last executing test programs: 1.783259285s ago: executing program 1 (id=4329): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) truncate(&(0x7f0000000040)='./file0\x00', 0x0) 1.741961656s ago: executing program 0 (id=4330): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r0}, 0x10) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000440)={'syztnl1\x00', &(0x7f0000000640)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x3, 0x0, 0x30000, @loopback, @local, 0x8000, 0x0, 0x1, 0x6}}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) inotify_init1(0x80800) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r3, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) 1.716759716s ago: executing program 3 (id=4331): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000410"], 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000b00), 0x1, 0x55f, &(0x7f0000000580)="$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") lsetxattr$system_posix_acl(&(0x7f0000000000)='./file1\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="0200000001000000000000000400000000000000100000000000000020"], 0x24, 0x0) 1.710223276s ago: executing program 1 (id=4332): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) syz_io_uring_setup(0x10d, &(0x7f0000000380)={0x0, 0x5885, 0x800, 0x1, 0xffeffc03}, &(0x7f0000000340)=0x0, &(0x7f0000000240)) socket$pppoe(0x18, 0x1, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x4, &(0x7f0000000080)=[{0x8, 0xa2, 0xa, 0x2}, {0x4bba, 0x2, 0x7, 0xf}, {0x8000, 0x1, 0x0, 0x4}, {0xd, 0xfc, 0x99}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f0000000100)) ptrace(0x10, r3) ptrace$getsig(0x4202, r3, 0x9, 0x0) socket(0x10, 0x803, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x800) lstat(&(0x7f0000000200)='.\x00', &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RSTATu(r6, &(0x7f0000000680)=ANY=[@ANYBLOB="5f0000007d020080010000000400000000000000000000089f000000020000070400000000000000110039705f70726f746f636f6c5f64756d700001002d010025040047504c000000", @ANYRES32, @ANYRES32=r7, @ANYRES32=r8], 0x5f) keyctl$get_persistent(0x16, r8, 0xfffffffffffffffd) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r9}, 0x10) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0x80045505, &(0x7f0000000040)=@usbdevfs_connect) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x15c, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in6=@rand_addr=' \x01\x00', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x4e21, 0x2, 0x0, 0x0, 0x0, 0x6c, 0x0, 0xee00}, {@in6=@private1, 0xfe, 0x32}, @in=@multicast2, {0x0, 0x0, 0x0, 0x9, 0xffffffff00000001, 0x0, 0x80000001, 0x543}, {0x4, 0x7fffffffffffffff, 0x0, 0x1}, {}, 0x70bd2c, 0x3500, 0xa, 0x0, 0x0, 0x50}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "210466d38547aa140db9a200000000c538c7cb7a"}}, @offload={0xc, 0x1c, {0x0, 0x3}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2000) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000)) 1.636520128s ago: executing program 3 (id=4333): r0 = openat$sysfs(0xffffff9c, &(0x7f00000037c0)='/sys/kernel/notes', 0x0, 0x0) r1 = syz_io_uring_setup(0xbdc, &(0x7f0000000080)={0x0, 0xec21, 0x80, 0x1, 0x40001333}, &(0x7f0000000340)=0x0, &(0x7f00000002c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r1, 0x847ba, 0x2000, 0xe, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e000000"], &(0x7f0000000700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0xf) 1.612107908s ago: executing program 0 (id=4334): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) syz_io_uring_setup(0x10d, &(0x7f0000000380)={0x0, 0x5885, 0x800, 0x1, 0xffeffc03}, &(0x7f0000000340)=0x0, &(0x7f0000000240)) socket$pppoe(0x18, 0x1, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x4, &(0x7f0000000080)=[{0x8, 0xa2, 0xa, 0x2}, {0x4bba, 0x2, 0x7, 0xf}, {0x8000, 0x1, 0x0, 0x4}, {0xd, 0xfc, 0x99}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f0000000100)) ptrace(0x10, r3) ptrace$getsig(0x4202, r3, 0x9, 0x0) socket(0x10, 0x803, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x800) lstat(&(0x7f0000000200)='.\x00', &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RSTATu(r6, &(0x7f0000000680)=ANY=[@ANYBLOB="5f0000007d020080010000000400000000000000000000089f000000020000070400000000000000110039705f70726f746f636f6c5f64756d700001002d010025040047504c000000", @ANYRES32, @ANYRES32=r7, @ANYRES32=r8], 0x5f) keyctl$get_persistent(0x16, r8, 0xfffffffffffffffd) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r9}, 0x10) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0x80045505, &(0x7f0000000040)=@usbdevfs_connect) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x15c, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in6=@rand_addr=' \x01\x00', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x4e21, 0x2, 0x0, 0x0, 0x0, 0x6c, 0x0, 0xee00}, {@in6=@private1, 0xfe, 0x32}, @in=@multicast2, {0x0, 0x0, 0x0, 0x9, 0xffffffff00000001, 0x0, 0x80000001, 0x543}, {0x4, 0x7fffffffffffffff, 0x0, 0x1}, {}, 0x70bd2c, 0x3500, 0xa, 0x0, 0x0, 0x50}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "210466d38547aa140db9a200000000c538c7cb7a"}}, @offload={0xc, 0x1c, {0x0, 0x3}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2000) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) 1.54064295s ago: executing program 3 (id=4336): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="00002dbd7000fedbdf25050000000800050040000000080006000700000008000400ffffff7f"], 0x2c}, 0x1, 0x0, 0x0, 0x20004044}, 0x24044044) syz_emit_ethernet(0x0, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000b00)=ANY=[@ANYBLOB="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"], 0xc8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000000d29010300000000000000000a0000010900010073797a31000000000900010073797a3100000000"], 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000040)='fib6_table_lookup\x00', r2}, 0x10) syz_emit_ethernet(0x5e, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0086dd607428dd00283afffe8000000000000000000000000000bbff0200000000000000000000000000018900907800000000fe8800000000000000000000000000010002122b4f2e41e24b11f34b60be81abf41e041eda7f598700799e358816e5"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r4], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x200000, 0x0) write$tun(r5, &(0x7f0000000740)=ANY=[@ANYBLOB="000000000000000000000000446100b50068000066119078ac14142fffffffff07232bac1414aa7f00000164010100ac1414bbffffffffac1414bbac14140f0a010100891b7a7f000001ffffffffac1414aa00000002ac14140fe000000294040000861300000001050681bad8b1060709e7e056278927dce0000002e064010100ffffffff64010102e000000200000000640101014e214e2200259078a518c374bb823cb84b89e64d563f60251f42a76812eae90479828977fa00000000000000ef502b1219523cbff8c957a4"], 0xc1) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r6}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac14140f00000000000000001400020002000000ffffff53a2513743897e44000d0001007564703aa3"], 0x54}}, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000c80)={'lo\x00'}) 1.465084391s ago: executing program 2 (id=4337): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000070000000300000048"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sys_enter\x00', r1}, 0x18) r2 = socket(0x1e, 0x4, 0x0) r3 = socket(0x1e, 0x2, 0x0) dup3(r3, r2, 0x0) 1.464735742s ago: executing program 3 (id=4338): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000000100000100000028"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r3, 0x0, 0x7}, 0x18) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001440)=ANY=[@ANYBLOB="640000000206030000000000fffff0000000000016000300686173683a6e65742c706f72742c6e6574000000050004000000000005000500020000000900020073797a3200000000050001000700000014000780080013400000000008001240", @ANYRES16=r1], 0x64}}, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x5c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x8, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x9e0a}, @in={0x2, 0x4e20, @private=0xa010100}, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e24, @loopback}, @in={0x2, 0x4e22, @broadcast}]}, &(0x7f00000014c0)=0x10) mkdir(&(0x7f0000000300)='./bus\x00', 0x2) setxattr$trusted_overlay_opaque(&(0x7f0000000180)='./bus\x00', &(0x7f00000001c0), 0x0, 0x0, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001600)={0x11, 0x200000000000009c, &(0x7f0000001540)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0xd97e9f41d37e5e2b, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0xd}, 0x94) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300), 0x8800, &(0x7f0000000440)=ANY=[@ANYBLOB=',seclabel']) listxattr(&(0x7f0000000200)='./bus\x00', &(0x7f0000000400)=""/4109, 0x100d) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000340)={r5, @in={{0x2, 0x4e20, @rand_addr=0x64010102}}, 0x0, 0x6, 0x157, 0x8, 0x71, 0x1000000, 0xe8}, 0x9c) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000000306050000008000000000000200000a0500010007000000"], 0x1c}, 0x1, 0x0, 0x0, 0x40841}, 0x4) lsetxattr$trusted_overlay_origin(&(0x7f0000001580)='./bus\x00', &(0x7f00000015c0), &(0x7f00000016c0), 0x2, 0x2) 1.449758732s ago: executing program 4 (id=4339): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) signalfd(r0, &(0x7f0000000280)={[0x80]}, 0x8) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00~'], 0x1c}}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_KEY(r4, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x40) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000001480)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='kfree\x00', r7, 0x0, 0x4804}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x14}, 0x4010) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001040)={&(0x7f0000000040)={0x2, 0xffff, @remote}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="2d0000008058", 0x6}], 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x40}, 0x20000024) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x34, r2, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'bond0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x34}}, 0x0) chdir(&(0x7f0000000000)='./cgroup\x00') r8 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x800, 0x20) sendmsg$SMC_PNETID_DEL(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="00000000e3375cab9b8705ca541be37c7f95e877b3b1e47648ece7992d25a51430683c999d765748fef4385b135f6f4c1803c6f5b5b4", @ANYBLOB="270e28bd700000000000040702"], 0x14}, 0x1, 0x40030000000000}, 0x4000) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r8, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, r6, 0x10, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x9, 0x48}}}}, [@NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x20008051}, 0x4000) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 1.431100732s ago: executing program 2 (id=4340): r0 = syz_clone(0x28b0a000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) mlockall(0x2) mmap(&(0x7f0000361000/0x2000)=nil, 0x2000, 0x300000a, 0x769f00b363895638, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000580)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bind$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x36}}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0xffff, @multicast2}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'sh\x00', 0x15, 0x80001088, 0x73}, 0x2c) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r1}, &(0x7f0000000380), &(0x7f0000000280)}, 0x20) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000004000000020000000000000f0400000000005f"], 0x0, 0x28}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="024000000000005b00000000000000000000000000d47e80402bc2dfcd9f78e38d34de22d18f84e55766b2cb4bf399bed5a6d229a046c172635291759c0548f797597dda78faceef11", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="000000000100"/28], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0c00000004000000040000000700000000000000", @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="0300000080"], 0x50) syz_pidfd_open(r0, 0x0) accept$unix(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000240)=0x6e) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(0xffffffffffffffff, 0xf505, 0x0) 1.375053633s ago: executing program 4 (id=4341): ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x81}}, './file0\x00'}) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000040)={0x0, 0xef, "06bc40b662d68dd62ee5a6dcd04caaa7e21bfad5422b3cad06078c35f32a2f7adc524b0ac88bb06273c3b77c0ef0223546fbae7582d4a47ad12ffcfe35944e0e8ce876b5d1a8132d1c43f11704cd08964eb0e98ea2cc4cf675a9b64dda4566902c7e416f3acca05de7bdfe7efb69e42cd0d1f5a56175e0681d31b595a4e45f91e32ee546bd6736859220c57159e1aee23e321022581989e2f4c451710325adc3eed189dde41e8e688a4805d5c382b0f3c9bd3f1da5fe715eac192ccb2dbef8efbd3af7386763a85fda981c4f3ceb5ec2e43b64b90d297bb2ff64502abf625f2dafaad497e30da4cd11a911d0e7fb72"}, &(0x7f0000000140)=0xf7) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={r1, 0x38, &(0x7f0000000180)=[@in6={0xa, 0x4e23, 0x8, @dev={0xfe, 0x80, '\x00', 0x1d}, 0xdc5e}, @in6={0xa, 0x4e24, 0x71b108a9, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffff8}]}, &(0x7f0000000200)=0x10) r2 = socket$inet(0x2, 0x0, 0x80000001) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x4058534c, &(0x7f0000000240)={0xb, 0x1, 0x2, 0x42cc, 0x3f8e5cd9}) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0) r3 = openat(r0, &(0x7f0000000300)='./file0\x00', 0x488403, 0x38) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000480)={@multicast2, @multicast1, 0x0}, &(0x7f00000004c0)=0xc) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)={0x1b, 0x0, 0x0, 0x5, 0x0, r0, 0x6, '\x00', 0x0, r0, 0x1, 0x4, 0x3}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x17, 0x1f, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0xeed}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xc61a}}, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xc}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000440)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000, 0x4f, '\x00', r4, @cgroup_sysctl, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000500)={0x3, 0x4, 0xa, 0x7ff}, 0x10, 0xffffffffffffffff, r0, 0x9, &(0x7f00000005c0)=[r0, r0, r5, r0, r0], &(0x7f0000000600)=[{0x3, 0x3, 0x8, 0xc}, {0x1, 0x3, 0x3, 0x1}, {0x1, 0x1, 0x1, 0x2}, {0x0, 0x5, 0xc}, {0x2, 0x3, 0x9, 0x4}, {0x5, 0x1, 0x4, 0x7}, {0x3, 0x4, 0xd, 0x8}, {0x1, 0x5, 0x1, 0x9}, {0x1, 0x3, 0x3, 0x5}]}, 0x94) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f00000007c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0xfffffffe}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @map_idx={0x18, 0x9, 0x5, 0x0, 0xa}, @call={0x85, 0x0, 0x0, 0x2a}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @call={0x85, 0x0, 0x0, 0xaa}]}, &(0x7f0000000840)='GPL\x00', 0x0, 0x77, &(0x7f0000000880)=""/119, 0x40f00, 0x38, '\x00', 0x0, 0x0, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000900)={0x2, 0x6, 0x8, 0x6}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000940)=[r0, r0, r5, r0, r5, r5, r5, r0, r5, r0], &(0x7f0000000980)=[{0x2, 0x3, 0x10, 0x4}, {0x3, 0x1, 0xa, 0xb}, {0x4, 0x4, 0x10, 0x1}, {0x3, 0x2, 0x3, 0x5}, {0x0, 0x2, 0xe, 0x2}], 0x10, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000ac0)={&(0x7f0000000780)='erofs_readpage\x00', r7, 0x0, 0x4}, 0x18) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000b00)={{0x1, 0x1, 0x18, r0, {0x401}}, './file0/file0\x00'}) ioctl$BLKTRACESTOP(r8, 0x1275, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000c00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x1c, 0x2, 0x6, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000c80)={&(0x7f0000000c40)='contention_end\x00', r6, 0x0, 0x2e5e044f}, 0x18) r9 = accept$packet(r3, 0x0, &(0x7f0000000cc0)) quotactl_fd$Q_SETQUOTA(r9, 0xffffffff80000800, 0xee01, &(0x7f0000000d00)={0x6, 0x8, 0x9, 0x4, 0x1, 0xfffffffffffffffd, 0x1, 0x7, 0x4}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000d80)={'macvtap0\x00', 0x800}) statx(r0, &(0x7f0000000e00)='./file0\x00', 0x2000, 0x400, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_generic(r8, &(0x7f00000012c0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001280)={&(0x7f0000000f40)={0x318, 0x41, 0xc09, 0x70bd2b, 0x25dfdbfc, {0x4}, [@generic="66b0e0f95b2fe2463ad7e7f6b4b6e18c80b52ad3d9679554ee327ea74383394ce2c50161024f035875258a6ed96d1a4c1fefa38fe351d89c3901ab886b99f23b22ec92c89146dd9af2077d5fd509045b2495046f4f35efa65df64ae5ca9d3665024eb98aaa82dca72a6e7ff3258a03cd9bf3530913c12e", @nested={0x82, 0x93, 0x0, 0x1, [@typed={0x14, 0x4a, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @generic="65483c689188314ac77cd6c490edbdb35025017ab9522702e6beb12d7ebef9ea5ec37c56e4d62a1c47b6c57ed4dcd164b31614db117bd3e9c9ee15ca10d8a9b2279f3a1e", @typed={0x8, 0xde, 0x0, 0x0, @uid=r10}, @nested={0x4, 0x6a}, @nested={0x4, 