last executing test programs: 2.336105436s ago: executing program 3 (id=4099): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000280), 0x1, 0x787, &(0x7f0000001000)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x141842, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x1, 0x10012, r0, 0x0) symlink(&(0x7f0000000dc0)='./file0\x00', &(0x7f0000000cc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') readlink(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000001200)=""/4096, 0x1000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000e27b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x5d) r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r3, &(0x7f0000004200)='t', 0x1) r4 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r4, &(0x7f0000000400)=[{&(0x7f0000000980)='\x00', 0x1}], 0x1, 0x7bff, 0x0, 0x0) r5 = open(&(0x7f0000000040)='./bus\x00', 0x145142, 0x0) r6 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x100000001) 2.219463896s ago: executing program 3 (id=4101): r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000000), &(0x7f0000000040)=0x4) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r2, &(0x7f0000003a80)={&(0x7f0000000940)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000540)=[@ip_tos_int={{0x14, 0x0, 0x34, 0x2}}, @ip_tos_u8={{0x11}}], 0x30}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x6}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r4}, 0x10) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000600800850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000001c0)='mm_page_alloc\x00', r6}, 0x10) ioperm(0x0, 0x2, 0x7f) 2.079221358s ago: executing program 3 (id=4102): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000100)={'wg1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="300000001000010400"/20, @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00:'], 0x30}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@delqdisc={0x68, 0x25, 0x20, 0xf0bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0xffff, 0xc}, {0x1, 0x9}, {0x8, 0x3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x28, 0x2, [@TCA_TAPRIO_ATTR_SCHED_BASE_TIME={0xc, 0x3, 0x60c}, @TCA_TAPRIO_ATTR_SCHED_BASE_TIME={0xc, 0x3, 0x3}, @TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME_EXTENSION={0xc, 0x9, 0x5}]}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x10000}, @TCA_RATE={0x6, 0x5, {0xfe, 0xf8}}]}, 0x68}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="6d93b8330000feffffff01000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x8810}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1, 0x4, 0x7fe2, 0x1}, 0x48) r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000480)={0xffffffffffffffff, 0x400}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000780)=ANY=[@ANYBLOB="18220000", @ANYRES32=r5, @ANYBLOB="ff7f000000000000181307f4a300", @ANYRES32=r5, @ANYBLOB="0000000000000000b70200000000000085000000860000005738fcff010000001800000008000000000000000800000018550000070000000000000000000000f854ff0101000000"], &(0x7f0000000280)='syzkaller\x00', 0x81, 0x6c, &(0x7f0000000500)=""/108, 0x41000, 0x8, '\x00', r1, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x7, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000580)=[r5, r6, r5], &(0x7f00000005c0)=[{0x3, 0x4, 0xe, 0xc}, {0x4, 0x5, 0x7, 0xb}, {0x3, 0x5, 0x2, 0xc}, {0x4, 0x5, 0x6, 0xb}, {0x2, 0x3, 0x7}, {0x2, 0x2, 0x1, 0x5}, {0x4, 0x3, 0xf, 0xa}, {0x1, 0x1, 0x10, 0x5}], 0x10, 0x1}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xc, &(0x7f0000000640)=ANY=[@ANYRES64=0x0, @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10) unlink(0x0) 1.9522701s ago: executing program 3 (id=4110): openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x75, 0x1a1281) ioctl$USBDEVFS_FREE_STREAMS(r1, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="02002303100007006000000002"]) 1.823294801s ago: executing program 3 (id=4111): io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, &(0x7f0000000180), 0x1) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1, 0x4, 0x7fe2, 0x1}, 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000400)={r1, &(0x7f00000004c0)=']', 0x20000000}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) creat(&(0x7f0000000580)='./bus\x00', 0x0) lstat(&(0x7f0000000380)='./bus\x00', &(0x7f00000003c0)) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r3, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000004c0)={r0, 0x20, &(0x7f0000000000)={&(0x7f00000002c0)=""/122, 0x7a, 0x0, &(0x7f0000000340)=""/245, 0xf5}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000500)=ANY=[], 0x0, 0x0, 0xfffffffffffffd81, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000008c0)='sys_enter\x00', r5}, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events.local\x00', 0x275a, 0x0) fadvise64(r6, 0x60, 0x15ea, 0x4) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000040)=0x9, 0x4) 1.763036756s ago: executing program 3 (id=4113): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) close(r2) 1.301571517s ago: executing program 2 (id=4128): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@newtaction={0xee, 0x30, 0x1, 0x0, 0x0, {}, [{0x78, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000140)={0x0, 0x0}) syz_open_procfs(r2, &(0x7f0000000600)='fd/4\x00') r3 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x4, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r4}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) socket$nl_route(0x10, 0x3, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x1c, r6, 0x105, 0x0, 0x0, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}]}, 0x1c}}, 0x0) 1.253867931s ago: executing program 2 (id=4131): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCGPTPEER(r0, 0x5441, 0x8000) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x66, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d"], 0x3c}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x2000480, &(0x7f0000000280), 0x1, 0x76a, &(0x7f0000001b00)="$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") fallocate(0xffffffffffffffff, 0x3, 0x0, 0x2328) 1.177500927s ago: executing program 1 (id=4135): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x5, 0x9, 0x1, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7ffb, 0xcc}, 0x48) 1.095357654s ago: executing program 0 (id=4137): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000700)={&(0x7f0000000540)={{0xeb9f, 0x1, 0x0, 0x18, 0x13000000, 0xd, 0xd, 0x2, [@datasec={0x4, 0x0, 0x0, 0xf, 0x1, [], 'I'}]}}, 0x0, 0x2a, 0x0, 0x1}, 0x20) 1.094656304s ago: executing program 0 (id=4139): r0 = io_uring_setup(0x7fdb, &(0x7f0000000080)) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000003400000034000000020000000000000002000004000000000000000002000000000000000000000002000000000000000100000000000001"], 0x0, 0x4e}, 0x20) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000600)={0x1b, 0x0, 0x0, 0x1000, 0x0, 0x1, 0x0, '\x00', 0x0, r1, 0xffffffff, 0x1}, 0x48) r2 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2004d95, &(0x7f00000000c0)={[{@barrier}]}, 0x0, 0x523, &(0x7f0000000a80)="$eJzs3c1vG2kZAPBnXLtt2nQTPg6wEmXRLkpXUDvZsLsRh2WREJxWQiz3EhIniuLEUezsNtaKTf8CJIQAiRNcuCDxByChSlw4IqSV4AzSIhCCLhw4wA7yeJyv2olbXDtNfj9pOu87X8/zup3xzPjtTAAX1nMR8XpEfJim6YsRMRVJNr2QD7HXGdrLffDgnaX2kESavvn3JFuyXe9uK8nH1/PVrkbEN74W8e3k4biN3db6Yq1W3c7rlebGVqWx27q9trG4Wl2tbs7Pz72y8OrCywuzQ2nnjYh47St//sF3f/bV1371+bf/dOevt77TTmsyn3+4HY+oeNLMTtNL2WdxeIXtxwx2FhWzFuYmBlvn3hPMBwCA/trn+B/Nyy/GVFw6+XQWAAAAeAqlX5qM/yQRaW+X+0wHAAAAniKFrA9sUijnfQEmo1Aolzt9eD8e1wq1eqP5uZX6zuZyp6/sdJQKK2u16mzWVzirJ+36XFY+qL90rD5/pXO/4ftTE1m9vFSvLY/75gcAAABcENePXf//a6pz/Q8AAACcM9PjTgAAAAB44lz/AwAAwPnn+h8AAADOta+/8cZERKTd918vv7W7s15/6/ZytbFe3thZKi/Vt7fKq/X6avbMvo3Ttler17e+EJs7dyvNaqNZaey27mzUdzabd9aOvAIbAAAAGKGPfPr+H5KI2PviRDa0XR53UsBIFPdLST7usff/8ZnO+P0RJQWMxKUBlnn/yggSAUauOO4EgLEpjTsBYOySU+b37bzz23z8meHmAwAADN/MJ/v//l84cc29k2cDZ56dGC6uY/t/2jauXIDRyn7/H7TDr5MFOFdKA/UABM6z//v3/1O5rgAAgHGbzIakUM5v701GoVAuR9zIXgtQSlbWatXZiHgmIn4/VbrSrs/FgP9xEAAAAAAAAAAAAAAAAAAAAAAAAADIpGnSeekPAAAAcG5FFP6S/DrJ3v81M/XC5PH7A5eTf09F/orQt3/85g/vLjab23Pt6f/Yn978UT79pXHcwQAAAACO616nd6/jAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGCYPnjwzlJ3GGXcv305IqZ7xS/G1Wx8NUoRce2fSRQPrZdExKUhxN+7FxGf6BU/aae1H7JX/IknHz+m80+hV/zrQ4gPF9n99vHn9V77XyGey8a9979ixJH64zpy/GvdPHL87R7/LvXZ/28MGOPZ935R6Rv/XsSzxd7Hn278pE/85weM/61vtlr95qU/iZjp+f2THIlVaW5sVRq7rdtrG4ur1dXq5vz83CsLry68vDBbWVmrVfM/e8b43qd++eFJ7b/WJ/70Ke1/YcD2//e9uw8+1imWDqZO7Me/9XyP+L/5ab7cw/EL+XffZ/Nye/5Mt7zXKR928+e/u3lS+5cP2l96lL//WwO2fyg7CgAwNI3d1vpirVbdfsoK7+b5n75w+zzrbOT8GIXkbKRxXgvvDnWDaZqm7X+TPWbdj4hBtpPEWfhYssJ4j0sAAMDwHZz0jzsTAAAAAAAAAAAAAAAAAAAAuLgefvpXmsaQH0J2PObefinxZGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4Mz4XwAAAP//qNnX0A==") r5 = openat$cgroup(r3, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0) r6 = openat$cgroup_int(r5, &(0x7f0000000040)='cpu.weight\x00', 0x2, 0x0) sendfile(r6, r4, 0x0, 0x10000a006) close_range(r0, 0xffffffffffffffff, 0x0) 1.093792145s ago: executing program 2 (id=4140): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000007c0)=@newtaction={0x68, 0x30, 0x871a15abc695fb3d, 0x0, 0x600, {}, [{0x54, 0x1, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x68}}, 0x0) 1.093296794s ago: executing program 1 (id=4141): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@newtaction={0xee, 0x30, 0x1, 0x0, 0x0, {}, [{0x78, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000140)={0x0, 0x0}) syz_open_procfs(r2, &(0x7f0000000600)='fd/4\x00') r3 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x4, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r4}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) socket$nl_route(0x10, 0x3, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x1c, r6, 0x105, 0x0, 0x0, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}]}, 0x1c}}, 0x0) 1.012215452s ago: executing program 4 (id=4142): r0 = socket$nl_route(0x10, 0x3, 0x0) munlock(&(0x7f0000002000/0x1000)=nil, 0xffffffffdfffdfff) sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x38, &(0x7f0000003780)={&(0x7f0000000cc0)=@newtaction={0x84, 0x30, 0x12f, 0x0, 0x0, {0x0, 0x0, 0x1be}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x5c, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x4, 0x0, 0x0, 0x20}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x84}}, 0x0) 1.004565523s ago: executing program 1 (id=4143): r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r0, 0x0) (async, rerun: 32) fallocate(r0, 0x0, 0x0, 0x1000f4) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1b, 0x1d, &(0x7f0000000680)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffc}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x3}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @exit, @map_val={0x18, 0x6, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0xc}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='syzkaller\x00', 0xcf4, 0xf9, &(0x7f0000000780)=""/249, 0x40f00, 0x40, '\x00', 0x0, 0x1f, r0, 0x8, &(0x7f0000000200)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000280)={0x4, 0x1, 0x5da, 0x5d88d0a0}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, &(0x7f00000002c0)=[r0, r0, r0, r0], &(0x7f0000000300)=[{0x2, 0x3, 0x3, 0x8}], 0x10, 0x9}, 0x90) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000400)=@o_path={&(0x7f0000000000)='./bus\x00', r1, 0x4000, r0}, 0x18) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x5, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r2, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r3}, 0x10) (async, rerun: 64) nanosleep(0x0, 0x0) (rerun: 64) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000900)={'syztnl1\x00', &(0x7f0000000880)={'syztnl1\x00', 0x0, 0x29, 0x8, 0x3, 0x8, 0x2, @local, @mcast2, 0x21, 0x0, 0x5}}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000940)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x1, '\x00', r4, 0xffffffffffffffff, 0x5, 0x4, 0x2}, 0x48) r5 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) fallocate(r5, 0x20, 0x0, 0x10000) 998.012743ms ago: executing program 0 (id=4144): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000580)={{r0}, &(0x7f0000000500), &(0x7f0000000540)='%+9llu \x00'}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/pm_trace', 0x40102, 0x0) write$binfmt_misc(r3, &(0x7f00000000c0)=ANY=[@ANYRESHEX=r3], 0xfffffc8f) splice(r2, 0x0, r4, 0x0, 0x1800, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x10001) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x208080, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r6, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r7}, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000002000)={0x1}) fcntl$lock(0xffffffffffffffff, 0x26, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 927.504009ms ago: executing program 4 (id=4145): syz_mount_image$ext4(&(0x7f0000000480)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x3000006, &(0x7f0000000240)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x1000}}, {@abort}, {@block_validity}, {@init_itable_val={'init_itable', 0x3d, 0x6}}, {@block_validity}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7b1}}, {@nobh}, {@block_validity}, {@orlov}, {@user_xattr}, {@noinit_itable}]}, 0x1, 0x556, &(0x7f0000001100)="$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") syz_read_part_table(0x60d, &(0x7f0000002240)="$eJzs3D9olHcYB/DvJbmcUTAdnFxqHDoJRXE0Q5XkqlgIp1IIDvYfIs0UIXDSw5Q4tBkUM0jHLlK4DhonYwYnRaFzEQeLkMGlYBepHXLl7l6SOyjF0oRS/HyGe353PDzf94F3/V34XxtIuTi1Kp3y/qd/298a3TzP50xzYvJ4q9VqnU5KOZtyxsq7l5MMpX9q9icZ7plz8/udq9/+9mG5+fTUq/fOPVgc2JhZyTtJdvU2Z+SvHqXyzzZlO9wafzi6cGW2erX9pdpYW/84uf1yorZycnFp+UT52Oft3y8nj4r+7osxkoup51K+zCdDbxz19eax1Jc/386vj194Um2sfdd8fnB9b3Xw7vkjr/etXrt/KJlrR0yl87JvGv6Xi/fkL/Tkz41dn15qHD1wZ8+Nw/V7j2svBn9vdRWR5a3JBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABge9xqf1yZrV6tj194Um2sffPzTx/dfjlRWzm5uLR8YvjYs6LvUVGHinox9VxKOclMZvJFZt88crrUmz/+cHRhI/+Pncnzg+t7q82754+8nly9dv9Qp6uUqXYZ2IqN+/XnN9bmxq5PLzWOHriz58bh+r3HtReD3b6ZSj7rrJuksvWPAQAAAAAAAAAAAAAAAAAAwFtuYvL4vqkPaqeTUs7uSPLrV51b9q3KyI/p3Lzv2l/UZ5Vkd5KbO7r/BdB8eurV8LkHi78Ul+LnU8l8kl0/rJxJ3t3IudwfW96czH/pzwAAAP//gTiR5w==") r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000e40)=ANY=[@ANYRES32=r1, @ANYRESDEC=r0, @ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, '\x00', 0x0, 0x9, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x47, 0x0, 0x0, 0x0, 0x6}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x408, 0xcd, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r3}, 0x10) getresuid(&(0x7f00000000c0), &(0x7f00000001c0), &(0x7f0000000180)) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r4, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x3, 0x0, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r6 = open(&(0x7f0000000180)='./bus\x00', 0x14d27e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r6, 0x0) r7 = open(&(0x7f00000005c0)='./bus\x00', 0x147842, 0x0) preadv2(r7, &(0x7f0000000040)=[{&(0x7f0000001200)=""/4096, 0xfffffdef}], 0x1, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1}, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xc, &(0x7f0000000340)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x1800, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r9}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x3, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"/2646], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) open(&(0x7f0000000040)='./file1\x00', 0x14927e, 0xc) 926.96536ms ago: executing program 2 (id=4146): r0 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff, 0x2b, 0x0, @void}, 0x10) r1 = socket$inet_dccp(0x2, 0x6, 0x0) dup2(r0, r1) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000880)='./bus\x00', 0x80080, &(0x7f0000000280)={[{@bsdgroups}, {@nodiscard}, {@dioread_nolock}, {@grpjquota}, {@quota}, {@journal_checksum}, {@abort}, {@noload}, {@mblk_io_submit}], [{@fsmagic={'fsmagic', 0x3d, 0xffffffff}}, {@fscontext={'fscontext', 0x3d, 'sysadm_u'}}, {@pcr={'pcr', 0x3d, 0x27}}, {@smackfsroot={'smackfsroot', 0x3d, 'ext4\x00'}}]}, 0x64, 0x50a, &(0x7f0000000900)="$eJzs3VFrHFsdAPD/bHZr06Y3ueqDXvB6tZW0aHeTxrbBh1pB9Kmg1vcak00I2WRDdtM2oWiKH0AQUcEnffFF8AMIUvDFRxEK+qyoKKKtPvigncvuTtI03U227TabZn8/mMw5Z2b2f86GmZ0zc5gJYGC9FxHXI+JJmqYXImI0K89lU2y1psZ6jx/dm21MSaTpzX8mkWRl25+VZPPT2WYnI+JrX474ZvJ83NrG5tJMpVJey/Kl+vJqqbaxeXFxeWahvFBemZqavDJ9dfry9ERP2nkmIq598a8/+O7PvnTtV5+586dbfz//rUa1RrLlu9vxgvL7LWw1vdD8LnZvsPaSwY6ifLOFmeF2aww9V3L/NdcJAID2Guf4H4yIT0bEhRiNof1PZwEAAIA3UPr5kfhfEpG2d6JDOQAAAPAGyTXHwCa5YjYWYCRyuWKxNYb3w3EqV6nW6p+er66vzLXGyo5FITe/WClPZGOFx6KQNPKTzfTT/KU9+amIeDsivj863MwXZ6uVuX5f/AAAAIABcXpP//8/o63+PwAAAHDMjPW7AgAAAMBrp/8PAAAAx5/+PwAAABxrX7lxozGl2++/nru9sb5UvX1xrlxbKi6vzxZnq2urxYVqdaH5zL7lgz6vUq2ufjZW1u+W6uVavVTb2Ly1XF1fqd9afOYV2AAAAMAhevvjD/6QRMTW54abU8OJ7jbtcjXgqMrvpJJs3ma3/uNbrflfDqlSwKEY6ncFgL7J97sCQN8U+l0BoO+SA5Z3HLzz22z+id7WBwAA6L3xj3a+/5/bd8ut/RcDR56dGAaX+/8wuJr3/7sdyetkAY6VgjMAGHivfP//QGn6QhUCAAB6bqQ5JblidnlvJHK5YjHiTPO1AIVkfrFSnoiItyLi96OFDzTyk80tkwP7DAAAAAAAAAAAAAAAAAAAAAAAAABAS5omkQIAAADHWkTub8mvW8/yHx89N7L3+sCJ5L+jkb0i9M6Pb/7w7ky9vjbZKP/XTnn9R1n5pX5cwQAAAICB8EIv8N/up2/34wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACglx4/uje7PR1m3H98ISLG2sXPx8nm/GQUIuLUv5PI79ouiYihHsQfbvz5SLv4SaNaOyHbxR/uQfyt+/vGj7HsW2gX/3QP4sMge9A4/lxvt//l4r3mvP3+l494Jv+yOh//Yuf4N9Rh/z/TZYx3Hv6i1DH+/Yh38u2PP9vxkw7xz3YZ/xtf39zstCz9ScR429+f5JlYpfryaqm2sXlxcXlmobxQXpmamrwyfXX68vREaX6xUs7+to3xvY/98sl+7T/VIf7YAe0/12X7///w7qMPtZKFdvHPn20T/zc/zdZ4Pn4u++37VJZuLB/fTm+10ru9+/Pfvbtf++c6tP+g///5Ltt/4avf+XOXqwIAh6C2sbk0U6mU145totFLPwLVkDiCiW/39APTNE0b+9QrfE4SR+FraSb6fWQCAAB67elJf79rAgAAAAAAAAAAAAAAAAAAAIPrMB4ntjfm1k4q6cUjtAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeuL9AAAA//+GAdlV") io_submit(0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff000000000200000009000100"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000060a0b040000000000000000020000002400048020000180070001006374000014000280080002400000001108000440000008090900010073797a30000000000900020073797a32"], 0x78}}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x173) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) 926.6396ms ago: executing program 1 (id=4147): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000002c0)='./file0\x00', 0x1008002, &(0x7f0000001540)={[{@grpquota}, {@debug}, {@journal_path={'journal_path', 0x3d, './file1'}}, {@usrjquota_path={'usrjquota', 0x3d, './file1'}}, {@data_journal}, {@jqfmt_vfsold}, {@usrquota}, {@data_err_abort}, {@sb={'sb', 0x3d, 