392 comm=syz.2.6313 [ 456.687879][T24392] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=15 sclass=netlink_route_socket pid=24392 comm=syz.2.6313 [ 456.700548][T24392] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=24392 comm=syz.2.6313 [ 456.713188][T24392] netlink: 5904 bytes leftover after parsing attributes in process `syz.2.6313'. [ 456.723914][T24396] wireguard0: entered promiscuous mode [ 456.729438][T24396] wireguard0: entered allmulticast mode [ 456.754330][T24400] loop3: detected capacity change from 0 to 512 [ 456.761757][T24400] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 456.771002][T24400] EXT4-fs (loop3): Couldn't mount because of unsupported optional features (800) [ 456.817728][T24406] loop2: detected capacity change from 0 to 512 [ 456.826844][T24406] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 456.838771][T24406] EXT4-fs (loop2): orphan cleanup on readonly fs [ 456.854733][T24406] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.6318: bg 0: block 248: padding at end of block bitmap is not set [ 456.873820][T24406] EXT4-fs error (device loop2): ext4_acquire_dquot:6860: comm syz.2.6318: Failed to acquire dquot type 1 [ 456.887811][T24406] EXT4-fs (loop2): 1 truncate cleaned up [ 456.957461][T24423] loop2: detected capacity change from 0 to 128 [ 457.033165][T24431] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6325'. [ 457.057027][T24434] wireguard0: entered promiscuous mode [ 457.062573][T24434] wireguard0: entered allmulticast mode [ 457.114874][T24439] loop2: detected capacity change from 0 to 512 [ 457.121875][T24439] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 457.131018][T24439] EXT4-fs (loop2): Couldn't mount because of unsupported optional features (800) [ 457.319649][T24449] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6334'. [ 457.363643][T24458] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6339'. [ 457.381927][T24461] loop4: detected capacity change from 0 to 128 [ 457.420724][T24465] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6342'. [ 457.456215][T24473] loop4: detected capacity change from 0 to 512 [ 457.466618][T24473] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 457.477056][T24473] EXT4-fs (loop4): orphan cleanup on readonly fs [ 457.491593][T24473] EXT4-fs warning (device loop4): ext4_enable_quotas:7078: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 457.499563][T24481] loop2: detected capacity change from 0 to 128 [ 457.523780][T24479] loop1: detected capacity change from 0 to 512 [ 457.531210][T24479] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 457.541911][T24473] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 457.550485][T24473] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.6341: bg 0: block 40: padding at end of block bitmap is not set [ 457.553777][T24483] ebt_among: dst integrity fail: 101 [ 457.566509][T24479] EXT4-fs (loop1): orphan cleanup on readonly fs [ 457.573071][T24473] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 457.584690][T24479] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.6346: bg 0: block 248: padding at end of block bitmap is not set [ 457.602118][T24479] EXT4-fs error (device loop1): ext4_acquire_dquot:6860: comm syz.1.6346: Failed to acquire dquot type 1 [ 457.614204][T24473] EXT4-fs (loop4): 1 truncate cleaned up [ 457.615336][T24479] EXT4-fs (loop1): 1 truncate cleaned up [ 457.648013][T24490] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6351'. [ 457.777615][T24506] loop1: detected capacity change from 0 to 512 [ 457.802130][T24506] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 457.825751][T24506] EXT4-fs (loop1): Remounting filesystem read-only [ 457.832669][T24506] EXT4-fs (loop1): 1 truncate cleaned up [ 457.838777][T24506] SELinux: (dev loop1, type ext4) getxattr errno 5 [ 457.852402][T24512] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6358'. [ 457.863734][T24514] loop3: detected capacity change from 0 to 128 [ 457.878341][T24517] dccp_invalid_packet: P.Data Offset(144) too large [ 457.900421][T24520] loop4: detected capacity change from 0 to 512 [ 457.914698][T24506] loop1: detected capacity change from 0 to 1024 [ 457.922934][T24520] ext4 filesystem being mounted at /149/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 457.940462][T24524] loop2: detected capacity change from 0 to 512 [ 457.949945][T24524] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 457.959824][T24527] loop3: detected capacity change from 0 to 512 [ 457.965574][T24524] EXT4-fs (loop2): orphan cleanup on readonly fs [ 457.973666][T24524] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.6363: bg 0: block 248: padding at end of block bitmap is not set [ 457.988561][T24524] EXT4-fs error (device loop2): ext4_acquire_dquot:6860: comm syz.2.6363: Failed to acquire dquot type 1 [ 457.992102][T24527] ext4 filesystem being mounted at /33/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 458.001476][T24524] EXT4-fs (loop2): 1 truncate cleaned up [ 458.025575][T24532] ebt_among: dst integrity fail: 101 [ 458.054362][T24527] ebt_among: dst integrity fail: 101 [ 458.095068][T24538] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6364'. [ 458.191435][T24551] loop3: detected capacity change from 0 to 512 [ 458.199195][T24551] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 458.207302][T24551] EXT4-fs (loop3): orphan cleanup on readonly fs [ 458.214098][T24551] EXT4-fs warning (device loop3): ext4_enable_quotas:7078: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 458.229214][T24551] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 458.236529][T24551] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.6369: bg 0: block 40: padding at end of block bitmap is not set [ 458.251067][T24551] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 458.260251][T24551] EXT4-fs (loop3): 1 truncate cleaned up [ 458.475449][T24564] loop3: detected capacity change from 0 to 128 [ 458.578416][T24568] loop3: detected capacity change from 0 to 512 [ 458.586072][T24568] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 458.595941][T24568] EXT4-fs (loop3): orphan cleanup on readonly fs [ 458.603016][T24568] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.6375: bg 0: block 248: padding at end of block bitmap is not set [ 458.617967][T24568] EXT4-fs error (device loop3): ext4_acquire_dquot:6860: comm syz.3.6375: Failed to acquire dquot type 1 [ 458.630048][T24568] EXT4-fs (loop3): 1 truncate cleaned up [ 458.705731][T24577] loop3: detected capacity change from 0 to 512 [ 458.725362][T24577] ext4 filesystem being mounted at /41/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 458.778735][T24577] ebt_among: dst integrity fail: 101 [ 458.792048][T24587] gretap0: entered promiscuous mode [ 458.827124][T24587] 0猉功D: renamed from gretap0 [ 458.834033][T24587] 0猉功D: left promiscuous mode [ 458.839070][T24587] 0猉功D: entered allmulticast mode [ 458.853135][T24593] loop1: detected capacity change from 0 to 128 [ 458.861998][T24587] A link change request failed with some changes committed already. Interface 30猉功D may have been left with an inconsistent configuration, please check. [ 458.926000][T24595] loop1: detected capacity change from 0 to 128 [ 458.977379][T24602] 9pnet_fd: Insufficient options for proto=fd [ 458.978288][T24606] loop4: detected capacity change from 0 to 512 [ 458.995024][T24602] loop1: detected capacity change from 0 to 512 [ 459.002882][T24602] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 459.012551][T24602] EXT4-fs (loop1): orphan cleanup on readonly fs [ 459.013580][T24606] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 