0xf6}, @generic="3c2a2944200cba7543e52576e4314b77fac43c77cb4c"]}, @nested={0x208, 0x2e, 0x0, 0x1, [@generic="81b0397306e4abca1fa1baf1665603a91f3b322ca625e88177a0c2facbdd58d024820e2679824777620afa0a9dd62bccaba7372ac5583f83100f317d8d0c870b8fb2e659dd8ad6478a713dd8c8f68f0cf1a9ac0264f749c65b0b271c312941fbcb7f7c4909fe1d6bd9904ab88d2125e1a3a57a694c02516e5469ce93b2e4364beef3316c172aa79059847a7d8161d52bb5780470a0a40f61cb635e554e714001eccf5aa6c6464d28b9f8fd2c5e0e1930190bdec887f0d18efd6111a89e5741bc833dc4a85c10a2", @generic="970162ff5fc0b5c5cac506f003fa26f0cd2765c4cffe331eba7863b037d3c17af9794fc9a94fdd75d36373cd0b0f86c0f91a61a407b61dcfe72fe7a0d5eb212a830b7932f1502d319033ce36c6f105f788b0a61c37902ad56506060eba3d70a91f693e4e17a4b3e9836f28c9859fec889468e30bf177eb9b4bc70d1630dbbd11bbbae827ffc32e7b44aeea2467703991ee9dadd1fbea3187ae1c5199e7ef2451550de7cf5fa7fe19", @nested={0x4, 0x39}, @nested={0x4, 0x10f}, @generic="f3eb7e9e10cf51967a54f6225fd6137edcfa186321955a8a69f787c16f0972b8af1499b3b97d697e578bf18ec224ed4ae6bae0ae341baad25e05cb6eaf82bb7b1f0a92fd1abe136714efc5a4c76804dc8468651515749cc7419eafd0df19c536c976d98c64091caf4a8f9af52590e252a54363136fba267a2f2fb90534a03c7cf48b2ce9312e57ebb6", @nested={0x4, 0xa1}]}]}, 0x318}}, 0x0) connect$l2tp6(r8, &(0x7f0000001300)={0xa, 0x0, 0x4, @mcast1, 0x0, 0x1}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001640)={0x11, 0x21, &(0x7f0000001340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x3ff}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@alu={0x7, 0x1, 0x3, 0x8, 0xb, 0x1, 0x1}, @call={0x85, 0x0, 0x0, 0x1c}, @jmp={0x5, 0x1, 0x2, 0x9, 0x8, 0x50, 0xfffffffffffffffc}, @generic={0x7, 0x7, 0x0, 0xf66, 0xb}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x2}, @tail_call={{0x18, 0x2, 0x1, 0x0, r8}}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x7}, @initr0={0x18, 0x0, 0x0, 0x0, 0x862, 0x0, 0x0, 0x0, 0x7ff}, @btf_id={0x18, 0xa, 0x3, 0x0, 0x4}, @exit], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}}}, &(0x7f0000001480)='syzkaller\x00', 0xf9, 0x6e, &(0x7f00000014c0)=""/110, 0x40e00, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001540)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000001580)={0x3, 0x0, 0x5}, 0x10, 0x0, 0x0, 0x3, &(0x7f00000015c0)=[r8, r8, r3], &(0x7f0000001600)=[{0x4, 0x2, 0x1}, {0x2, 0x4, 0x8, 0x3}, {0x3, 0x3, 0x2, 0x5}], 0x10, 0xd}, 0x94) ioctl$SIOCSIFHWADDR(r8, 0x8924, &(0x7f0000001700)={'wlan1\x00', @remote}) connect$netlink(r8, &(0x7f0000001740)=@kern={0x10, 0x0, 0x0, 0x1000}, 0xc) r11 = getpid() ptrace$ARCH_GET_CPUID(0x1e, r11, 0x0, 0x1011) getsockopt$inet_pktinfo(r9, 0x0, 0x8, &(0x7f0000001780)={0x0, @multicast1, @local}, &(0x7f00000017c0)=0xc) socket$inet_smc(0x2b, 0x1, 0x0) write$cgroup_devices(r3, &(0x7f0000001800)={'c', ' *:* ', 'rwm\x00'}, 0xa) 1.293041195s ago: executing program 4 (id=4342): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000001c0)={'vlan0\x00', 0x1000}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x24041080) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[], 0x50) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$PROG_LOAD(0x5, 0x0, 0x0) symlink(0x0, &(0x7f0000000640)='./file1\x00') readlink(&(0x7f0000000040)='./file1\x00', 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000440)={'wg1\x00', 0x600}) (fail_nth: 2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, 0xffffffffffffffff, 0x108000) connect$l2tp(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @empty, 0x2}, 0x10) 853.998534ms ago: executing program 1 (id=4343): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00'}, 0x10) r0 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000440)={'syztnl1\x00', &(0x7f0000000640)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x3, 0x0, 0x30000, @loopback, @local, 0x8000, 0x0, 0x1, 0x6}}) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$llc(r1, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, &(0x7f00000002c0)=0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000200)='.\x00', 0x10000a0) dup(0xffffffffffffffff) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x503, 0x70bd2d, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0xc0b0) 842.469813ms ago: executing program 4 (id=4344): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000410"], 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000b00), 0x1, 0x55f, &(0x7f0000000580)="$eJzs3d9rU+cbAPDnpK2/v18riGxjjIIXczhT2+6Hg124y7HJhO3ehfZYpKmRJhXbCdOLebObIYMxJozdb/e7lP0D+yuETZAhZbvYTcZJT2q0SRNrtNF8PnDkfXNO+p4n73le35M3IQEMrYnsn0LEyxHxTRJxMCKSfN9o5Dsn1o9bu391NtuSqNc//StpHJfVm3+r+bz9eeWliPjtq4jjhc3tVldWF0rlcrqU1ydri5cmqyurJy4slubT+fTi9MzMqbdnpt97952+xfrG2X++/+T2h6e+Prr23S93D91M4nQcyPe1xvEErrVWJmIif03G4vQjB071obFBkuz0CbAtI3mej0U2BhyMkTzrgRfflxFRB4ZUIv9hSDXnAc17+z7dBz837n2wfgO0Of7R9fdGYk/j3mjfWvLQnVF2vzveh/azNn7989bNbIv+vQ8B0NW16xFxcnR08/iX5OPf9p3s4ZhH2zD+wbNzO5v/vNlu/lPYmP9Em/nP/ja5ux3d879wtw/NdJTN/95vO//dWLQaH8lr/2vM+caS8xfKaTa2/T8ijsXY7qy+1XrOqbU79U77Wud/2Za135wL5udxd3T3w8+ZK9VKTxJzq3vXI15pO/9NNvo/adP/2etxtsc2jqS3Xuu0r3v8T1f9p4jX2/b/gxWtZOv1ycnG9TDZvCo2+/vGkd87tb/T8Wf9v2/r+MeT1vXa6uO38eOef9NO+x6KP3q//nclnzXKu/LHrpRqtaWpiF3Jx5sfn37w3Ga9eXwW/7GjW49/7a7/vRHxeY/x3zj886s9xd+t/5/CImsW/9xj9f/jF+589MUP248/6/+3GqVj+SO9jH+9nuCTvHYAAAAAAAAwaAoRcSCSQnGjXCgUi+uf7zgc+wrlSrV2/Hxl+eJcNL4rOx5jheZK98GWz0NM5Z+HbdanH6nPRMShiPh2ZG+jXpytlOd2OngAAAAAAAAAAAAAAAAAAAAYEPs7fP8/88fITp8d8NT5yW8YXl3zvx+/9AQMJP//w/CS/zC85D8ML/kPw0v+w/CS/zC85D8ML/kPAAAAAAAAAAAAAAAAAAAAAAAAAAAAfXX2zJlsq6/dvzqb1ecurywvVC6fmEurC8XF5dnibGXpUnG+Upkvp8XZymK3v1euVC5NTcfylclaWq1NVldWzy1Wli/Wzl1YLM2n59KxZxIVAAAAAAAAAAAAAAAAAAAAPF+qK6sLpXI5XVJQ2FZhdDBOY3UhYiBO40Up7PTIBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP/BcAAP//8NI25Q==") lsetxattr$system_posix_acl(&(0x7f0000000000)='./file1\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="0200000001000000000000000400000000000000100000000000000020"], 0x24, 0x0) 758.248315ms ago: executing program 4 (id=4345): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r0}, 0x10) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000440)={'syztnl1\x00', &(0x7f0000000640)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x3, 0x0, 0x30000, @loopback, @local, 0x8000, 0x0, 0x1, 0x6}}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) inotify_init1(0x80800) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r3, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) 739.527215ms ago: executing program 0 (id=4346): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80a, &(0x7f0000000940)={[{@usrquota}, {@resuid}, {@block_validity}, {@errors_remount}]}, 0x1, 0x79b, &(0x7f0000000180)="$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") r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x40, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x14, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x6, 0x0, 0x0, 0x41000, 0x38, '\x00', 0x0, @lirc_mode2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'xfrm0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x49920d862a92153b, 0x800, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3104, 0x1b400}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r4}]}}}]}, 0x3c}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x1018}, './file0\x00'}) 728.602666ms ago: executing program 1 (id=4347): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000001c0)={'vlan0\x00', 0x1000}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x4e23, 0x4, @dev={0xfe, 0x80, '\x00', 0x38}, 0x9}]}, &(0x7f0000000040)=0x10) shutdown(r1, 0x2) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000340)={0xd79, 0x0, 0x8004, 0x6, 0x1d7c, 0xd, 0xc, 0xa, r2}, &(0x7f0000000380)=0x20) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x54, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth1_macvtap\x00'}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x4c, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x20, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'veth1_macvtap\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}]}]}], {0x14}}, 0xe8}}, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) write$UHID_INPUT(r5, &(0x7f0000000040)={0xc, {"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", 0x1000}}, 0x1006) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[], 0x50) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$PROG_LOAD(0x5, 0x0, 0x0) symlink(0x0, &(0x7f0000000640)='./file1\x00') readlink(&(0x7f0000000040)='./file1\x00', 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000440)={'wg1\x00', 0x600}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, 0xffffffffffffffff, 0x108000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x27, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r8}, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='mm_page_free\x00', r6}, 0x10) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000001080)=ANY=[@ANYBLOB="18020000fbffffff000000003cba822c4377b8e0000000850000004100000095", @ANYRESHEX=r7], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r9, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 667.815397ms ago: executing program 0 (id=4348): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000142020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000e028008500000070000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB='T\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d300000000000000800040000000000080012000300030008001100ff070000080010000000020008000f"], 0x54}}, 0x0) 653.912037ms ago: executing program 4 (id=4349): r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049dd) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c4604070003070000000000000002000300030000000903000038000000fcffffff0e000000000020000100050000010000000000000300000008000000f30000007f00000004"], 0x58) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x7, 0xb, &(0x7f0000000800)=ANY=[@ANYBLOB="620ac4ff000000007110b300000000001801000020786c2500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000003000000850000000600000095"], &(0x7f0000000480)='GPL\x00'}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="00000000000000e444acb36c0c8c6780b21ae4be00b700000100000085000000860000009500"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc9e7e593b9667917, '\x00', 0x0, @fallback=0x8, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r4}, 0x10) close(r0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f00000003c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x18) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) execve(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) 637.363948ms ago: executing program 0 (id=4350): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000070000000300000048"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sys_enter\x00', r1}, 0x18) r2 = socket(0x1e, 0x4, 0x0) r3 = socket(0x1e, 0x2, 0x0) dup3(r3, r2, 0x0) 637.063398ms ago: executing program 2 (id=4351): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) signalfd(r0, &(0x7f0000000280)={[0x80]}, 0x8) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00~'], 0x1c}}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_KEY(r4, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x40) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000001480)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='kfree\x00', r7, 0x0, 0x4804}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x14}, 0x4010) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001040)={&(0x7f0000000040)={0x2, 0xffff, @remote}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="2d0000008058", 0x6}], 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x40}, 0x20000024) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x34, r2, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'bond0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x34}}, 0x0) chdir(&(0x7f0000000000)='./cgroup\x00') r8 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x800, 0x20) sendmsg$SMC_PNETID_DEL(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="00000000e3375cab9b8705ca541be37c7f95e877b3b1e47648ece7992d25a51430683c999d765748fef4385b135f6f4c1803c6f5b5b4", @ANYBLOB="270e28bd700000000000040702"], 0x14}, 0x1, 0x40030000000000}, 0x4000) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r8, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, r6, 0x10, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x9, 0x48}}}}, [@NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x20008051}, 0x4000) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 588.800009ms ago: executing program 1 (id=4352): r0 = socket(0x10, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000340)={0xa, 0x5, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfec8d000) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x80000000}, 0x94) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r6}, 0x10) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) syz_mount_image$ext4(&(0x7f0000002180)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008802, &(0x7f0000000180)={[{@jqfmt_vfsv1}, {@abort}, {@discard}, {@max_batch_time={'max_batch_time', 0x3d, 0x3}}, {@data_ordered}, {@mblk_io_submit}, {@resgid}, {@nodioread_nolock}, {@errors_remount}, {}, {@auto_da_alloc}]}, 0x9, 0x606, &(0x7f0000000600)="$eJzs3c1vVFUbAPDnTD9oKe/bQt68igtpYgwkSksLGGJcwNaQBj/ixo2VFoIUaGiNFk0oCW5MjBtjTFy5EP8LJbJlpW5cuHFlSIgaliaOudM7pdPeaenH9Fbm90uGnnvu3J5zpzxzzj1zzp0A2tZg9k8lYn9ETKeI/jS/uK8z8p2DC8978OeHZ7NHimr1td9TpDyv/vyU/+zLD+6JiB++T7GvY2W5M3PXLo5PTU1ezbeHZy9ND8/MXTt84dL4+cnzk5dHXxg9cfzY8RMjRzZ0XtcL8k7ffOe9/o/H3vz6y7/SyDe/jKU4GS/nT1x6HltlMAZrr0lauavvxFYXVqLOZdtpeQY7Vkf+9+uKiCeiPzqW/DX746NXSq0c0FLVFFEF2lRaR/xnvYVW1gXYTvV+QP3afvl1cKWUXgmwHe6fWhgAWBn/nQtjg9FTGxvY/SA1jPOkiNjYyFyjPRFx987YzXN3xm5Gi8bhgGLzNyLiyaL4T7X4H4ieGKjFf6Uh/rN+wZn8Z5b/6gZ7CsuHisU/bJ+F+O9ZNf6jSfy/tST+395EHfJLkeu9DfHf6+oDAAAAAAAA1un2qYh4vujz/8ri/J8omP/TFxEnt6D8wWXbKz//r9zbgmKAAvdPRbxUOP+3Uv/8faAjT/2nNh+gK527MDV5JCL+GxGHomtXtj2yShmHP9n3RbN9g/n8v/ojK/9uPhcwr8e9zl2Nx0yMD45v9ryBiPs3Ip4qnP+bFtv/VND+Z+8H049Yxr5nb51ptm/t+AdapfpVxMHC9v/hXSvS6vfnGK71B4brvYKVnv7g02+blb/R+HeLCdi8rP3fvXr8D6Sl9+uZWfXXzRdlHp3rrDY7YGP9/9nx7vR67a5C3Xne++Ozs1dHIrrT6Y4styF/dK1XAR4zPxVn1+OhHi9Z/B96ZvXxv6L+f29BsKc/GtcU1/3/775fm1VT/x/Kk8X/xLra//UnRm8NfNes/Edr/4/V2vpDeU7W/rfuFYF/j8/rYdrdmF8Qjp1Fu7a7vgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwOKhExJ5IlaHFdKUyNBTRFxH/i92VqSszs8+du/Lu5YlsX+37/yv1b/rtX9hOte//r2Tph9uj0bh9NCL2RsRnHb217aGzV6Ymyj55AAAAAAAAAAAAAAAAAAAA2CH6mqz/z/zWUXbtgJbrLLsCQGkK4v/HMuoBbD/tP7SvDcV/mt/6igDbTvsP7Uv8Q/sS/9C+xD+0L/EP7WrZOH4qqx4AAAAAAMAW2Xvg9s8pIuZf7K09Mt35vq5Sawa0WqXsCgClcYsfaF+m/kH7co0PrDXrt6fpQZuZLzx9dhMHAwAAAAAAAAAAAEDbObjf+n9oV9b/Q/uy/h/aV339/4GS6wFsP9f4QKyxkr9w/f+aRwEAAAAAAAAAAAAAW2mmuitiamry6szctYvjLUt0R0SLi9h04o2dUY2iRG+LfnO1Wr2e/S8o/QQfj0R9KvxOqc+yRH2t36MdVd57EgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0OifAAAA//8sxicA") openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x6) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70200001400ffd9b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000d00)={&(0x7f0000000cc0)='mm_page_alloc\x00', r8}, 0x10) r9 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r9, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0xfffc, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0xfc00) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000050000000000000000000024000a20000000000a1f000000000000000000010000000900010073797a300000000058000000030a0104000000000000000001000000090003803d2175fbe782c2eb2b00048008000240172af2e40800014000000003080002401c791e7108000240423930ce08000140000000030900010073797a300000000088000000060a010400000000000000000100000008000b400000000014000480100001800b0001006e756d67656e00000900010073797a30000000004c0004804800018008000100666962003c000280080003400000000c08000140000000020800014000000030080002400000000308000140000000120800034000000000080003400000000a"], 0x122}, 0x1, 0x0, 0x0, 0x8840}, 0x8010) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000480)=@gcm_256={{0x303}, "000200", "e123c5876ff425b1ebe250a8486be34705f4f827ae60ecb65e528248d5552bff", "7e25837b", "15d0db2c77179e1a"}, 0x38) write$binfmt_script(r1, &(0x7f0000000500)={'#! ', './file0'}, 0xb) close_range(r0, r1, 0x0) 459.544541ms ago: executing program 0 (id=4353): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) syz_io_uring_setup(0x10d, &(0x7f0000000380)={0x0, 0x5885, 0x800, 0x1, 0xffeffc03}, &(0x7f0000000340)=0x0, &(0x7f0000000240)) socket$pppoe(0x18, 0x1, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x4, &(0x7f0000000080)=[{0x8, 0xa2, 0xa, 0x2}, {0x4bba, 0x2, 0x7, 0xf}, {0x8000, 0x1, 0x0, 0x4}, {0xd, 0xfc, 0x99}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000100)) ptrace(0x10, r2) ptrace$getsig(0x4202, r2, 0x9, 0x0) socket(0x10, 0x803, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x800) lstat(&(0x7f0000000200)='.