0x5}}], [{@euid_eq}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$eJzs3c9vFFUcAPDvbH/QUrSFGBUP0sQYSJSWFjDEeICrIQ3+iBcvVloQKdDQGi2aUBK8mBgvxph48iD+F0rkyklPHrx4MiREDUcT18x2pnTb2ZYubacyn0+y9M17O7w33X773r6+NxtAZQ2m/9Qi9kbEdBLRn8wvlnVGVji48Lx7f39yOn0kUa+/8WcSSZaXPz/JvvZlJ/dExM8/JbGnY2W9M3NXzo9PTU1ezo6HZy9MD8/MXTl47sL42cmzkxdHXxo9dvTI0WMjh9q6rqsFeSevv/9h/2djb3/3zT/JyPe/jSVxPF7Nnrj0OjbKYAw2vifJyqK+YxtdWUk6sp+TpS9x0llig1iX/PXrioinoj864v6L1x+fvlZq44BNVU8i6kBFJeIfKiofB+Tv7Ze/D66VMioBtsLdEwsTACvjv3NhbjB6GnMDO+8lsXRaJ4mI9mbmmu2KiNu3xq6fuTV2PTZpHg4oNn8tIp4uiv+kEf8D0RMDjfivNcV/Oi44lX1N819vs/7lU8XiH7bOQvz3rBr/0SL+31kS/++2Wf/g/eR7vU3x39vuJQEAAAAAAEBl3TwRES8W/f2/trj+JwrW//RFxPENqH9w2fHKv//X7mxANUCBuyciXilc/1vLV/8OdGSpxxrrAbqSM+emJg9FxOMRcSC6dqTHI6vUcfDzPV+3KhvM1v/lj7T+29lawKwddzp3NJ8zMT47/rDXDUTcvRbxTOH632Sx/08K+v/098H0A9ax5/kbp1qVrR3/wGapfxuxv7D/v3/XimT1+3MMN8YDw/moYKVnP/7ih1b1txv/bjEBDy/t/3euHv8DydL79cysv47Dc531VmXtjv+7kzcbt5zpzvI+Gp+dvTwS0Z2c7Ehzm/JH199meBTl8ZDHSxr/B55bff6vaPzfGxHzy/7v5K/mPcW5J//t+71Ve4z/oTxp/E+sq/9ff2L0xsCPrep/sP7/SKOvP5DlmP+DBV/lYdrdnF8Qjp1FRVvdXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4FNQiYlcktaHFdK02NBTRFxFPxM7a1KWZ2RfOXPrg4kRa1vj8/1r+Sb/9C8dJ/vn/A0uOR5cdH46I3RHxZUdv43jo9KWpibIvHgAAAAAAAAAAAAAAAAAAALaJvhb7/1N/dJTdOmDTdZbdAKA0BfH/SxntALae/h+qS/xDdYl/qC7xD9Ul/qG6xD9Ul/iH6hL/AAAAAADwSNm97+avSUTMv9zbeKS6s7KuUlsGbLZa2Q0ASuMWP1Bdlv5AdXmPDyRrlPe0PGmtM1czffohTgYAAAAAAAAAAACAytm/1/5/qCr7/6G67P+H6sr3/+8ruR3A1vMeH4g1dvIX7v9f8ywAAAAAAAAAAAAAYCPNzF05Pz41NXlZ4q3t0YytTNTr9avpT8F2ac//PJEvhd8u7VmWyPf6PdhZ5f1OAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmv0XAAD//xYSJMU=") 889.759793ms ago: executing program 2 (id=4148): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3b67, 0x0, 0x0, 0x0) mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) perf_event_open(&(0x7f0000000040)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r0, 0x3) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='kfree\x00', r1}, 0x10) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r3 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r3, 0x5) r4 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r4, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) close_range(r2, 0xffffffffffffffff, 0x0) 883.193173ms ago: executing program 1 (id=4149): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x2) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x5412, &(0x7f00000000c0)=0x13) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000280), 0x1, 0x787, &(0x7f0000001000)="$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") pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{0x0}, {&(0x7f00000002c0)="96a353f98abdfb0f82badda9e7cc1da9dbaab02a5b5c727b1420af30a4a8e1ae34ba5f11492e9611307048d28db8ea3a65b0b1167ed1310ac56bee72103f817a1e41dfa452", 0x45}], 0x2, 0x5405, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000009c0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000002c0)="a48ddda58f0c3202e4331de15e27c2f6b69ccda5c86d79ec8171a6447231bbf9a1a064d71820", 0x26}], 0x1}}], 0x1, 0x0) syz_mount_image$vfat(0x0, &(0x7f0000000040)='./file0\x00', 0x102000, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) io_uring_setup(0x96b, &(0x7f0000000340)) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = dup(r2) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB="c7284900000000", @ANYRESHEX=r2, @ANYBLOB=',\x00']) write$P9_RLERRORu(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="8b"], 0x53) write$binfmt_elf64(r3, &(0x7f0000000340)=ANY=[], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[], [], 0x6b}}) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x38, 0x1411, 0x400, 0x70bd2c, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x5}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x3b}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x10000}, 0x20018080) r5 = dup(r0) write$P9_RLERRORu(r5, &(0x7f00000002c0)=ANY=[@ANYBLOB='S\x00\x00\x00\a\x00\x00B\x00'], 0x53) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001300010300000000000100000a"], 0x14}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="180100001700000000000000a54b0000850000007500000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000000c0)='signal_generate\x00', r8}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000200)='sys_enter\x00', r8}, 0x2b) syslog(0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002"], 0x0, 0x10c, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 784.563612ms ago: executing program 4 (id=4150): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r1) sendmsg$NFC_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x8, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="04010000", @ANYRES16=r2, @ANYBLOB="01002dbd7000fedbdf250700000077001f00c9b6bd6021ea8c78970c073a296f48d44434535252129878ee0a41853222db39c163572ff853d9bb596a8f7225447ad6d2c03983df319d0ff770cfc98e2223254196e23e4a95fe93660f2e8f32d1bee105925adcbadab1d2b312b15093d3326bc6ef635b53c761a00e3e45ebd82039a84a18ed0008001d00050000004f001f00e44a6d5348f4dc79648552ec25b7c384f530786cc86bd0a7de6757044dbe959818057e33548ea7918f383522987b074c014ddb6ba0d1542e8bcb1f8290d8ddb3ce5ec2944cec8203307d6a0008001e00ff0f0000080001"], 0x104}}, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000000)='ext4_es_shrink_scan_exit\x00', r4}, 0x10) r5 = socket(0x40000000015, 0x5, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) 658.959213ms ago: executing program 1 (id=4151): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x10, 0xc, &(0x7f00000000c0)=ANY=[@ANYRES8=0x0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b40)={&(0x7f0000000600)='kfree\x00', r0}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x6}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="020f000005000000000000000000000003fd04000000000002000000ffffffff0000000000000000"], 0x28}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1d, 0x33, &(0x7f0000000280)=ANY=[@ANYRESOCT=r7, @ANYRESDEC=r7, @ANYRES64=r1, @ANYRES16, @ANYRES16], &(0x7f0000000040)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x7d7ca93834651d89, '\x00', r7, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x90) r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r8}, 0x10) r10 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r10, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r10, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) r11 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(0xffffffffffffffff) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r12 = inotify_init1(0x81000) fcntl$setown(r12, 0x8, 0xffffffffffffffff) fcntl$getownex(r4, 0x10, &(0x7f0000000440)={0x0, 0x0}) r14 = syz_open_procfs(r13, &(0x7f0000000600)='fd/4\x00') r15 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xb, &(0x7f00000004c0)=ANY=[@ANYRESDEC=r9, @ANYRES8=r11, @ANYRES16=r0, @ANYBLOB="e8b8e720fc8a71125d767575f694295d725c74d20d4a1e51469a6b227e1a38136b898c3d4d719e91d31cc053c2f4a06a00491dee3209c59b2405409806492ed5efc2f364b266fd815ca6f18c2a66457a22343c882032d79a20500a73ec2b5542e039267fb65d46e9686207066a8e4b982aa92331aaa6e2a667bf06"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r11, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r15}, 0x10) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r14, 0x6628, 0x0) r16 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x2, 0xffffff2f, 0x0, 0x0, 0x0, '\x00', r7, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r16}, 0x10) sched_setscheduler(0x0, 0x1, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) 658.077363ms ago: executing program 4 (id=4152): r0 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff, 0x2b, 0x0, @void}, 0x10) r1 = socket$inet_dccp(0x2, 0x6, 0x0) dup2(r0, r1) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000880)='./bus\x00', 0x80080, &(0x7f0000000280)={[{@bsdgroups}, {@nodiscard}, {@dioread_nolock}, {@grpjquota}, {@quota}, {@journal_checksum}, {@abort}, {@noload}, {@mblk_io_submit}], [{@fsmagic={'fsmagic', 0x3d, 0xffffffff}}, {@fscontext={'fscontext', 0x3d, 'sysadm_u'}}, {@pcr={'pcr', 0x3d, 0x27}}, {@smackfsroot={'smackfsroot', 0x3d, 'ext4\x00'}}]}, 0x64, 0x50a, &(0x7f0000000900)="$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") r2 = epoll_create1(0x0) io_submit(0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000060a0b040000000000000000020000002400048020000180070001006374000014000280080002400000001108000440"], 0x78}}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x173) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) sendmsg$AUDIT_SET(r4, &(0x7f00000004c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x24282100}, 0xc, &(0x7f00000003c0)={&(0x7f00000001c0)={0x3c, 0x3e9, 0x100, 0x70bd27, 0x25dfdbfd, {0x2, 0x0, 0x1, r5, 0x0, 0x0, 0x7, 0x4, 0x0, 0x9}}, 0x3c}, 0x1, 0x0, 0x0, 0x8010}, 0x4048008) bpf$MAP_CREATE(0x0, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x18, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r6}, 0x10) write$binfmt_elf64(r4, &(0x7f0000000400)=ANY=[@ANYBLOB="7f454c4600000200000000000000000003003e0000000000000000007c80000040000000000000000000000000f800000000000000003800010000000000000003000000"], 0x9a) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket(0x200000100000011, 0x3, 0x0) r7 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000000), 0x4) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) 657.381822ms ago: executing program 4 (id=4153): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@newtaction={0xee, 0x30, 0x1, 0x0, 0x0, {}, [{0x78, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000140)={0x0, 0x0}) syz_open_procfs(r2, &(0x7f0000000600)='fd/4\x00') r3 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x4, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r4}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) socket$nl_route(0x10, 0x3, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x1c, r6, 0x105, 0x0, 0x0, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}]}, 0x1c}}, 0x0) 639.725985ms ago: executing program 4 (id=4154): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="5c00000002e901030a0000000000000000000000140007800600044000000000060805400000000005000400000000000900020057b9f1440000000005000500000000000500010006eb39ba4238d28866b5f0000000100003006269746d61703a706f727401"], 0x5c}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="280000000306033f000000ffffffffbfffffff000500010007"], 0x28}}, 0x0) r1 = syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x40, &(0x7f00000002c0), 0x1, 0x558, &(0x7f00000010c0)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305839, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x3fffffff404}) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0x7, &(0x7f0000000540)=ANY=[@ANYRES64=r1, @ANYRES32=r3, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r4}, 0x10) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f00000001c0)='*\x00', 0xfffffffffffffffc) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {0xffffffffffffffff, 0xee00}}, './file1\x00'}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r5}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000900b7040000000000a22aafca00030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x16, 0x2e6, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x59, 0x0, 0x0, 0x0, '\x00', 0x0, 0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6}]}) mount(0x0, 0x0, 0x0, 0x1000, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r8) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r9, 0x0) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00', 0x1}, 0x90) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0x12, 0x4, 0x8, 0xb}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)={@map=r11, r10, 0x7}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r11, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r9}, 0x20) sendmsg$IPCTNL_MSG_CT_DELETE(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[], 0x14}}, 0x0) close_range(r7, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) 147.105547ms ago: executing program 0 (id=4155): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xfffffffd, 0x0, 0x0, 0x2ea}, 0x0, 0x0) socket(0x11, 0x800000003, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x89901) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x719b, 0x8001}, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195}, 0x90) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000300)={'team0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="4400000010000304000000000000000000000c00", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r3], 0x44}}, 0x0) 109.311481ms ago: executing program 0 (id=4156): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000001040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) sendmsg$rds(r2, &(0x7f0000000380)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000140)=[@fadd={0x58, 0x114, 0x6, {{0x4, 0x9}, &(0x7f00000000c0)=0x3ff, 0x0, 0x100000000, 0x5, 0x9, 0x2, 0x68, 0x6}}], 0x58}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) r4 = perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f0000000100)='cpu&\t0\t\t\t') 68.148694ms ago: executing program 0 (id=4157): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000340)='sched_kthread_stop_ret\x00', r0}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000010001fff000000000000000000060000", @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800e0001007769726567756172640000000400028008000a00b8"], 0x40}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='mm_collapse_huge_page\x00'}, 0x10) r2 = inotify_init1(0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) inotify_add_watch(r2, &(0x7f0000000000)='./file0\x00', 0x20) 0s ago: executing program 2 (id=4158): bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5}, 0x48) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18100009000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18100009000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000300), 0x111000) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue1\x00'}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x16, 0x0, 0x4, 0xff, 0x440, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r3}, 0x0, &(0x7f0000000040)}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r3}, 0x0, &(0x7f0000000040)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mknodat(0xffffffffffffff9c, &(0x7f0000000180)='./file5\x00', 0x61c0, 0x700) openat$dir(0xffffffffffffff9c, &(0x7f0000000680)='./file5\x00', 0x0, 0x0) (async) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000680)='./file5\x00', 0x0, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r7) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r5, 0x401070ca, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0) sendfile(r8, r8, 0x0, 0x3) (async) sendfile(r8, r8, 0x0, 0x3) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r2, 0x408c5333, &(0x7f0000000080)) syz_emit_ethernet(0x46, &(0x7f00000014c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200001086dd6000000000103afffc010000000000000000000008000000ff0200000000000000000080eaffff008600907800000000feffffff00000000"], 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES16=r2, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000f70400000000000084ffe6000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES16=r2, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000f70400000000000084ffe6000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) (async) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYRESHEX=r9, @ANYRES16=r4], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYRESHEX=r9, @ANYRES16=r4], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r11}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r12, &(0x7f0000000000), 0x651, 0x0) kernel console output (not intermixed with test programs): ount RDWR because of unsupported optional features (80) [ 205.426504][T13644] loop4: detected capacity change from 0 to 128 [ 205.449060][T13647] loop2: detected capacity change from 0 to 512 [ 205.459858][T13644] ext4 filesystem being mounted at /549/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 205.477383][T13647] ext4 filesystem being mounted at /19/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 205.492570][T13647] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 205.587419][T13655] loop2: detected capacity change from 0 to 1764 [ 205.600425][T13656] loop4: detected capacity change from 0 to 2048 [ 205.604244][ T6944] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 205.609712][T13655] iso9660: Bad value for 'check' [ 205.621761][ T6944] CPU: 1 UID: 0 PID: 6944 Comm: syz-executor Not tainted 6.11.0-rc6-syzkaller-00183-gb831f83e40a2 #0 [ 205.642466][ T6944] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 205.654301][ T6944] Call Trace: [ 205.657701][ T6944] [ 205.660911][ T6944] dump_stack_lvl+0xf2/0x150 [ 205.666537][ T6944] dump_stack+0x15/0x20 [ 205.671462][ T6944] dump_header+0x83/0x2d0 [ 205.675954][ T6944] oom_kill_process+0x341/0x4c0 [ 205.681252][ T6944] out_of_memory+0x9af/0xbe0 [ 205.686126][ T6944] ? __rcu_read_unlock+0x4e/0x70 [ 205.691570][ T6944] mem_cgroup_out_of_memory+0x13e/0x190 [ 205.698940][ T6944] try_charge_memcg+0x51b/0x810 [ 205.704585][ T6944] mem_cgroup_swapin_charge_folio+0x107/0x1a0 [ 205.711516][ T6944] __read_swap_cache_async+0x2b7/0x520 [ 205.717685][ T6944] swap_cluster_readahead+0x276/0x3f0 [ 205.724592][ T6944] swapin_readahead+0xe4/0x760 [ 205.727864][T13659] loop2: detected capacity change from 0 to 8192 [ 205.730268][ T6944] ? __filemap_get_folio+0x420/0x5b0 [ 205.730319][ T6944] ? swap_cache_get_folio+0x77/0x210 [ 205.750055][ T6944] do_swap_page+0x3da/0x1ef0 [ 205.754780][ T6944] ? hrtimer_start_range_ns+0x53d/0x580 [ 205.759510][T13656] EXT4-fs (loop4): failed to initialize system zone (-117) [ 205.760818][ T6944] ? hrtimer_try_to_cancel+0x106/0x1d0 [ 205.769886][T13656] EXT4-fs (loop4): mount failed [ 205.775488][ T6944] ? __rcu_read_lock+0x36/0x50 [ 205.785643][ T6944] ? pte_offset_map_nolock+0x124/0x1d0 [ 205.791831][ T6944] handle_mm_fault+0x8cb/0x2a30 [ 205.796733][ T6944] exc_page_fault+0x3b9/0x650 [ 205.801771][ T6944] asm_exc_page_fault+0x26/0x30 [ 205.807368][ T6944] RIP: 0033:0x7f657bfdefa5 [ 205.812344][ T6944] Code: 00 00 00 00 00 83 ff 03 74 7b 83 ff 02 b8 fa ff ff ff 49 89 ca 0f 44 f8 80 3d 9e 15 15 00 00 74 14 b8 e6 00 00 00 0f 05 f7 d8 66 2e 0f 1f 84 00 00 00 00 00 48 83 ec 28 48 89 54 24 10 89 74 [ 205.835242][ T6944] RSP: 002b:00007ffee1a5dcf8 EFLAGS: 00010246 [ 205.842559][ T6944] RAX: 0000000000000000 RBX: 000000000000045b RCX: 00007f657bfdefa3 [ 205.851291][ T6944] RDX: 00007ffee1a5dd10 RSI: 0000000000000000 RDI: 0000000000000000 [ 205.861167][ T6944] RBP: 00007ffee1a5dd6c R08: 00000000107591fc R09: 7fffffffffffffff [ 205.871651][ T6944] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000032 [ 205.881706][ T6944] R13: 000000000003217c R14: 0000000000031e0e R15: 00007ffee1a5ddc0 [ 205.890259][ T6944] [ 205.894262][ T6944] memory: usage 307200kB, limit 307200kB, failcnt 11291 [ 205.903401][ T6944] memory+swap: usage 307392kB, limit 9007199254740988kB, failcnt 0 [ 205.912498][ T6944] kmem: usage 306656kB, limit 9007199254740988kB, failcnt 0 [ 205.920858][ T6944] Memory cgroup stats for /syz3: [ 205.943381][T13663] pim6reg1: entered promiscuous mode [ 205.954928][T13663] pim6reg1: entered allmulticast mode [ 206.056359][T13672] loop1: detected capacity change from 0 to 2048 [ 206.070062][T13677] pim6reg1: entered promiscuous mode [ 206.075484][T13677] pim6reg1: entered allmulticast mode [ 206.099716][T13672] loop1: p1 < > p4 [ 206.104481][T13672] loop1: p4 size 8388608 extends beyond EOD, truncated [ 206.127579][T13678] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 206.137858][T13678] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 206.247217][T13681] loop0: detected capacity change from 0 to 128 [ 206.269145][T13681] ext4 filesystem being mounted at /442/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 206.373538][T13688] loop1: detected capacity change from 0 to 2048 [ 206.381974][T13688] EXT4-fs: Ignoring removed orlov option [ 206.466437][T13693] loop0: detected capacity change from 0 to 512 [ 206.478250][T13693] EXT4-fs: Ignoring removed nomblk_io_submit option [ 206.528435][T13693] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 206.537302][T13693] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=1842c01c, mo2=0002] [ 206.564685][T13693] EXT4-fs (loop0): couldn't mount RDWR because of unsupported optional features (80) [ 206.576042][T13693] EXT4-fs (loop0): Skipping orphan cleanup due to unknown ROCOMPAT features [ 206.585966][ T6944] cache 540672 [ 206.589554][ T6944] rss 0 [ 206.592829][ T6944] shmem 0 [ 206.596131][ T6944] mapped_file 593920 [ 206.600378][ T6944] dirty 540672 [ 206.603881][ T6944] writeback 0 [ 206.607323][ T6944] workingset_refault_anon 148 [ 206.612505][ T6944] workingset_refault_file 472 [ 206.617662][ T6944] swap 204800 [ 206.621031][ T6944] swapcached 4096 [ 206.625451][ T6944] pgpgin 150757 [ 206.630716][ T6944] pgpgout 150623 [ 206.634526][ T6944] pgfault 171835 [ 206.638092][ T6944] pgmajfault 73 [ 206.641894][ T6944] inactive_anon 0 [ 206.646053][ T6944] active_anon 0 [ 206.649863][ T6944] inactive_file 544768 [ 206.654307][ T6944] active_file 0 [ 206.658499][ T6944] unevictable 0 [ 206.663554][ T6944] hierarchical_memory_limit 314572800 [ 206.670372][ T6944] hierarchical_memsw_limit 9223372036854771712 [ 206.677336][ T6944] total_cache 540672 [ 206.681377][ T6944] total_rss 0 [ 206.685062][ T6944] total_shmem 0 [ 206.688548][ T6944] total_mapped_file 593920 [ 206.693409][ T6944] total_dirty 540672 [ 206.697545][ T6944] total_writeback 0 [ 206.701415][ T6944] total_workingset_refault_anon 148 [ 206.706719][ T6944] total_workingset_refault_file 472 [ 206.711993][ T6944] total_swap 204800 [ 206.715802][ T6944] total_swapcached 4096 [ 206.720106][ T6944] total_pgpgin 150757 [ 206.724324][ T6944] total_pgpgout 150623 [ 206.728997][ T6944] total_pgfault 171835 [ 206.733221][ T6944] total_pgmajfault 73 [ 206.737206][ T6944] total_inactive_anon 0 [ 206.741868][ T6944] total_active_anon 0 [ 206.746494][ T6944] total_inactive_file 544768 [ 206.751766][ T6944] total_active_file 0 [ 206.755851][ T6944] total_unevictable 0 [ 206.760145][ T6944] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.3455,pid=13598,uid=0 [ 206.775900][ T6944] Memory cgroup out of memory: Killed process 13598 (syz.3.3455) total-vm:87120kB, anon-rss:696kB, file-rss:16220kB, shmem-rss:0kB, UID:0 pgtables:108kB oom_score_adj:1000 [ 206.797951][T13693] EXT4-fs (loop0): couldn't mount RDWR because of unsupported optional features (80) [ 206.858030][T13714] loop3: detected capacity change from 0 to 1024 [ 206.865083][T13714] journal_path: Lookup failure for './file1' [ 206.871440][T13714] EXT4-fs: error: could not find journal device path [ 206.921688][T13719] loop4: detected capacity change from 0 to 2048 [ 206.923707][T13720] loop3: detected capacity change from 0 to 2048 [ 206.940307][T13719] EXT4-fs (loop4): failed to initialize system zone (-117) [ 206.947759][T13719] EXT4-fs (loop4): mount failed [ 206.969737][T13720] loop3: p1 < > p4 [ 206.974303][T13720] loop3: p4 size 8388608 extends beyond EOD, truncated [ 206.994369][T13724] loop4: detected capacity change from 0 to 512 [ 207.011276][T13724] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0002] [ 207.019938][T13724] System zones: 0-2, 18-18, 34-35 [ 207.026846][T13724] ext4 filesystem being mounted at /553/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 207.210263][T13734] loop3: detected capacity change from 0 to 512 [ 207.212657][T13736] netlink: 9 bytes leftover after parsing attributes in process `syz.4.3504'. [ 207.269976][T13743] loop4: detected capacity change from 0 to 1024 [ 207.277280][T13743] journal_path: Lookup failure for './file1' [ 207.283627][T13743] EXT4-fs: error: could not find journal device path [ 207.316798][T13747] pim6reg1: entered promiscuous mode [ 207.322512][T13747] pim6reg1: entered allmulticast mode [ 207.352780][T13748] team0: Device ipvlan2 failed to register rx_handler [ 207.363960][T13750] loop3: detected capacity change from 0 to 2048 [ 207.390260][T13750] EXT4-fs (loop3): failed to initialize system zone (-117) [ 207.397850][T13750] EXT4-fs (loop3): mount failed [ 207.458432][T13754] loop4: detected capacity change from 0 to 512 [ 207.472190][T13754] ext4 filesystem being mounted at /558/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 207.506090][T13759] loop3: detected capacity change from 0 to 512 [ 207.582177][T13764] loop4: detected capacity change from 0 to 512 [ 207.652876][T13772] loop3: detected capacity change from 0 to 512 [ 207.680259][T13772] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0002] [ 207.700025][T13772] System zones: 0-2, 18-18, 34-35 [ 207.712821][T13772] ext4 filesystem being mounted at /509/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 207.787063][T13778] loop4: detected capacity change from 0 to 8192 [ 207.795519][T13780] loop1: detected capacity change from 0 to 1024 [ 207.809263][T13780] journal_path: Lookup failure for './file1' [ 207.816105][T13780] EXT4-fs: error: could not find journal device path [ 207.846393][T13782] (unnamed net_device) (uninitialized): option lacp_rate: invalid value (64) [ 207.931860][T13788] netlink: 9 bytes leftover after parsing attributes in process `syz.1.3524'. [ 207.967934][T13790] loop1: detected capacity change from 0 to 512 [ 208.048340][T13796] netlink: 'syz.1.3527': attribute type 10 has an invalid length. [ 208.072112][T13796] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 208.079092][T13740] syz.0.3505 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 208.092197][T13740] CPU: 1 UID: 0 PID: 13740 Comm: syz.0.3505 Not tainted 6.11.0-rc6-syzkaller-00183-gb831f83e40a2 #0 [ 208.100083][T13796] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 208.105191][T13740] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 208.129394][T13740] Call Trace: [ 208.133629][T13740] [ 208.136943][T13740] dump_stack_lvl+0xf2/0x150 [ 208.144690][T13740] dump_stack+0x15/0x20 [ 208.149806][T13740] dump_header+0x83/0x2d0 [ 208.155475][T13740] oom_kill_process+0x341/0x4c0 [ 208.160981][T13740] out_of_memory+0x9af/0xbe0 [ 208.166684][T13740] ? __rcu_read_unlock+0x4e/0x70 [ 208.172179][T13740] mem_cgroup_out_of_memory+0x13e/0x190 [ 208.178953][T13740] try_charge_memcg+0x51b/0x810 [ 208.184414][T13740] mem_cgroup_swapin_charge_folio+0x107/0x1a0 [ 208.191252][T13740] __read_swap_cache_async+0x2b7/0x520 [ 208.197433][T13740] swap_cluster_readahead+0x276/0x3f0 [ 208.203210][T13740] swapin_readahead+0xe4/0x760 [ 208.208321][T13740] ? __filemap_get_folio+0x420/0x5b0 [ 208.214445][T13740] ? swap_cache_get_folio+0x77/0x210 [ 208.219962][T13740] do_swap_page+0x3da/0x1ef0 [ 208.225218][T13740] ? mtree_range_walk+0x1b4/0x460 [ 208.230702][T13740] ? __rcu_read_lock+0x36/0x50 [ 208.235835][T13740] ? pte_offset_map_nolock+0x124/0x1d0 [ 208.242313][T13740] handle_mm_fault+0x8cb/0x2a30 [ 208.247270][T13740] exc_page_fault+0x3b9/0x650 [ 208.252147][T13740] asm_exc_page_fault+0x26/0x30 [ 208.257063][T13740] RIP: 0033:0x7f6edfd409fe [ 208.262568][T13740] Code: 0c 85 c0 74 e7 48 89 df 48 81 c3 d8 00 00 00 e8 18 ed ff ff 48 39 dd 75 df 0f 1f 00 8b 05 96 70 2e 00 85 c0 0f 8e 35 fd ff ff cd e4 fe ff 49 39 c4 73 a0 48 8d 1d 71 55 2e 00 83 3d 76 70 2e [ 208.285099][T13740] RSP: 002b:00007ffd6aea60e0 EFLAGS: 00010202 [ 208.292406][T13740] RAX: 0000000000000001 RBX: 00007f6ee0027a80 RCX: 0000000000000000 [ 208.301516][T13740] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000555593383808 [ 208.311060][T13740] RBP: 00007f6ee0027a80 R08: 0000000000000000 R09: 7fffffffffffffff [ 208.319758][T13740] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000032cd1 [ 208.329008][T13740] R13: 00007ffd6aea61e0 R14: 0000000000000032 R15: ffffffffffffffff [ 208.337537][T13740] [ 208.341143][T13740] memory: usage 307200kB, limit 307200kB, failcnt 1199 [ 208.349557][T13740] memory+swap: usage 307580kB, limit 9007199254740988kB, failcnt 0 [ 208.357886][T13740] kmem: usage 306948kB, limit 9007199254740988kB, failcnt 0 [ 208.365757][T13740] Memory cgroup stats for /syz0: [ 208.366045][T13740] cache 245760 [ 208.375052][T13740] rss 0 [ 208.378805][T13740] shmem 0 [ 208.381959][T13740] mapped_file 5025792 [ 208.386031][T13740] dirty 245760 [ 208.391477][T13740] writeback 0 [ 208.395999][T13740] workingset_refault_anon 183 [ 208.402007][T13740] workingset_refault_file 344 [ 208.408563][T13740] swap 389120 [ 208.412410][T13740] swapcached 12288 [ 208.416450][T13740] pgpgin 134172 [ 208.420308][T13740] pgpgout 134109 [ 208.424148][T13740] pgfault 184342 [ 208.428357][T13740] pgmajfault 70 [ 208.431967][T13740] inactive_anon 12288 [ 208.436183][T13740] active_anon 0 [ 208.440692][T13740] inactive_file 245760 [ 208.446092][T13740] active_file 0 [ 208.450049][T13740] unevictable 0 [ 208.454858][T13740] hierarchical_memory_limit 314572800 [ 208.460441][T13740] hierarchical_memsw_limit 9223372036854771712 [ 208.466914][T13740] total_cache 245760 [ 208.471163][T13740] total_rss 0 [ 208.474576][T13740] total_shmem 0 [ 208.478185][T13740] total_mapped_file 5025792 [ 208.483243][T13740] total_dirty 245760 [ 208.487506][T13740] total_writeback 0 [ 208.491543][T13740] total_workingset_refault_anon 183 [ 208.498365][T13740] total_workingset_refault_file 344 [ 208.504389][T13740] total_swap 389120 [ 208.508403][T13740] total_swapcached 12288 [ 208.512804][T13740] total_pgpgin 134172 [ 208.517017][T13740] total_pgpgout 134109 [ 208.521207][T13740] total_pgfault 184342 [ 208.525512][T13740] total_pgmajfault 70 [ 208.530483][T13740] total_inactive_anon 12288 [ 208.534992][T13740] total_active_anon 0 [ 208.540693][T13740] total_inactive_file 245760 [ 208.546327][T13740] total_active_file 0 [ 208.550742][T13740] total_unevictable 0 [ 208.555047][T13740] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.3161,pid=12793,uid=0 [ 208.572232][T13740] Memory cgroup out of memory: Killed process 12793 (syz.0.3161) total-vm:93600kB, anon-rss:604kB, file-rss:19080kB, shmem-rss:0kB, UID:0 pgtables:100kB oom_score_adj:1000 [ 208.653661][T13805] pim6reg1: entered promiscuous mode [ 208.660593][T13805] pim6reg1: entered allmulticast mode [ 208.768197][T13818] (unnamed net_device) (uninitialized): option lacp_rate: invalid value (64) [ 208.793620][T13820] pim6reg1: entered promiscuous mode [ 208.799387][T13820] pim6reg1: entered allmulticast mode [ 208.986301][T13830] loop4: detected capacity change from 0 to 512 [ 209.018012][T13835] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3543'. [ 209.100388][T13849] netlink: 9 bytes leftover after parsing attributes in process `syz.3.3550'. [ 209.172922][T13861] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3555'. [ 209.212599][T13863] pim6reg1: entered promiscuous mode [ 209.218087][T13863] pim6reg1: entered allmulticast mode [ 209.307858][T13871] loop2: detected capacity change from 0 to 8192 [ 209.331429][T13877] netlink: 'syz.0.3562': attribute type 10 has an invalid length. [ 209.351049][T13880] loop3: detected capacity change from 0 to 512 [ 209.370363][T13877] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 209.395042][T13877] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 209.427773][T13884] team0: Device ipvlan2 failed to register rx_handler [ 209.441256][T13887] loop3: detected capacity change from 0 to 512 [ 209.473198][T13887] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0002] [ 209.481994][T13887] System zones: 0-2, 18-18, 34-35 [ 209.503352][T13887] ext4 filesystem being mounted at /519/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 209.603387][T13898] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3568'. [ 209.796894][ T29] kauditd_printk_skb: 185 callbacks suppressed [ 209.796910][ T29] audit: type=1326 audit(1725670368.156:32212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13910 comm="syz.4.3574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe58063cef9 code=0x7ffc0000 [ 209.806368][T13913] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3575'. [ 209.858069][T13913] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3575'. [ 209.862246][T13911] loop4: detected capacity change from 0 to 2048 [ 209.892303][ T29] audit: type=1326 audit(1725670368.196:32213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13910 comm="syz.4.3574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe58063cef9 code=0x7ffc0000 [ 209.899881][T13911] EXT4-fs: Ignoring removed orlov option [ 209.921343][ T29] audit: type=1326 audit(1725670368.196:32214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13910 comm="syz.4.3574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fe58063cef9 code=0x7ffc0000 [ 209.956526][ T29] audit: type=1326 audit(1725670368.196:32215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13910 comm="syz.4.3574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe58063cef9 code=0x7ffc0000 [ 209.956561][ T29] audit: type=1326 audit(1725670368.196:32216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13910 comm="syz.4.3574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fe58063cef9 code=0x7ffc0000 [ 210.019632][ T29] audit: type=1326 audit(1725670368.196:32217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13910 comm="syz.4.3574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fe58063cf33 code=0x7ffc0000 [ 210.051181][ T29] audit: type=1326 audit(1725670368.216:32218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13910 comm="syz.4.3574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fe58063b9df code=0x7ffc0000 [ 210.077624][ T29] audit: type=1326 audit(1725670368.216:32219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13910 comm="syz.4.3574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fe58063cf87 code=0x7ffc0000 [ 210.103871][ T29] audit: type=1326 audit(1725670368.216:32220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13910 comm="syz.4.3574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe58063b890 code=0x7ffc0000 [ 210.131006][ T29] audit: type=1326 audit(1725670368.216:32221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13910 comm="syz.4.3574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe58063cafb code=0x7ffc0000 [ 210.201586][T13928] loop3: detected capacity change from 0 to 512 [ 210.244318][T13268] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 210.257738][T13268] CPU: 0 UID: 0 PID: 13268 Comm: syz-executor Not tainted 6.11.0-rc6-syzkaller-00183-gb831f83e40a2 #0 [ 210.271517][T13268] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 210.283900][T13268] Call Trace: [ 210.288781][T13268] [ 210.292489][T13268] dump_stack_lvl+0xf2/0x150 [ 210.299591][T13268] dump_stack+0x15/0x20 [ 210.304370][T13268] dump_header+0x83/0x2d0 [ 210.310088][T13268] oom_kill_process+0x341/0x4c0 [ 210.317605][T13268] out_of_memory+0x9af/0xbe0 [ 210.322924][T13268] ? __rcu_read_unlock+0x4e/0x70 [ 210.329154][T13268] mem_cgroup_out_of_memory+0x13e/0x190 [ 210.335759][T13268] try_charge_memcg+0x51b/0x810 [ 210.341572][T13268] mem_cgroup_swapin_charge_folio+0x107/0x1a0 [ 210.348826][T13268] __read_swap_cache_async+0x2b7/0x520 [ 210.355212][T13268] swap_cluster_readahead+0x276/0x3f0 [ 210.361525][T13268] swapin_readahead+0xe4/0x760 [ 210.367248][T13268] ? __filemap_get_folio+0x420/0x5b0 [ 210.373392][T13268] ? swap_cache_get_folio+0x77/0x210 [ 210.380006][T13268] do_swap_page+0x3da/0x1ef0 [ 210.385192][T13268] ? filemap_fault+0x766/0xa60 [ 210.390750][T13268] ? cgroup_rstat_updated+0x99/0x550 [ 210.396990][T13268] ? __rcu_read_lock+0x36/0x50 [ 210.402501][T13268] ? pte_offset_map_nolock+0x124/0x1d0 [ 210.408533][T13268] handle_mm_fault+0x8cb/0x2a30 [ 210.414457][T13268] exc_page_fault+0x3b9/0x650 [ 210.420388][T13268] asm_exc_page_fault+0x26/0x30 [ 210.428918][T13268] RIP: 0033:0x7f134fd73027 [ 210.435244][T13268] Code: d7 82 de 1b 43 48 f7 a4 24 88 00 00 00 48 8b 05 7f 27 e1 00 48 69 8c 24 80 00 00 00 e8 03 00 00 48 c1 ea 12 48 01 ca 8b 48 08 <39> 4c 24 18 48 89 d0 4c 0f 45 ea 4c 29 f0 48 3b 05 64 26 e1 00 73 [ 210.459684][T13268] RSP: 002b:00007ffcdd3ed2e0 EFLAGS: 00010202 [ 210.466760][T13268] RAX: 0000001b30c20000 RBX: 0000000000000041 RCX: 000000000000000c [ 210.478269][T13268] RDX: 0000000000033486 RSI: 00007ffcdd3ed360 RDI: 0000000000000001 [ 210.486537][T13268] RBP: 00007ffcdd3ed30c R08: 00000000034444f1 R09: 7fffffffffffffff [ 210.496589][T13268] R10: 00007f135002a0b8 R11: 00007f135002a080 R12: 0000000000000032 [ 210.506382][T13268] R13: 000000000003329b R14: 00000000000331c6 R15: 00007ffcdd3ed360 [ 210.516234][T13268] [ 210.520042][T13268] memory: usage 307196kB, limit 307200kB, failcnt 1229 [ 210.521327][T13934] syz.0.3581[13934] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 210.529001][T13268] memory+swap: usage 307392kB, limit 9007199254740988kB, failcnt 0 [ 210.529031][T13268] kmem: usage 307168kB, limit 9007199254740988kB, failcnt 0 [ 210.542828][T13934] syz.0.3581[13934] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 210.554100][T13268] Memory cgroup stats for /syz2: [ 210.589779][T13932] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3580'. [ 210.607824][T13268] cache 8192 [ 210.611982][T13268] rss 8192 [ 210.615632][T13268] shmem 0 [ 210.618841][T13268] mapped_file 53248 [ 210.623513][T13268] dirty 0 [ 210.627787][T13268] writeback 8192 [ 210.632807][T13268] workingset_refault_anon 128 [ 210.638757][T13268] workingset_refault_file 187 [ 210.644529][T13268] swap 196608 [ 210.648324][T13268] swapcached 20480 [ 210.652374][T13268] pgpgin 232394 [ 210.656337][T13268] pgpgout 232386 [ 210.661098][T13268] pgfault 275532 [ 210.664862][T13268] pgmajfault 51 [ 210.668945][T13268] inactive_anon 20480 [ 210.676126][T13268] active_anon 0 [ 210.679790][T13268] inactive_file 12288 [ 210.683919][T13268] active_file 0 [ 210.689513][T13268] unevictable 0 [ 210.694485][T13268] hierarchical_memory_limit 314572800 [ 210.700889][T13268] hierarchical_memsw_limit 9223372036854771712 [ 210.708039][T13268] total_cache 8192 [ 210.713181][T13268] total_rss 8192 [ 210.716883][T13268] total_shmem 0 [ 210.721659][T13268] total_mapped_file 53248 [ 210.726613][T13268] total_dirty 0 [ 210.730221][T13268] total_writeback 8192 [ 210.735095][T13268] total_workingset_refault_anon 128 [ 210.740723][T13268] total_workingset_refault_file 187 [ 210.746405][T13268] total_swap 196608 [ 210.750487][T13268] total_swapcached 20480 [ 210.755147][T13268] total_pgpgin 232394 [ 210.759560][T13268] total_pgpgout 232386 [ 210.765399][T13268] total_pgfault 275532 [ 210.770598][T13268] total_pgmajfault 51 [ 210.774928][T13268] total_inactive_anon 20480 [ 210.779719][T13268] total_active_anon 0 [ 210.784533][T13268] total_inactive_file 12288 [ 210.790498][T13268] total_active_file 0 [ 210.795209][T13268] total_unevictable 0 [ 210.799722][T13268] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.3564,pid=13881,uid=0 [ 210.816521][T13268] Memory cgroup out of memory: Killed process 13881 (syz.2.3564) total-vm:87120kB, anon-rss:604kB, file-rss:16168kB, shmem-rss:0kB, UID:0 pgtables:112kB oom_score_adj:1000 [ 210.849534][T13937] loop1: detected capacity change from 0 to 1024 [ 210.861094][T13937] EXT4-fs: test_dummy_encryption option not supported [ 210.987173][T13942] loop4: detected capacity change from 0 to 8192 [ 211.001602][T13946] loop3: detected capacity change from 0 to 512 [ 211.029759][T13942] loop4: p1 p3 p4 < > [ 211.034343][T13942] loop4: p1 size 125763453 extends beyond EOD, truncated [ 211.048022][T13946] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0002] [ 211.075526][T13946] System zones: 0-2, 18-18, 34-35 [ 211.075585][T13942] loop4: p3 start 65530 is beyond EOD, truncated [ 211.092265][T13946] ext4 filesystem being mounted at /525/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 211.100314][T13948] loop1: detected capacity change from 0 to 2048 [ 211.135457][T13948] EXT4-fs: Ignoring removed orlov option [ 211.215280][T13956] loop4: detected capacity change from 0 to 2048 [ 211.241743][T13956] EXT4-fs (loop4): failed to initialize system zone (-117) [ 211.250757][T13956] EXT4-fs (loop4): mount failed [ 211.352535][T13968] loop2: detected capacity change from 0 to 512 [ 211.364309][T13970] loop3: detected capacity change from 0 to 2048 [ 211.372981][T13970] EXT4-fs: Ignoring removed orlov option [ 211.418548][T13972] loop4: detected capacity change from 0 to 8192 [ 211.450081][T13972] loop4: p1 p3 p4 < > [ 211.455276][T13972] loop4: p1 size 125763453 extends beyond EOD, truncated [ 211.465988][T13972] loop4: p3 start 65530 is beyond EOD, truncated [ 211.479636][T13981] netlink: 9 bytes leftover after parsing attributes in process `syz.3.3598'. [ 211.520938][T13985] loop3: detected capacity change from 0 to 512 [ 211.527232][T13988] loop4: detected capacity change from 0 to 512 [ 211.544290][T13977] loop2: detected capacity change from 0 to 1024 [ 211.551974][T13977] journal_path: Lookup failure for './file1' [ 211.560128][T13977] EXT4-fs: error: could not find journal device path [ 211.588335][T13992] loop3: detected capacity change from 0 to 512 [ 211.616201][T13992] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0002] [ 211.626085][T13992] System zones: 0-2, 18-18, 34-35 [ 211.635952][T13992] ext4 filesystem being mounted at /531/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 211.652095][T13991] loop4: detected capacity change from 0 to 8192 [ 211.667073][T13996] loop2: detected capacity change from 0 to 2048 [ 211.691780][T13996] EXT4-fs (loop2): failed to initialize system zone (-117) [ 211.709045][T13996] EXT4-fs (loop2): mount failed [ 211.779603][T14002] loop2: detected capacity change from 0 to 512 [ 211.860965][T14008] loop4: detected capacity change from 0 to 2048 [ 211.869377][T14010] pim6reg1: entered promiscuous mode [ 211.875092][T14010] pim6reg1: entered allmulticast mode [ 211.877744][T14008] EXT4-fs: Ignoring removed orlov option [ 211.913638][T14012] veth0_vlan: entered allmulticast mode [ 212.034278][T14021] loop2: detected capacity change from 0 to 8192 [ 212.034624][T14012] loop3: detected capacity change from 0 to 1024 [ 212.069207][T14021] loop2: p1 p3 p4 < > [ 212.073849][T14021] loop2: p1 size 125763453 extends beyond EOD, truncated [ 212.075507][T14012] journal_path: Lookup failure for './file1' [ 212.084216][T14021] loop2: p3 start 65530 is beyond EOD, [ 212.088384][T14012] EXT4-fs: error: could not find journal device path [ 212.094488][T14021] truncated [ 212.205118][T14031] loop2: detected capacity change from 0 to 8192 [ 212.288236][T14039] loop2: detected capacity change from 0 to 512 [ 212.323848][T14041] loop1: detected capacity change from 0 to 512 [ 212.332369][T14044] loop3: detected capacity change from 0 to 512 [ 212.350514][T14044] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0002] [ 212.370538][T14050] Falling back ldisc for ptm0. [ 212.376938][T14044] System zones: 0-2, 18-18, 34-35 [ 212.391477][T14044] ext4 filesystem being mounted at /534/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 212.412628][T14056] loop2: detected capacity change from 0 to 512 [ 212.420631][T14056] EXT4-fs: Ignoring removed nomblk_io_submit option [ 212.430018][T14056] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 212.444686][T14056] EXT4-fs (loop2): 1 truncate cleaned up [ 212.541951][T14064] netlink: 9 bytes leftover after parsing attributes in process `syz.1.3625'. [ 212.603686][T14068] netlink: 9 bytes leftover after parsing attributes in process `syz.0.3628'. [ 212.624184][T14070] netlink: 'syz.1.3629': attribute type 10 has an invalid length. [ 212.729446][T14077] pim6reg1: entered promiscuous mode [ 212.736212][T14077] pim6reg1: entered allmulticast mode [ 212.755373][T14073] loop2: detected capacity change from 0 to 8192 [ 212.777418][T14082] loop3: detected capacity change from 0 to 128 [ 212.788239][T14082] vfat: Unknown parameter '00000000000000000000' [ 212.809368][T14073] loop2: p1 p3 p4 < > [ 212.814445][T14073] loop2: p1 size 125763453 extends beyond EOD, truncated [ 212.815111][T14073] loop2: p3 start 65530 is beyond EOD, truncated [ 212.826004][T14087] netlink: 'syz.1.3636': attribute type 10 has an invalid length. [ 212.954108][T14100] netlink: 'syz.3.3642': attribute type 10 has an invalid length. [ 212.996798][T14105] team0: Device ipvlan2 failed to register rx_handler [ 213.030676][T14110] loop3: detected capacity change from 0 to 512 [ 213.062042][T14104] vlan0: entered allmulticast mode [ 213.070850][T14109] loop1: detected capacity change from 0 to 512 [ 213.078141][T14109] EXT4-fs: Ignoring removed nomblk_io_submit option [ 213.085957][T14110] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0002] [ 213.086333][T14104] bond0: entered allmulticast mode [ 213.100566][T14104] bond_slave_0: entered allmulticast mode [ 213.107752][T14104] bond_slave_1: entered allmulticast mode [ 213.108991][T14110] System zones: 0-2, 18-18, 34-35 [ 213.126445][T14114] loop0: detected capacity change from 0 to 512 [ 213.134030][T14104] bond0: left allmulticast mode [ 213.134722][T14114] EXT4-fs: Ignoring removed nomblk_io_submit option [ 213.139305][T14104] bond_slave_0: left allmulticast mode [ 213.139325][T14104] bond_slave_1: left allmulticast mode [ 213.160168][T14109] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 213.162196][T14110] ext4 filesystem being mounted at /537/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 213.169134][T14109] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=1842c01c, mo2=0002] [ 213.199264][T14114] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 213.201401][T14109] EXT4-fs (loop1): couldn't mount RDWR because of unsupported optional features (80) [ 213.208387][T14114] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=1842c01c, mo2=0002] [ 213.218108][T14109] EXT4-fs (loop1): Skipping orphan cleanup due to unknown ROCOMPAT features [ 213.259096][T14114] EXT4-fs (loop0): couldn't mount RDWR because of unsupported optional features (80) [ 213.272195][T14114] EXT4-fs (loop0): Skipping orphan cleanup due to unknown ROCOMPAT features [ 213.322631][T14109] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: none. [ 213.334969][T14114] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: none. [ 213.351947][T14109] EXT4-fs (loop1): couldn't mount RDWR because of unsupported optional features (80) [ 213.359014][T14114] EXT4-fs (loop0): couldn't mount RDWR because of unsupported optional features (80) [ 213.490009][T14123] loop2: detected capacity change from 0 to 8192 [ 213.542931][T14123] loop2: p1 p3 p4 < > [ 213.549397][T14123] loop2: p1 size 125763453 extends beyond EOD, truncated [ 213.558541][T14123] loop2: p3 start 65530 is beyond EOD, truncated [ 213.634982][T14129] loop2: detected capacity change from 0 to 2048 [ 213.667007][T14095] syz.4.3638 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 213.679433][T14095] CPU: 0 UID: 0 PID: 14095 Comm: syz.4.3638 Not tainted 6.11.0-rc6-syzkaller-00183-gb831f83e40a2 #0 [ 213.691236][T14095] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 213.692839][T14133] pim6reg1: entered promiscuous mode [ 213.703410][T14095] Call Trace: [ 213.703425][T14095] [ 213.703435][T14095] dump_stack_lvl+0xf2/0x150 [ 213.703473][T14095] dump_stack+0x15/0x20 [ 213.710235][T14133] pim6reg1: entered allmulticast mode [ 213.713604][T14095] dump_header+0x83/0x2d0 [ 213.713699][T14095] oom_kill_process+0x341/0x4c0 [ 213.713748][T14095] out_of_memory+0x9af/0xbe0 [ 213.748527][T14095] ? __rcu_read_unlock+0x4e/0x70 [ 213.754042][T14095] mem_cgroup_out_of_memory+0x13e/0x190 [ 213.760590][T14095] try_charge_memcg+0x51b/0x810 [ 213.765923][T14095] mem_cgroup_swapin_charge_folio+0x107/0x1a0 [ 213.772506][T14095] __read_swap_cache_async+0x2b7/0x520 [ 213.778489][T14095] swap_cluster_readahead+0x276/0x3f0 [ 213.783996][T14095] swapin_readahead+0xe4/0x760 [ 213.788997][T14095] ? __filemap_get_folio+0x420/0x5b0 [ 213.794896][T14095] ? swap_cache_get_folio+0x77/0x210 [ 213.800836][T14095] do_swap_page+0x3da/0x1ef0 [ 213.805789][T14095] ? cgroup_rstat_updated+0x99/0x550 [ 213.811281][T14095] ? __rcu_read_lock+0x36/0x50 [ 213.816289][T14095] ? pte_offset_map_nolock+0x124/0x1d0 [ 213.821921][T14095] handle_mm_fault+0x8cb/0x2a30 [ 213.827679][T14095] exc_page_fault+0x3b9/0x650 [ 213.832595][T14095] asm_exc_page_fault+0x26/0x30 [ 213.837504][T14095] RIP: 0033:0x7fe58066ef93 [ 213.842833][T14095] Code: 7a 07 00 48 8d 3d 96 7a 07 00 e8 38 48 f6 ff 0f 1f 84 00 00 00 00 00 83 ff 03 74 7b 83 ff 02 b8 fa ff ff ff 49 89 ca 0f 44 f8 <80> 3d 9e 15 15 00 00 74 14 b8 e6 00 00 00 0f 05 f7 d8 c3 66 2e 0f [ 213.864999][T14095] RSP: 002b:00007ffdd6b1bad8 EFLAGS: 00010293 [ 213.871446][T14095] RAX: 00000000fffffffa RBX: 00007fe5807f5f80 RCX: 0000000000000000 [ 213.880106][T14095] RDX: 00007ffdd6b1baf0 RSI: 0000000000000000 RDI: 0000000000000000 [ 213.889685][T14095] RBP: 00007fe5807f7a80 R08: 000000002442c681 R09: 7fffffffffffffff [ 213.898838][T14095] R10: 0000000000000000 R11: 00007fe581337080 R12: 00000000000342d5 [ 213.907197][T14095] R13: 00007ffdd6b1bc20 R14: 0000000000000032 R15: ffffffffffffffff [ 213.915303][T14095] [ 213.918529][T14095] memory: usage 307196kB, limit 307200kB, failcnt 12324 [ 213.925890][T14095] memory+swap: usage 304452kB, limit 9007199254740988kB, failcnt 0 [ 213.934130][T14095] kmem: usage 290404kB, limit 9007199254740988kB, failcnt 0 [ 213.941690][T14095] Memory cgroup stats for /syz4: [ 213.944367][T14095] cache 122880 [ 213.952756][T14095] rss 4096 [ 213.955798][T14095] shmem 0 [ 213.959228][T14095] mapped_file 176128 [ 213.963471][T14095] dirty 122880 [ 213.966986][T14095] writeback 12288 [ 213.970655][T14095] workingset_refault_anon 57 [ 213.975470][T14095] workingset_refault_file 10395 [ 213.980349][T14095] swap 385024 [ 213.983737][T14095] swapcached 12288 [ 213.987544][T14095] pgpgin 226520 [ 213.991039][T14095] pgpgout 226485 [ 213.994604][T14095] pgfault 228073 [ 213.998549][T14095] pgmajfault 55 [ 214.002172][T14095] inactive_anon 12288 [ 214.006170][T14095] active_anon 0 [ 214.009722][T14095] inactive_file 122880 [ 214.013898][T14095] active_file 8192 [ 214.017646][T14095] unevictable 0 [ 214.021240][T14095] hierarchical_memory_limit 314572800 [ 214.027055][T14095] hierarchical_memsw_limit 9223372036854771712 [ 214.033299][T14095] total_cache 122880 [ 214.037197][T14095] total_rss 4096 [ 214.040961][T14095] total_shmem 0 [ 214.045489][T14095] total_mapped_file 176128 [ 214.050536][T14095] total_dirty 122880 [ 214.054534][T14095] total_writeback 12288 [ 214.059204][T14095] total_workingset_refault_anon 57 [ 214.064376][T14095] total_workingset_refault_file 10395 [ 214.071017][T14095] total_swap 385024 [ 214.075461][T14095] total_swapcached 12288 [ 214.079796][T14095] total_pgpgin 226520 [ 214.081700][T14129] EXT4-fs (loop2): failed to initialize system zone (-117) [ 214.084040][T14095] total_pgpgout 226485 [ 214.084053][T14095] total_pgfault 228073 [ 214.084062][T14095] total_pgmajfault 55 [ 214.091456][T14129] EXT4-fs (loop2): mount failed [ 214.095444][T14095] total_inactive_anon 12288 [ 214.095457][T14095] total_active_anon 0 [ 214.095466][T14095] total_inactive_file 122880 [ 214.122792][T14095] total_active_file 8192 [ 214.127312][T14095] total_unevictable 0 [ 214.131329][T14095] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.3638,pid=14095,uid=0 [ 214.150334][T14095] Memory cgroup out of memory: Killed process 14095 (syz.4.3638) total-vm:87120kB, anon-rss:568kB, file-rss:16220kB, shmem-rss:0kB, UID:0 pgtables:108kB oom_score_adj:1000 [ 214.261366][T14146] ip6tnl0: Master is either lo or non-ether device [ 214.287516][T14151] loop0: detected capacity change from 0 to 2048 [ 214.297345][T14150] netlink: 'syz.4.3658': attribute type 10 has an invalid length. [ 214.297399][T14151] EXT4-fs: Ignoring removed orlov option [ 214.346195][T14152] loop1: detected capacity change from 0 to 8192 [ 214.355271][T14150] team0: Port device batadv0 removed [ 214.363888][T14150] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 214.373621][T14152] loop1: p1 p3 p4 < > [ 214.375697][T14150] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 214.379647][T14152] loop1: p1 size 125763453 extends beyond EOD, truncated [ 214.394144][T14157] netlink: 'syz.2.3661': attribute type 10 has an invalid length. [ 214.402168][T14152] loop1: p3 start 65530 is beyond EOD, truncated [ 214.428248][T14157] team0: Failed to send port change of device netdevsim1 via netlink (err -105) [ 214.453916][T14157] team0: Failed to send options change via netlink (err -105) [ 214.462024][T14157] team0: Port device netdevsim1 added [ 214.490593][T14163] loop1: detected capacity change from 0 to 2048 [ 214.512050][T14163] EXT4-fs (loop1): failed to initialize system zone (-117) [ 214.539018][T14163] EXT4-fs (loop1): mount failed [ 214.544995][T14166] __nla_validate_parse: 1 callbacks suppressed [ 214.545027][T14166] netlink: 9 bytes leftover after parsing attributes in process `syz.2.3663'. [ 214.568412][T14171] netlink: 9 bytes leftover after parsing attributes in process `syz.3.3664'. [ 214.610688][T14174] pim6reg1: entered promiscuous mode [ 214.616565][T14174] pim6reg1: entered allmulticast mode [ 214.669054][T14182] loop1: detected capacity change from 0 to 512 [ 214.677047][T14172] loop4: detected capacity change from 0 to 8192 [ 214.717320][T14183] team0: Device ipvlan2 failed to register rx_handler [ 214.791912][T14185] ip6tnl0: Master is either lo or non-ether device [ 214.800176][ T29] kauditd_printk_skb: 1019 callbacks suppressed [ 214.800190][ T29] audit: type=1326 audit(1725670373.166:33241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14149 comm="syz.0.3660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6edfe63ea7 code=0x7ffc0000 [ 214.805540][T14189] loop4: detected capacity change from 0 to 8192 [ 214.806875][ T29] audit: type=1326 audit(1725670373.166:33242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14149 comm="syz.0.3660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6edfe08859 code=0x7ffc0000 [ 214.848090][T14191] (unnamed net_device) (uninitialized): option lacp_rate: invalid value (64) [ 214.871602][ T29] audit: type=1326 audit(1725670373.166:33243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14149 comm="syz.0.3660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=17 compat=0 ip=0x7f6edfe6cef9 code=0x7ffc0000 [ 214.892557][T14191] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3674'. [ 214.950815][T14189] loop4: p1 p3 p4 < > [ 214.956036][T14189] loop4: p1 size 125763453 extends beyond EOD, truncated [ 214.966191][T14189] loop4: p3 start 65530 is beyond EOD, truncated [ 214.975833][ T29] audit: type=1326 audit(1725670373.276:33244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14149 comm="syz.0.3660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6edfe63ea7 code=0x7ffc0000 [ 215.001690][ T29] audit: type=1326 audit(1725670373.276:33245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14149 comm="syz.0.3660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6edfe08859 code=0x7ffc0000 [ 215.029325][ T29] audit: type=1326 audit(1725670373.276:33246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14149 comm="syz.0.3660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=17 compat=0 ip=0x7f6edfe6cef9 code=0x7ffc0000 [ 215.056314][ T29] audit: type=1326 audit(1725670373.296:33247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14149 comm="syz.0.3660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6edfe63ea7 code=0x7ffc0000 [ 215.082002][ T29] audit: type=1326 audit(1725670373.296:33248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14149 comm="syz.0.3660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6edfe08859 code=0x7ffc0000 [ 215.109019][ T29] audit: type=1326 audit(1725670373.296:33249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14149 comm="syz.0.3660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=17 compat=0 ip=0x7f6edfe6cef9 code=0x7ffc0000 [ 215.137009][ T29] audit: type=1326 audit(1725670373.316:33250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14149 comm="syz.0.3660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6edfe63ea7 code=0x7ffc0000 [ 215.229716][T14200] loop4: detected capacity change from 0 to 2048 [ 215.250107][T14200] EXT4-fs (loop4): failed to initialize system zone (-117) [ 215.257953][T14200] EXT4-fs (loop4): mount failed [ 215.290958][T14206] pim6reg1: entered promiscuous mode [ 215.296427][T14206] pim6reg1: entered allmulticast mode [ 215.340213][T14210] loop4: detected capacity change from 0 to 512 [ 215.411236][T14216] loop2: detected capacity change from 0 to 128 [ 215.430955][T14216] ext4 filesystem