459.034949][T24602] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.6387: bg 0: block 248: padding at end of block bitmap is not set [ 459.038479][T24606] EXT4-fs (loop4): Remounting filesystem read-only [ 459.050985][T24602] __quota_error: 47 callbacks suppressed [ 459.051000][T24602] Quota error (device loop1): write_blk: dquota write failed [ 459.069117][T24602] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 459.073662][T24606] EXT4-fs (loop4): 1 truncate cleaned up [ 459.079126][T24602] EXT4-fs error (device loop1): ext4_acquire_dquot:6860: comm syz.1.6387: Failed to acquire dquot type 1 [ 459.087450][T24606] SELinux: (dev loop4, type ext4) getxattr errno 5 [ 459.098495][T24602] EXT4-fs (loop1): 1 truncate cleaned up [ 459.172870][T24620] loop2: detected capacity change from 0 to 128 [ 459.178671][T24606] loop4: detected capacity change from 0 to 1024 [ 459.199169][T24624] loop3: detected capacity change from 0 to 512 [ 459.215733][T24624] ext4 filesystem being mounted at /47/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 459.233941][T24630] loop2: detected capacity change from 0 to 512 [ 459.253561][T24630] ext4 filesystem being mounted at /115/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 459.279661][T24639] loop1: detected capacity change from 0 to 512 [ 459.290520][T24639] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 459.301297][T24639] EXT4-fs (loop1): orphan cleanup on readonly fs [ 459.304653][T24624] ebt_among: dst integrity fail: 101 [ 459.316558][T24639] Quota error (device loop1): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 459.322583][T24630] ebt_among: dst integrity fail: 101 [ 459.334485][T24639] EXT4-fs warning (device loop1): ext4_enable_quotas:7078: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 459.350434][T24639] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 459.359177][T24639] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.6400: bg 0: block 40: padding at end of block bitmap is not set [ 459.378926][T24639] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 459.388802][T24639] EXT4-fs (loop1): 1 truncate cleaned up [ 459.494712][T24654] wireguard0: entered promiscuous mode [ 459.500292][T24654] wireguard0: entered allmulticast mode [ 459.552480][T24657] loop2: detected capacity change from 0 to 512 [ 459.559787][T24657] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 459.569002][T24657] EXT4-fs (loop2): Couldn't mount because of unsupported optional features (800) [ 459.665001][T24671] 9pnet_fd: Insufficient options for proto=fd [ 459.676622][T24671] loop2: detected capacity change from 0 to 512 [ 459.683797][T24671] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 459.694398][T24671] EXT4-fs (loop2): orphan cleanup on readonly fs [ 459.701558][T24671] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.6411: bg 0: block 248: padding at end of block bitmap is not set [ 459.716281][T24671] Quota error (device loop2): write_blk: dquota write failed [ 459.723758][T24671] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 459.733891][T24671] EXT4-fs error (device loop2): ext4_acquire_dquot:6860: comm syz.2.6411: Failed to acquire dquot type 1 [ 459.747696][T24671] EXT4-fs (loop2): 1 truncate cleaned up [ 459.753055][T24678] FAULT_INJECTION: forcing a failure. [ 459.753055][T24678] name failslab, interval 1, probability 0, space 0, times 0 [ 459.766180][T24678] CPU: 1 PID: 24678 Comm: syz.0.6414 Not tainted 6.10.0-rc6-syzkaller-00067-g8a9c6c40432e #0 [ 459.776374][T24678] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 459.786444][T24678] Call Trace: [ 459.789735][T24678] [ 459.792717][T24678] dump_stack_lvl+0xf2/0x150 [ 459.797326][T24678] dump_stack+0x15/0x20 [ 459.801557][T24678] should_fail_ex+0x229/0x230 [ 459.806255][T24678] ? __se_sys_mount+0xf7/0x2d0 [ 459.811033][T24678] __should_failslab+0x92/0xa0 [ 459.815807][T24678] should_failslab+0x9/0x20 [ 459.820395][T24678] kmalloc_trace_noprof+0x4b/0x2a0 [ 459.825606][T24678] __se_sys_mount+0xf7/0x2d0 [ 459.830285][T24678] __x64_sys_mount+0x67/0x80 [ 459.834906][T24678] x64_sys_call+0x25c9/0x2d70 [ 459.839616][T24678] do_syscall_64+0xc9/0x1c0 [ 459.844173][T24678] ? clear_bhb_loop+0x55/0xb0 [ 459.848911][T24678] ? clear_bhb_loop+0x55/0xb0 [ 459.853655][T24678] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 459.859577][T24678] RIP: 0033:0x7fced8fdb2da [ 459.864005][T24678] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 7e 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 459.883632][T24678] RSP: 002b:00007fced825ae78 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 459.892079][T24678] RAX: ffffffffffffffda RBX: 00007fced825af00 RCX: 00007fced8fdb2da [ 459.900061][T24678] RDX: 0000000020000180 RSI: 0000000020000100 RDI: 0000000000000000 [ 459.908121][T24678] RBP: 0000000020000180 R08: 00007fced825af00 R09: 00000000000000e1 [ 459.916186][T24678] R10: 00000000000000e1 R11: 0000000000000206 R12: 0000000020000100 [ 459.924189][T24678] R13: 00007fced825aec0 R14: 0000000000000000 R15: 00000000200001c0 [ 459.932176][T24678] [ 459.980058][T24682] wireguard0: entered promiscuous mode [ 459.985624][T24682] wireguard0: entered allmulticast mode [ 460.033801][T24687] loop2: detected capacity change from 0 to 512 [ 460.049090][T24687] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 460.057454][T24687] EXT4-fs (loop2): orphan cleanup on readonly fs [ 460.065694][T24687] Quota error (device loop2): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 460.077338][T24687] EXT4-fs warning (device loop2): ext4_enable_quotas:7078: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 460.086464][T24690] loop4: detected capacity change from 0 to 8192 [ 460.092627][T24687] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 460.106028][T24687] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.6416: bg 0: block 40: padding at end of block bitmap is not set [ 460.120776][T24687] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 460.130186][T24687] EXT4-fs (loop2): 1 truncate cleaned up [ 460.179089][T24696] ref_ctr_offset mismatch. inode: 0x65a offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x0 [ 460.300568][T24705] 0猉功D: entered promiscuous mode [ 460.305827][T24705] 0猉功D: left allmulticast mode [ 460.343656][T24705] 1猉功D: renamed from 30猉功D [ 460.349971][T24705] 1猉功D: left promiscuous mode [ 460.354984][T24705] 1猉功D: entered allmulticast mode [ 460.367286][T24705] A link change request failed with some changes committed already. Interface 31猉功D may have been left with an inconsistent configuration, please check. [ 460.388809][T24708] loop4: detected capacity change from 0 to 512 [ 460.395547][ T29] audit: type=1326 audit(1720044080.697:2408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24704 comm="syz.0.6423" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fced8fd9bd9 code=0x0 [ 460.435273][T24711] loop2: detected capacity change from 0 to 512 [ 460.444580][T24708] ext4 filesystem being mounted at /154/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 460.456251][T24711] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 460.461580][T24716] loop3: detected capacity change from 0 to 512 [ 460.477358][T24711] EXT4-fs (loop2): Remounting filesystem read-only [ 460.484265][T24716] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 460.488218][T24711] EXT4-fs (loop2): 1 truncate cleaned up [ 460.498852][T24711] SELinux: (dev loop2, type ext4) getxattr errno 5 [ 460.498931][T24716] EXT4-fs (loop3): orphan cleanup on readonly fs [ 460.513061][T24716] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.6427: bg 0: block 248: padding at end of block bitmap is not set [ 460.527810][T24716] Quota error (device loop3): write_blk: dquota