\x00', &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RSTATu(r5, &(0x7f0000000680)=ANY=[@ANYBLOB="5f0000007d020080010000000400000000000000000000089f000000020000070400000000000000110039705f70726f746f636f6c5f64756d700001002d010025040047504c000000", @ANYRES32, @ANYRES32=r6, @ANYRES32=r7], 0x5f) keyctl$get_persistent(0x16, r7, 0xfffffffffffffffd) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r8}, 0x10) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0x80045505, &(0x7f0000000040)=@usbdevfs_connect) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000)) 423.115732ms ago: executing program 2 (id=4354): r0 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)=ANY=[], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000a40)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000280), 0x40900, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r3, 0x5201) fcntl$lock(r2, 0x7, &(0x7f0000000000)={0x1, 0x0, 0x5}) mq_open(&(0x7f0000000200)='@\\/+@\xf3\x00', 0x82, 0x22, 0x0) fcntl$lock(r2, 0x25, &(0x7f00000000c0)={0x2, 0x0, 0x2}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0xff, 0x7ffc1ffd}]}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b80)=@delqdisc={0x24, 0x25, 0x2, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xf, 0xffff}, {0xfff3, 0xffe0}, {0x0, 0xb}}}, 0x24}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='kmem_cache_free\x00', r4}, 0x18) getrlimit(0x8, &(0x7f0000000b40)) close(r0) r5 = inotify_init1(0x800) fcntl$setstatus(r0, 0x4, 0x2c00) fcntl$setown(r0, 0x8, 0x0) fcntl$setsig(r5, 0xa, 0xe) ptrace$setsig(0x4203, 0x0, 0x9, &(0x7f00000000c0)={0x4, 0xdc7, 0x4}) (fail_nth: 10) bpf$MAP_CREATE(0x0, 0x0, 0x48) 196.858016ms ago: executing program 3 (id=4355): syslog(0x2, &(0x7f00000000c0)=""/88, 0x58) 129.416568ms ago: executing program 2 (id=4356): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000410"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000b00), 0x1, 0x55f, &(0x7f0000000580)="$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") lsetxattr$system_posix_acl(&(0x7f0000000000)='./file1\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="0200000001000000000000000400000000000000100000000000000020"], 0x24, 0x0) 126.247468ms ago: executing program 3 (id=4357): syz_read_part_table(0x1059, &(0x7f0000000000)="$eJzsz8FNw0AUBNDxYmRbogNa4Ewn7scHCuFMT0hUwDmX6EdeR0oHSQ7v3Uazs9IPD/WRlpxqfG+ZkyXJuWpK8nb0VdVakr+ehtuwP+q2ek3ycoRx2f/JsF3LVv+fa9/VsC++l6/5aH4zZf25150AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8MwuAQAA//9ZkRMF") bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0xff38}, 0x90) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48}, 0x94) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05dd42"], 0xfdef) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, &(0x7f0000001100)=@buf) 72.054279ms ago: executing program 2 (id=4358): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80a, &(0x7f0000000940)={[{@usrquota}, {@resuid}, {@block_validity}, {@errors_remount}]}, 0x1, 0x79b, &(0x7f0000000180)="$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") r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x40, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x14, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x6, 0x0, 0x0, 0x41000, 0x38, '\x00', 0x0, @lirc_mode2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'xfrm0\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x1018}, './file0\x00'}) 0s ago: executing program 1 (id=4359): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000440)={'syztnl1\x00', &(0x7f0000000640)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x3, 0x0, 0x30000, @loopback, @local, 0x8000, 0x0, 0x1, 0x6}}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) inotify_init1(0x80800) getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r4, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) kernel console output (not intermixed with test programs): 651: mark_inode_dirty error [ 255.049998][T13225] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 255.062172][T13225] EXT4-fs (loop2): 1 orphan inode deleted [ 255.079186][T13225] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #2: block 16: comm syz.2.3651: lblock 0 mapped to illegal pblock 16 (length 1) [ 255.094922][ T12] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:0: lblock 1 mapped to illegal pblock 1 (length 1) [ 255.119612][ T12] EXT4-fs error (device loop2): ext4_release_dquot:6973: comm kworker/u8:0: Failed to release dquot type 0 [ 255.140725][T13225] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #2: block 16: comm syz.2.3651: lblock 0 mapped to illegal pblock 16 (length 1) [ 255.157537][T13225] EXT4-fs error (device loop2): __ext4_get_inode_loc:4861: comm syz.2.3651: Invalid inode table block 1 in block_group 0 [ 255.175256][T13225] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 255.185362][T13225] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #2: comm syz.2.3651: mark_inode_dirty error [ 255.199668][T13225] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #2: block 16: comm syz.2.3651: lblock 0 mapped to illegal pblock 16 (length 1) [ 255.229663][ T12] EXT4-fs error (device loop2): __ext4_get_inode_loc:4861: comm kworker/u8:0: Invalid inode table block 1 in block_group 0 [ 255.253904][T13225] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 255.288243][T13252] netlink: 'syz.0.3660': attribute type 1 has an invalid length. [ 255.308044][T13252] bond3: entered promiscuous mode [ 255.313356][T13252] 8021q: adding VLAN 0 to HW filter on device bond3 [ 255.340751][T13257] loop4: detected capacity change from 0 to 512 [ 255.351461][T13252] 8021q: adding VLAN 0 to HW filter on device bond4 [ 255.370637][T13252] bond3: (slave bond4): making interface the new active one [ 255.378051][T13252] bond4: entered promiscuous mode [ 255.388818][T13252] bond3: (slave bond4): Enslaving as an active interface with an up link [ 255.440578][T13263] bond1 (unregistering): Released all slaves [ 255.451412][ T3413] hid-generic 0000:0000:0000.000B: hidraw0: HID v0.00 Device [syz0] on syz1 [ 255.492531][T13271] fido_id[13271]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 255.520619][T13277] loop3: detected capacity change from 0 to 512 [ 255.841468][T13310] netlink: 'syz.2.3683': attribute type 1 has an invalid length. [ 255.849709][T13295] loop3: detected capacity change from 0 to 1764 [ 255.858541][T13310] bond1: entered promiscuous mode [ 255.863926][T13310] 8021q: adding VLAN 0 to HW filter on device bond1 [ 255.903567][T13313] loop2: detected capacity change from 0 to 1024 [ 255.920722][T13313] ext4 filesystem being mounted at /144/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 255.934067][T13313] EXT4-fs error (device loop2): ext4_free_blocks:6696: comm syz.2.3684: Freeing blocks not in datazone - block = 0, count = 16 [ 255.950311][T13313] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 255.968717][T13317] loop3: detected capacity change from 0 to 1024 [ 256.168886][T13327] bond1 (unregistering): Released all slaves [ 256.343365][T13345] netlink: 'syz.4.3697': attribute type 1 has an invalid length. [ 256.431893][T10561] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 256.447047][ T3429] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 256.471170][ T3429] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 256.483942][ T3429] EXT4-fs (loop2): This should not happen!! Data will be lost [ 256.483942][ T3429] [ 256.494343][ T3429] EXT4-fs (loop2): Total free blocks count 0 [ 256.500394][ T3429] EXT4-fs (loop2): Free/Dirty block details [ 256.502547][T10561] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 256.506421][ T3429] EXT4-fs (loop2): free_blocks=4293918736 [ 256.518543][T10561] EXT4-fs (loop1): This should not happen!! Data will be lost [ 256.518543][T10561] [ 256.518562][T10561] EXT4-fs (loop1): Total free blocks count 0 [ 256.524269][ T3429] EXT4-fs (loop2): dirty_blocks=16 [ 256.534022][T10561] EXT4-fs (loop1): Free/Dirty block details [ 256.534039][T10561] EXT4-fs (loop1): free_blocks=4293918736 [ 256.534052][T10561] EXT4-fs (loop1): dirty_blocks=16 [ 256.534093][T10561] EXT4-fs (loop1): Block reservation details [ 256.534107][T10561] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 256.544419][T13360] loop3: detected capacity change from 0 to 8192 [ 256.546032][ T3429] EXT4-fs (loop2): Block reservation details [ 256.587301][ T3429] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 256.693783][ T3388] hid-generic 0000:0000:0000.000C: hidraw0: HID v0.00 Device [syz0] on syz1 [ 256.743242][T13375] fido_id[13375]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 256.804280][T13383] __nla_validate_parse: 4 callbacks suppressed [ 256.804296][T13383] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3708'. [ 256.880541][T13392] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3716'. [ 256.961464][T13395] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3717'. [ 257.048264][T13403] loop2: detected capacity change from 0 to 1024 [ 257.106371][ T29] kauditd_printk_skb: 280 callbacks suppressed [ 257.106391][ T29] audit: type=1326 audit(1758988819.929:651835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13411 comm="syz.2.3724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b85c9eec9 code=0x7ffc0000 [ 257.144797][ T29] audit: type=1326 audit(1758988819.929:651836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13411 comm="syz.2.3724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b85c9eec9 code=0x7ffc0000 [ 257.168770][ T29] audit: type=1326 audit(1758988819.929:651837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13411 comm="syz.2.3724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=5 compat=0 ip=0x7f8b85c9eec9 code=0x7ffc0000 [ 257.192564][ T29] audit: type=1326 audit(1758988819.929:651838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13411 comm="syz.2.3724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b85c9eec9 code=0x7ffc0000 [ 257.372026][T13427] netlink: 'syz.2.3731': attribute type 1 has an invalid length. [ 257.417926][T13431] IPVS: Error connecting to the multicast addr [ 257.863741][ T29] audit: type=1326 audit(1758988820.689:651839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13442 comm="syz.0.3735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1783ceec9 code=0x7ffc0000 [ 258.062094][ T29] audit: type=1326 audit(1758988820.689:651840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13442 comm="syz.0.3735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1783ceec9 code=0x7ffc0000 [ 258.086041][ T29] audit: type=1326 audit(1758988820.719:651841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13442 comm="syz.0.3735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=93 compat=0 ip=0x7fb1783ceec9 code=0x7ffc0000 [ 258.109756][ T29] audit: type=1326 audit(1758988820.719:651842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13442 comm="syz.0.3735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1783ceec9 code=0x7ffc0000 [ 258.564843][T13461] netlink: 'syz.1.3742': attribute type 1 has an invalid length. [ 258.614080][T13461] bond1: entered promiscuous mode [ 258.644909][T13461] 8021q: adding VLAN 0 to HW filter on device bond1 [ 258.677246][ T29] audit: type=1326 audit(1758988821.499:651843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13476 comm="syz.2.3747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b85c9eec9 code=0x7ffc0000 [ 258.701200][ T29] audit: type=1326 audit(1758988821.499:651844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13476 comm="syz.2.3747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b85c9eec9 code=0x7ffc0000 [ 258.752508][T13479] loop1: detected capacity change from 0 to 1024 [ 258.809224][T13487] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 258.851631][ T10] IPVS: starting estimator thread 0... [ 258.857304][T13463] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 258.895463][T13469] loop4: detected capacity change from 0 to 1764 [ 258.925005][T13493] IPVS: stopping master sync thread 13487 ... [ 258.947299][T13489] IPVS: using max 1872 ests per chain, 93600 per kthread [ 258.962148][T13497] loop2: detected capacity change from 0 to 1024 [ 259.012335][T10899] EXT4-fs unmount: 27 callbacks suppressed [ 259.012350][T10899] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 259.999263][T13518] netlink: 'syz.4.3760': attribute type 1 has an invalid length. [ 260.126657][T13520] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3761'. [ 260.212501][T13525] loop4: detected capacity change from 0 to 512 [ 260.264049][T13529] loop1: detected capacity change from 0 to 1024 [ 260.297601][T13529] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 260.318036][T13529] ext4 filesystem being mounted at /69/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 260.332868][T13529] EXT4-fs error (device loop1): ext4_free_blocks:6696: comm syz.1.3764: Freeing blocks not in datazone - block = 0, count = 16 [ 260.352073][T13541] tipc: Started in network mode [ 260.357028][T13541] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 260.365906][T13541] tipc: Enabling of bearer rejected, failed to enable media [ 260.423920][T13549] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3772'. [ 260.438480][T13541] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3769'. [ 260.455334][T13541] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3769'. [ 260.518498][T13554] loop3: detected capacity change from 0 to 8192 [ 260.577960][T13561] loop4: detected capacity change from 0 to 1024 [ 260.601202][T13561] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 260.658859][T11401] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 260.710010][T13568] IPVS: Error connecting to the multicast addr [ 260.965450][T13588] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3786'. [ 261.023865][T13592] bond6 (unregistering): Released all slaves [ 261.175472][ T10] hid_parser_main: 107 callbacks suppressed [ 261.175492][ T10] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 261.188997][ T10] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 261.196408][ T10] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 261.203866][ T10] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 261.206450][ T2006] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 261.211315][ T10] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 261.233819][ T10] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 261.241302][ T10] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 261.241330][ T2006] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 261.241358][ T2006] EXT4-fs (loop1): This should not happen!! Data will be lost [ 261.241358][ T2006] [ 261.241427][ T2006] EXT4-fs (loop1): Total free blocks count 0 [ 261.248816][ T10] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 261.248867][ T10] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 261.248892][ T10] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 261.261137][ T2006] EXT4-fs (loop1): Free/Dirty block details [ 261.305501][ T2006] EXT4-fs (loop1): free_blocks=4293918736 [ 261.311347][ T2006] EXT4-fs (loop1): dirty_blocks=16 [ 261.316502][ T2006] EXT4-fs (loop1): Block reservation details [ 261.322614][ T2006] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 261.336758][ T10] hid-generic 0000:0000:0000.000D: hidraw0: HID v0.00 Device [syz0] on syz1 [ 261.400528][T13614] netlink: 'syz.3.3796': attribute type 1 has an invalid length. [ 261.401490][T13616] netlink: 'syz.0.3797': attribute type 1 has an invalid length. [ 261.417637][T13614] bond2: entered promiscuous mode [ 261.423022][T13614] 8021q: adding VLAN 0 to HW filter on device bond2 [ 261.442137][T13616] bond6: entered promiscuous mode [ 261.454874][T13616] 8021q: adding VLAN 0 to HW filter on device bond6 [ 261.500098][T13626] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3801'. [ 261.550066][T13628] loop2: detected capacity change from 0 to 1024 [ 261.579210][T13628] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 261.601638][T13635] netlink: 'syz.3.3804': attribute type 1 has an invalid length. [ 261.646461][T10899] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 261.759052][T13653] loop4: detected capacity change from 0 to 512 [ 261.775924][T13651] bond7 (unregistering): Released all slaves [ 261.874444][T13662] netlink: 'syz.0.3816': attribute type 1 has an invalid length. [ 261.941700][T13670] netlink: 'syz.4.3819': attribute type 1 has an invalid length. [ 261.953912][ T10] hid-generic 0000:0000:0000.000E: hidraw0: HID v0.00 Device [syz0] on syz1 [ 261.971684][T13670] bond4: entered promiscuous mode [ 261.990643][T13670] 8021q: adding VLAN 0 to HW filter on device bond4 [ 261.996285][T13673] fido_id[13673]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 