being mounted at /56/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 215.449113][T14219] loop4: detected capacity change from 0 to 512 [ 215.553880][T14234] (unnamed net_device) (uninitialized): option lacp_rate: invalid value (64) [ 215.586217][T14234] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3690'. [ 215.602874][T14236] loop4: detected capacity change from 0 to 2048 [ 215.624492][T14238] pim6reg1: entered promiscuous mode [ 215.631472][T14238] pim6reg1: entered allmulticast mode [ 215.640846][T14236] EXT4-fs (loop4): failed to initialize system zone (-117) [ 215.649769][T14236] EXT4-fs (loop4): mount failed [ 215.688995][T14242] netlink: 9 bytes leftover after parsing attributes in process `syz.4.3693'. [ 215.824857][T14250] loop0: detected capacity change from 0 to 512 [ 215.856305][ T3610] IPVS: starting estimator thread 0... [ 215.970008][T14255] IPVS: using max 2256 ests per chain, 112800 per kthread [ 216.004678][ T6944] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 216.016670][ T6944] CPU: 1 UID: 0 PID: 6944 Comm: syz-executor Not tainted 6.11.0-rc6-syzkaller-00183-gb831f83e40a2 #0 [ 216.028589][ T6944] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 216.039856][ T6944] Call Trace: [ 216.043173][ T6944] [ 216.046125][ T6944] dump_stack_lvl+0xf2/0x150 [ 216.053870][ T6944] dump_stack+0x15/0x20 [ 216.058273][ T6944] dump_header+0x83/0x2d0 [ 216.063776][ T6944] oom_kill_process+0x341/0x4c0 [ 216.069150][ T6944] out_of_memory+0x9af/0xbe0 [ 216.074536][ T6944] ? __rcu_read_unlock+0x4e/0x70 [ 216.079875][ T6944] mem_cgroup_out_of_memory+0x13e/0x190 [ 216.085826][ T6944] try_charge_memcg+0x51b/0x810 [ 216.091168][ T6944] mem_cgroup_swapin_charge_folio+0x107/0x1a0 [ 216.098353][ T6944] __read_swap_cache_async+0x2b7/0x520 [ 216.104144][ T6944] swap_cluster_readahead+0x276/0x3f0 [ 216.109868][ T6944] swapin_readahead+0xe4/0x760 [ 216.115324][ T6944] ? __filemap_get_folio+0x420/0x5b0 [ 216.122927][ T6944] ? swap_cache_get_folio+0x77/0x210 [ 216.129573][ T6944] do_swap_page+0x3da/0x1ef0 [ 216.135224][ T6944] ? hrtimer_start_range_ns+0x53d/0x580 [ 216.142776][ T6944] ? hrtimer_try_to_cancel+0x106/0x1d0 [ 216.149414][ T6944] ? __rcu_read_lock+0x36/0x50 [ 216.155124][ T6944] ? pte_offset_map_nolock+0x124/0x1d0 [ 216.161748][ T6944] handle_mm_fault+0x8cb/0x2a30 [ 216.168094][ T6944] exc_page_fault+0x3b9/0x650 [ 216.173199][ T6944] asm_exc_page_fault+0x26/0x30 [ 216.180920][ T6944] RIP: 0033:0x7f657bfdefa5 [ 216.185837][ T6944] Code: 00 00 00 00 00 83 ff 03 74 7b 83 ff 02 b8 fa ff ff ff 49 89 ca 0f 44 f8 80 3d 9e 15 15 00 00 74 14 b8 e6 00 00 00 0f 05 f7 d8 66 2e 0f 1f 84 00 00 00 00 00 48 83 ec 28 48 89 54 24 10 89 74 [ 216.208346][ T6944] RSP: 002b:00007ffee1a5dcf8 EFLAGS: 00010246 [ 216.215570][ T6944] RAX: 0000000000000000 RBX: 00000000000004c6 RCX: 00007f657bfdefa3 [ 216.224737][ T6944] RDX: 00007ffee1a5dd10 RSI: 0000000000000000 RDI: 0000000000000000 [ 216.234629][ T6944] RBP: 00007ffee1a5dd6c R08: 000000001871fad0 R09: 7fffffffffffffff [ 216.243505][ T6944] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000032 [ 216.252941][ T6944] R13: 000000000003477f R14: 0000000000034663 R15: 00007ffee1a5ddc0 [ 216.262887][ T6944] [ 216.266826][ T6944] memory: usage 307200kB, limit 307200kB, failcnt 11536 [ 216.275740][ T6944] memory+swap: usage 307384kB, limit 9007199254740988kB, failcnt 0 [ 216.285073][ T6944] kmem: usage 306620kB, limit 9007199254740988kB, failcnt 0 [ 216.295827][ T6944] Memory cgroup stats for /syz3: [ 216.320116][T14274] loop2: detected capacity change from 0 to 8192 [ 216.321193][ T3746] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.367163][T14246] chnl_net:caif_netlink_parms(): no params data found [ 216.384920][ T3746] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.417435][T14282] loop2: detected capacity change from 0 to 2048 [ 216.432722][T14283] (unnamed net_device) (uninitialized): option lacp_rate: invalid value (64) [ 216.440349][T14282] EXT4-fs (loop2): failed to initialize system zone (-117) [ 216.451601][T14282] EXT4-fs (loop2): mount failed [ 216.470152][T14283] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3704'. [ 216.487349][ T3746] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.538365][T14246] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.546635][T14246] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.556809][T14246] bridge_slave_0: entered allmulticast mode [ 216.565369][T14246] bridge_slave_0: entered promiscuous mode [ 216.582642][ T3746] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.598990][T14246] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.607552][T14246] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.621985][T14289] loop2: detected capacity change from 0 to 1024 [ 216.631764][T14289] journal_path: Lookup failure for './file1' [ 216.638213][T14289] EXT4-fs: error: could not find journal device path [ 216.645671][T14246] bridge_slave_1: entered allmulticast mode [ 216.645992][ T6944] cache 561152 [ 216.655209][T14246] bridge_slave_1: entered promiscuous mode [ 216.656363][ T6944] rss 102400 [ 216.656377][ T6944] shmem 0 [ 216.656384][ T6944] mapped_file 614400 [ 216.656393][ T6944] dirty 561152 [ 216.656402][ T6944] writeback 24576 [ 216.682906][ T6944] workingset_refault_anon 191 [ 216.688239][ T6944] workingset_refault_file 553 [ 216.693429][ T6944] swap 73728 [ 216.696979][ T6944] swapcached 139264 [ 216.701378][ T6944] pgpgin 173842 [ 216.705145][ T6944] pgpgout 173669 [ 216.709041][ T6944] pgfault 197467 [ 216.712695][ T6944] pgmajfault 88 [ 216.717433][ T6944] inactive_anon 0 [ 216.721181][ T6944] active_anon 143360 [ 216.725967][ T6944] inactive_file 0 [ 216.730587][ T6944] active_file 565248 [ 216.735374][ T6944] unevictable 0 [ 216.739663][ T6944] hierarchical_memory_limit 314572800 [ 216.745670][ T6944] hierarchical_memsw_limit 9223372036854771712 [ 216.751986][ T6944] total_cache 561152 [ 216.756827][ T6944] total_rss 102400 [ 216.760897][ T6944] total_shmem 0 [ 216.765494][ T6944] total_mapped_file 614400 [ 216.771955][ T6944] total_dirty 561152 [ 216.776883][ T6944] total_writeback 24576 [ 216.782770][ T6944] total_workingset_refault_anon 191 [ 216.789021][ T6944] total_workingset_refault_file 553 [ 216.795917][ T6944] total_swap 73728 [ 216.800313][ T6944] total_swapcached 139264 [ 216.805181][ T6944] total_pgpgin 173842 [ 216.810103][ T6944] total_pgpgout 173669 [ 216.814905][ T6944] total_pgfault 197467 [ 216.820571][ T6944] total_pgmajfault 88 [ 216.824657][ T6944] total_inactive_anon 0 [ 216.829197][ T6944] total_active_anon 143360 [ 216.834487][ T6944] total_inactive_file 0 [ 216.839236][ T6944] total_active_file 565248 [ 216.846070][ T6944] total_unevictable 0 [ 216.850397][ T6944] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.3669,pid=14179,uid=0 [ 216.868374][ T6944] Memory cgroup out of memory: Killed process 14179 (syz.3.3669) total-vm:87120kB, anon-rss:700kB, file-rss:16220kB, shmem-rss:0kB, UID:0 pgtables:108kB oom_score_adj:1000 [ 216.903697][T14298] netlink: 'syz.1.3708': attribute type 10 has an invalid length. [ 216.918335][T14246] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 216.970786][T14307] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 216.984199][T14246] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 217.056371][T14246] team0: Port device team_slave_0 added [ 217.082390][T14316] pim6reg1: entered promiscuous mode [ 217.088101][T14316] pim6reg1: entered allmulticast mode [ 217.103831][T14246] team0: Port device team_slave_1 added [ 217.115170][ T3746] bridge_slave_1: left allmulticast mode [ 217.121367][ T3746] bridge_slave_1: left promiscuous mode [ 217.127485][ T3746] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.143602][ T3746] bridge_slave_0: left allmulticast mode [ 217.149848][ T3746] bridge_slave_0: left promiscuous mode [ 217.156509][ T3746] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.248246][T14332] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3721'. [ 217.333513][ T3746] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 217.352050][ T3746] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 217.367928][ T3746] bond0 (unregistering): (slave team1): Releasing backup interface [ 217.390035][ T3746] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 217.405749][T14336] futex_wake_op: syz.3.3723 tries to shift op by 144; fix this program [ 217.420847][ T3746] bond0 (unregistering): Released all slaves [ 217.437406][ T3746] bond1 (unregistering): Released all slaves [ 217.448326][ T3746] bond2 (unregistering): Released all slaves [ 217.463019][ T3746] bond3 (unregistering): Released all slaves [ 217.510690][T14327] (unnamed net_device) (uninitialized): option lacp_rate: invalid value (64) [ 217.533822][T14331] team0: Device ipvlan2 failed to register rx_handler [ 217.593910][ T3746] tipc: Disabling bearer [ 217.601395][ T3746] tipc: Left network mode [ 217.601840][T14246] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 217.613540][T14246] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 217.641922][T14246] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 217.684067][T14246] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 217.691986][T14246] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 217.721916][T14246] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 217.797697][ T3746] hsr_slave_0: left promiscuous mode [ 217.810510][ T3746] hsr_slave_1: left promiscuous mode [ 217.817753][ T3746] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 217.826226][ T3746] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 217.828469][T14347] loop1: detected capacity change from 0 to 8192 [ 217.843004][ T3746] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 217.851294][ T3746] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 217.870829][ T3746] veth1_macvtap: left promiscuous mode [ 217.876495][ T3746] veth0_macvtap: left promiscuous mode [ 217.883311][ T3746] veth1_vlan: left promiscuous mode [ 217.889225][ T3746] veth0_vlan: left promiscuous mode [ 218.077927][T14359] loop1: detected capacity change from 0 to 512 [ 218.103697][ T3746] team0 (unregistering): Port device team_slave_1 removed [ 218.116499][ T3746] team0 (unregistering): Port device team_slave_0 removed [ 218.194672][T14349] ip6tnl0: Master is either lo or non-ether device [ 218.207408][T14372] (unnamed net_device) (uninitialized): option lacp_rate: invalid value (64) [ 218.221746][T14372] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3735'. [ 218.248664][T14246] hsr_slave_0: entered promiscuous mode [ 218.263019][T14246] hsr_slave_1: entered promiscuous mode [ 218.273935][T14246] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 218.282822][T14246] Cannot create hsr debugfs directory [ 218.347693][T14383] loop0: detected capacity change from 0 to 512 [ 218.406351][T14388] loop3: detected capacity change from 0 to 512 [ 218.431645][T14388] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0002] [ 218.444142][T14388] System zones: 0-2, 18-18, 34-35 [ 218.446032][T14396] ip6tnl0: Master is either lo or non-ether device [ 218.452551][T14388] EXT4-fs mount: 75 callbacks suppressed [ 218.452571][T14388] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 218.479545][T14388] ext4 filesystem being mounted at /552/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 218.497568][T14392] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 218.623283][T14410] loop1: detected capacity change from 0 to 512 [ 218.658403][T14410] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2240: inode #15: comm syz.1.3750: corrupted in-inode xattr: invalid ea_ino [ 218.685213][ T3746] IPVS: stop unused estimator thread 0... [ 218.704000][T14410] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.3750: couldn't read orphan inode 15 (err -117) [ 218.740289][T14410] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 218.743137][T14418] loop0: detected capacity change from 0 to 512 [ 218.793707][T14246] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 218.817779][ T9664] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 218.829758][T14246] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 218.839618][ T6944] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 218.840337][T14246] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 218.860471][T14420] loop2: detected capacity change from 0 to 8192 [ 218.870623][T14246] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 218.892718][T14423] pim6reg1: entered promiscuous mode [ 218.898760][T14423] pim6reg1: entered allmulticast mode [ 218.930178][T14427] ip6tnl0: Master is either lo or non-ether device [ 218.941050][T14429] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3759'. [ 218.973382][T14433] loop3: detected capacity change from 0 to 128 [ 218.984027][T14433] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 218.994621][T14246] 8021q: adding VLAN 0 to HW filter on device bond0 [ 218.997513][T14433] ext4 filesystem being mounted at /555/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 219.025682][T14246] 8021q: adding VLAN 0 to HW filter on device team0 [ 219.036781][T14435] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 219.045876][T14435] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 219.070451][ T3750] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.077811][ T3750] bridge0: port 1(bridge_slave_0) entered forwarding state [ 219.095133][ T3750] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.102359][ T3750] bridge0: port 2(bridge_slave_1) entered forwarding state [ 219.158618][ T6944] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 219.183129][T14448] loop2: detected capacity change from 0 to 1024 [ 219.211015][T14456] loop3: detected capacity change from 0 to 512 [ 219.216113][T14246] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 219.224767][T14448] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 219.265169][T14453] loop1: detected capacity change from 0 to 1024 [ 219.290411][T14453] journal_path: Lookup failure for './file1' [ 219.297759][T14453] EXT4-fs: error: could not find journal device path [ 219.312927][T13268] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 219.342377][T14469] ip6tnl0: Master is either lo or non-ether device [ 219.366326][T14463] loop0: detected capacity change from 0 to 8192 [ 219.393218][T14476] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3769'. [ 219.445678][T14482] loop3: detected capacity change from 0 to 512 [ 219.482414][T14246] veth0_vlan: entered promiscuous mode [ 219.503280][T14246] veth1_vlan: entered promiscuous mode [ 219.504577][T14489] loop2: detected capacity change from 0 to 128 [ 219.545149][T14495] loop1: detected capacity change from 0 to 512 [ 219.558694][T14246] veth0_macvtap: entered promiscuous mode [ 219.559704][T14489] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 219.570493][T14246] veth1_macvtap: entered promiscuous mode [ 219.588314][T14489] ext4 filesystem being mounted at /82/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 219.638630][T14500] loop0: detected capacity change from 0 to 512 [ 219.639557][T14246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 219.659233][T14246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.669717][T14246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 219.672750][T14500] EXT4-fs (loop0): unsupported inode size: 264 [ 219.682397][T14246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.688698][T14500] EXT4-fs (loop0): blocksize: 1024 [ 219.699372][T14246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 219.715790][T14246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.726779][T13268] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 219.745140][T14246] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 219.767984][T14246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 219.778856][T14246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.791006][T14246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 219.801861][T14246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.813115][T14246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 219.824857][T14246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.838868][T14246] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 219.847161][T14512] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3785'. [ 219.848582][T14246] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.868568][T14246] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.870354][T14509] loop3: detected capacity change from 0 to 8192 [ 219.879604][T14246] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.897423][T14246] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.913374][T14511] ip6gre0: Master is either lo or non-ether device [ 219.977081][T14519] loop3: detected capacity change from 0 to 512 [ 219.981055][T14517] loop4: detected capacity change from 0 to 512 [ 220.036304][T14527] loop1: detected capacity change from 0 to 512 [ 220.042115][T14530] loop2: detected capacity change from 0 to 512 [ 220.062873][T14529] loop4: detected capacity change from 0 to 512 [ 220.130881][T14538] netlink: 'syz.3.3795': attribute type 10 has an invalid length. [ 220.136909][T14540] loop2: detected capacity change from 0 to 2048 [ 220.165331][T14540] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 220.183736][T14546] ip6gre0: Master is either lo or non-ether device [ 220.195986][ T29] kauditd_printk_skb: 138 callbacks suppressed [ 220.196023][ T29] audit: type=1400 audit(1725670378.556:33389): avc: denied { write } for pid=14539 comm="syz.2.3796" path="/86/file1/bus" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 220.236846][T14540] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 220.255665][T14542] loop4: detected capacity change from 0 to 8192 [ 220.256588][T14540] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 16 with error 28 [ 220.280003][T14540] EXT4-fs (loop2): This should not happen!! Data will be lost [ 220.280003][T14540] [ 220.292328][T14540] EXT4-fs (loop2): Total free blocks count 0 [ 220.299448][T14540] EXT4-fs (loop2): Free/Dirty block details [ 220.306016][T14540] EXT4-fs (loop2): free_blocks=2415919104 [ 220.313745][T14540] EXT4-fs (loop2): dirty_blocks=16 [ 220.319455][T14540] EXT4-fs (loop2): Block reservation details [ 220.326537][T14540] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 220.368608][T14550] loop3: detected capacity change from 0 to 512 [ 220.377692][T13268] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 220.414237][T14556] loop0: detected capacity change from 0 to 512 [ 220.431981][T14554] loop4: detected capacity change from 0 to 512 [ 220.475142][T14552] loop1: detected capacity change from 0 to 8192 [ 220.510594][T14552] loop1: p1 p3 p4 < > [ 220.516230][T14552] loop1: p1 size 125763453 extends beyond EOD, truncated [ 220.520170][T14568] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3808'. [ 220.531748][T14565] loop2: detected capacity change from 0 to 512 [ 220.542962][T14552] loop1: p3 start 65530 is beyond EOD, truncated [ 220.629501][T14575] ip6gre0: Master is either lo or non-ether device [ 220.662042][T14582] loop0: detected capacity change from 0 to 512 [ 220.681900][T14578] loop1: detected capacity change from 0 to 8192 [ 220.702364][T14584] loop3: detected capacity change from 0 to 512 [ 220.778461][T14598] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3823'. [ 220.813929][T14590] loop2: detected capacity change from 0 to 1024 [ 220.839695][T14590] journal_path: Lookup failure for './file1' [ 220.848569][T14590] EXT4-fs: error: could not find journal device path [ 220.861239][ T29] audit: type=1326 audit(1725670379.226:33390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14604 comm="syz.0.3825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6edfe6cef9 code=0x7ffc0000 [ 220.889439][T14606] loop0: detected capacity change from 0 to 2048 [ 220.890950][T14596] loop1: detected capacity change from 0 to 8192 [ 220.910963][T14606] EXT4-fs: Ignoring removed orlov option [ 220.918859][ T29] audit: type=1326 audit(1725670379.226:33391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14604 comm="syz.0.3825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f6edfe6cef9 code=0x7ffc0000 [ 220.947674][ T29] audit: type=1326 audit(1725670379.226:33392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14604 comm="syz.0.3825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6edfe6cef9 code=0x7ffc0000 [ 220.975253][ T29] audit: type=1326 audit(1725670379.226:33393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14604 comm="syz.0.3825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6edfe6cef9 code=0x7ffc0000 [ 220.976843][T14610] ip6gre0: Master is either lo or non-ether device [ 221.003703][ T29] audit: type=1326 audit(1725670379.226:33394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14604 comm="syz.0.3825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f6edfe6cef9 code=0x7ffc0000 [ 221.040753][ T29] audit: type=1326 audit(1725670379.226:33395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14604 comm="syz.0.3825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f6edfe6cf33 code=0x7ffc0000 [ 221.069537][ T29] audit: type=1326 audit(1725670379.236:33396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14604 comm="syz.0.3825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f6edfe6b9df code=0x7ffc0000 [ 221.076331][T14606] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 221.096255][ T29] audit: type=1326 audit(1725670379.246:33397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14604 comm="syz.0.3825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f6edfe6cf87 code=0x7ffc0000 [ 221.096294][ T29] audit: type=1326 audit(1725670379.256:33398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14604 comm="syz.0.3825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6edfe6b890 code=0x7ffc0000 [ 221.191974][T14596] loop1: p1 p3 p4 < > [ 221.198377][T14596] loop1: p1 size 125763453 extends beyond EOD, truncated [ 221.216006][T14616] loop2: detected capacity change from 0 to 512 [ 221.223503][T14596] loop1: p3 start 65530 is beyond EOD, truncated [ 221.284632][T14618] loop3: detected capacity change from 0 to 8192 [ 221.330023][T14626] loop1: detected capacity change from 0 to 512 [ 221.383430][T14632] netlink: 'syz.1.3837': attribute type 10 has an invalid length. [ 221.389223][T14634] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3835'. [ 221.428498][T14639] loop1: detected capacity change from 0 to 512 [ 221.430211][T14636] loop2: detected capacity change from 0 to 512 [ 221.446691][T14640] ip6gre0: Master is either lo or non-ether device [ 221.461933][T14639] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 221.480013][T14639] ext4 filesystem being mounted at /347/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 221.523373][T14646] loop3: detected capacity change from 0 to 512 [ 221.539186][T14644] loop2: detected capacity change from 0 to 8192 [ 221.541605][T14646] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0002] [ 221.556543][T14646] System zones: 0-2, 18-18, 34-35 [ 221.565928][T14646] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 221.582177][T14646] ext4 filesystem being mounted at /579/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 221.595753][T14644] loop2: p1 p3 p4 < > [ 221.604192][T14644] loop2: p1 size 125763453 extends beyond EOD, truncated [ 221.617754][ T9664] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 221.629152][T14644] loop2: p3 start 65530 is beyond EOD, truncated [ 221.741615][ T7029] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 221.819410][T14656] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(12) [ 221.826836][T14656] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 221.836571][T14656] vhci_hcd vhci_hcd.0: Device attached [ 221.861692][T14675] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3850'. [ 221.872010][ T6944] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 221.893210][T14678] loop2: detected capacity change from 0 to 512 [ 221.904869][T14680] ip6gre0: Master is either lo or non-ether device [ 221.950523][T14685] (unnamed net_device) (uninitialized): option lacp_rate: invalid value (64) [ 221.965709][T14685] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3855'. [ 221.970924][T14683] loop2: detected capacity change from 0 to 4096 [ 221.996092][T14683] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 222.101697][T13268] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 222.169032][ T3643] usb 4-1: SetAddress Request (3) to port 0 [ 222.178197][ T3643] usb 4-1: new SuperSpeed USB device number 3 using vhci_hcd [ 222.233628][T14695] loop3: detected capacity change from 0 to 4096 [ 222.245445][T14695] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 222.344051][ T6944] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 222.398807][T14706] loop3: detected capacity change from 0 to 128 [ 222.411032][T14706] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 222.422815][T14704] loop2: detected capacity change from 0 to 1024 [ 222.429969][T14706] ext4 filesystem being mounted at /583/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 222.441800][T14704] journal_path: Lookup failure for './file1' [ 222.462465][T14704] EXT4-fs: error: could not find journal device path [ 222.500239][T14669] vhci_hcd: connection reset by peer [ 222.507905][ T3744] vhci_hcd: stop threads [ 222.512663][ T3744] vhci_hcd: release socket [ 222.517975][ T3744] vhci_hcd: disconnect device [ 222.527611][ T6944] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 222.564368][T14712] loop2: detected capacity change from 0 to 512 [ 222.567049][T14714] loop3: detected capacity change from 0 to 512 [ 222.583895][T14714] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #15: comm syz.3.3864: iget: bad i_size value: -67835469387268086 [ 222.600628][T14714] EXT4-fs (loop3): Remounting filesystem read-only [ 222.600767][T14712] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0002] [ 222.608030][T14714] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 222.616549][T14712] System zones: 0-2, 18-18, 34-35 [ 222.629887][T14714] SELinux: (dev loop3, type ext4) getxattr errno 5 [ 222.644741][T14712] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 222.646255][T14714] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 222.662774][T14712] ext4 filesystem being mounted at /110/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 222.734370][T14719] loop0: detected capacity change from 0 to 512 [ 222.788633][T14721] loop0: detected capacity change from 0 to 512 [ 222.872395][T14728] (unnamed net_device) (uninitialized): option lacp_rate: invalid value (64) [ 222.890782][T14728] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3868'. [ 222.976624][T13268] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.018264][T14733] loop2: detected capacity change from 0 to 512 [ 223.104120][T14743] loop2: detected capacity change from 0 to 128 [ 223.114095][T14743] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 223.129681][T14743] ext4 filesystem being mounted at /114/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 223.133843][T14748] loop1: detected capacity change from 0 to 512 [ 223.150880][T14741] loop0: detected capacity change from 0 to 1024 [ 223.158793][T14741] journal_path: Lookup failure for './file1' [ 223.165415][T14741] EXT4-fs: error: could not find journal device path [ 223.209100][T14755] loop1: detected capacity change from 0 to 512 [ 223.217524][T13268] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 223.269269][T14758] loop2: detected capacity change from 0 to 512 [ 223.279288][T14762] (unnamed net_device) (uninitialized): option lacp_rate: invalid value (64) [ 223.285781][T14766] loop1: detected capacity change from 0 to 512 [ 223.299812][T14758] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0002] [ 223.306333][T14762] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3881'. [ 223.310012][T14758] System zones: 0-2, 18-18, 34-35 [ 223.338280][T14758] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 223.368035][T14758] ext4 filesystem being mounted at /115/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 223.453657][T14778] loop4: detected capacity change from 0 to 512 [ 223.486908][T14777] loop3: detected capacity change from 0 to 8192 [ 223.536409][T14777] loop3: p1 p3 p4 < > [ 223.540882][T14777] loop3: p1 size 125763453 extends beyond EOD, truncated [ 223.541757][T14782] loop4: detected capacity change from 0 to 512 [ 223.561925][T14777] loop3: p3 start 65530 is beyond EOD, truncated [ 223.573440][T14784] loop0: detected capacity change from 0 to 512 [ 223.614080][T14782] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0002] [ 223.623629][T14782] System zones: 0-2, 18-18, 34-35 [ 223.636960][T14782] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 223.651159][T14782] ext4 filesystem being mounted at /8/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 223.681102][T14794] loop3: detected capacity change from 0 to 128 [ 223.710393][T14794] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 223.736938][T14794] ext4 filesystem being mounted at /586/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 223.790384][T14804] netlink: 9 bytes leftover after parsing attributes in process `syz.1.3899'. [ 223.840116][T14806] netlink: 'syz.0.3898': attribute type 10 has an invalid length. [ 223.848376][T14806] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3898'. [ 223.877944][T14806] bridge0: port 3(ipvlan0) entered blocking state [ 223.885175][T14806] bridge0: port 3(ipvlan0) entered disabled state [ 223.910970][T13268] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.914702][T14806] ipvlan0: entered allmulticast mode [ 223.925443][T14806] veth0_vlan: entered allmulticast mode [ 223.952174][T14806] ipvlan0: left allmulticast mode [ 223.959112][T14806] veth0_vlan: left allmulticast mode [ 223.972606][T14806] A link change request failed with some changes committed already. Interface ipvlan0 may have been left with an inconsistent configuration, please check. [ 224.013935][T14815] (unnamed net_device) (uninitialized): option lacp_rate: invalid value (64) [ 224.054760][T14246] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 224.134069][ T6944] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 224.146228][T14818] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 224.156045][T14818] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 224.174948][T14820] loop4: detected capacity change from 0 to 1024 [ 224.183183][T14820] journal_path: Lookup failure for './file1' [ 224.191654][T14820] EXT4-fs: error: could not find journal device path [ 224.196708][T14823] pim6reg1: entered promiscuous mode [ 224.204989][T14823] pim6reg1: entered allmulticast mode [ 224.223066][T14825] loop1: detected capacity change from 0 to 512 [ 224.296993][T14829] loop2: detected capacity change from 0 to 512 [ 224.320993][T14831] pim6reg1: entered promiscuous mode [ 224.327133][T14831] pim6reg1: entered allmulticast mode [ 224.347798][T14827] loop4: detected capacity change from 0 to 8192 [ 224.412857][T14836] loop2: detected capacity change from 0 to 512 [ 224.450619][T14836] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0002] [ 224.460307][T14836] System zones: 0-2, 18-18, 34-35 [ 224.467155][T14836] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 224.482599][T14836] ext4 filesystem being mounted at /118/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 224.494949][T14837] tap0: tun_chr_ioctl cmd 1074025677 [ 224.506594][T14843] loop1: detected capacity change from 0 to 512 [ 224.519233][T14837] tap0: linktype set to 50319 [ 224.530782][T14843] ext4: Bad value for 'min_batch_time' [ 224.562618][T14841] loop4: detected capacity change from 0 to 128 [ 224.605454][T14841] FAT-fs (loop4): IO charset maccroatian not found [ 224.610820][T14847] loop1: detected capacity change from 0 to 128 [ 224.623113][T14847] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 224.681423][T14847] ext4 filesystem being mounted at /367/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 224.692232][T14854] (unnamed net_device) (uninitialized): option lacp_rate: invalid value (64) [ 224.750644][T13268] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 224.762115][T14860] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 224.770925][T14860] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 224.770934][T14856] loop3: detected capacity change from 0 to 1024 [ 224.771305][T14856] journal_path: Lookup failure for './file1' [ 224.793055][T14856] EXT4-fs: error: could not find journal device path [ 224.820389][ T9664] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 224.854185][T14869] loop1: detected capacity change from 0 to 512 [ 224.871274][T14869] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 224.889980][T14869] EXT4-fs (loop1): can't mount with data=, fs mounted w/o journal [ 224.895010][T14873] loop0: detected capacity change from 0 to 512 [ 224.925551][T14873] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 224.936284][T14868] loop4: detected capacity change from 0 to 8192 [ 224.949578][T14873] EXT4-fs (loop0): can't mount with data=, fs mounted w/o journal [ 224.964433][T14875] SELinux: security_context_str_to_sid (defcontext) failed with errno=-22 [ 224.985617][T14875] __nla_validate_parse: 2 callbacks suppressed [ 224.985637][T14875] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3927'. [ 224.985848][T14863] loop2: detected capacity change from 0 to 8192 [ 224.992501][T14875] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3927'. [ 225.050394][T14880] loop0: detected capacity change from 0 to 2048 [ 225.057947][T14880] EXT4-fs: Ignoring removed orlov option [ 225.071626][T14883] 9pnet_fd: Insufficient options for proto=fd [ 225.084759][T14881] team0: Device ipvlan2 failed to register rx_handler [ 225.089846][T14886] loop3: detected capacity change from 0 to 128 [ 225.107366][T14880] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 225.123746][T14886] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 225.142290][T14889] loop2: detected capacity change from 0 to 512 [ 225.144342][T14886] ext4 filesystem being mounted at /595/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 225.170743][T14889] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0002] [ 225.179940][T14889] System zones: 0-2, 18-18, 34-35 [ 225.186975][T14889] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 225.204455][T14889] ext4 filesystem being mounted at /120/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 225.211974][ T29] kauditd_printk_skb: 790 callbacks suppressed [ 225.212000][ T29] audit: type=1326 audit(1725670383.576:34185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14879 comm="syz.0.3930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6edfe63ea7 code=0x7ffc0000 [ 225.231898][T14889] Quota error (device loop2): do_check_range: Getting block 9 out of range 0-5 [ 225.253278][ T29] audit: type=1326 audit(1725670383.576:34186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14879 comm="syz.0.3930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6edfe08859 code=0x7ffc0000 [ 225.267056][T14892] loop1: detected capacity change from 0 to 1024 [ 225.289142][ T29] audit: type=1326 audit(1725670383.576:34187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14879 comm="syz.0.3930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=17 compat=0 ip=0x7f6edfe6cef9 code=0x7ffc0000 [ 225.294635][ T29] audit: type=1326 audit(1725670383.586:34188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14884 comm="syz.2.3931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f134fe9b890 code=0x7ffc0000 [ 225.330190][T14892] journal_path: Lookup failure for './file1' [ 225.349654][ T29] audit: type=1326 audit(1725670383.586:34189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14884 comm="syz.2.3931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7f134fe9bc77 code=0x7ffc0000 [ 225.355478][T14892] EXT4-fs: error: could not find journal device path [ 225.381989][ T29] audit: type=1326 audit(1725670383.586:34190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14884 comm="syz.2.3931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f134fe9b890 code=0x7ffc0000 [ 225.416822][ T29] audit: type=1326 audit(1725670383.586:34191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14884 comm="syz.2.3931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f134fe9cef9 code=0x7ffc0000 [ 225.441696][ T29] audit: type=1326 audit(1725670383.586:34192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14884 comm="syz.2.3931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f134fe9cef9 code=0x7ffc0000 [ 225.466925][ T29] audit: type=1326 audit(1725670383.586:34193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14884 comm="syz.2.3931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=179 compat=0 ip=0x7f134fe9cef9 code=0x7ffc0000 [ 225.493845][ T6944] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 225.510385][T14901] netlink: 9 bytes leftover after parsing attributes in process `syz.4.3936'. [ 225.531869][T14901] gretap0: entered promiscuous mode [ 225.603401][T14907] pim6reg1: entered promiscuous mode [ 225.608851][T14907] pim6reg1: entered allmulticast mode [ 225.641272][T13268] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.654217][T14909] loop4: detected capacity change from 0 to 512 [ 