write failed [ 460.535260][T24716] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 460.545311][T24716] EXT4-fs error (device loop3): ext4_acquire_dquot:6860: comm syz.3.6427: Failed to acquire dquot type 1 [ 460.554515][T24718] ebt_among: dst integrity fail: 101 [ 460.558938][T24716] EXT4-fs (loop3): 1 truncate cleaned up [ 460.603975][T24711] loop2: detected capacity change from 0 to 1024 [ 460.643329][T24727] wireguard0: entered promiscuous mode [ 460.649065][T24727] wireguard0: entered allmulticast mode [ 460.701703][T24737] loop3: detected capacity change from 0 to 512 [ 460.708916][T24737] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 460.718200][T24737] EXT4-fs (loop3): Couldn't mount because of unsupported optional features (800) [ 460.738556][T24741] loop1: detected capacity change from 0 to 512 [ 460.745807][T24741] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps block group descriptors [ 460.756821][T24741] EXT4-fs (loop1): group descriptors corrupted! [ 460.821594][T24745] loop1: detected capacity change from 0 to 512 [ 460.839983][T24745] EXT4-fs mount: 134 callbacks suppressed [ 460.839998][T24745] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 460.859366][T24745] ext4 filesystem being mounted at /361/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 460.902006][T24745] ebt_among: dst integrity fail: 101 [ 460.933138][T19739] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 461.206632][T24758] FAULT_INJECTION: forcing a failure. [ 461.206632][T24758] name failslab, interval 1, probability 0, space 0, times 0 [ 461.219443][T24758] CPU: 0 PID: 24758 Comm: syz.0.6439 Not tainted 6.10.0-rc6-syzkaller-00067-g8a9c6c40432e #0 [ 461.229703][T24758] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 461.239848][T24758] Call Trace: [ 461.243253][T24758] [ 461.246187][T24758] dump_stack_lvl+0xf2/0x150 [ 461.250870][T24758] dump_stack+0x15/0x20 [ 461.255127][T24758] should_fail_ex+0x229/0x230 [ 461.259836][T24758] ? sctp_add_bind_addr+0x6f/0x1e0 [ 461.264998][T24758] __should_failslab+0x92/0xa0 [ 461.269919][T24758] should_failslab+0x9/0x20 [ 461.274450][T24758] kmalloc_trace_noprof+0x4b/0x2a0 [ 461.279603][T24758] sctp_add_bind_addr+0x6f/0x1e0 [ 461.284555][T24758] sctp_copy_local_addr_list+0x19b/0x220 [ 461.290220][T24758] sctp_copy_one_addr+0x83/0x410 [ 461.295213][T24758] sctp_bind_addr_copy+0x81/0x2b0 [ 461.300330][T24758] sctp_assoc_set_bind_addr_from_ep+0xc0/0xd0 [ 461.306433][T24758] sctp_connect_new_asoc+0x1d0/0x3b0 [ 461.311747][T24758] sctp_sendmsg+0xf05/0x1920 [ 461.316361][T24758] ? __pfx_sctp_sendmsg+0x10/0x10 [ 461.321410][T24758] inet_sendmsg+0xc5/0xd0 [ 461.325772][T24758] __sock_sendmsg+0x102/0x180 [ 461.330483][T24758] ____sys_sendmsg+0x312/0x410 [ 461.335272][T24758] __sys_sendmmsg+0x269/0x500 [ 461.340033][T24758] __x64_sys_sendmmsg+0x57/0x70 [ 461.344979][T24758] x64_sys_call+0xa87/0x2d70 [ 461.349671][T24758] do_syscall_64+0xc9/0x1c0 [ 461.354254][T24758] ? clear_bhb_loop+0x55/0xb0 [ 461.359001][T24758] ? clear_bhb_loop+0x55/0xb0 [ 461.363720][T24758] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 461.369655][T24758] RIP: 0033:0x7fced8fd9bd9 [ 461.374090][T24758] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 461.393849][T24758] RSP: 002b:00007fced825b048 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 461.402285][T24758] RAX: ffffffffffffffda RBX: 00007fced9167f60 RCX: 00007fced8fd9bd9 [ 461.410516][T24758] RDX: 0000000000000001 RSI: 0000000020003c40 RDI: 000000000000000d [ 461.418592][T24758] RBP: 00007fced825b0a0 R08: 0000000000000000 R09: 0000000000000000 [ 461.426575][T24758] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 461.434642][T24758] R13: 000000000000000b R14: 00007fced9167f60 R15: 00007ffda1b4a708 [ 461.442643][T24758] [ 461.482238][T22852] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 461.494446][T22095] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 461.570262][T24772] wireguard0: entered promiscuous mode [ 461.575914][T24772] wireguard0: entered allmulticast mode [ 461.627545][T24784] loop4: detected capacity change from 0 to 136 [ 461.635394][T24784] iso9660: Unknown parameter 'maP' [ 461.699580][T24786] 1猉功D: entered promiscuous mode [ 461.704859][T24786] 1猉功D: left allmulticast mode [ 461.713151][T24786] 0猉功D: renamed from 31猉功D [ 461.726380][T24786] 0猉功D: left promiscuous mode [ 461.731543][T24786] 0猉功D: entered allmulticast mode [ 461.739130][T24786] A link change request failed with some changes committed already. Interface 30猉功D may have been left with an inconsistent configuration, please check. [ 461.758130][ T29] audit: type=1326 audit(1720044081.952:2409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24785 comm="syz.0.6449" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fced8fd9bd9 code=0x0 [ 461.770643][T24790] loop3: detected capacity change from 0 to 512 [ 461.793322][T24790] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 461.806288][T24790] ext4 filesystem being mounted at /54/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 461.839226][T24790] ebt_among: dst integrity fail: 101 [ 461.883656][T23520] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 461.918521][T24796] loop1: detected capacity change from 0 to 512 [ 461.925557][T24796] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 461.935939][T24796] EXT4-fs (loop1): orphan cleanup on readonly fs [ 461.943041][T24796] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.6453: bg 0: block 248: padding at end of block bitmap is not set [ 461.946976][T24799] loop3: detected capacity change from 0 to 512 [ 461.958339][T24796] EXT4-fs error (device loop1): ext4_acquire_dquot:6860: comm syz.1.6453: Failed to acquire dquot type 1 [ 461.966064][T24799] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 461.978269][T24796] EXT4-fs (loop1): 1 truncate cleaned up [ 461.992100][T24799] EXT4-fs (loop3): Remounting filesystem read-only [ 461.996051][T24796] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 462.001809][T24799] EXT4-fs (loop3): 1 truncate cleaned up [ 462.020257][T24799] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 462.032849][T24799] SELinux: (dev loop3, type ext4) getxattr errno 5 [ 462.040259][T24799] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 462.049864][T19739] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 462.118734][T24799] loop3: detected capacity change from 0 to 1024 [ 462.128808][T24799] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 462.196587][T24812] __nla_validate_parse: 14 callbacks suppressed [ 462.196633][T24812] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6457'. [ 462.230619][T24815] loop1: detected capacity change from 0 to 1024 [ 462.259937][T24815] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 462.278978][T19739] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 462.333286][T24819] wireguard0: entered promiscuous mode [ 462.338860][T24819] wireguard0: entered allmulticast mode [ 462.389033][T24821] loop1: detected capacity change from 0 to 512 [ 462.396193][T24821] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 462.405497][T24821] EXT4-fs (loop1): Couldn't mount because of unsupported optional features (800) [ 462.540522][T24829] loop2: detected capacity change from 0 to 512 [ 462.553683][T24829] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 462.569636][T24829] ext4 filesystem being mounted at /129/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 462.604648][T24829] ebt_among: dst integrity fail: 101 [ 462.646135][T22852] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 462.684427][T24845] wireguard0: entered promiscuous mode [ 462.690203][T24845] wireguard0: entered