262.021525][T13656] loop3: detected capacity change from 0 to 1764 [ 262.043837][T13676] bond8 (unregistering): Released all slaves [ 262.066304][T13679] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3821'. [ 262.125020][T13681] loop3: detected capacity change from 0 to 1024 [ 262.135235][T13681] EXT4-fs: Ignoring removed bh option [ 262.141099][T13681] EXT4-fs: inline encryption not supported [ 262.153492][T13681] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 262.169015][T13681] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 262.178983][T13681] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 2: comm syz.3.3822: lblock 2 mapped to illegal pblock 2 (length 1) [ 262.193164][T13681] __quota_error: 83 callbacks suppressed [ 262.193178][T13681] Quota error (device loop3): qtree_write_dquot: dquota write failed [ 262.207019][T13681] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 48: comm syz.3.3822: lblock 0 mapped to illegal pblock 48 (length 1) [ 262.221413][T13681] Quota error (device loop3): v2_write_file_info: Can't write info structure [ 262.230240][T13681] EXT4-fs error (device loop3): ext4_acquire_dquot:6937: comm syz.3.3822: Failed to acquire dquot type 0 [ 262.243169][T13681] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 262.253054][T13681] EXT4-fs error (device loop3): ext4_evict_inode:254: inode #11: comm syz.3.3822: mark_inode_dirty error [ 262.267338][T13681] EXT4-fs warning (device loop3): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 262.279178][T13681] EXT4-fs (loop3): 1 orphan inode deleted [ 262.285762][T13681] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 262.299670][ T3429] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:7: lblock 1 mapped to illegal pblock 1 (length 1) [ 262.302296][T13681] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #2: block 16: comm syz.3.3822: lblock 0 mapped to illegal pblock 16 (length 1) [ 262.328655][ T3429] Quota error (device loop3): remove_tree: Can't read quota data block 1 [ 262.337217][ T3429] EXT4-fs error (device loop3): ext4_release_dquot:6973: comm kworker/u8:7: Failed to release dquot type 0 [ 262.342196][T13681] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #2: block 16: comm syz.3.3822: lblock 0 mapped to illegal pblock 16 (length 1) [ 262.366161][T13681] EXT4-fs error (device loop3): __ext4_get_inode_loc:4861: comm syz.3.3822: Invalid inode table block 1 in block_group 0 [ 262.380776][T13681] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 262.390765][T13681] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #2: comm syz.3.3822: mark_inode_dirty error [ 262.402608][T13681] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #2: block 16: comm syz.3.3822: lblock 0 mapped to illegal pblock 16 (length 1) [ 262.420093][T13699] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3828'. [ 262.430501][ T37] EXT4-fs error (device loop3): __ext4_get_inode_loc:4861: comm kworker/u8:2: Invalid inode table block 1 in block_group 0 [ 262.454519][T13681] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 262.474436][T13704] netlink: 'syz.0.3832': attribute type 1 has an invalid length. [ 262.494857][T12095] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 262.507823][T13707] netlink: 'syz.4.3834': attribute type 13 has an invalid length. [ 262.511743][T13704] bond8: entered promiscuous mode [ 262.521136][T13704] 8021q: adding VLAN 0 to HW filter on device bond8 [ 262.538089][T13709] netlink: 'syz.3.3833': attribute type 1 has an invalid length. [ 262.576373][T13712] loop2: detected capacity change from 0 to 512 [ 262.589695][T13709] bond3: entered promiscuous mode [ 262.594979][T13709] 8021q: adding VLAN 0 to HW filter on device bond3 [ 262.610290][ T29] audit: type=1326 audit(1758988825.439:651928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13711 comm="syz.2.3835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b85c9eec9 code=0x7ffc0000 [ 262.634145][ T29] audit: type=1326 audit(1758988825.439:651929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13711 comm="syz.2.3835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b85c9eec9 code=0x7ffc0000 [ 262.662346][ T29] audit: type=1326 audit(1758988825.489:651930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13711 comm="syz.2.3835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f8b85c9eec9 code=0x7ffc0000 [ 262.686105][ T29] audit: type=1326 audit(1758988825.489:651931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13711 comm="syz.2.3835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b85c9eec9 code=0x7ffc0000 [ 262.710068][ T29] audit: type=1326 audit(1758988825.489:651932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13711 comm="syz.2.3835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b85c9eec9 code=0x7ffc0000 [ 262.778408][ T29] audit: type=1326 audit(1758988825.489:651933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13711 comm="syz.2.3835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8b85c9eec9 code=0x7ffc0000 [ 262.802333][ T29] audit: type=1326 audit(1758988825.489:651934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13711 comm="syz.2.3835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b85c9eec9 code=0x7ffc0000 [ 262.834938][ T3388] hid-generic 0000:0000:0000.000F: hidraw0: HID v0.00 Device [syz0] on syz1 [ 262.878119][T13726] loop3: detected capacity change from 0 to 1024 [ 262.912232][T13726] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 262.927708][T13733] fido_id[13733]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 262.951573][T13726] ext4 filesystem being mounted at /115/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 262.971425][T13726] EXT4-fs error (device loop3): ext4_free_blocks:6696: comm syz.3.3842: Freeing blocks not in datazone - block = 0, count = 16 [ 262.999240][T13744] netlink: 'syz.0.3849': attribute type 13 has an invalid length. [ 263.084737][T13755] netlink: 'syz.0.3854': attribute type 1 has an invalid length. [ 263.113267][T13755] bond9: entered promiscuous mode [ 263.126992][T13755] 8021q: adding VLAN 0 to HW filter on device bond9 [ 263.191882][T12046] hid-generic 0000:0000:0000.0010: hidraw0: HID v0.00 Device [syz0] on syz1 [ 263.242106][T13773] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3862'. [ 263.260235][T11752] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 263.266135][T13770] fido_id[13770]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 263.299168][T13773] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3862'. [ 263.397015][T13789] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3869'. [ 263.622521][T13814] loop1: detected capacity change from 0 to 512 [ 263.647798][T13812] bond5 (unregistering): Released all slaves [ 263.758687][T13819] loop1: detected capacity change from 0 to 1024 [ 263.786513][T13819] EXT4-fs: Ignoring removed bh option [ 263.813564][T13819] EXT4-fs: inline encryption not supported [ 263.850179][T13819] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 263.929574][T13819] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 263.944074][T13819] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 2: comm syz.1.3882: lblock 2 mapped to illegal pblock 2 (length 1) [ 263.962535][T13819] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 48: comm syz.1.3882: lblock 0 mapped to illegal pblock 48 (length 1) [ 263.980162][T13819] EXT4-fs error (device loop1): ext4_acquire_dquot:6937: comm syz.1.3882: Failed to acquire dquot type 0 [ 263.993239][T13819] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 264.006018][T13819] EXT4-fs error (device loop1): ext4_evict_inode:254: inode #11: comm syz.1.3882: mark_inode_dirty error [ 264.019901][T13819] EXT4-fs warning (device loop1): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 264.031522][T13819] EXT4-fs (loop1): 1 orphan inode deleted [ 264.040261][T13819] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 264.063473][T13819] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #2: block 16: comm syz.1.3882: lblock 0 mapped to illegal pblock 16 (length 1) [ 264.082749][T13819] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #2: block 16: comm syz.1.3882: lblock 0 mapped to illegal pblock 16 (length 1) [ 264.095438][ T3429] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:7: lblock 1 mapped to illegal pblock 1 (length 1) [ 264.119246][T13819] EXT4-fs error (device loop1): __ext4_get_inode_loc:4861: comm syz.1.3882: Invalid inode table block 1 in block_group 0 [ 264.143822][ T3429] EXT4-fs error (device loop1): ext4_release_dquot:6973: comm kworker/u8:7: Failed to release dquot type 0 [ 264.155694][T13819] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 264.167440][T13819] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #2: comm syz.1.3882: mark_inode_dirty error [ 264.181083][T13824] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #2: block 16: comm syz.1.3882: lblock 0 mapped to illegal pblock 16 (length 1) [ 264.200714][ T56] EXT4-fs error (device loop1): __ext4_get_inode_loc:4861: comm kworker/u8:4: Invalid inode table block 1 in block_group 0 [ 264.216244][T13819] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 264.260917][T11752] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 264.287822][T13834] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3887'. [ 264.400282][T13840] loop2: detected capacity change from 0 to 512 [ 264.593619][T13849] loop1: detected capacity change from 0 to 1024 [ 264.689431][T13853] bond10 (unregistering): Released all slaves [ 264.981225][T13849] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 265.015643][T11752] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 265.134109][T13869] bridge0: port 2(bridge_slave_1) entered disabled state [ 265.141975][T13869] bridge0: port 1(bridge_slave_0) entered disabled state [ 265.473099][T13869] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 265.483308][T13869] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 265.542571][ T56] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.564120][ T56] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.585615][ T56] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.630157][ T56] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.652272][ T3413] hid-generic 0000:0000:0000.0011: hidraw0: HID v0.00 Device [syz0] on syz1 [ 265.728649][T12095] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 265.784038][T13892] bond5 (unregistering): Released all slaves [ 265.916477][T13918] loop4: detected capacity change from 0 to 1024 [ 265.950168][T13918] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 265.982217][T13930] tipc: Started in network mode [ 265.987239][T13930] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 265.996253][T13930] tipc: Enabling of bearer rejected, failed to enable media [ 266.005645][T11401] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 266.005704][T13930] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3925'. [ 266.024476][T13932] tipc: Enabling of bearer rejected, failed to enable media [ 266.027916][T13930] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3925'. [ 266.065152][T13935] loop4: detected capacity change from 0 to 1024 [ 266.100455][T13935] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 266.120396][T13941] IPVS: Error connecting to the multicast addr [ 266.155335][T11401] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 266.224853][T13950] loop1: detected capacity change from 0 to 1024 [ 266.241175][T13950] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 266.294131][T11752] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 266.362663][T13961] loop4: detected capacity change from 0 to 1764 [ 266.499010][T13967] IPVS: Error connecting to the multicast addr [ 266.612573][T13971] validate_nla: 5 callbacks suppressed [ 266.612593][T13971] netlink: 'syz.2.3941': attribute type 1 has an invalid length. [ 266.656607][T13971] bond3: entered promiscuous mode [ 266.663371][T13971] 8021q: adding VLAN 0 to HW filter on device bond3 [ 266.734904][ T3413] hid_parser_main: 197 callbacks suppressed [ 266.734962][ T3413] hid-generic 0000:0000:0000.0012: unknown main item tag 0x1 [ 266.748799][ T3413] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 266.756261][ T3413] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 266.764063][ T3413] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 266.771526][ T3413] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 266.779120][ T3413] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 266.815609][ T3413] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 266.823217][ T3413] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 266.831040][ T3413] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 266.838848][ T3413] hid-generic 0000:0000:0000.0012: unknown main item tag 0x2 [ 266.870969][T13990] netlink: 76 bytes leftover after parsing attributes in process `syz.4.3947'. [ 266.882067][ T3413] hid-generic 0000:0000:0000.0012: hidraw0: HID v0.00 Device [syz0] on syz1 [ 266.912251][T13987] tipc: Started in network mode [ 266.917207][T13987] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 266.976837][T13987] tipc: Enabled bearer , priority 10 [ 266.986901][T13993] fido_id[13993]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 267.001985][T13997] netlink: 'syz.1.3951': attribute type 13 has an invalid length. [ 267.010276][T13998] loop3: detected capacity change from 0 to 2048 [ 267.021034][T13998] EXT4-fs: Ignoring removed orlov option [ 267.064246][T13998] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 267.188066][T12095] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 267.212868][T14013] loop4: detected capacity change from 0 to 1024 [ 267.234859][T14015] loop1: detected capacity change from 0 to 1024 [ 267.243548][T14013] EXT4-fs: Ignoring removed bh option [ 267.275365][T14015] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 267.282458][T14013] EXT4-fs: inline encryption not supported [ 267.328874][T11752] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 267.343691][T14013] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 267.360979][ T3388] hid-generic 0000:0000:0000.0013: hidraw0: HID v0.00 Device [syz0] on syz1 [ 267.364825][T13957] syz.0.3935 (13957) used greatest stack depth: 6360 bytes left [ 267.385484][T14013] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 267.429047][T14013] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 2: comm syz.4.3955: lblock 2 mapped to illegal pblock 2 (length 1) [ 267.449284][T14013] __quota_error: 124 callbacks suppressed [ 267.449305][T14013] Quota error (device loop4): qtree_write_dquot: dquota write failed [ 267.468824][T14028] fido_id[14028]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 267.472037][T14013] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 48: comm syz.4.3955: lblock 0 mapped to illegal pblock 48 (length 1) [ 267.498667][T14013] Quota error (device loop4): v2_write_file_info: Can't write info structure [ 267.507513][T14013] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.3955: Failed to acquire dquot type 0 [ 267.508620][T14033] loop1: detected capacity change from 0 to 1024 [ 267.525459][T14013] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 267.526229][T14029] bond10 (unregistering): Released all slaves [ 267.541948][T14013] EXT4-fs error (device loop4): ext4_evict_inode:254: inode #11: comm syz.4.3955: mark_inode_dirty error [ 267.553698][T14013] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 267.565942][T14013] EXT4-fs (loop4): 1 orphan inode deleted [ 267.586917][T14013] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 267.587325][T14033] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 267.601896][ T37] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:2: lblock 1 mapped to illegal pblock 1 (length 1) [ 267.631290][T14013] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #2: block 16: comm syz.4.3955: lblock 0 mapped to illegal pblock 16 (length 1) [ 267.645655][ T37] Quota error (device loop4): remove_tree: Can't read quota data block 1 [ 267.654216][ T37] EXT4-fs error (device loop4): ext4_release_dquot:6973: comm kworker/u8:2: Failed to release dquot type 0 [ 267.666654][T14013] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #2: block 16: comm syz.4.3955: lblock 0 mapped to illegal pblock 16 (length 1) [ 267.684683][T11752] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 267.697497][T14013] EXT4-fs error (device loop4): __ext4_get_inode_loc:4861: comm syz.4.3955: Invalid inode table block 1 in block_group 0 [ 267.727401][T14013] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 267.753500][ T29] audit: type=1326 