225.690235][T14909] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0002] [ 225.711638][T14909] System zones: 0-2, 18-18, 34-35 [ 225.728800][T14909] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 225.757217][T14917] loop1: detected capacity change from 0 to 512 [ 225.768124][T14909] ext4 filesystem being mounted at /16/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 225.790356][T14917] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0002] [ 225.799655][T14917] System zones: 0-2, 18-18, 34-35 [ 225.810511][T14917] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 225.830360][T14917] ext4 filesystem being mounted at /374/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 225.861420][T14922] syz.2.3943[14922] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 225.861521][T14922] syz.2.3943[14922] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 225.906953][ T7029] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.071571][T14246] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.105849][ T9664] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.127028][T14930] loop4: detected capacity change from 0 to 128 [ 226.148642][T14933] loop1: detected capacity change from 0 to 512 [ 226.157646][T14936] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14936 comm=syz.0.3944 [ 226.159865][T14930] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 226.197040][T14930] ext4 filesystem being mounted at /17/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 226.212253][T14936] loop0: detected capacity change from 0 to 2048 [ 226.282807][T14246] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 226.338514][T14947] netlink: 9 bytes leftover after parsing attributes in process `syz.4.3949'. [ 226.383861][T14953] FAULT_INJECTION: forcing a failure. [ 226.383861][T14953] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 226.397250][T14953] CPU: 0 UID: 0 PID: 14953 Comm: syz.4.3953 Not tainted 6.11.0-rc6-syzkaller-00183-gb831f83e40a2 #0 [ 226.408808][T14953] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 226.419588][T14953] Call Trace: [ 226.422918][T14953] [ 226.425910][T14953] dump_stack_lvl+0xf2/0x150 [ 226.430809][T14953] dump_stack+0x15/0x20 [ 226.435713][T14953] should_fail_ex+0x229/0x230 [ 226.440623][T14953] should_fail+0xb/0x10 [ 226.444992][T14953] should_fail_usercopy+0x1a/0x20 [ 226.450285][T14953] _copy_from_user+0x1e/0xd0 [ 226.456278][T14953] copy_msghdr_from_user+0x54/0x2a0 [ 226.462342][T14953] __sys_sendmmsg+0x22a/0x500 [ 226.467699][T14953] ? trace_sys_enter+0x65/0xa0 [ 226.472815][T14953] __x64_sys_sendmmsg+0x57/0x70 [ 226.478562][T14953] x64_sys_call+0xa49/0x2d60 [ 226.484811][T14953] do_syscall_64+0xc9/0x1c0 [ 226.491220][T14953] ? clear_bhb_loop+0x55/0xb0 [ 226.496538][T14953] ? clear_bhb_loop+0x55/0xb0 [ 226.501905][T14953] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.507955][T14953] RIP: 0033:0x7fe29a22cef9 [ 226.512851][T14953] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 226.534030][T14953] RSP: 002b:00007fe298ea7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 226.543183][T14953] RAX: ffffffffffffffda RBX: 00007fe29a3e5f80 RCX: 00007fe29a22cef9 [ 226.551982][T14953] RDX: 0000000000000001 RSI: 00000000200021c0 RDI: 0000000000000003 [ 226.561235][T14953] RBP: 00007fe298ea7090 R08: 0000000000000000 R09: 0000000000000000 [ 226.569653][T14953] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000001 [ 226.578118][T14953] R13: 0000000000000000 R14: 00007fe29a3e5f80 R15: 00007ffed59f3598 [ 226.587034][T14953] [ 226.620486][T14954] loop1: detected capacity change from 0 to 512 [ 226.636803][T14954] EXT4-fs: Ignoring removed nomblk_io_submit option [ 226.659938][T14954] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 226.670411][T14954] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=1842c01c, mo2=0002] [ 226.686805][T14957] loop4: detected capacity change from 0 to 2048 [ 226.708105][T14954] EXT4-fs (loop1): couldn't mount RDWR because of unsupported optional features (80) [ 226.716666][T14957] EXT4-fs: Ignoring removed orlov option [ 226.718909][T14954] EXT4-fs (loop1): Skipping orphan cleanup due to unknown ROCOMPAT features [ 226.739059][T14954] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 226.755797][T14954] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: none. [ 226.774590][T14954] EXT4-fs (loop1): couldn't mount RDWR because of unsupported optional features (80) [ 226.785595][T14957] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 226.894942][T14970] netlink: 'syz.2.3959': attribute type 10 has an invalid length. [ 226.902991][T14971] loop0: detected capacity change from 0 to 512 [ 226.916679][T14970] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 226.936601][T14970] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 226.993759][T14976] loop2: detected capacity change from 0 to 512 [ 226.998768][T14978] loop0: detected capacity change from 0 to 128 [ 227.078297][T14985] loop2: detected capacity change from 0 to 512 [ 227.090720][T14986] loop0: detected capacity change from 0 to 128 [ 227.124431][T14986] FAT-fs (loop0): IO charset maccroatian not found [ 227.147758][T14991] loop2: detected capacity change from 0 to 512 [ 227.215731][T14996] loop2: detected capacity change from 0 to 512 [ 227.239476][ T9664] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 227.268267][T14998] netlink: 'syz.0.3972': attribute type 10 has an invalid length. [ 227.279229][ T3643] usb 4-1: device descriptor read/8, error -110 [ 227.331342][T15004] loop1: detected capacity change from 0 to 512 [ 227.348611][T15006] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3975'. [ 227.398046][T15011] loop2: detected capacity change from 0 to 512 [ 227.406398][ T3643] usb 4-1: new SuperSpeed USB device number 3 using vhci_hcd [ 227.414175][T15013] loop1: detected capacity change from 0 to 512 [ 227.434745][T15013] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 227.440419][T15006] loop0: detected capacity change from 0 to 2048 [ 227.451165][T15013] ext4 filesystem being mounted at /383/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 227.469022][ T3643] usb 4-1: enqueue for inactive port 0 [ 227.475408][ T3643] usb 4-1: enqueue for inactive port 0 [ 227.482078][ T3643] usb 4-1: enqueue for inactive port 0 [ 227.494274][T15006] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 227.512211][T15017] ip6gre0: Master is either lo or non-ether device [ 227.521597][T14246] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 227.539356][ T9664] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 227.576236][T15025] netlink: 9 bytes leftover after parsing attributes in process `syz.2.3982'. [ 227.617590][T15030] loop2: detected capacity change from 0 to 512 [ 227.631861][ T7029] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 227.654957][T15036] netlink: 'syz.4.3986': attribute type 10 has an invalid length. [ 227.694009][T15036] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 227.723259][T15036] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 227.739000][T15038] netlink: 9 bytes leftover after parsing attributes in process `syz.0.3985'. [ 227.773418][T15043] loop2: detected capacity change from 0 to 512 [ 227.834818][T15051] ip6gre0: Master is either lo or non-ether device [ 227.849738][T15049] loop4: detected capacity change from 0 to 2048 [ 227.862636][T15049] EXT4-fs: Ignoring removed orlov option [ 227.887020][T15049] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 227.901496][T15055] netlink: 9 bytes leftover after parsing attributes in process `syz.2.3993'. [ 227.944145][T15059] loop2: detected capacity change from 0 to 1024 [ 227.952685][T15059] journal_path: Lookup failure for './file1' [ 227.960023][T15059] EXT4-fs: error: could not find journal device path [ 228.124843][T15068] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 228.133523][T15068] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 228.167104][T15072] netlink: 'syz.2.4000': attribute type 10 has an invalid length. [ 228.215811][T15075] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 228.224728][T15075] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 228.256476][T15079] netlink: 9 bytes leftover after parsing attributes in process `syz.2.4004'. [ 228.290365][T15082] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4005'. [ 228.304611][T15082] macvtap1: entered promiscuous mode [ 228.312216][T15082] macvtap1: entered allmulticast mode [ 228.318111][T15082] gretap0: entered allmulticast mode [ 228.332500][T15080] ip6gre0: Master is either lo or non-ether device [ 228.436574][T15085] loop0: detected capacity change from 0 to 1024 [ 228.489659][T15085] journal_path: Lookup failure for './file1' [ 228.495716][T15085] EXT4-fs: error: could not find journal device path [ 228.505268][T15093] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 228.513833][T15093] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 228.560367][T15097] netlink: 'syz.1.4012': attribute type 10 has an invalid length. [ 228.569227][ T3643] usb usb4-port1: attempt power cycle [ 228.665004][T14246] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 228.683516][T15105] loop1: detected capacity change from 0 to 1024 [ 228.702630][T15105] journal_path: Lookup failure for './file1' [ 228.708711][T15105] EXT4-fs: error: could not find journal device path [ 228.877986][T15120] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 228.886482][T15120] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 228.940738][T15127] loop0: detected capacity change from 0 to 512 [ 228.996523][T15134] loop0: detected capacity change from 0 to 512 [ 228.996819][T15136] loop4: detected capacity change from 0 to 128 [ 229.017037][T15137] loop3: detected capacity change from 0 to 512 [ 229.031194][T15137] EXT4-fs: Ignoring removed nomblk_io_submit option [ 229.050307][T15137] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 229.058629][T15137] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=1842c01c, mo2=0002] [ 229.082147][T15137] EXT4-fs (loop3): couldn't mount RDWR because of unsupported optional features (80) [ 229.092126][T15137] EXT4-fs (loop3): Skipping orphan cleanup due to unknown ROCOMPAT features [ 229.139620][T15137] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 229.168012][T15137] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: none. [ 229.177237][T15147] syz.2.4033[15147] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 229.180004][T15147] syz.2.4033[15147] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 229.189191][T15137] EXT4-fs (loop3): couldn't mount RDWR because of unsupported optional features (80) [ 229.228054][T15147] loop2: detected capacity change from 0 to 512 [ 229.236221][T15147] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 229.246193][T15147] EXT4-fs (loop2): warning: maximal mount count reached, running e2fsck is recommended [ 229.257244][T15147] EXT4-fs error (device loop2): ext4_orphan_get:1391: comm syz.2.4033: inode #15: comm syz.2.4033: iget: illegal inode # [ 229.271566][T15147] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.4033: couldn't read orphan inode 15 (err -117) [ 229.284489][T15147] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 229.649853][T15168] loop1: detected capacity change from 0 to 512 [ 230.042257][T13268] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 3: comm syz-executor: path (unknown): bad entry in directory: inode out of bounds - offset=0, inode=63, rec_len=12, size=4096 fake=1 [ 230.085904][T15202] loop1: detected capacity change from 0 to 128 [ 230.111024][ T55] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.122721][T15202] FAT-fs (loop1): IO charset maccroatian not found [ 230.184921][ T55] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.265333][ T29] kauditd_printk_skb: 811 callbacks suppressed [ 230.265399][ T29] audit: type=1400 audit(1725670388.626:35005): avc: denied { ioctl } for pid=15200 comm="syz.0.4049" path="/dev/raw-gadget" dev="devtmpfs" ino=118 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 230.265566][T15201] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 230.310234][ T55] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.349514][T15201] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 230.363443][T15181] chnl_net:caif_netlink_parms(): no params data found [ 230.376093][ T55] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.399751][T15209] ip6gre0: Master is either lo or non-ether device [ 230.424966][T15181] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.432426][T15181] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.440041][T15181] bridge_slave_0: entered allmulticast mode [ 230.447001][T15181] bridge_slave_0: entered promiscuous mode [ 230.454839][T15181] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.462093][T15181] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.469796][T15181] bridge_slave_1: entered allmulticast mode [ 230.477072][T15181] bridge_slave_1: entered promiscuous mode [ 230.488857][T15215] (unnamed net_device) (uninitialized): option lacp_rate: invalid value (64) [ 230.508658][T15181] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 230.521458][T15181] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 230.553106][T15181] team0: Port device team_slave_0 added [ 230.564375][T15181] team0: Port device team_slave_1 added [ 230.587760][ T55] bridge_slave_1: left allmulticast mode [ 230.593598][ T55] bridge_slave_1: left promiscuous mode [ 230.599429][ T55] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.609392][ T3643] usb usb4-port1: unable to enumerate USB device [ 230.618628][ T55] bridge_slave_0: left allmulticast mode [ 230.624474][ T55] bridge_slave_0: left promiscuous mode [ 230.630301][ T55] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.760855][T15220] loop4: detected capacity change from 0 to 1024 [ 230.769931][T15220] journal_path: Lookup failure for './file1' [ 230.776163][T15222] loop1: detected capacity change from 0 to 1024 [ 230.776174][T15220] EXT4-fs: error: could not find journal device path [ 230.794574][ T55] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 230.809168][ T55] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 230.819890][ T29] audit: type=1326 audit(1725670389.186:35006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15221 comm="syz.1.4058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ba802cef9 code=0x7ffc0000 [ 230.827381][T15226] __nla_validate_parse: 2 callbacks suppressed [ 230.827418][T15226] netlink: 256 bytes leftover after parsing attributes in process `syz.4.4059'. [ 230.860640][ T29] audit: type=1326 audit(1725670389.206:35007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15221 comm="syz.1.4058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f8ba802cef9 code=0x7ffc0000 [ 230.885238][ T29] audit: type=1326 audit(1725670389.206:35008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15221 comm="syz.1.4058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ba802cef9 code=0x7ffc0000 [ 230.910054][ T29] audit: type=1326 audit(1725670389.206:35009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15221 comm="syz.1.4058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=333 compat=0 ip=0x7f8ba802cef9 code=0x7ffc0000 [ 230.934116][ T29] audit: type=1326 audit(1725670389.206:35010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15221 comm="syz.1.4058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ba802cef9 code=0x7ffc0000 [ 230.958459][ T29] audit: type=1326 audit(1725670389.206:35011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15221 comm="syz.1.4058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8ba802cef9 code=0x7ffc0000 [ 230.983541][ T29] audit: type=1326 audit(1725670389.206:35012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15221 comm="syz.1.4058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ba802cef9 code=0x7ffc0000 [ 231.007702][ T29] audit: type=1326 audit(1725670389.206:35013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15221 comm="syz.1.4058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=113 compat=0 ip=0x7f8ba802cef9 code=0x7ffc0000 [ 231.031547][ T29] audit: type=1326 audit(1725670389.206:35014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15221 comm="syz.1.4058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ba802cef9 code=0x7ffc0000 [ 231.058446][ T55] bond0 (unregistering): Released all slaves [ 231.070345][ T55] bond1 (unregistering): Released all slaves [ 231.073730][T15236] loop0: detected capacity change from 0 to 512 [ 231.084984][T15236] EXT4-fs: Ignoring removed nomblk_io_submit option [ 231.085236][T15181] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 231.095020][T15236] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 231.099855][T15181] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 231.100070][T15181] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 231.146923][T15236] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=1842c01c, mo2=0002] [ 231.157549][T15236] EXT4-fs (loop0): couldn't mount RDWR because of unsupported optional features (80) [ 231.167474][T15236] EXT4-fs (loop0): Skipping orphan cleanup due to unknown ROCOMPAT features [ 231.183648][T15236] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: none. [ 231.198290][T15236] EXT4-fs (loop0): couldn't mount RDWR because of unsupported optional features (80) [ 231.198613][T15181] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 231.215608][T15181] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 231.243019][T15181] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 231.288394][ T55] hsr_slave_0: left promiscuous mode [ 231.294993][ T55] hsr_slave_1: left promiscuous mode [ 231.302430][ T55] dummy0: left promiscuous mode [ 231.308342][ T55] veth1_macvtap: left promiscuous mode [ 231.314436][ T55] veth0_macvtap: left promiscuous mode [ 231.320571][ T55] veth1_vlan: left promiscuous mode [ 231.393627][T15249] loop4: detected capacity change from 0 to 2048 [ 231.441526][ T55] team0 (unregistering): Port device team_slave_1 removed [ 231.455126][ T55] team0 (unregistering): Port device team_slave_0 removed [ 231.502073][T15181] hsr_slave_0: entered promiscuous mode [ 231.509225][T15181] hsr_slave_1: entered promiscuous mode [ 231.515386][T15181] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 231.523310][T15181] Cannot create hsr debugfs directory [ 231.529099][T15245] (unnamed net_device) (uninitialized): option lacp_rate: invalid value (64) [ 231.539706][T15247] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4064'. [ 231.695034][T15227] chnl_net:caif_netlink_parms(): no params data found [ 231.713091][T15265] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 