allmulticast mode [ 462.820848][ T4400] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 462.833791][T24861] loop2: detected capacity change from 0 to 512 [ 462.856098][T24861] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 462.871738][T23520] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 462.888159][T24861] EXT4-fs (loop2): orphan cleanup on readonly fs [ 462.897673][T24861] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.6475: bg 0: block 248: padding at end of block bitmap is not set [ 462.912490][T24861] EXT4-fs error (device loop2): ext4_acquire_dquot:6860: comm syz.2.6475: Failed to acquire dquot type 1 [ 462.927824][ T4400] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 462.939016][T24861] EXT4-fs (loop2): 1 truncate cleaned up [ 462.945817][T24861] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 462.990481][T24881] loop3: detected capacity change from 0 to 512 [ 462.997217][T22852] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 463.002471][ T4400] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 463.031731][T24881] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 463.049449][T24881] ext4 filesystem being mounted at /56/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 463.077735][ T4400] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 463.134203][T24896] ebt_among: dst integrity fail: 101 [ 463.177979][ T4400] bridge_slave_1: left allmulticast mode [ 463.183869][ T4400] bridge_slave_1: left promiscuous mode [ 463.189654][ T4400] bridge0: port 2(bridge_slave_1) entered disabled state [ 463.197601][ T4400] bridge_slave_0: left allmulticast mode [ 463.203328][ T4400] bridge_slave_0: left promiscuous mode [ 463.209038][ T4400] bridge0: port 1(bridge_slave_0) entered disabled state [ 463.335021][ T4400] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 463.345900][ T4400] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 463.356705][ T4400] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 463.369821][ T4400] bond0 (unregistering): Released all slaves [ 463.400767][T24863] chnl_net:caif_netlink_parms(): no params data found [ 463.419027][T24905] loop1: detected capacity change from 0 to 512 [ 463.425485][T24907] wireguard0: entered promiscuous mode [ 463.427107][T24905] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 463.431020][T24907] wireguard0: entered allmulticast mode [ 463.448011][T24905] EXT4-fs (loop1): Remounting filesystem read-only [ 463.457517][T24905] EXT4-fs (loop1): 1 truncate cleaned up [ 463.463970][T24905] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 463.476589][T24905] SELinux: (dev loop1, type ext4) getxattr errno 5 [ 463.483916][T24905] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 463.500129][T24910] loop2: detected capacity change from 0 to 512 [ 463.508045][T24910] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 463.517218][T24910] EXT4-fs (loop2): Couldn't mount because of unsupported optional features (800) [ 463.529524][ T4400] hsr_slave_0: left promiscuous mode [ 463.535279][ T4400] hsr_slave_1: left promiscuous mode [ 463.541806][T24905] loop1: detected capacity change from 0 to 1024 [ 463.549031][ T4400] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 463.551887][T24905] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 463.556496][ T4400] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 463.576909][ T4400] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 463.584438][ T4400] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 463.594310][ T4400] veth1_macvtap: left promiscuous mode [ 463.599786][ T4400] veth0_macvtap: left promiscuous mode [ 463.605392][ T4400] veth1_vlan: left promiscuous mode [ 463.610677][ T4400] veth0_vlan: left promiscuous mode [ 463.708401][ T4400] team0 (unregistering): Port device team_slave_1 removed [ 463.720485][ T4400] team0 (unregistering): Port device team_slave_0 removed [ 463.776949][T24863] bridge0: port 1(bridge_slave_0) entered blocking state [ 463.784114][T24863] bridge0: port 1(bridge_slave_0) entered disabled state [ 463.791401][T24863] bridge_slave_0: entered allmulticast mode [ 463.798239][T24863] bridge_slave_0: entered promiscuous mode [ 463.805632][T24863] bridge0: port 2(bridge_slave_1) entered blocking state [ 463.812970][T24863] bridge0: port 2(bridge_slave_1) entered disabled state [ 463.820428][T24863] bridge_slave_1: entered allmulticast mode [ 463.826956][T24863] bridge_slave_1: entered promiscuous mode [ 463.845755][T24863] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 463.856637][T24863] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 463.882887][T24863] team0: Port device team_slave_0 added [ 463.889785][T24863] team0: Port device team_slave_1 added [ 463.905580][T23520] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 463.921616][T24863] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 463.928812][T24863] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 463.954911][T24863] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 463.966863][T24863] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 463.973968][T24863] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 464.000092][T24863] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 464.051642][T24863] hsr_slave_0: entered promiscuous mode [ 464.063506][T24863] hsr_slave_1: entered promiscuous mode [ 464.074189][T24863] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 464.084240][T24863] Cannot create hsr debugfs directory [ 464.092652][T24930] vlan4: entered promiscuous mode [ 464.097838][T24930] bridge0: entered promiscuous mode [ 464.106065][T24930] bridge0: port 3(vlan4) entered blocking state [ 464.112447][T24930] bridge0: port 3(vlan4) entered disabled state [ 464.119044][T24930] vlan4: entered allmulticast mode [ 464.124245][T24930] bridge0: entered allmulticast mode [ 464.130372][T24930] vlan4: left allmulticast mode [ 464.135437][T24930] bridge0: left allmulticast mode [ 464.141425][T24930] bridge0: left promiscuous mode [ 464.204653][T24940] wireguard0: entered promiscuous mode [ 464.210313][T24940] wireguard0: entered allmulticast mode [ 464.258007][T24945] loop3: detected capacity change from 0 to 512 [ 464.265064][T24947] FAULT_INJECTION: forcing a failure. [ 464.265064][T24947] name failslab, interval 1, probability 0, space 0, times 0 [ 464.277834][T24947] CPU: 1 PID: 24947 Comm: syz.0.6500 Not tainted 6.10.0-rc6-syzkaller-00067-g8a9c6c40432e #0 [ 464.278023][T24945] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 464.287996][T24947] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 464.288015][T24947] Call Trace: [ 464.288024][T24947] [ 464.288038][T24947] dump_stack_lvl+0xf2/0x150 [ 464.288076][T24947] dump_stack+0x15/0x20 [ 464.297348][T24945] EXT4-fs (loop3): Couldn't mount because of unsupported optional features (800) [ 464.307188][T24947] should_fail_ex+0x229/0x230 [ 464.336049][T24947] ? __alloc_skb+0x10b/0x300 [ 464.340751][T24947] __should_failslab+0x92/0xa0 [ 464.340813][T24947] should_failslab+0x9/0x20 [ 464.350080][T24947] kmem_cache_alloc_node_noprof+0x51/0x2b0 [ 464.355919][T24947] ? kmem_cache_free+0xd8/0x280 [ 464.360905][T24947] __alloc_skb+0x10b/0x300 [ 464.365328][T24947] ? __kfree_skb+0x102/0x150 [ 464.370001][T24947] pfkey_sendmsg+0x111/0x990 [ 464.374749][T24947] ? avc_has_perm+0xd4/0x160 [ 464.379411][T24947] ? selinux_socket_sendmsg+0x182/0x1b0 [ 464.384979][T24947] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 464.390168][T24947] __sock_sendmsg+0x140/0x180 [ 464.394896][T24947] ____sys_sendmsg+0x312/0x410 [ 464.399675][T24947] __sys_sendmmsg+0x269/0x500 [ 464.404387][T24947] __x64_sys_sendmmsg+0x57/0x70 [ 464.409295][T24947] x64_sys_call+0xa87/0x2d70 [ 464.413902][T24947] do_syscall_64+0xc9/0x1c0 [ 464.418424][T24947] ? clear_bhb_loop+0x55/0xb0 [ 464.423161][T24947] ? clear_bhb_loop+0x55/0xb0 [ 464.427919][T24947] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 464.433892][T24947] RIP: 0033:0x7fced8fd9bd9 [ 464.438312][T24947] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 464.458005][T24947] RSP: 002b:00007fced825b048 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 464.466572][T24947] RAX: ffffffffffffffda RBX: 00007fced9167f60 RCX: 00007fced8fd9bd9 [ 464.474553][T24947] RDX: 00000000000003ef RSI: 0000000020000180 RDI: 0000000000000003 [ 464.482545][T24947] RBP: 00007fced825b0a0 R08: 0000000000000000 R09: 0000000000000000 [ 464.490697][T24947] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 464.498675][T24947] R13: 000000000000000b R14: 00007fced9167f60 R15: 00007ffda1b4a708 [ 464.506659][T24947] [ 464.521434][T19739] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 464.729588][T24968] loop1: detected capacity change from 0 to 128 [ 464.793590][T24973] loop1: detected capacity change from 0 to 1024 [ 464.805483][T24973] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 464.817484][T24863] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 464.829859][T24863] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 464.830001][T19739] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 464.849143][T24863] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 464.858189][T24863] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 464.874102][T24863] bridge0: port 2(bridge_slave_1) entered blocking state [ 464.881231][T24863] bridge0: port 2(bridge_slave_1) entered forwarding state [ 464.888528][T24863] bridge0: port 1(bridge_slave_0) entered blocking state [ 464.895724][T24863] bridge0: port 1(bridge_slave_0) entered forwarding state [ 464.927036][ T3593] bridge0: port 1(bridge_slave_0) entered disabled state [ 464.935554][ T3593] bridge0: port 2(bridge_slave_1) entered disabled state [ 464.950798][T24980] wireguard0: entered promiscuous mode [ 464.956414][T24980] wireguard0: entered allmulticast mode [ 464.985147][T24863] 8021q: adding VLAN 0 to HW filter on device bond0 [ 465.000225][T24863] 8021q: adding VLAN 0 to HW filter on device team0 [ 465.000753][T24982] loop1: detected capacity change from 0 to 512 [ 465.017617][ T3591] bridge0: port 1(bridge_slave_0) entered blocking state [ 465.022552][T24982] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 465.024755][ T3591] bridge0: port 1(bridge_slave_0) entered forwarding state [ 465.033842][T24982] EXT4-fs (loop1): Couldn't mount because of unsupported optional features (800) [ 465.043500][ T3591] bridge0: port 2(bridge_slave_1) entered blocking state [ 465.057354][ T3591] bridge0: port 2(bridge_slave_1) entered forwarding state [ 465.150690][T24863] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 465.193304][T25008] ip6erspan0: entered promiscuous mode [ 465.279728][T25024] loop2: detected capacity change from 0 to 512 [ 465.289364][T25024] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 465.298844][T25024] EXT4-fs (loop2): orphan cleanup on readonly fs [ 465.306758][T25024] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.6523: bg 0: block 248: padding at end of block bitmap is not set [ 465.322451][T25024] __quota_error: 5 callbacks suppressed [ 465.322467][T25024] Quota error (device loop2): write_blk: dquota write failed [ 465.336195][T25024] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 465.342698][T24863] veth0_vlan: entered promiscuous mode [ 465.346132][T25024] EXT4-fs error (device loop2): ext4_acquire_dquot:6860: comm syz.2.6523: Failed to acquire dquot type 1 [ 465.356574][T24863] veth1_vlan: entered promiscuous mode [ 465.372169][T25024] EXT4-fs (loop2): 1 truncate cleaned up [ 465.381294][T25024] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 465.382158][T24863] veth0_macvtap: entered promiscuous mode [ 465.403352][T24863] veth1_macvtap: entered promiscuous mode [ 465.409583][T22852] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 465.416335][T24863] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 465.429232][T24863] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 465.439279][T24863] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 465.449863][T24863] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 465.459778][T24863] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 465.470480][T24863] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 465.480374][T24863] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 465.490840][T24863] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 465.500695][T24863] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 465.511177][T24863] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 465.521068][T24863] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 465.531632][T24863] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 465.541492][T24863] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 465.552088][T24863] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 465.561930][T24863] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 465.572536][T24863] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 465.585138][T24863] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 465.597091][T24863] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 465.607787][T24863] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 465.617784][T24863] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 465.628352][T24863] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 465.638299][T24863] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 465.646588][T25036] loop3: detected capacity change from 0 to 512 [ 465.648805][T24863] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 465.664967][T24863] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 465.674072][T25036] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 465.675465][T24863] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 465.696252][T25036] ext4 filesystem being mounted at /63/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 465.697990][T24863] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 465.719216][T24863] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 465.729142][T24863] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 465.739616][T24863] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 465.749480][T24863] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 465.759980][T24863] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 465.769840][T24863] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 465.780314][T24863] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 465.802225][T25041] loop2: detected capacity change from 0 to 512 [ 465.809813][T24863] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 465.819385][T25041] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 465.828558][T25041] EXT4-fs (loop2): Couldn't mount because of unsupported optional features (800) [ 465.838402][T25038] wireguard0: entered promiscuous mode [ 465.844018][T25038] wireguard0: entered allmulticast mode [ 465.865286][T25048] ebt_among: dst integrity fail: 101 [ 465.866894][T24863] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 465.879508][T24863] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 465.888377][T24863] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 465.897121][T24863] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 465.951365][T25055] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6477'. [ 465.996108][T25059] loop4: detected capacity change from 0 to 512 [ 466.002685][T25059] journal_path: Lookup failure for './file1' [ 466.008839][T25059] EXT4-fs: error: could not find journal device path [ 466.044234][T25062] loop2: detected capacity change from 0 to 512 [ 466.052695][T25062] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 466.061335][T25062] EXT4-fs (loop2): orphan cleanup on readonly fs [ 466.070836][T25059] loop4: detected capacity change from 0 to 1024 [ 466.074830][T25062] Quota error (device loop2): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 466.087428][T25059] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 466.100318][T25062] EXT4-fs warning (device loop2): ext4_enable_quotas:7078: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 466.116490][T25062] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 466.116939][T25062] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.6533: bg 0: block 40: padding at end of block bitmap is not set [ 466.117198][T25062] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 466.117621][T25062] EXT4-fs (loop2): 1 truncate cleaned up [ 466.154283][T25062] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 466.179450][T24863] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 466.219813][T25070] loop1: detected capacity change from 0 to 512 [ 466.229580][T25070] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 466.252463][T25070] EXT4-fs (loop1): Remounting filesystem read-only [ 466.259666][T25070] EXT4-fs (loop1): 1 truncate cleaned up [ 466.266071][T25070] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 466.295044][T25070] SELinux: (dev loop1, type ext4) getxattr errno 5 [ 466.304501][T25070] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 466.351218][T25082] loop4: detected capacity change from 0 to 2048 [ 466.377346][T22852] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 466.388254][T25082] loop4: p2 < > [ 466.395597][T25070] loop1: detected capacity change from 0 to 1024 [ 466.406168][T25070] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 466.519173][T25094] loop4: detected capacity change from 0 to 512 [ 466.525943][T25094] EXT4-fs: Ignoring removed i_version option [ 466.532052][T25094] EXT4-fs: Ignoring removed nobh option [ 466.541085][T25094] EXT4-fs: quotafile must be on filesystem root [ 466.572865][T23520] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 466.582595][T25096] wireguard0: entered promiscuous mode [ 466.588105][T25096] wireguard0: entered allmulticast mode [ 466.637942][T25100] loop2: detected capacity change from 0 to 512 [ 466.646643][T25100] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 466.655901][T25100] EXT4-fs (loop2): Couldn't mount because of unsupported optional features (800) [ 466.784570][T25104] loop2: detected capacity change from 0 to 512 [ 466.894900][ T29] audit: type=1400 audit(1720044086.696:2411): avc: denied { connect } for pid=25112 comm="syz.2.6551" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 466.938863][T25115] loop2: detected capacity change from 0 to 512 [ 466.946691][T25115] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 466.955571][T25115] EXT4-fs (loop2): orphan cleanup on readonly fs [ 466.964036][T25115] Quota error (device loop2): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 466.975303][T25115] EXT4-fs warning (device loop2): ext4_enable_quotas:7078: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 466.992291][T25115] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 466.999486][T25115] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.6552: bg 0: block 40: padding at end of block bitmap is not set [ 467.019455][T25115] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 467.028978][T25115] EXT4-fs (loop2): 1 truncate cleaned up [ 467.038327][T25115] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 467.133944][T25122] netlink: 'syz.0.6555': attribute type 298 has an invalid length. [ 467.147295][T19739] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 467.245267][T25128] wireguard0: entered promiscuous mode [ 467.250801][T25128] wireguard0: entered allmulticast mode [ 467.278788][T25131] loop1: detected capacity change from 0 to 512 [ 467.292194][T25131] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 467.309284][T25131] EXT4-fs (loop1): orphan cleanup on readonly fs [ 467.335884][T25131] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.6559: bg 0: block 248: padding at end of block bitmap is not set [ 467.376986][T25131] Quota error (device loop1): write_blk: dquota write failed [ 467.384562][T25131] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 467.394684][T25131] EXT4-fs error (device loop1): ext4_acquire_dquot:6860: comm syz.1.6559: Failed to acquire dquot type 1 [ 467.410031][T25131] EXT4-fs (loop1): 1 truncate cleaned up [ 467.416001][T24863] ================================================================== [ 467.416044][T24863] BUG: KCSAN: data-race in mem_cgroup_flush_stats_ratelimited / tick_do_update_jiffies64 [ 467.416099][T24863] [ 467.416104][T24863] read-write to 0xffffffff860079c0 of 8 bytes by interrupt on cpu 1: [ 467.416124][T24863] tick_do_update_jiffies64+0x112/0x1b0 [ 467.416153][T24863] tick_nohz_handler+0x7c/0x2d0 [ 467.416180][T24863] __hrtimer_run_queues+0x20d/0x5e0 [ 467.441779][T25088] syz.4.6543 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 467.444396][T24863] hrtimer_interrupt+0x210/0x7b0 [ 467.450008][T25088] CPU: 1 PID: 25088 Comm: syz.4.6543 Not tainted 6.10.0-rc6-syzkaller-00067-g8a9c6c40432e #0 [ 467.454776][T24863] __sysvec_apic_timer_interrupt+0x5c/0x1a0 [ 467.459959][T25088] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 467.470869][T24863] sysvec_apic_timer_interrupt+0x6e/0x80 [ 467.475794][T25088] Call Trace: [ 467.475805][T25088] [ 467.485951][T24863] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 467.485981][T24863] console_flush_all+0x4fc/0x710 [ 467.486001][T24863] console_unlock+0x7b/0x280 [ 467.491891][T25088] dump_stack_lvl+0xf2/0x150 [ 467.501970][T24863] vprintk_emit+0x3ed/0x5e0 [ 467.507598][T25088] dump_stack+0x15/0x20 [ 467.510876][T24863] vprintk_default+0x26/0x30 [ 467.513803][T25088] dump_header+0x83/0x2d0 [ 467.519766][T24863] vprintk+0x75/0x80 [ 467.524717][T25088] oom_kill_process+0x33e/0x4c0 [ 467.529289][T24863] _printk+0x7a/0xa0 [ 467.533869][T25088] out_of_memory+0x9af/0xbe0 [ 467.538354][T24863] __ext4_msg+0x18e/0x1a0 [ 467.542500][T25088] mem_cgroup_out_of_memory+0x13e/0x190 [ 467.547070][T24863] ext4_orphan_cleanup+0x91e/0x9e0 [ 467.551391][T25088] try_charge_memcg+0x745/0xcd0 [ 467.555270][T24863] ext4_fill_super+0x367a/0x39e0 [ 467.560113][T25088] ? _raw_spin_unlock+0x26/0x50 [ 467.563988][T24863] get_tree_bdev+0x253/0x2e0 [ 467.568565][T25088] ? radix_tree_lookup+0xf9/0x150 [ 467.572885][T24863] ext4_get_tree+0x1c/0x30 [ 467.578418][T25088] mem_cgroup_swapin_charge_folio+0x107/0x1a0 [ 467.583510][T24863] vfs_get_tree+0x56/0x1d0 [ 467.588350][T25088] __read_swap_cache_async+0x2b9/0x520 [ 467.593383][T24863] do_new_mount+0x227/0x690 [ 467.598229][T25088] swap_cluster_readahead+0x276/0x3f0 [ 467.602831][T24863] path_mount+0x49b/0xb30 [ 467.607971][T25088] swapin_readahead+0xe2/0x7a0 [ 467.612395][T24863] __se_sys_mount+0x27f/0x2d0 [ 467.618542][T25088] ? __filemap_get_folio+0x420/0x5b0 [ 467.622947][T24863] __x64_sys_mount+0x67/0x80 [ 467.628396][T25088] ? swap_cache_get_folio+0x6e/0x210 [ 467.633057][T24863] x64_sys_call+0x25c9/0x2d70 [ 467.638418][T25088] do_swap_page+0x3bc/0x1840 [ 467.642744][T24863] do_syscall_64+0xc9/0x1c0 [ 467.647539][T25088] ? cgroup_rstat_updated+0x99/0x550 [ 467.652215][T24863] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 467.657511][T25088] ? __rcu_read_lock+0x36/0x50 [ 467.662204][T24863] [ 467.662212][T24863] read to 