audit(1758988830.579:652056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14041 comm="syz.3.3969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa63644eec9 code=0x7ffc0000 [ 267.777453][ T29] audit: type=1326 audit(1758988830.579:652057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14041 comm="syz.3.3969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa63644eec9 code=0x7ffc0000 [ 267.805789][ T29] audit: type=1326 audit(1758988830.629:652058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14041 comm="syz.3.3969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa63644eec9 code=0x7ffc0000 [ 267.829622][T14013] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #2: comm syz.4.3955: mark_inode_dirty error [ 267.842272][ T29] audit: type=1326 audit(1758988830.629:652059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14041 comm="syz.3.3969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa63644eec9 code=0x7ffc0000 [ 267.866038][ T29] audit: type=1326 audit(1758988830.629:652060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14041 comm="syz.3.3969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa63644eec9 code=0x7ffc0000 [ 267.889941][ T29] audit: type=1326 audit(1758988830.629:652061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14041 comm="syz.3.3969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa63644eec9 code=0x7ffc0000 [ 267.913740][ T29] audit: type=1326 audit(1758988830.629:652062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14041 comm="syz.3.3969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa63644eec9 code=0x7ffc0000 [ 267.947224][T14047] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #2: block 16: comm syz.4.3955: lblock 0 mapped to illegal pblock 16 (length 1) [ 267.967293][ T3388] tipc: Node number set to 4269801488 [ 267.994397][ T37] EXT4-fs error (device loop4): __ext4_get_inode_loc:4861: comm kworker/u8:2: Invalid inode table block 1 in block_group 0 [ 268.013312][T11401] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 268.031224][T11401] EXT4-fs error (device loop4): __ext4_get_inode_loc:4861: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 268.058732][T14065] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3978'. [ 268.078406][T14061] netlink: 'syz.0.3977': attribute type 1 has an invalid length. [ 268.098100][T14067] bond5 (unregistering): Released all slaves [ 268.140893][T14061] bond10: entered promiscuous mode [ 268.156626][T14061] 8021q: adding VLAN 0 to HW filter on device bond10 [ 268.294146][T14090] loop1: detected capacity change from 0 to 8192 [ 268.315317][T14095] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3990'. [ 268.457575][T14087] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 268.580988][T14103] netlink: 76 bytes leftover after parsing attributes in process `syz.2.3993'. [ 268.735953][T14113] netlink: 'syz.2.3997': attribute type 1 has an invalid length. [ 268.855811][T14116] loop3: detected capacity change from 0 to 1024 [ 268.938038][T14118] loop2: detected capacity change from 0 to 1024 [ 268.940739][T14116] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 268.960579][T14118] EXT4-fs: Ignoring removed bh option [ 268.983629][T14118] EXT4-fs: inline encryption not supported [ 268.991645][T14118] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 269.005091][T14118] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 269.018041][T14118] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 2: comm syz.2.3999: lblock 2 mapped to illegal pblock 2 (length 1) [ 269.041054][T14118] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 48: comm syz.2.3999: lblock 0 mapped to illegal pblock 48 (length 1) [ 269.067400][T14118] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.3999: Failed to acquire dquot type 0 [ 269.068368][T12095] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 269.098621][T14118] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 269.110412][T14118] EXT4-fs error (device loop2): ext4_evict_inode:254: inode #11: comm syz.2.3999: mark_inode_dirty error [ 269.122079][T14118] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 269.136631][T14118] EXT4-fs (loop2): 1 orphan inode deleted [ 269.143590][T14118] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 269.156438][ T12] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:0: lblock 1 mapped to illegal pblock 1 (length 1) [ 269.172462][ T12] EXT4-fs error (device loop2): ext4_release_dquot:6973: comm kworker/u8:0: Failed to release dquot type 0 [ 269.201555][T14118] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #2: block 16: comm syz.2.3999: lblock 0 mapped to illegal pblock 16 (length 1) [ 269.222792][T14118] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #2: block 16: comm syz.2.3999: lblock 0 mapped to illegal pblock 16 (length 1) [ 269.238882][T14118] EXT4-fs error (device loop2): __ext4_get_inode_loc:4861: comm syz.2.3999: Invalid inode table block 1 in block_group 0 [ 269.271005][T14118] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 269.284974][T14132] netlink: 'syz.1.4004': attribute type 1 has an invalid length. [ 269.293814][T14118] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #2: comm syz.2.3999: mark_inode_dirty error [ 269.314254][T14132] bond2: entered promiscuous mode [ 269.319722][T14134] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #2: block 16: comm syz.2.3999: lblock 0 mapped to illegal pblock 16 (length 1) [ 269.334195][T14132] 8021q: adding VLAN 0 to HW filter on device bond2 [ 269.339888][T14135] loop3: detected capacity change from 0 to 1024 [ 269.354513][ T12] EXT4-fs error (device loop2): __ext4_get_inode_loc:4861: comm kworker/u8:0: Invalid inode table block 1 in block_group 0 [ 269.376501][T14135] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 269.409952][T14118] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 269.432031][T10899] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 269.449036][T12095] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 269.542944][T14154] loop2: detected capacity change from 0 to 512 [ 269.571254][T14154] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 269.589482][T14154] ext4 filesystem being mounted at /213/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 269.659714][T14160] EXT4-fs error (device loop2): ext4_lookup:1787: inode #12: comm syz.2.4011: iget: bad i_size value: 2533274857506816 [ 269.715182][ T23] IPVS: starting estimator thread 0... [ 269.725115][T14148] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 269.783609][T14164] EXT4-fs error (device loop2): ext4_lookup:1787: inode #12: comm syz.2.4011: iget: bad i_size value: 2533274857506816 [ 269.807809][T14163] IPVS: using max 2400 ests per chain, 120000 per kthread [ 269.851503][T14158] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 269.902504][T14160] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(10) [ 269.909155][T14160] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 269.916843][T14160] vhci_hcd vhci_hcd.0: Device attached [ 269.994636][T14166] vhci_hcd: connection closed [ 269.995140][ T56] vhci_hcd: stop threads [ 270.004158][ T56] vhci_hcd: release socket [ 270.008681][ T56] vhci_hcd: disconnect device [ 270.179027][T14172] bond11 (unregistering): Released all slaves [ 270.350800][T14186] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4019'. [ 270.396966][T14189] loop4: detected capacity change from 0 to 512 [ 270.424063][T14191] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4021'. [ 270.447139][T14193] loop4: detected capacity change from 0 to 1024 [ 270.471150][T14193] EXT4-fs: Ignoring removed bh option [ 270.492098][T14193] EXT4-fs: inline encryption not supported [ 270.513143][T14197] loop1: detected capacity change from 0 to 1024 [ 270.527625][T14193] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 270.540977][ T3388] hid-generic 0000:0000:0000.0014: hidraw0: HID v0.00 Device [syz0] on syz1 [ 270.551681][T10899] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 270.562625][T14193] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 270.573694][T14197] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 270.600989][T14193] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 2: comm syz.4.4022: lblock 2 mapped to illegal pblock 2 (length 1) [ 270.601399][T14200] fido_id[14200]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 270.636311][T14193] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 48: comm syz.4.4022: lblock 0 mapped to illegal pblock 48 (length 1) [ 270.662198][T11752] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 270.668978][T14193] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.4022: Failed to acquire dquot type 0 [ 270.696493][T14193] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 270.712241][T14193] EXT4-fs error (device loop4): ext4_evict_inode:254: inode #11: comm syz.4.4022: mark_inode_dirty error [ 270.734896][T14193] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 270.745250][T14193] EXT4-fs (loop4): 1 orphan inode deleted [ 270.759058][ T37] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:2: lblock 1 mapped to illegal pblock 1 (length 1) [ 270.778470][T14193] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 270.800930][ T3388] hid-generic 0000:0000:0000.0015: hidraw0: HID v0.00 Device [syz0] on syz1 [ 270.827479][ T37] EXT4-fs error (device loop4): ext4_release_dquot:6973: comm kworker/u8:2: Failed to release dquot type 0 [ 270.849436][T14193] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #2: block 16: comm syz.4.4022: lblock 0 mapped to illegal pblock 16 (length 1) [ 270.881136][T14217] fido_id[14217]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 270.895910][T14193] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #2: block 16: comm syz.4.4022: lblock 0 mapped to illegal pblock 16 (length 1) [ 270.916281][T14193] EXT4-fs error (device loop4): __ext4_get_inode_loc:4861: comm syz.4.4022: Invalid inode table block 1 in block_group 0 [ 270.933844][T14193] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 270.952576][T14193] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #2: comm syz.4.4022: mark_inode_dirty error [ 270.965335][T14193] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #2: block 16: comm syz.4.4022: lblock 0 mapped to illegal pblock 16 (length 1) [ 270.981101][ T37] EXT4-fs error (device loop4): __ext4_get_inode_loc:4861: comm kworker/u8:2: Invalid inode table block 1 in block_group 0 [ 271.004110][T14193] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 271.033462][T14223] loop3: detected capacity change from 0 to 8192 [ 271.042696][T14226] loop2: detected capacity change from 0 to 512 [ 271.054969][T11401] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 271.080255][T14230] macvtap1: entered allmulticast mode [ 271.085701][T14230] veth0_macvtap: entered allmulticast mode [ 271.152648][T14233] loop1: detected capacity change from 0 to 1024 [ 271.180633][T14233] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 271.217892][T11752] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 271.266129][T14255] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4046'. [ 271.283022][ T23] hid-generic 0000:0000:0000.0016: hidraw0: HID v0.00 Device [syz0] on syz1 [ 271.350330][T14263] loop1: detected capacity change from 0 to 512 [ 271.364268][T14265] loop2: detected capacity change from 0 to 512 [ 271.371014][T14260] fido_id[14260]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 271.428870][ T2988] udevd[2988]: worker [8364] terminated by signal 33 (Unknown signal 33) [ 271.449386][ T2988] udevd[2988]: worker [8364] failed while handling '/devices/virtual/block/loop1' [ 271.460178][ T2988] udevd[2988]: worker [8510] terminated by signal 33 (Unknown signal 33) [ 271.478356][ T2988] udevd[2988]: worker [8510] failed while handling '/devices/virtual/misc/uhid/0000:0000:0000.0016/hidraw/hidraw0' [ 271.480194][T14271] netlink: 76 bytes leftover after parsing attributes in process `syz.4.4052'. [ 271.527612][T14273] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4053'. [ 271.646630][T12046] hid-generic 0000:0000:0000.0017: hidraw0: HID v0.00 Device [syz0] on syz1 [ 271.678403][T14297] loop2: detected capacity change from 0 to 512 [ 271.690990][T14295] fido_id[14295]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 271.840497][T14288] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 271.849638][T14292] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 271.894464][T14310] netlink: 76 bytes leftover after parsing attributes in process `syz.2.4066'. [ 271.940146][T14312] loop2: detected capacity change from 0 to 512 [ 271.947391][T14312] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 271.958786][T14312] EXT4-fs (loop2): 1 truncate cleaned up [ 271.965003][T14312] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 271.979799][ T3388] Process accounting resumed [ 271.996274][T14312] EXT4-fs error (device loop2): __ext4_remount:6740: comm syz.2.4067: Abort forced by user [ 272.006692][T14312] EXT4-fs (loop2): Remounting filesystem read-only [ 272.013347][T14312] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 272.024167][T14312] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4067'. [ 272.050099][T10899] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 272.202196][T14327] netlink: 'syz.2.4072': attribute type 13 has an invalid length. [ 272.287466][T14333] FAULT_INJECTION: forcing a failure. [ 272.287466][T14333] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 272.301154][T14333] CPU: 1 UID: 0 PID: 14333 Comm: syz.0.4075 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 272.301251][T14333] Tainted: [W]=WARN [ 272.301259][T14333] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 272.301298][T14333] Call Trace: [ 272.301305][T14333] [ 272.301314][T14333] __dump_stack+0x1d/0x30 [ 272.301443][T14333] dump_stack_lvl+0xe8/0x140 [ 272.301463][T14333] dump_stack+0x15/0x1b [ 272.301482][T14333] should_fail_ex+0x265/0x280 [ 272.301588][T14333] should_fail+0xb/0x20 [ 272.301612][T14333] should_fail_usercopy+0x1a/0x20 [ 272.301638][T14333] _copy_to_user+0x20/0xa0 [ 272.301721][T14333] simple_read_from_buffer+0xb5/0x130 [ 272.301747][T14333] proc_fail_nth_read+0x10e/0x150 [ 272.301779][T14333] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 272.301813][T14333] vfs_read+0x1a5/0x770 [ 272.301844][T14333] ? __rcu_read_unlock+0x4f/0x70 [ 272.301930][T14333] ? __fget_files+0x184/0x1c0 [ 272.301965][T14333] ksys_read+0xda/0x1a0 [ 272.301995][T14333] __x64_sys_read+0x40/0x50 [ 272.302022][T14333] x64_sys_call+0x27bc/0x2ff0 [ 272.302084][T14333] do_syscall_64+0xd2/0x200 [ 272.302120][T14333] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 272.302151][T14333] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 272.302186][T14333] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 272.302231][T14333] RIP: 0033:0x7fb1783cd8dc [ 272.302246][T14333] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 272.302265][T14333] RSP: 002b:00007fb176e37030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 272.302357][T14333] RAX: ffffffffffffffda RBX: 00007fb178625fa0 RCX: 00007fb1783cd8dc [ 272.302373][T14333] RDX: 000000000000000f RSI: 00007fb176e370a0 RDI: 000000000000000a [ 272.302391][T14333] RBP: 00007fb176e37090 R08: 0000000000000000 R09: 0000000000000000 [ 272.302403][T14333] R10: 0000000000000021 R11: 0000000000000246 R12: 0000000000000001 [ 272.302416][T14333] R13: 00007fb178626038 R14: 00007fb178625fa0 R15: 00007fff190297c8 [ 272.302435][T14333] [ 272.552762][T14335] netlink: 'syz.0.4076': attribute type 1 has an invalid length. [ 272.605405][T14335] bond11: entered promiscuous mode [ 272.612404][T14335] 8021q: adding VLAN 0 to HW filter on device bond11 [ 272.667893][T14341] loop1: detected capacity change from 0 to 8192 [ 272.670835][T14348] netlink: 'syz.0.4082': attribute type 1 has an invalid length. [ 272.711728][T14348] bond12: entered promiscuous mode [ 272.717010][T14348] 8021q: adding VLAN 0 to HW filter on device bond12 [ 272.730279][ T29] kauditd_printk_skb: 147 callbacks suppressed [ 272.730293][ T29] audit: type=1326 audit(1758988835.559:652204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14351 comm="syz.4.4083" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5dd3afeec9 code=0x0 [ 272.789887][T14357] netlink: 'syz.2.4084': attribute type 13 has an invalid length. [ 272.857540][ T29] audit: type=1400 audit(1758988835.679:652205): avc: denied { mount } for pid=14363 comm="syz.2.4086" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 272.969103][T14371] FAULT_INJECTION: forcing a failure. [ 272.969103][T14371] name failslab, interval 1, probability 0, space 0, times 0 [ 272.972768][ T29] audit: type=1400 audit(1758988835.799:652206): avc: denied { setopt } for pid=14363 comm="syz.2.4086" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 272.981791][T14371] CPU: 0 UID: 0 PID: 14371 Comm: syz.0.4089 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 272.981831][T14371] Tainted: [W]=WARN [ 272.981847][T14371] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 272.981869][T14371] Call Trace: [ 272.981879][T14371] [ 272.981892][T14371] __dump_stack+0x1d/0x30 [ 272.981925][T14371] dump_stack_lvl+0xe8/0x140 [ 272.981962][T14371] dump_stack+0x15/0x1b [ 272.981988][T14371] should_fail_ex+0x265/0x280 [ 272.982024][T14371] should_failslab+0x8c/0xb0 [ 272.982069][T14371] __kmalloc_noprof+0xa5/0x3e0 [ 272.982111][T14371] ? bpf_test_init+0xa9/0x160 [ 272.982143][T14371] bpf_test_init+0xa9/0x160 [ 272.982212][T14371] bpf_prog_test_run_xdp+0x274/0x910 [ 272.982245][T14371] ? kstrtouint+0x76/0xc0 [ 272.982280][T14371] ? __rcu_read_unlock+0x4f/0x70 [ 272.982318][T14371] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 272.982402][T14371] bpf_prog_test_run+0x22a/0x390 [ 272.982449][T14371] __sys_bpf+0x4b9/0x7b0 [ 272.982500][T14371] __x64_sys_bpf+0x41/0x50 [ 272.982536][T14371] x64_sys_call+0x2aea/0x2ff0 [ 272.982615][T14371] do_syscall_64+0xd2/0x200 [ 272.982659][T14371] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 272.982703][T14371] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 272.982796][T14371] RIP: 0033:0x7fb1783ceec9 [ 272.982819][T14371] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 272.982906][T14371] RSP: 002b:00007fb176e37038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 272.982934][T14371] RAX: ffffffffffffffda RBX: 00007fb178625fa0 RCX: 00007fb1783ceec9 [ 272.982955][T14371] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 272.982973][T14371] RBP: 00007fb176e37090 R08: 0000000000000000 R09: 0000000000000000 [ 272.983048][T14371] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 272.983066][T14371] R13: 00007fb178626038 R14: 00007fb178625fa0 R15: 00007fff190297c8 [ 272.983096][T14371] [ 273.195317][T14368] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 273.296100][T14379] __nla_validate_parse: 4 callbacks suppressed [ 273.296119][T14379] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4092'. [ 273.447450][T14390] tipc: Enabling of bearer rejected, failed to enable media [ 273.604788][T14397] loop1: detected capacity change from 0 to 1024 [ 273.618884][T14399] netlink: 'syz.4.4101': attribute type 1 has an invalid length. [ 273.627135][T14397] EXT4-fs: Ignoring removed bh option [ 273.640989][T14397] EXT4-fs: inline encryption not supported [ 273.661878][T14397] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 273.672881][T14399] bond5: entered promiscuous mode [ 273.673114][T14399] 8021q: adding VLAN 0 to HW filter on device bond5 [ 273.686597][T14397] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 273.706706][T14397] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 2: comm syz.1.4100: lblock 2 mapped to illegal pblock 2 (length 1) [ 273.750408][T14397] Quota error (device loop1): qtree_write_dquot: dquota write failed [ 273.764130][T14397] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 48: comm syz.1.4100: lblock 0 mapped to illegal pblock 48 (length 1) [ 273.793104][T14397] Quota error (device loop1): v2_write_file_info: Can't write info structure [ 273.801995][T14397] EXT4-fs error (device loop1): ext4_acquire_dquot:6937: comm syz.1.4100: Failed to acquire dquot type 0 [ 273.822365][T14404] netlink: 'syz.2.4102': attribute type 1 has an invalid length. [ 273.833749][T14397] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 273.869039][T14397] EXT4-fs error (device loop1): ext4_evict_inode:254: inode #11: comm syz.1.4100: mark_inode_dirty error [ 273.900649][T14397] EXT4-fs warning (device loop1): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 273.927311][T14397] EXT4-fs (loop1): 1 orphan inode deleted [ 273.941068][T14421] loop4: detected capacity change from 0 to 1024 [ 273.952515][T14397] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 273.965543][ T12] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:0: lblock 1 mapped to illegal pblock 1 (length 1) [ 274.002539][T14421] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 274.010515][ T12] Quota error (device loop1): remove_tree: Can't read quota data block 1 [ 274.023231][ T12] EXT4-fs error (device loop1): ext4_release_dquot:6973: comm kworker/u8:0: Failed to release dquot type 0 [ 274.052363][T14397] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #2: block 16: comm syz.1.4100: lblock 0 mapped to illegal pblock 16 (length 1) [ 274.087724][T14427] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4109'. [ 274.099605][T14397] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #2: block 16: comm syz.1.4100: lblock 0 mapped to illegal pblock 16 (length 1) [ 274.115453][T11401] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 274.147739][T14397] EXT4-fs error (device loop1): __ext4_get_inode_loc:4861: comm syz.1.4100: Invalid inode table block 1 in block_group 0 [ 274.172728][T14427] bond6: entered promiscuous mode [ 274.178266][T14427] bond6: entered allmulticast mode [ 274.189442][T14397] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 274.199607][T14427] 8021q: adding VLAN 0 to HW filter on device bond6 [ 274.207544][T14397] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #2: comm syz.1.4100: mark_inode_dirty error [ 274.221994][T14431] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #2: block 16: comm syz.1.4100: lblock 0 mapped to illegal pblock 16 (length 1) [ 274.316162][ T37] EXT4-fs error (device loop1): __ext4_get_inode_loc:4861: comm kworker/u8:2: Invalid inode table block 1 in block_group 0 [ 274.342584][T14419] loop3: detected capacity change from 0 to 1024 [ 274.355007][T14437] loop4: detected capacity change from 0 to 1024 [ 274.361969][T11752] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 274.374750][T14419] EXT4-fs: Ignoring removed mblk_io_submit option [ 274.382054][T14437] EXT4-fs: dax option not supported [ 274.387767][T11752] EXT4-fs error (device loop1): __ext4_get_inode_loc:4861: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 274.411150][T14419] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 274.447879][T14419] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 274.474698][T14419] EXT4-fs error (device loop3): ext4_iget_extra_inode:5104: inode #15: comm syz.3.4106: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 274.494560][T14419] EXT4-fs (loop3): Remounting filesystem read-only [ 274.508008][T14419] netlink: 7 bytes leftover after parsing attributes in process `syz.3.4106'. [ 274.510338][ T29] audit: type=1400 audit(1758988837.329:652207): avc: denied { write } for pid=14418 comm="syz.3.4106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 274.538339][T14419] netlink: 7 bytes leftover after parsing attributes in process `syz.3.4106'. [ 274.584164][T12095] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 274.629938][ T29] audit: type=1326 audit(1758988837.449:652208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14455 comm="syz.3.4119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa63644eec9 code=0x7ffc0000 [ 274.636770][T14456] loop3: detected capacity change from 0 to 1024 [ 274.653725][ T29] audit: type=1326 audit(1758988837.449:652209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14455 comm="syz.3.4119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa63644eec9 code=0x7ffc0000 [ 274.683818][ T29] audit: type=1326 audit(1758988837.449:652210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14455 comm="syz.3.4119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fa63644eec9 code=0x7ffc0000 [ 274.721830][T14459] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4120'. [ 274.734828][T14456] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 274.766025][T14449] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 274.810579][T12095] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 274.834637][T14470] loop3: detected capacity change from 0 to 1024 [ 274.842160][T14470] EXT4-fs: Ignoring removed bh option [ 274.849411][T14470] EXT4-fs: inline encryption not supported [ 274.856616][T14470] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 274.892459][T14470] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 274.907684][T14470] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 2: comm syz.3.4124: lblock 2 mapped to illegal pblock 2 (length 1) [ 274.933668][T14470] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 48: comm syz.3.4124: lblock 0 mapped to illegal pblock 48 (length 1) [ 274.948518][T14470] EXT4-fs error (device loop3): ext4_acquire_dquot:6937: comm syz.3.4124: Failed to acquire dquot type 0 [ 274.968081][T14470] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 274.985330][T14470] EXT4-fs error (device loop3): ext4_evict_inode:254: inode #11: comm syz.3.4124: mark_inode_dirty error [ 274.998320][T14470] EXT4-fs warning (device loop3): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 275.005354][T14473] loop2: detected capacity change from 0 to 8192 [ 275.008942][T14470] EXT4-fs (loop3): 1 orphan inode deleted [ 275.023250][T14470] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 275.036039][ T31] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:1: lblock 1 mapped to illegal pblock 1 (length 1) [ 275.051244][ T31] EXT4-fs error (device loop3): ext4_release_dquot:6973: comm kworker/u8:1: Failed to release dquot type 0 [ 275.073433][T14470] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #2: block 16: comm syz.3.4124: lblock 0 mapped to illegal pblock 16 (length 1) [ 275.089923][T14470] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #2: block 16: comm syz.3.4124: lblock 0 mapped to illegal pblock 16 (length 1) [ 275.104920][T14470] EXT4-fs error (device loop3): __ext4_get_inode_loc:4861: comm syz.3.4124: Invalid inode table block 1 in block_group 0 [ 275.122860][T14470] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 275.132931][T14470] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #2: comm syz.3.4124: mark_inode_dirty error [ 275.146142][T14470] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #2: block 16: comm syz.3.4124: lblock 0 mapped to illegal pblock 16 (length 1) [ 275.174569][ T12] EXT4-fs error (device loop3): __ext4_get_inode_loc:4861: comm kworker/u8:0: Invalid inode table block 1 in block_group 0 [ 275.198299][T14479] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4127'. [ 275.209414][T14470] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 275.224224][T14479] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4127'. [ 275.430587][T12095] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 275.699722][T14496] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 275.725119][ T10] hid_parser_main: 224 callbacks suppressed [ 275.725142][ T10] hid-generic 0000:0000:0000.0018: unknown main item tag 0x1 [ 275.738667][ T10] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 275.739746][T14495] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4134'. [ 275.746155][ T10] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 275.762492][ T10] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 275.770002][ T10] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 275.777492][ T10] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 275.785202][ T10] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 275.792708][ T10] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 275.794854][T14501] IPVS: stopping master sync thread 14496 ... [ 275.800416][ T10] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 275.814432][ T10] hid-generic 0000:0000:0000.0018: unknown main item tag 0x2 [ 275.826376][ T10] hid-generic 0000:0000:0000.0018: hidraw0: HID v0.00 Device [syz0] on syz1 [ 275.871800][T14504] fido_id[14504]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 275.918011][T14500] bond3 (unregistering): Released all slaves [ 275.932166][T14509] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4138'. [ 275.976516][T14511] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4139'. [ 276.003269][T14516] loop4: detected capacity change from 0 to 1024 [ 276.032482][T14516] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 276.055318][T14516] ext4 filesystem being mounted at /230/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 276.075006][T14516] EXT4-fs error (device loop4): ext4_free_blocks:6696: comm syz.4.4141: Freeing blocks not in datazone - block = 0, count = 16 [ 276.100828][T14526] loop2: detected capacity change from 0 to 1024 [ 276.120082][T14526] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 276.155594][T10899] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 276.165480][ T10] hid-generic 0000:0000:0000.0019: hidraw0: HID v0.00 Device [syz0] on syz1 [ 276.214251][T14533] fido_id[14533]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 276.247371][T14535] netlink: 'syz.2.4147': attribute type 1 has an invalid length. [ 276.269573][T14535] bond7: entered promiscuous mode [ 276.274820][T14535] 8021q: adding VLAN 0 to HW filter on device bond7 [ 276.445010][T12046] hid-generic 0000:0000:0000.001A: hidraw0: HID v0.00 Device [syz0] on syz1 [ 276.445541][T14565] netlink: 'syz.2.4157': attribute type 1 has an invalid length. [ 276.516514][T14570] fido_id[14570]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 276.589580][T14586] sch_tbf: burst 2 is lower than device syzkaller0 mtu (1514) ! [ 276.600146][T14586] FAULT_INJECTION: forcing a failure. [ 276.600146][T14586] name failslab, interval 1, probability 0, space 0, times 0 [ 276.613069][T14586] CPU: 1 UID: 0 PID: 14586 Comm: syz.2.4165 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 276.613186][T14586] Tainted: [W]=WARN [ 276.613195][T14586] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 276.613213][T14586] Call Trace: [ 276.613220][T14586] [ 276.613231][T14586] __dump_stack+0x1d/0x30 [ 276.613316][T14586] dump_stack_lvl+0xe8/0x140 [ 276.613336][T14586] dump_stack+0x15/0x1b [ 276.613358][T14586] should_fail_ex+0x265/0x280 [ 276.613410][T14586] should_failslab+0x8c/0xb0 [ 276.613453][T14586] kmem_cache_alloc_node_noprof+0x57/0x320 [ 276.613497][T14586] ? __alloc_skb+0x101/0x320 [ 276.613525][T14586] __alloc_skb+0x101/0x320 [ 276.613562][T14586] netlink_alloc_large_skb+0xba/0xf0 [ 276.613588][T14586] netlink_sendmsg+0x3cf/0x6b0 [ 276.613621][T14586] ? __pfx_netlink_sendmsg+0x10/0x10 [ 276.613653][T14586] __sock_sendmsg+0x145/0x180 [ 276.613726][T14586] ____sys_sendmsg+0x31e/0x4e0 [ 276.613761][T14586] ___sys_sendmsg+0x17b/0x1d0 [ 276.613810][T14586] __x64_sys_sendmsg+0xd4/0x160 [ 276.613917][T14586] x64_sys_call+0x191e/0x2ff0 [ 276.613945][T14586] do_syscall_64+0xd2/0x200 [ 276.614063][T14586] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 276.614089][T14586] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 276.614125][T14586] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 276.614174][T14586] RIP: 0033:0x7f8b85c9eec9 [ 276.614259][T14586] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 276.614278][T14586] RSP: 002b:00007f8b846ff038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 276.614298][T14586] RAX: ffffffffffffffda RBX: 00007f8b85ef5fa0 RCX: 00007f8b85c9eec9 [ 276.614311][T14586] RDX: 0000000004008000 RSI: 0000200000000200 RDI: 0000000000000004 [ 276.614325][T14586] RBP: 00007f8b846ff090 R08: 0000000000000000 R09: 0000000000000000 [ 276.614342][T14586] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 276.614399][T14586] R13: 00007f8b85ef6038 R14: 00007f8b85ef5fa0 R15: 00007ffcd8016e48 [ 276.614425][T14586] [ 276.625862][T14588] netlink: 'syz.3.4163': attribute type 1 has an invalid length. [ 276.833176][T11401] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 276.866274][T14588] bond4: entered promiscuous mode [ 276.892246][T14588] 8021q: adding VLAN 0 to HW filter on device bond4 [ 276.937270][T12046] hid-generic 0000:0000:0000.001B: hidraw0: HID v0.00 Device [syz0] on syz1 [ 276.989819][T14610] fido_id[14610]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 277.120753][T14623] loop2: detected capacity change from 0 to 1024 [ 277.157732][T14623] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 277.217938][T14623] ext4 filesystem being mounted at /260/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 277.266796][T14623] EXT4-fs error (device loop2): ext4_free_blocks:6696: comm syz.2.4177: Freeing blocks not in datazone - block = 0, count = 16 [ 277.291943][T14634] sch_tbf: burst 2 is lower than device syzkaller0 mtu (1514) ! [ 277.455165][T14641] netlink: 'syz.3.4184': attribute type 1 has an invalid length. [ 277.471019][T14641] bond5: entered promiscuous mode [ 277.476306][T14641] 