231.721491][T15265] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 231.779122][T15227] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.786507][T15227] bridge0: port 1(bridge_slave_0) entered disabled state [ 231.799161][T15270] loop1: detected capacity change from 0 to 512 [ 231.806853][T15227] bridge_slave_0: entered allmulticast mode [ 231.825204][T15227] bridge_slave_0: entered promiscuous mode [ 231.860588][T15227] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.867719][T15227] bridge0: port 2(bridge_slave_1) entered disabled state [ 231.894337][T15227] bridge_slave_1: entered allmulticast mode [ 231.904007][T15227] bridge_slave_1: entered promiscuous mode [ 231.967746][T15181] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 231.980282][T15283] loop1: detected capacity change from 0 to 512 [ 232.003032][T15227] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 232.012330][T15285] (unnamed net_device) (uninitialized): option lacp_rate: invalid value (64) [ 232.032803][ T55] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.051528][T15227] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 232.061294][T15181] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 232.064236][T15287] loop1: detected capacity change from 0 to 128 [ 232.084930][T15181] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 232.086903][T15287] ext4 filesystem being mounted at /413/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 232.121872][ T55] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.139954][T15181] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 232.160851][T15227] team0: Port device team_slave_0 added [ 232.178622][ T55] team0: Port device netdevsim1 removed [ 232.188405][ T55] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.213394][T15227] team0: Port device team_slave_1 added [ 232.247293][T15227] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 232.254376][T15227] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 232.281050][T15227] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 232.298197][ T55] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.311416][T15227] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 232.318557][T15227] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 232.344941][T15227] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 232.396258][T15227] hsr_slave_0: entered promiscuous mode [ 232.403735][T15227] hsr_slave_1: entered promiscuous mode [ 232.410295][T15227] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 232.417968][T15227] Cannot create hsr debugfs directory [ 232.522727][T15308] loop1: detected capacity change from 0 to 512 [ 232.530876][ T55] bridge_slave_1: left allmulticast mode [ 232.536635][ T55] bridge_slave_1: left promiscuous mode [ 232.542461][ T55] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.546856][T15310] loop0: detected capacity change from 0 to 512 [ 232.557900][T15308] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4083'. [ 232.567201][T15308] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4083'. [ 232.579670][ T55] bridge_slave_0: left allmulticast mode [ 232.585380][ T55] bridge_slave_0: left promiscuous mode [ 232.591223][ T55] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.653846][T15313] loop0: detected capacity change from 0 to 512 [ 232.680520][T15313] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0002] [ 232.697566][T15313] System zones: 0-2, 18-18, 34-35 [ 232.706583][T15319] loop1: detected capacity change from 0 to 1024 [ 232.715986][T15313] ext4 filesystem being mounted at /555/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 232.720389][T15319] journal_path: Lookup failure for './file1' [ 232.733095][T15319] EXT4-fs: error: could not find journal device path [ 232.754252][ T55] gretap0 (unregistering): left allmulticast mode [ 232.856237][ T55] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 232.868046][ T55] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 232.884810][ T55] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 232.903089][ T55] bond0 (unregistering): Released all slaves [ 232.932787][T15181] 8021q: adding VLAN 0 to HW filter on device bond0 [ 232.951875][T15323] pim6reg1: entered promiscuous mode [ 232.957418][T15323] pim6reg1: entered allmulticast mode [ 232.989890][T15181] 8021q: adding VLAN 0 to HW filter on device team0 [ 233.023383][T15334] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4091'. [ 233.038657][T15338] loop1: detected capacity change from 0 to 1024 [ 233.049236][T15335] pim6reg1: entered promiscuous mode [ 233.049409][T15338] EXT4-fs (loop1): Can't support bigalloc feature without extents feature [ 233.049409][T15338] [ 233.054573][T15335] pim6reg1: entered allmulticast mode [ 233.065284][T15338] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 233.120234][ T55] hsr_slave_0: left promiscuous mode [ 233.126009][ T55] hsr_slave_1: left promiscuous mode [ 233.132232][ T55] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 233.140791][ T55] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 233.148666][ T55] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 233.156174][ T55] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 233.165386][ T55] veth1_macvtap: left promiscuous mode [ 233.170957][ T55] veth0_macvtap: left promiscuous mode [ 233.176581][ T55] veth1_vlan: left promiscuous mode [ 233.261457][ T55] team0 (unregistering): Port device team_slave_1 removed [ 233.273393][ T55] team0 (unregistering): Port device team_slave_0 removed [ 233.286679][T15345] loop0: detected capacity change from 0 to 512 [ 233.293553][T15345] EXT4-fs: Ignoring removed nomblk_io_submit option [ 233.302555][T15345] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 233.310739][T15345] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=1842c01c, mo2=0002] [ 233.320522][T15345] EXT4-fs (loop0): couldn't mount RDWR because of unsupported optional features (80) [ 233.330149][T15345] EXT4-fs (loop0): Skipping orphan cleanup due to unknown ROCOMPAT features [ 233.341565][T15345] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: none. [ 233.366668][ T3744] bridge0: port 1(bridge_slave_0) entered blocking state [ 233.374057][ T3744] bridge0: port 1(bridge_slave_0) entered forwarding state [ 233.385500][ T28] bridge0: port 2(bridge_slave_1) entered blocking state [ 233.392809][ T28] bridge0: port 2(bridge_slave_1) entered forwarding state [ 233.404046][T15348] loop4: detected capacity change from 0 to 512 [ 233.406882][T15350] loop1: detected capacity change from 0 to 512 [ 233.413891][T15348] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4096'. [ 233.425829][T15348] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4096'. [ 233.435155][T15351] EXT4-fs (loop0): couldn't mount RDWR because of unsupported optional features (80) [ 233.521088][T15357] loop4: detected capacity change from 0 to 2048 [ 233.533197][T15357] EXT4-fs: Ignoring removed orlov option [ 233.560967][T15181] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 233.640733][T15181] veth0_vlan: entered promiscuous mode [ 233.649532][T15181] veth1_vlan: entered promiscuous mode [ 233.671062][T15227] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 233.681568][T15227] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 233.691221][T15227] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 233.703530][T15227] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 233.718080][ T55] IPVS: stop unused estimator thread 0... [ 233.722872][T15181] veth0_macvtap: entered promiscuous mode [ 233.735636][T15181] veth1_macvtap: entered promiscuous mode [ 233.751316][T15181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 233.762367][T15181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.772463][T15181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 233.783222][T15181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.793063][T15181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 233.803527][T15181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.814247][T15181] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 233.829853][T15181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 233.840598][T15181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.850634][T15181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 233.861178][T15181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.871010][T15181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 233.881953][T15181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.893022][T15181] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 233.905689][T15181] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.915074][T15181] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.924386][T15181] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.933255][T15181] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.971515][T15227] 8021q: adding VLAN 0 to HW filter on device bond0 [ 233.987106][T15227] 8021q: adding VLAN 0 to HW filter on device team0 [ 233.999809][ T3750] bridge0: port 1(bridge_slave_0) entered blocking state [ 234.007389][ T3750] bridge0: port 1(bridge_slave_0) entered forwarding state [ 234.026314][T15375] loop3: detected capacity change from 0 to 2048 [ 234.030781][ T3750] bridge0: port 2(bridge_slave_1) entered blocking state [ 234.040057][ T3750] bridge0: port 2(bridge_slave_1) entered forwarding state [ 234.066564][T15375] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 234.087537][T15375] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 16 with error 28 [ 234.100341][T15375] EXT4-fs (loop3): This should not happen!! Data will be lost [ 234.100341][T15375] [ 234.111355][T15375] EXT4-fs (loop3): Total free blocks count 0 [ 234.117449][T15375] EXT4-fs (loop3): Free/Dirty block details [ 234.123530][T15375] EXT4-fs (loop3): free_blocks=2415919104 [ 234.125962][T15227] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 234.129405][T15375] EXT4-fs (loop3): dirty_blocks=16 [ 234.129426][T15375] EXT4-fs (loop3): Block reservation details [ 234.129488][T15375] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 234.179033][T15383] pim6reg1: entered promiscuous mode [ 234.184380][T15383] pim6reg1: entered allmulticast mode [ 234.301263][T15227] veth0_vlan: entered promiscuous mode [ 234.312074][T15227] veth1_vlan: entered promiscuous mode [ 234.346529][T15395] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4102'. [ 234.373538][T15404] loop4: detected capacity change from 0 to 512 [ 234.382544][T15227] veth0_macvtap: entered promiscuous mode [ 234.383866][T15401] loop1: detected capacity change from 0 to 512 [ 234.403802][T15227] veth1_macvtap: entered promiscuous mode [ 234.412071][T15406] loop0: detected capacity change from 0 to 512 [ 234.432751][T15408] loop4: detected capacity change from 0 to 512 [ 234.452122][T15408] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4108'. [ 234.455649][T15227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 234.471811][T15227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.481720][T15227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 234.492591][T15227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.502622][T15227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 234.513496][T15227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.523396][T15227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 234.533843][T15227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.572758][T15406] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0002] [ 234.581293][T15406] System zones: 0-2, 18-18, 34-35 [ 234.594176][T15406] ext4 filesystem being mounted at /562/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 234.615919][T15227] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 234.636718][T15422] pim6reg1: entered promiscuous mode [ 234.642153][T15422] pim6reg1: entered allmulticast mode [ 234.660965][T15227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 234.671679][T15227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.681550][T15227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 234.692082][T15227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.702263][T15227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 234.712757][T15227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.722879][T15227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 234.733420][T15227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.751174][T15227] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 234.761920][T15227] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.770824][T15227] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.779661][T15227] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.788423][T15227] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.799795][T15425] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4114'. [ 234.844712][T15433] loop4: detected capacity change from 0 to 512 [ 234.933580][T15441] loop1: detected capacity change from 0 to 512 [ 234.998388][T15445] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 235.006872][T15445] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 235.023828][T15447] loop0: detected capacity change from 0 to 1024 [ 235.031085][T15447] EXT4-fs: Ignoring removed nobh option [ 235.036763][T15447] EXT4-fs: Ignoring removed orlov option [ 235.043827][T15453] loop4: detected capacity change from 0 to 128 [ 235.107870][ T50] kworker/u8:3: attempt to access beyond end of device [ 235.107870][ T50] loop4: rw=1, sector=145, nr_sectors = 896 limit=128 [ 235.172935][T15472] loop0: detected capacity change from 0 to 512 [ 235.209040][T15470] loop2: detected capacity change from 0 to 2048 [ 235.210882][T15476] loop4: detected capacity change from 0 to 2048 [ 235.233955][T15484] tc_dump_action: action bad kind [ 235.298050][ T29] kauditd_printk_skb: 481 callbacks suppressed [ 235.298070][ T29] audit: type=1400 audit(1725670393.656:35496): avc: denied { mount } for pid=15491 comm="syz.0.4139" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 235.302957][T15492] loop0: detected capacity change from 0 to 512 [ 235.335637][T15492] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 235.346758][T15492] EXT4-fs error (device loop0): __ext4_get_inode_loc:4436: comm syz.0.4139: Invalid inode table block 0 in block_group 0 [ 235.360011][T15492] EXT4-fs (loop0): get root inode failed [ 235.365699][T15492] EXT4-fs (loop0): mount failed [ 235.433173][T15509] loop4: detected capacity change from 0 to 1024 [ 235.446685][T15509] EXT4-fs: Ignoring removed nobh option [ 235.446764][T15511] loop2: detected capacity change from 0 to 512 [ 235.452365][T15509] EXT4-fs: Ignoring removed orlov option [ 235.466118][T15513] loop1: detected capacity change from 0 to 1024 [ 235.474646][T15513] journal_path: Lookup failure for './file1' [ 235.480855][T15513] EXT4-fs: error: could not find journal device path [ 235.509354][ T29] audit: type=1400 audit(1725670393.876:35497): avc: denied { read } for pid=15517 comm="syz.2.4148" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 235.530366][ T29] audit: type=1326 audit(1725670393.896:35498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15517 comm="syz.2.4148" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f295008cef9 code=0x0 [ 235.556569][ T29] audit: type=1400 audit(1725670393.916:35499): avc: denied { mounton } for pid=15508 comm="syz.4.4145" path="/55/file0/bus" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 235.571872][T15520] loop1: detected capacity change from 0 to 2048 [ 235.593949][T15520] 9pnet_fd: Insufficient options for proto=fd [ 235.598372][ T29] audit: type=1400 audit(1725670393.956:35500): avc: denied { unmount } for pid=14246 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 235.621506][ T29] audit: type=1400 audit(1725670393.986:35501): avc: denied { unlink } for pid=14246 comm="syz-executor" name="bus" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 235.677439][ T29] audit: type=1400 audit(1725670394.036:35502): avc: denied { write } for pid=15524 comm="syz.4.4150" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 235.701634][T15527] loop4: detected capacity change from 0 to 512 [ 235.763223][ T29] audit: type=1400 audit(1725670394.126:35503): avc: denied { read } for pid=15528 comm="syz.1.4151" dev="sockfs" ino=54317 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 235.769049][T15534] loop4: detected capacity change from 0 to 1024 [ 235.800243][T15534] ext4 filesystem being mounted at /59/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 235.811768][ T29] audit: type=1400 audit(1725670394.176:35504): avc: denied { ioctl } for pid=15533 comm="syz.4.4154" path="/59/file1/file1" dev="loop4" ino=15 ioctlcmd=0x5839 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 235.837185][ T29] audit: type=1400 audit(1725670394.176:35505): avc: denied { write } for pid=15533 comm="syz.4.4154" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 236.250860][T15542] ip6gre0: Master is either lo or non-ether device [ 236.289473][T15544] atomic_op ffff888114328d28 conn xmit_atomic 0000000000000000 [ 236.350823][T15549] ================================================================== [ 236.358968][T15549] BUG: KCSAN: data-race in mas_wr_modify / mtree_range_walk [ 236.366290][T15549] [ 236.368615][T15549] write to 0xffff888104470310 of 8 bytes by task 15548 on cpu 1: [ 236.376339][T15549] mas_wr_modify+0x155c/0x3c90 [ 236.381137][T15549] mas_wr_store_entry+0x250/0x390 [ 236.386174][T15549] mas_store_prealloc+0x151/0x2b0 [ 236.391392][T15549] vma_expand+0x57f/0x660 [ 236.395732][T15549] mmap_region+0x80c/0x1620 [ 236.400246][T15549] do_mmap+0x72a/0xb70 [ 236.404324][T15549] vm_mmap_pgoff+0x133/0x290 [ 236.409106][T15549] ksys_mmap_pgoff+0xd0/0x340 [ 236.413802][T15549] x64_sys_call+0x1884/0x2d60 [ 236.418502][T15549] do_syscall_64+0xc9/0x1c0 [ 236.423023][T15549] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.428942][T15549] [ 236.431297][T15549] read to 0xffff888104470310 of 8 bytes by task 15549 on cpu 0: [ 236.438930][T15549] mtree_range_walk+0x1b4/0x460 [ 236.443794][T15549] mas_walk+0x16e/0x320 [ 236.447955][T15549] lock_vma_under_rcu+0x84/0x260 [ 236.453018][T15549] exc_page_fault+0x150/0x650 [ 236.457712][T15549] asm_exc_page_fault+0x26/0x30 [ 236.462647][T15549] [ 236.464970][T15549] value changed: 0x00007f294ece6fff -> 0x00007f294ecc5fff [ 236.472074][T15549] [ 236.474393][T15549] Reported by Kernel Concurrency Sanitizer on: [ 236.480545][T15549] CPU: 0 UID: 0 PID: 15549 Comm: syz.2.4158 Not tainted 6.11.0-rc6-syzkaller-00183-gb831f83e40a2 #0 [ 236.491320][T15549] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 236.501396][T15549] ==================================================================