0xffffffff860079c0 of 8 bytes by task 24863 on cpu 0: [ 467.662228][T24863] mem_cgroup_flush_stats_ratelimited+0x29/0x100 [ 467.662276][T24863] count_shadow_nodes+0x6b/0x230 [ 467.667555][T25088] handle_mm_fault+0x809/0x2a80 [ 467.672217][T24863] do_shrink_slab+0x5a/0x690 [ 467.676802][T25088] ? mas_walk+0x204/0x320 [ 467.681291][T24863] shrink_slab+0x4ed/0x860 [ 467.686575][T25088] exc_page_fault+0x3b9/0x650 [ 467.692451][T24863] shrink_node+0xa0d/0x13c0 [ 467.697243][T25088] asm_exc_page_fault+0x26/0x30 [ 467.699575][T24863] do_try_to_free_pages+0x3c6/0xc50 [ 467.707289][T25088] RIP: 0033:0x7ff037cfd197 [ 467.713612][T24863] try_to_free_mem_cgroup_pages+0x1eb/0x4e0 [ 467.718548][T25088] Code: 39 f2 0f 84 5f ff ff ff 48 85 d2 0f 84 d2 01 00 00 83 c0 01 39 f8 75 db 41 81 e3 ff 1f 00 00 4b 89 34 df 80 7c 24 2e 00 75 0d <80> 3d ea ae 2a 00 00 0f 85 7c 01 00 00 48 83 7d 50 07 77 08 48 c7 [ 467.723439][T24863] try_charge_memcg+0x27a/0xcd0 [ 467.728105][T25088] RSP: 002b:00007ffdf3ccc5b0 EFLAGS: 00010246 [ 467.732421][T24863] __mem_cgroup_charge+0x63/0x100 [ 467.736821][T25088] [ 467.736829][T25088] RAX: 0000000081a1979f RBX: ffffffff81a1979e RCX: 000000000000179f [ 467.741487][T24863] filemap_add_folio+0x53/0x1b0 [ 467.745987][T25088] RDX: 0000000000000000 RSI: 0000000081a1979e RDI: 0000000081a197a2 [ 467.750821][T24863] page_cache_ra_unbounded+0x148/0x2e0 [ 467.756006][T25088] RBP: 00007ff038add720 R08: 0000000000000001 R09: 00007ff0376a7000 [ 467.760408][T24863] page_cache_ra_order+0xf7/0x110 [ 467.766290][T25088] R10: 0000000000000008 R11: 0000000081a1979e R12: ffffffff81a19da3 [ 467.786083][T24863] do_sync_mmap_readahead+0x267/0x2a0 [ 467.790922][T25088] R13: 00007ff037fabff8 R14: 0000000000000032 R15: 00007ff037f98000 [ 467.796979][T24863] filemap_fault+0x331/0xa60 [ 467.801992][T25088] ? selinux_socket_getpeersec_dgram+0x213/0x280 [ 467.804306][T24863] __do_fault+0xb6/0x200 [ 467.812268][T25088] ? selinux_socket_sock_rcv_skb+0x56e/0x680 [ 467.817101][T24863] handle_mm_fault+0xdeb/0x2a80 [ 467.825068][T25088] [ 467.830507][T24863] exc_page_fault+0x3b9/0x650 [ 467.838934][T25088] memory: usage 307200kB, limit 307200kB, failcnt 207 [ 467.843638][T24863] asm_exc_page_fault+0x26/0x30 [ 467.851691][T25088] memory+swap: usage 307776kB, limit 9007199254740988kB, failcnt 0 [ 467.856981][T24863] [ 467.856988][T24863] value changed: 0x0000000100003595 -> 0x0000000100003596 [ 467.865020][T25088] kmem: usage 307084kB, limit 9007199254740988kB, failcnt 0 [ 467.869566][T24863] [ 467.869572][T24863] Reported by Kernel Concurrency Sanitizer on: [ 467.869582][T24863] CPU: 0 PID: 24863 Comm: syz-executor Not tainted 6.10.0-rc6-syzkaller-00067-g8a9c6c40432e #0 [ 467.876464][T25088] Memory cgroup stats for [ 467.880145][T24863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 467.880166][T24863] ================================================================== [ 467.886181][T25088] /syz4: [ 467.978280][T25088] cache 81920 [ 467.984498][T25088] rss 8192 [ 467.986604][T25131] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 467.987627][T25088] shmem 0 [ 468.002966][T25088] mapped_file 299008 [ 468.002977][T25088] dirty 0 [ 468.002985][T25088] writeback 0 [ 468.003063][T25088] workingset_refault_anon 64 [ 468.003074][T25088] workingset_refault_file 100 [ 468.003084][T25088] swap 593920 [ 468.003092][T25088] swapcached 8192 [ 468.003101][T25088] pgpgin 320297 [ 468.003109][T25088] pgpgout 320269 [ 468.003118][T25088] pgfault 379076 [ 468.003126][T25088] pgmajfault 45 [ 468.003133][T25088] inactive_anon 8192 [ 468.003215][T25088] active_anon 0 [ 468.003222][T25088] inactive_file 106496 [ 468.003231][T25088] active_file 0 [ 468.003238][T25088] unevictable 0 [ 468.003247][T25088] hierarchical_memory_limit 314572800 [ 468.003257][T25088] hierarchical_memsw_limit 9223372036854771712 [ 468.003268][T25088] total_cache 81920 [ 468.003277][T25088] total_rss 8192 [ 468.003349][T25088] total_shmem 0 [ 468.003356][T25088] total_mapped_file 299008 [ 468.003363][T25088] total_dirty 0 [ 468.003369][T25088] total_writeback 0 [ 468.003376][T25088] total_workingset_refault_anon 64 [ 468.003384][T25088] total_workingset_refault_file 100 [ 468.003392][T25088] total_swap 593920 [ 468.003398][T25088] total_swapcached 8192 [ 468.003405][T25088] total_pgpgin 320297 [ 468.003436][T25088] total_pgpgout 320269 [ 468.003445][T25088] total_pgfault 379076 [ 468.003454][T25088] total_pgmajfault 45 [ 468.003492][T25088] total_inactive_anon 8192 [ 468.003505][T25088] total_active_anon 0 [ 468.003513][T25088] total_inactive_file 106496 [ 468.003523][T25088] total_active_file 0 [ 468.003605][T25088] total_unevictable 0 [ 468.003614][T25088] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.109,pid=3577,uid=0 [ 468.003735][T25088] Memory cgroup out of memory: Killed process 3578 (syz.4.109) total-vm:81176kB, anon-rss:452kB, file-rss:10504kB, shmem-rss:0kB, UID:0 pgtables:100kB oom_score_adj:1000 [ 468.018046][T22852] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 468.043699][T19739] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 470.211705][ T30] oom_reaper: reaped process 3578 (syz.4.109), now anon-rss:64kB, file-rss:9348kB, shmem-rss:0kB [ 470.225461][T25089] syz.4.6543 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_NOWARN|__GFP_ZERO), order=0, oom_score_adj=1000 [ 470.239627][T25089] CPU: 1 PID: 25089 Comm: syz.4.6543 Not tainted 6.10.0-rc6-syzkaller-00067-g8a9c6c40432e #0 [ 470.249796][T25089] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 470.259942][T25089] Call Trace: [ 470.263226][T25089] [ 470.266173][T25089] dump_stack_lvl+0xf2/0x150 [ 470.270771][T25089] dump_stack+0x15/0x20 [ 470.274981][T25089] dump_header+0x83/0x2d0 [ 470.279314][T25089] oom_kill_process+0x33e/0x4c0 [ 470.284233][T25089] out_of_memory+0x9af/0xbe0 [ 470.288954][T25089] mem_cgroup_out_of_memory+0x13e/0x190 [ 470.294526][T25089] try_charge_memcg+0x745/0xcd0 [ 470.299423][T25089] ? get_page_from_freelist+0x1a2a/0x1a70 [ 470.305148][T25089] obj_cgroup_charge_pages+0xbd/0x1d0 [ 470.310603][T25089] __memcg_kmem_charge_page+0x9d/0x170 [ 470.316073][T25089] __alloc_pages_noprof+0x1bc/0x360 [ 470.321273][T25089] alloc_pages_mpol_noprof+0xb1/0x1e0 [ 470.326677][T25089] alloc_pages_noprof+0xe1/0x100 [ 470.331624][T25089] __vmalloc_node_range_noprof+0x719/0xef0 [ 470.337591][T25089] kvmalloc_node_noprof+0x121/0x170 [ 470.342905][T25089] ? ip_set_alloc+0x1f/0x30 [ 470.347414][T25089] ip_set_alloc+0x1f/0x30 [ 470.351772][T25089] hash_netiface_create+0x273/0x730 [ 470.356981][T25089] ? __nla_parse+0x40/0x60 [ 470.361404][T25089] ? __pfx_hash_netiface_create+0x10/0x10 [ 470.367134][T25089] ip_set_create+0x359/0x8a0 [ 470.371735][T25089] ? memchr+0x1/0x50 [ 470.375632][T25089] ? __nla_parse+0x40/0x60 [ 470.380045][T25089] nfnetlink_rcv_msg+0x4a9/0x570 [ 470.385000][T25089] netlink_rcv_skb+0x12c/0x230 [ 470.389828][T25089] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 470.395351][T25089] nfnetlink_rcv+0x16c/0x15b0 [ 470.400049][T25089] ? kmem_cache_free+0xd8/0x280 [ 470.405024][T25089] ? nlmon_xmit+0x51/0x60 [ 470.409399][T25089] ? __kfree_skb+0x102/0x150 [ 470.413986][T25089] ? consume_skb+0x57/0x180 [ 470.418511][T25089] ? nlmon_xmit+0x51/0x60 [ 470.422882][T25089] ? dev_hard_start_xmit+0x3c1/0x3f0 [ 470.428184][T25089] ? __dev_queue_xmit+0xb21/0x1e50 [ 470.433292][T25089] ? ref_tracker_free+0x3a5/0x410 [ 470.438348][T25089] ? __netlink_deliver_tap+0x495/0x4c0 [ 470.443828][T25089] netlink_unicast+0x58d/0x660 [ 470.448635][T25089] netlink_sendmsg+0x5ca/0x6e0 [ 470.453568][T25089] ? __pfx_netlink_sendmsg+0x10/0x10 [ 470.458883][T25089] __sock_sendmsg+0x140/0x180 [ 470.463605][T25089] ____sys_sendmsg+0x312/0x410 [ 470.468374][T25089] __sys_sendmsg+0x1e9/0x280 [ 470.472998][T25089] ? futex_wait+0x18e/0x1c0 [ 470.477542][T25089] __x64_sys_sendmsg+0x46/0x50 [ 470.482344][T25089] x64_sys_call+0xb25/0x2d70 [ 470.487020][T25089] do_syscall_64+0xc9/0x1c0 [ 470.491538][T25089] ? clear_bhb_loop+0x55/0xb0 [ 470.496296][T25089] ? clear_bhb_loop+0x55/0xb0 [ 470.501004][T25089] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 470.506956][T25089] RIP: 0033:0x7ff037e1dbd9 [ 470.511366][T25089] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 470.531079][T25089] RSP: 002b:00007ff03709f048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 470.539501][T25089] RAX: ffffffffffffffda RBX: 00007ff037fabf60 RCX: 00007ff037e1dbd9 [ 470.547529][T25089] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000003 [ 470.555510][T25089] RBP: 00007ff037e8ca98 R08: 0000000000000000 R09: 0000000000000000 [ 470.563474][T25089] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 470.571572][T25089] R13: 000000000000000b R14: 00007ff037fabf60 R15: 00007ffdf3ccc598 [ 470.579632][T25089] [ 470.583399][T25089] memory: usage 307200kB, limit 307200kB, failcnt 8393 [ 470.590481][T25089] memory+swap: usage 307584kB, limit 9007199254740988kB, failcnt 0 [ 470.598387][T25089] kmem: usage 307172kB, limit 9007199254740988kB, failcnt 0 [ 470.605758][T25089] Memory cgroup stats for /syz4: [ 470.605974][T25089] cache 0 [ 470.613890][T25089] rss 0 [ 470.616668][T25089] shmem 0 [ 470.619654][T25089] mapped_file 299008 [ 470.623563][T25089] dirty 0 [ 470.626621][T25089] writeback 0 [ 470.629914][T25089] workingset_refault_anon 66 [ 470.634587][T25089] workingset_refault_file 100 [ 470.639256][T25089] swap 393216 [ 470.642530][T25089] swapcached 4096 [ 470.646971][T25089] pgpgin 320299 [ 470.650440][T25089] pgpgout 320292 [ 470.654163][T25089] pgfault 379079 [ 470.657717][T25089] pgmajfault 46 [ 470.661267][T25089] inactive_anon 4096 [ 470.665220][T25089] active_anon 0 [ 470.668673][T25089] inactive_file 20480 [ 470.672668][T25089] active_file 4096 [ 470.676544][T25089] unevictable 0 [ 470.680002][T25089] hierarchical_memory_limit 314572800 [ 470.685402][T25089] hierarchical_memsw_limit 9223372036854771712 [ 470.691580][T25089] total_cache 0 [ 470.695126][T25089] total_rss 0 [ 470.698434][T25089] total_shmem 0 [ 470.701982][T25089] total_mapped_file 299008 [ 470.706392][T25089] total_dirty 0 [ 470.709891][T25089] total_writeback 0 [ 470.713741][T25089] total_workingset_refault_anon 66 [ 470.718964][T25089] total_workingset_refault_file 100 [ 470.724356][T25089] total_swap 393216 [ 470.728152][T25089] total_swapcached 4096 [ 470.732589][T25089] total_pgpgin 320299 [ 470.736571][T25089] total_pgpgout 320292 [ 470.740631][T25089] total_pgfault 379079 [ 470.744749][T25089] total_pgmajfault 46 [ 470.748727][T25089] total_inactive_anon 4096 [ 470.753181][T25089] total_active_anon 0 [ 470.757236][T25089] total_inactive_file 20480 [ 470.761739][T25089] total_active_file 4096 [ 470.766012][T25089] total_unevictable 0 [ 470.770089][T25089] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.4996,pid=20336,uid=0 [ 470.785207][T25089] Memory cgroup out of memory: Killed process 20337 (syz.4.4996) total-vm:80752kB, anon-rss:452kB, file-rss:10144kB, shmem-rss:0kB, UID:0 pgtables:100kB oom_score_adj:1000 [ 472.984675][ T30] oom_reaper: reaped process 20337 (syz.4.4996), now anon-rss:212kB, file-rss:9032kB, shmem-rss:0kB [ 472.996923][T24863] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 473.007897][T24863] CPU: 0 PID: 24863 Comm: syz-executor Not tainted 6.10.0-rc6-syzkaller-00067-g8a9c6c40432e #0 [ 473.018305][T24863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 473.028372][T24863] Call Trace: [ 473.031648][T24863] [ 473.034660][T24863] dump_stack_lvl+0xf2/0x150 [ 473.039381][T24863] dump_stack+0x15/0x20 [ 473.043673][T24863] dump_header+0x83/0x2d0 [ 473.048017][T24863] oom_kill_process+0x33e/0x4c0 [ 473.052897][T24863] out_of_memory+0x9af/0xbe0 [ 473.057637][T24863] mem_cgroup_out_of_memory+0x13e/0x190 [ 473.063248][T24863] try_charge_memcg+0x745/0xcd0 [ 473.068105][T24863] ? __alloc_pages_noprof+0x194/0x360 [ 473.073577][T24863] ? __rcu_read_unlock+0x4e/0x70 [ 473.078530][T24863] __mem_cgroup_charge+0x63/0x100 [ 473.083617][T24863] filemap_add_folio+0x53/0x1b0 [ 473.088677][T24863] __filemap_get_folio+0x2f1/0x5b0 [ 473.093878][T24863] filemap_fault+0x3a7/0xa60 [ 473.098474][T24863] __do_fault+0xb6/0x200 [ 473.102744][T24863] handle_mm_fault+0xdeb/0x2a80 [ 473.107639][T24863] ? mas_walk+0x204/0x320 [ 473.111994][T24863] exc_page_fault+0x3b9/0x650 [ 473.116670][T24863] asm_exc_page_fault+0x26/0x30 [ 473.121532][T24863] RIP: 0033:0x7ff037cf2c5a [ 473.125986][T24863] Code: db 34 b6 d7 82 de 1b 43 48 f7 a4 24 88 00 00 00 48 8b 05 49 ab de 00 48 69 8c 24 80 00 00 00 e8 03 00 00 48 c1 ea 12 48 01 ca <8b> 48 08 48 89 d0 41 39 cf 4c 0f 45 ea 4c 29 f0 48 3b 05 2f aa de [ 473.145683][T24863] RSP: 002b:00007ffdf3ccc8a0 EFLAGS: 00010202 [ 473.151767][T24863] RAX: 0000001b2da20000 RBX: 0000000000000012 RCX: 000000000006b6c0 [ 473.159797][T24863] RDX: 000000000006b9ad RSI: 00007ffdf3ccc920 RDI: 0000000000000001 [ 473.167809][T24863] RBP: 00007ffdf3ccc8fc R08: 000000002caaf07d R09: 7fffffffffffffff [ 473.175874][T24863] R10: 00007ff037f820b8 R11: 00007ff037f82080 R12: 0000000000000032 [ 473.183842][T24863] R13: 000000000006aa8a R14: 000000000006a9fd R15: 0000000000000007 [ 473.191893][T24863] [ 473.195003][T24863] memory: usage 307200kB, limit 307200kB, failcnt 17254 [ 473.202000][T24863] memory+swap: usage 307588kB, limit 9007199254740988kB, failcnt 0 [ 473.209898][T24863] kmem: usage 307176kB, limit 9007199254740988kB, failcnt 0 [ 473.217201][T24863] Memory cgroup stats for /syz4: [ 473.217406][T24863] cache 0 [ 473.225355][T24863] rss 0 [ 473.228107][T24863] shmem 0 [ 473.231033][T24863] mapped_file 299008 [ 473.234933][T24863] dirty 0 [ 473.237913][T24863] writeback 0 [ 473.241185][T24863] workingset_refault_anon 68 [ 473.245893][T24863] workingset_refault_file 100 [ 473.250554][T24863] swap 397312 [ 473.253833][T24863] swapcached 0 [ 473.257243][T24863] pgpgin 320301 [ 473.260718][T24863] pgpgout 320295 [ 473.264254][T24863] pgfault 379081 [ 473.267802][T24863] pgmajfault 48 [ 473.271270][T24863] inactive_anon 0 [ 473.274995][T24863] active_anon 0 [ 473.278497][T24863] inactive_file 12288 [ 473.282464][T24863] active_file 12288 [ 473.286295][T24863] unevictable 0 [ 473.289772][T24863] hierarchical_memory_limit 314572800 [ 473.295143][T24863] hierarchical_memsw_limit 9223372036854771712 [ 473.301308][T24863] total_cache 0 [ 473.304758][T24863] total_rss 0 [ 473.308119][T24863] total_shmem 0 [ 473.311589][T24863] total_mapped_file 299008 [ 473.316001][T24863] total_dirty 0 [ 473.319492][T24863] total_writeback 0 [ 473.323298][T24863] total_workingset_refault_anon 68 [ 473.328420][T24863] total_workingset_refault_file 100 [ 473.333644][T24863] total_swap 397312 [ 473.337439][T24863] total_swapcached 0 [ 473.341400][T24863] total_pgpgin 320301 [ 473.345375][T24863] total_pgpgout 320295 [ 473.349427][T24863] total_pgfault 379081 [ 473.353500][T24863] total_pgmajfault 48 [ 473.357491][T24863] total_inactive_anon 0 [ 473.361632][T24863] total_active_anon 0 [ 473.365724][T24863] total_inactive_file 12288 [ 473.370239][T24863] total_active_file 12288 [ 473.374652][T24863] total_unevictable 0 [ 473.378621][T24863] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.6543,pid=25088,uid=0 [ 473.393751][T24863] Memory cgroup out of memory: Killed process 25088 (syz.4.6543) total-vm:80752kB, anon-rss:452kB, file-rss:10008kB, shmem-rss:0kB, UID:0 pgtables:92kB oom_score_adj:1000 [ 473.636830][T25089] syz.4.6543 (25089) used greatest stack depth: 7184 bytes left