8021q: adding VLAN 0 to HW filter on device bond5 [ 277.632373][T14602] syz.0.4169 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 277.646650][T14602] CPU: 0 UID: 0 PID: 14602 Comm: syz.0.4169 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 277.646695][T14602] Tainted: [W]=WARN [ 277.646704][T14602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 277.646791][T14602] Call Trace: [ 277.646797][T14602] [ 277.646853][T14602] __dump_stack+0x1d/0x30 [ 277.646881][T14602] dump_stack_lvl+0xe8/0x140 [ 277.646908][T14602] dump_stack+0x15/0x1b [ 277.646931][T14602] dump_header+0x81/0x220 [ 277.647072][T14602] oom_kill_process+0x342/0x400 [ 277.647121][T14602] out_of_memory+0x979/0xb80 [ 277.647175][T14602] try_charge_memcg+0x5e6/0x9e0 [ 277.647216][T14602] obj_cgroup_charge_pages+0xa6/0x150 [ 277.647257][T14602] __memcg_kmem_charge_page+0x9f/0x170 [ 277.647292][T14602] __alloc_frozen_pages_noprof+0x188/0x360 [ 277.647419][T14602] alloc_pages_mpol+0xb3/0x250 [ 277.647490][T14602] alloc_pages_noprof+0x90/0x130 [ 277.647540][T14602] __vmalloc_node_range_noprof+0x6f2/0xe00 [ 277.647667][T14602] __kvmalloc_node_noprof+0x30f/0x4e0 [ 277.647710][T14602] ? ip_set_alloc+0x1f/0x30 [ 277.647729][T14602] ? ip_set_alloc+0x1f/0x30 [ 277.647747][T14602] ? __kmalloc_cache_noprof+0x189/0x320 [ 277.647902][T14602] ip_set_alloc+0x1f/0x30 [ 277.647927][T14602] hash_netportnet_create+0x27d/0x730 [ 277.648005][T14602] ? __pfx_hash_netportnet_create+0x10/0x10 [ 277.648038][T14602] ip_set_create+0x3c9/0x960 [ 277.648082][T14602] ? __nla_parse+0x40/0x60 [ 277.648185][T14602] nfnetlink_rcv_msg+0x4c3/0x590 [ 277.648257][T14602] netlink_rcv_skb+0x123/0x220 [ 277.648280][T14602] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 277.648397][T14602] nfnetlink_rcv+0x16b/0x1690 [ 277.648433][T14602] ? insn_get_prefixes+0x99d/0xbe0 [ 277.648540][T14602] ? insn_get_prefixes+0x99d/0xbe0 [ 277.648572][T14602] ? inat_get_opcode_attribute+0xc/0x20 [ 277.648599][T14602] ? insn_get_opcode+0x750/0x790 [ 277.648701][T14602] ? insn_get_modrm+0x32a/0x360 [ 277.648736][T14602] ? insn_get_modrm+0x32a/0x360 [ 277.648771][T14602] ? __rcu_read_lock+0x37/0x50 [ 277.648792][T14602] ? kfree+0x27/0x320 [ 277.648817][T14602] ? __pte_offset_map_lock+0x1d4/0x230 [ 277.648920][T14602] ? do_sync_core+0x39/0x60 [ 277.648981][T14602] ? smp_call_function_many_cond+0x7f8/0xc60 [ 277.649011][T14602] ? should_fail_ex+0x30/0x280 [ 277.649051][T14602] ? selinux_nlmsg_lookup+0x99/0x890 [ 277.649099][T14602] ? __rcu_read_unlock+0x34/0x70 [ 277.649128][T14602] ? __netlink_lookup+0x266/0x2a0 [ 277.649210][T14602] netlink_unicast+0x5bd/0x690 [ 277.649241][T14602] netlink_sendmsg+0x58b/0x6b0 [ 277.649269][T14602] ? __pfx_netlink_sendmsg+0x10/0x10 [ 277.649294][T14602] __sock_sendmsg+0x145/0x180 [ 277.649361][T14602] ____sys_sendmsg+0x31e/0x4e0 [ 277.649396][T14602] ___sys_sendmsg+0x17b/0x1d0 [ 277.649435][T14602] __x64_sys_sendmsg+0xd4/0x160 [ 277.649497][T14602] x64_sys_call+0x191e/0x2ff0 [ 277.649521][T14602] do_syscall_64+0xd2/0x200 [ 277.649551][T14602] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 277.649577][T14602] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 277.649646][T14602] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 277.649720][T14602] RIP: 0033:0x7fb1783ceec9 [ 277.649736][T14602] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 277.649756][T14602] RSP: 002b:00007fb176e37038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 277.649856][T14602] RAX: ffffffffffffffda RBX: 00007fb178625fa0 RCX: 00007fb1783ceec9 [ 277.649874][T14602] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004 [ 277.649892][T14602] RBP: 00007fb178451f91 R08: 0000000000000000 R09: 0000000000000000 [ 277.649910][T14602] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 277.649926][T14602] R13: 00007fb178626038 R14: 00007fb178625fa0 R15: 00007fff190297c8 [ 277.650010][T14602] [ 278.011017][ T29] kauditd_printk_skb: 86 callbacks suppressed [ 278.011038][ T29] audit: type=1400 audit(1758988840.839:652294): avc: denied { write } for pid=14636 comm="syz.1.4182" name="file0" dev="tmpfs" ino=805 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 278.018927][T14602] memory: usage 307188kB, limit 307200kB, failcnt 314 [ 278.021922][ T29] audit: type=1400 audit(1758988840.839:652295): avc: denied { open } for pid=14636 comm="syz.1.4182" path="/148/file0" dev="tmpfs" ino=805 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 278.028018][T14602] memory+swap: usage 308128kB, limit 9007199254740988kB, failcnt 0 [ 278.088487][T14602] kmem: usage 307180kB, limit 9007199254740988kB, failcnt 0 [ 278.095795][T14602] Memory cgroup stats for /syz0: [ 278.100803][T10899] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 278.100982][T14602] cache 0 [ 278.117853][T14602] rss 0 [ 278.120625][T14602] shmem 0 [ 278.123680][T14602] mapped_file 266240 [ 278.127598][T14602] dirty 0 [ 278.130540][T14602] writeback 0 [ 278.133835][T14602] workingset_refault_anon 88 [ 278.138481][T14602] workingset_refault_file 914 [ 278.143175][T14602] swap 962560 [ 278.146508][T14602] swapcached 8192 [ 278.150175][T14602] pgpgin 222642 [ 278.153672][T14602] pgpgout 222640 [ 278.157257][T14602] pgfault 246256 [ 278.160820][T14602] pgmajfault 38 [ 278.164317][T14602] inactive_anon 0 [ 278.167991][T14602] active_anon 8192 [ 278.171804][T14602] inactive_file 0 [ 278.175448][T14602] active_file 0 [ 278.178973][T14602] unevictable 0 [ 278.182451][T14602] hierarchical_memory_limit 314572800 [ 278.187866][T14602] hierarchical_memsw_limit 9223372036854771712 [ 278.194047][T14602] total_cache 0 [ 278.197541][T14602] total_rss 0 [ 278.200829][T14602] total_shmem 0 [ 278.204297][T14602] total_mapped_file 266240 [ 278.208841][T14602] total_dirty 0 [ 278.212320][T14602] total_writeback 0 [ 278.216202][T14602] total_workingset_refault_anon 88 [ 278.221403][T14602] total_workingset_refault_file 914 [ 278.226610][T14602] total_swap 962560 [ 278.230456][T14602] total_swapcached 8192 [ 278.234615][T14602] total_pgpgin 222642 [ 278.238618][T14602] total_pgpgout 222640 [ 278.242692][T14602] total_pgfault 246256 [ 278.246795][T14602] total_pgmajfault 38 [ 278.250847][T14602] total_inactive_anon 0 [ 278.255112][T14602] total_active_anon 8192 [ 278.259427][T14602] total_inactive_file 0 [ 278.263588][T14602] total_active_file 0 [ 278.267588][T14602] total_unevictable 0 [ 278.271669][T14602] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.4169,pid=14601,uid=0 [ 278.286498][T14602] Memory cgroup out of memory: Killed process 14601 (syz.0.4169) total-vm:94088kB, anon-rss:1264kB, file-rss:22312kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 278.324684][T14656] bond9 (unregistering): Released all slaves [ 278.383845][T14659] __nla_validate_parse: 4 callbacks suppressed [ 278.383860][T14659] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4188'. [ 278.399801][T14659] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4188'. [ 278.432233][T14661] netlink: 'syz.2.4189': attribute type 1 has an invalid length. [ 278.571865][T14671] netlink: 76 bytes leftover after parsing attributes in process `syz.2.4193'. [ 278.658646][T14676] loop3: detected capacity change from 0 to 764 [ 278.675831][T14679] loop4: detected capacity change from 0 to 1024 [ 278.692430][T14682] netlink: 'syz.0.4195': attribute type 1 has an invalid length. [ 278.702836][T14676] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 278.719373][T14679] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 278.737097][T14682] bond14: entered promiscuous mode [ 278.744772][T14682] 8021q: adding VLAN 0 to HW filter on device bond14 [ 278.749805][T14679] ext4 filesystem being mounted at /234/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 278.764617][T14679] EXT4-fs error (device loop4): ext4_free_blocks:6696: comm syz.4.4197: Freeing blocks not in datazone - block = 0, count = 16 [ 278.811959][ T29] audit: type=1326 audit(1758988841.639:652296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14689 comm="syz.3.4201" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa63644eec9 code=0x0 [ 278.863685][T14696] loop2: detected capacity change from 0 to 512 [ 278.871108][T14698] FAULT_INJECTION: forcing a failure. [ 278.871108][T14698] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 278.884268][T14698] CPU: 0 UID: 0 PID: 14698 Comm: syz.0.4204 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 278.884304][T14698] Tainted: [W]=WARN [ 278.884311][T14698] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 278.884326][T14698] Call Trace: [ 278.884335][T14698] [ 278.884371][T14698] __dump_stack+0x1d/0x30 [ 278.884398][T14698] dump_stack_lvl+0xe8/0x140 [ 278.884422][T14698] dump_stack+0x15/0x1b [ 278.884490][T14698] should_fail_ex+0x265/0x280 [ 278.884622][T14698] should_fail+0xb/0x20 [ 278.884663][T14698] should_fail_usercopy+0x1a/0x20 [ 278.884689][T14698] copy_folio_from_iter_atomic+0x278/0x11b0 [ 278.884789][T14698] ? shmem_write_begin+0xa8/0x190 [ 278.884816][T14698] ? shmem_write_begin+0xe1/0x190 [ 278.884873][T14698] generic_perform_write+0x2c2/0x490 [ 278.884902][T14698] shmem_file_write_iter+0xc5/0xf0 [ 278.884933][T14698] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 278.884972][T14698] vfs_write+0x527/0x960 [ 278.885018][T14698] __x64_sys_pwrite64+0xfd/0x150 [ 278.885046][T14698] x64_sys_call+0xc4d/0x2ff0 [ 278.885073][T14698] do_syscall_64+0xd2/0x200 [ 278.885190][T14698] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 278.885226][T14698] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 278.885263][T14698] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.885290][T14698] RIP: 0033:0x7fb1783ceec9 [ 278.885380][T14698] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 278.885404][T14698] RSP: 002b:00007fb176e37038 EFLAGS: 00000246 ORIG_RAX: 0000000000000012 [ 278.885429][T14698] RAX: ffffffffffffffda RBX: 00007fb178625fa0 RCX: 00007fb1783ceec9 [ 278.885447][T14698] RDX: 00000000200000c1 RSI: 00002000000000c0 RDI: 0000000000000006 [ 278.885521][T14698] RBP: 00007fb176e37090 R08: 0000000000000000 R09: 0000000000000000 [ 278.885538][T14698] R10: 0000000000009000 R11: 0000000000000246 R12: 0000000000000001 [ 278.885557][T14698] R13: 00007fb178626038 R14: 00007fb178625fa0 R15: 00007fff190297c8 [ 278.885583][T14698] [ 279.112180][ T29] audit: type=1326 audit(1758988841.939:652297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14695 comm="syz.2.4203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b85c9eec9 code=0x7ffc0000 [ 279.138165][ T29] audit: type=1326 audit(1758988841.969:652298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14695 comm="syz.2.4203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f8b85c9eec9 code=0x7ffc0000 [ 279.161843][ T29] audit: type=1326 audit(1758988841.969:652299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14695 comm="syz.2.4203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b85c9eec9 code=0x7ffc0000 [ 279.185518][ T29] audit: type=1326 audit(1758988841.969:652300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14695 comm="syz.2.4203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b85c9eec9 code=0x7ffc0000 [ 279.212166][ T29] audit: type=1326 audit(1758988842.039:652301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14695 comm="syz.2.4203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8b85c9eec9 code=0x7ffc0000 [ 279.236085][ T29] audit: type=1326 audit(1758988842.039:652302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14695 comm="syz.2.4203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b85c9eec9 code=0x7ffc0000 [ 279.260056][ T29] audit: type=1326 audit(1758988842.039:652303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14695 comm="syz.2.4203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b85c9eec9 code=0x7ffc0000 [ 279.454391][T11401] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 279.514730][T14706] loop1: detected capacity change from 0 to 2048 [ 279.516955][T14710] netlink: 76 bytes leftover after parsing attributes in process `syz.4.4207'. [ 279.564900][T14706] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a842c018, mo2=0002] [ 279.584006][T14706] System zones: 0-7 [ 279.600524][T14706] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 279.691205][T14717] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4210'. [ 279.709251][T14706] EXT4-fs error (device loop1): ext4_find_inline_data_nolock:169: inode #12: comm syz.1.4208: inline data xattr refers to an external xattr inode [ 279.736779][T14719] bond6 (unregistering): Released all slaves [ 279.880110][T12046] hid-generic 0000:0000:0000.001C: hidraw0: HID v0.00 Device [syz0] on syz1 [ 279.894009][T14730] loop1: detected capacity change from 0 to 764 [ 279.922466][T14730] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 279.949493][T14735] netlink: 'syz.0.4216': attribute type 1 has an invalid length. [ 280.003063][T14733] fido_id[14733]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 280.025110][T14735] bond15: entered promiscuous mode [ 280.033954][T14738] loop4: detected capacity change from 0 to 1024 [ 280.041534][T14735] 8021q: adding VLAN 0 to HW filter on device bond15 [ 280.065246][T14738] ext4 filesystem being mounted at /239/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 280.123736][T14738] EXT4-fs error (device loop4): ext4_free_blocks:6696: comm syz.4.4218: Freeing blocks not in datazone - block = 0, count = 16 [ 280.193538][T14746] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4220'. [ 280.231621][T14749] netlink: 'syz.3.4222': attribute type 1 has an invalid length. [ 280.410470][T14757] loop1: detected capacity change from 0 to 2048 [ 280.425346][T14702] syz.2.4205 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 280.439582][T14702] CPU: 1 UID: 0 PID: 14702 Comm: syz.2.4205 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 280.439623][T14702] Tainted: [W]=WARN [ 280.439652][T14702] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 280.439669][T14702] Call Trace: [ 280.439676][T14702] [ 280.439685][T14702] __dump_stack+0x1d/0x30 [ 280.439713][T14702] dump_stack_lvl+0xe8/0x140 [ 280.439739][T14702] dump_stack+0x15/0x1b [ 280.439762][T14702] dump_header+0x81/0x220 [ 280.439873][T14702] oom_kill_process+0x342/0x400 [ 280.439912][T14702] out_of_memory+0x979/0xb80 [ 280.439960][T14702] try_charge_memcg+0x5e6/0x9e0 [ 280.440076][T14702] obj_cgroup_charge_pages+0xa6/0x150 [ 280.440126][T14702] __memcg_kmem_charge_page+0x9f/0x170 [ 280.440172][T14702] __alloc_frozen_pages_noprof+0x188/0x360 [ 280.440222][T14702] alloc_pages_mpol+0xb3/0x250 [ 280.440311][T14702] alloc_pages_noprof+0x90/0x130 [ 280.440357][T14702] __vmalloc_node_range_noprof+0x6f2/0xe00 [ 280.440411][T14702] __kvmalloc_node_noprof+0x30f/0x4e0 [ 280.440504][T14702] ? ip_set_alloc+0x1f/0x30 [ 280.440525][T14702] ? ip_set_alloc+0x1f/0x30 [ 280.440625][T14702] ? __kmalloc_cache_noprof+0x189/0x320 [ 280.440662][T14702] ip_set_alloc+0x1f/0x30 [ 280.440680][T14702] hash_netportnet_create+0x27d/0x730 [ 280.440721][T14702] ? __pfx_hash_netportnet_create+0x10/0x10 [ 280.440774][T14702] ip_set_create+0x3c9/0x960 [ 280.440805][T14702] ? __nla_parse+0x40/0x60 [ 280.440847][T14702] nfnetlink_rcv_msg+0x4c3/0x590 [ 280.440981][T14702] netlink_rcv_skb+0x123/0x220 [ 280.441012][T14702] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 280.441060][T14702] nfnetlink_rcv+0x16b/0x1690 [ 280.441213][T14702] ? inat_get_opcode_attribute+0xc/0x20 [ 280.441251][T14702] ? insn_get_opcode+0x750/0x790 [ 280.441321][T14702] ? insn_get_modrm+0x32a/0x360 [ 280.441359][T14702] ? __rcu_read_lock+0x37/0x50 [ 280.441388][T14702] ? kfree+0x276/0x320 [ 280.441463][T14702] ? __pte_offset_map_lock+0x1d4/0x230 [ 280.441556][T14702] ? do_sync_core+0x39/0x60 [ 280.441592][T14702] ? smp_call_function_many_cond+0x7f8/0xc60 [ 280.441641][T14702] ? __pfx_do_sync_core+0x10/0x10 [ 280.441747][T14702] ? should_fail_ex+0x30/0x280 [ 280.441875][T14702] ? selinux_nlmsg_lookup+0x99/0x890 [ 280.441942][T14702] ? __rcu_read_unlock+0x34/0x70 [ 280.441978][T14702] ? __netlink_lookup+0x266/0x2a0 [ 280.442015][T14702] netlink_unicast+0x5bd/0x690 [ 280.442044][T14702] netlink_sendmsg+0x58b/0x6b0 [ 280.442104][T14702] ? __pfx_netlink_sendmsg+0x10/0x10 [ 280.442132][T14702] __sock_sendmsg+0x145/0x180 [ 280.442174][T14702] ____sys_sendmsg+0x31e/0x4e0 [ 280.442210][T14702] ___sys_sendmsg+0x17b/0x1d0 [ 280.442311][T14702] __x64_sys_sendmsg+0xd4/0x160 [ 280.442402][T14702] x64_sys_call+0x191e/0x2ff0 [ 280.442431][T14702] do_syscall_64+0xd2/0x200 [ 280.442470][T14702] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 280.442505][T14702] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 280.442545][T14702] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 280.442573][T14702] RIP: 0033:0x7f8b85c9eec9 [ 280.442593][T14702] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 280.442617][T14702] RSP: 002b:00007f8b846ff038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 280.442642][T14702] RAX: ffffffffffffffda RBX: 00007f8b85ef5fa0 RCX: 00007f8b85c9eec9 [ 280.442659][T14702] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004 [ 280.442724][T14702] RBP: 00007f8b85d21f91 R08: 0000000000000000 R09: 0000000000000000 [ 280.442741][T14702] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 280.442757][T14702] R13: 00007f8b85ef6038 R14: 00007f8b85ef5fa0 R15: 00007ffcd8016e48 [ 280.442782][T14702] [ 280.442790][T14702] memory: usage 307200kB, limit 307200kB, failcnt 596 [ 280.682356][T14768] netlink: 'syz.3.4228': attribute type 1 has an invalid length. [ 280.685916][T14702] memory+swap: usage 307792kB, limit 9007199254740988kB, failcnt 0 [ 280.685937][T14702] kmem: usage 307200kB, limit 9007199254740988kB, failcnt 0 [ 280.705045][T14768] bond7: entered promiscuous mode [ 280.705097][T14702] Memory cgroup stats for /syz2 [ 280.710118][T14768] 8021q: adding VLAN 0 to HW filter on device bond7 [ 280.714314][T14702] : [ 280.730670][T14774] EXT4-fs error (device loop1): ext4_find_extent:939: inode #2: comm : pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 280.732256][T14702] cache 0 [ 280.741671][T14774] EXT4-fs (loop1): Remounting filesystem read-only [ 280.756108][T14702] rss 0 [ 280.756122][T14702] shmem 0 [ 280.888566][T14702] mapped_file 106496 [ 280.892496][T14702] dirty 0 [ 280.895498][T14702] writeback 0 [ 280.898853][T14702] workingset_refault_anon 67 [ 280.903457][T14702] workingset_refault_file 441 [ 280.908221][T14702] swap 606208 [ 280.911559][T14702] swapcached 0 [ 280.915009][T14702] pgpgin 205792 [ 280.918495][T14702] pgpgout 205792 [ 280.922123][T14702] pgfault 243205 [ 280.925661][T14702] pgmajfault 65 [ 280.929245][T14702] inactive_anon 0 [ 280.932889][T14702] active_anon 0 [ 280.936357][T14702] inactive_file 0 [ 280.940017][T14702] active_file 0 [ 280.943491][T14702] unevictable 0 [ 280.946942][T14702] hierarchical_memory_limit 314572800 [ 280.952340][T14702] hierarchical_memsw_limit 9223372036854771712 [ 280.958642][T14702] total_cache 0 [ 280.962098][T14702] total_rss 0 [ 280.965376][T14702] total_shmem 0 [ 280.968903][T14702] total_mapped_file 106496 [ 280.973326][T14702] total_dirty 0 [ 280.976877][T14702] total_writeback 0 [ 280.980720][T14702] total_workingset_refault_anon 67 [ 280.985844][T14702] total_workingset_refault_file 441 [ 280.991096][T14702] total_swap 606208 [ 280.994932][T14702] total_swapcached 0 [ 280.998875][T14702] total_pgpgin 205792 [ 281.002863][T14702] total_pgpgout 205792 [ 281.006982][T14702] total_pgfault 243205 [ 281.011164][T14702] total_pgmajfault 65 [ 281.015162][T14702] total_inactive_anon 0 [ 281.019344][T14702] total_active_anon 0 [ 281.023335][T14702] total_inactive_file 0 [ 281.027539][T14702] total_active_file 0 [ 281.031548][T14702] total_unevictable 0 [ 281.035529][T14702] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.4205,pid=14701,uid=0 [ 281.050280][T14702] Memory cgroup out of memory: Killed process 14701 (syz.2.4205) total-vm:94088kB, anon-rss:1136kB, file-rss:22312kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 281.080345][T14778] bond8 (unregistering): Released all slaves [ 281.137755][T14783] netlink: 'syz.0.4232': attribute type 1 has an invalid length. [ 281.217461][T14783] bond16: entered promiscuous mode [ 281.232566][T14783] 8021q: adding VLAN 0 to HW filter on device bond16 [ 281.310064][T14803] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4239'. [ 281.319674][T14803] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4239'. [ 281.329065][T14801] loop2: detected capacity change from 0 to 1024 [ 281.366122][T14806] loop4: detected capacity change from 0 to 1024 [ 281.375292][T14806] EXT4-fs: Ignoring removed mblk_io_submit option [ 281.383108][T14806] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 281.394563][T14788] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 281.445575][T14811] netlink: 'syz.2.4241': attribute type 1 has an invalid length. [ 281.461561][T14811] bond10: entered promiscuous mode [ 281.467136][T14811] 8021q: adding VLAN 0 to HW filter on device bond10 [ 281.468740][T14793] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 281.484029][T14815] netlink: 'syz.4.4242': attribute type 1 has an invalid length. [ 281.500710][T14821] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4243'. [ 281.534236][ T3413] hid_parser_main: 185 callbacks suppressed [ 281.534259][ T3413] hid-generic 0000:0000:0000.001D: unknown main item tag 0x1 [ 281.547839][ T3413] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 281.555403][ T3413] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 281.562869][ T3413] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 281.570672][ T3413] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 281.578126][ T3413] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 281.585585][ T3413] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 281.593035][ T3413] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 281.600542][ T3413] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 281.607980][ T3413] hid-generic 0000:0000:0000.001D: unknown main item tag 0x2 [ 281.616236][ T3413] hid-generic 0000:0000:0000.001D: hidraw0: HID v0.00 Device [syz0] on syz1 [ 281.642811][T14827] fido_id[14827]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 281.665365][ T3388] hid-generic 0000:0000:0000.001E: hidraw0: HID v0.00 Device [syz0] on syz1 [ 281.693214][T14830] fido_id[14830]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 281.938777][T14836] netlink: 'syz.1.4248': attribute type 1 has an invalid length. [ 281.953559][T14836] bond4: entered promiscuous mode [ 281.959120][T14836] 8021q: adding VLAN 0 to HW filter on device bond4 [ 282.251904][T14859] FAULT_INJECTION: forcing a failure. [ 282.251904][T14859] name failslab, interval 1, probability 0, space 0, times 0 [ 282.264723][T14859] CPU: 1 UID: 0 PID: 14859 Comm: syz.0.4257 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 282.264823][T14859] Tainted: [W]=WARN [ 282.264830][T14859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 282.264843][T14859] Call Trace: [ 282.264850][T14859] [ 282.264857][T14859] __dump_stack+0x1d/0x30 [ 282.264879][T14859] dump_stack_lvl+0xe8/0x140 [ 282.264904][T14859] dump_stack+0x15/0x1b [ 282.264924][T14859] should_fail_ex+0x265/0x280 [ 282.265002][T14859] should_failslab+0x8c/0xb0 [ 282.265034][T14859] kmem_cache_alloc_node_noprof+0x57/0x320 [ 282.265072][T14859] ? __alloc_skb+0x101/0x320 [ 282.265099][T14859] __alloc_skb+0x101/0x320 [ 282.265125][T14859] psample_group_notify+0x24/0x110 [ 282.265193][T14859] psample_group_get+0x16d/0x1b0 [ 282.265227][T14859] tcf_sample_init+0x359/0x5d0 [ 282.265257][T14859] tcf_action_init_1+0x367/0x4a0 [ 282.265544][T14859] tcf_action_init+0x267/0x6d0 [ 282.265609][T14859] tc_ctl_action+0x291/0x830 [ 282.265663][T14859] ? __pfx_tc_ctl_action+0x10/0x10 [ 282.265744][T14859] rtnetlink_rcv_msg+0x657/0x6d0 [ 282.265782][T14859] ? avc_has_perm_noaudit+0x1b1/0x200 [ 282.265819][T14859] netlink_rcv_skb+0x123/0x220 [ 282.265846][T14859] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 282.265956][T14859] rtnetlink_rcv+0x1c/0x30 [ 282.266010][T14859] netlink_unicast+0x5bd/0x690 [ 282.266038][T14859] netlink_sendmsg+0x58b/0x6b0 [ 282.266070][T14859] ? __pfx_netlink_sendmsg+0x10/0x10 [ 282.266100][T14859] __sock_sendmsg+0x145/0x180 [ 282.266184][T14859] ____sys_sendmsg+0x31e/0x4e0 [ 282.266216][T14859] ___sys_sendmsg+0x17b/0x1d0 [ 282.266300][T14859] __x64_sys_sendmsg+0xd4/0x160 [ 282.266336][T14859] x64_sys_call+0x191e/0x2ff0 [ 282.266362][T14859] do_syscall_64+0xd2/0x200 [ 282.266468][T14859] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 282.266575][T14859] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 282.266610][T14859] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 282.266638][T14859] RIP: 0033:0x7fb1783ceec9 [ 282.266657][T14859] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 282.266697][T14859] RSP: 002b:00007fb176e37038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 282.266720][T14859] RAX: ffffffffffffffda RBX: 00007fb178625fa0 RCX: 00007fb1783ceec9 [ 282.266736][T14859] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000004 [ 282.266751][T14859] RBP: 00007fb176e37090 R08: 0000000000000000 R09: 0000000000000000 [ 282.266766][T14859] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 282.266780][T14859] R13: 00007fb178626038 R14: 00007fb178625fa0 R15: 00007fff190297c8 [ 282.266799][T14859] [ 282.550805][T14854] loop1: detected capacity change from 0 to 8192 [ 282.594736][T14832] syz.4.4247 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 282.608951][T14832] CPU: 0 UID: 0 PID: 14832 Comm: syz.4.4247 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 282.609011][T14832] Tainted: [W]=WARN [ 282.609020][T14832] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 282.609043][T14832] Call Trace: [ 282.609051][T14832] [ 282.609130][T14832] __dump_stack+0x1d/0x30 [ 282.609158][T14832] dump_stack_lvl+0xe8/0x140 [ 282.609220][T14832] dump_stack+0x15/0x1b [ 282.609243][T14832] dump_header+0x81/0x220 [ 282.609321][T14832] oom_kill_process+0x342/0x400 [ 282.609367][T14832] out_of_memory+0x979/0xb80 [ 282.609416][T14832] try_charge_memcg+0x5e6/0x9e0 [ 282.609534][T14832] obj_cgroup_charge_pages+0xa6/0x150 [ 282.609571][T14832] __memcg_kmem_charge_page+0x9f/0x170 [ 282.609735][T14832] __alloc_frozen_pages_noprof+0x188/0x360 [ 282.609821][T14832] alloc_pages_mpol+0xb3/0x250 [ 282.609863][T14832] alloc_pages_noprof+0x90/0x130 [ 282.609899][T14832] __vmalloc_node_range_noprof+0x6f2/0xe00 [ 282.610014][T14832] __kvmalloc_node_noprof+0x30f/0x4e0 [ 282.610055][T14832] ? ip_set_alloc+0x1f/0x30 [ 282.610079][T14832] ? ip_set_alloc+0x1f/0x30 [ 282.610099][T14832] ? __kmalloc_cache_noprof+0x189/0x320 [ 282.610141][T14832] ip_set_alloc+0x1f/0x30 [ 282.610166][T14832] hash_netportnet_create+0x27d/0x730 [ 282.610221][T14832] ? __pfx_hash_netportnet_create+0x10/0x10 [ 282.610306][T14832] ip_set_create+0x3c9/0x960 [ 282.610407][T14832] ? __nla_parse+0x40/0x60 [ 282.610518][T14832] nfnetlink_rcv_msg+0x4c3/0x590 [ 282.610591][T14832] netlink_rcv_skb+0x123/0x220 [ 282.610617][T14832] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 282.610769][T14832] nfnetlink_rcv+0x16b/0x1690 [ 282.610873][T14832] ? inat_get_opcode_attribute+0xc/0x20 [ 282.610987][T14832] ? insn_get_opcode+0x750/0x790 [ 282.611056][T14832] ? insn_get_modrm+0x32a/0x360 [ 282.611087][T14832] ? sysvec_apic_timer_interrupt+0x44/0x80 [ 282.611180][T14832] ? __rcu_read_lock+0x37/0x50 [ 282.611203][T14832] ? kfree+0x276/0x320 [ 282.611237][T14832] ? __pte_offset_map_lock+0x1d4/0x230 [ 282.611285][T14832] ? do_sync_core+0x39/0x60 [ 282.611425][T14832] ? smp_call_function_many_cond+0x7f8/0xc60 [ 282.611451][T14832] ? __pfx_do_sync_core+0x10/0x10 [ 282.611529][T14832] ? should_fail_ex+0x30/0x280 [ 282.611558][T14832] ? selinux_nlmsg_lookup+0x99/0x890 [ 282.611631][T14832] ? __rcu_read_unlock+0x34/0x70 [ 282.611666][T14832] ? __netlink_lookup+0x266/0x2a0 [ 282.611746][T14832] netlink_unicast+0x5bd/0x690 [ 282.611819][T14832] netlink_sendmsg+0x58b/0x6b0 [ 282.611856][T14832] ? __pfx_netlink_sendmsg+0x10/0x10 [ 282.611895][T14832] __sock_sendmsg+0x145/0x180 [ 282.611928][T14832] ____sys_sendmsg+0x31e/0x4e0 [ 282.612066][T14832] ___sys_sendmsg+0x17b/0x1d0 [ 282.612118][T14832] __x64_sys_sendmsg+0xd4/0x160 [ 282.612148][T14832] x64_sys_call+0x191e/0x2ff0 [ 282.612171][T14832] do_syscall_64+0xd2/0x200 [ 282.612213][T14832] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 282.612259][T14832] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 282.612324][T14832] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 282.612345][T14832] RIP: 0033:0x7f5dd3afeec9 [ 282.612363][T14832] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 282.612383][T14832] RSP: 002b:00007f5dd255f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 282.612425][T14832] RAX: ffffffffffffffda RBX: 00007f5dd3d55fa0 RCX: 00007f5dd3afeec9 [ 282.612439][T14832] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004 [ 282.612502][T14832] RBP: 00007f5dd3b81f91 R08: 0000000000000000 R09: 0000000000000000 [ 282.612520][T14832] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 282.612552][T14832] R13: 00007f5dd3d56038 R14: 00007f5dd3d55fa0 R15: 00007ffc895f76f8 [ 282.612573][T14832] [ 282.612580][T14832] memory: usage 307200kB, limit 307200kB, failcnt 308 [ 282.664878][T14854] msdos: Unknown parameter 'flush [ 282.664878][T14854] appraise_type' [ 282.666602][T14832] memory+swap: usage 308156kB, limit 9007199254740988kB, failcnt 0 [ 283.004682][T14832] kmem: usage 307200kB, limit 9007199254740988kB, failcnt 0 [ 283.012020][T14832] Memory cgroup stats for /syz4: [ 283.012293][T14832] cache 0 [ 283.020192][T14832] rss 0 [ 283.022966][T14832] shmem 0 [ 283.025975][T14832] mapped_file 266240 [ 283.029958][T14832] dirty 0 [ 283.032920][T14832] writeback 0 [ 283.036218][T14832] workingset_refault_anon 32 [ 283.040851][T14832] workingset_refault_file 251 [ 283.045573][T14832] swap 978944 [ 283.048894][T14832] swapcached 0 [ 283.052275][T14832] pgpgin 218046 [ 283.055825][T14832] pgpgout 218046 [ 283.059500][T14832] pgfault 218653 [ 283.063058][T14832] pgmajfault 33 [ 283.066529][T14832] inactive_anon 0 [ 283.070192][T14832] active_anon 0 [ 283.073783][T14832] inactive_file 0 [ 283.077469][T14832] active_file 0 [ 283.080942][T14832] unevictable 0 [ 283.084425][T14832] hierarchical_memory_limit 314572800 [ 283.089841][T14832] hierarchical_memsw_limit 9223372036854771712 [ 283.096011][T14832] total_cache 0 [ 283.099500][T14832] total_rss 0 [ 283.102861][T14832] total_shmem 0 [ 283.106331][T14832] total_mapped_file 266240 [ 283.110779][T14832] total_dirty 0 [ 283.114321][T14832] total_writeback 0 [ 283.118185][T14832] total_workingset_refault_anon 32 [ 283.123337][T14832] total_workingset_refault_file 251 [ 283.128637][T14832] total_swap 978944 [ 283.132537][T14832] total_swapcached 0 [ 283.136527][T14832] total_pgpgin 218046 [ 283.140552][T14832] total_pgpgout 218046 [ 283.144652][T14832] total_pgfault 218653 [ 283.148835][T14832] total_pgmajfault 33 [ 283.152836][T14832] total_inactive_anon 0 [ 283.157089][T14832] total_active_anon 0 [ 283.161124][T14832] total_inactive_file 0 [ 283.165287][T14832] total_active_file 0 [ 283.169324][T14832] total_unevictable 0 [ 283.173324][T14832] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.4247,pid=14831,uid=0 [ 283.188135][T14832] Memory cgroup out of memory: Killed process 14831 (syz.4.4247) total-vm:94088kB, anon-rss:1136kB, file-rss:22312kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 283.218345][T14870] tipc: Enabling of bearer rejected, already enabled [ 283.302042][T14876] loop3: detected capacity change from 0 to 1024 [ 283.341004][T14879] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4266'. [ 283.352190][T14876] EXT4-fs: Ignoring removed bh option [ 283.360147][ T29] kauditd_printk_skb: 62 callbacks suppressed [ 283.360165][ T29] audit: type=1400 audit(1758988846.189:652366): avc: denied { setcheckreqprot } for pid=14877 comm="syz.1.4261" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 283.378216][T14876] EXT4-fs: inline encryption not supported [ 283.440982][T14876] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 283.455619][T14876] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 283.638224][T14876] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 2: comm syz.3.4265: lblock 2 mapped to illegal pblock 2 (length 1) [ 283.658227][T14876] Quota error (device loop3): qtree_write_dquot: dquota write failed [ 283.666621][T14876] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 48: comm syz.3.4265: lblock 0 mapped to illegal pblock 48 (length 1) [ 283.786275][T14876] Quota error (device loop3): v2_write_file_info: Can't write info structure [ 283.795126][T14876] EXT4-fs error (device loop3): ext4_acquire_dquot:6937: comm syz.3.4265: Failed to acquire dquot type 0 [ 283.925328][T14876] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 283.995891][T14876] EXT4-fs error (device loop3): ext4_evict_inode:254: inode #11: comm syz.3.4265: mark_inode_dirty error [ 284.070301][T14876] EXT4-fs warning (device loop3): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 284.142063][T14876] EXT4-fs (loop3): 1 orphan inode deleted [ 284.250479][T14876] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #2: block 16: comm syz.3.4265: lblock 0 mapped to illegal pblock 16 (length 1) [ 284.527475][T14890] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #2: block 16: comm syz.3.4265: lblock 0 mapped to illegal pblock 16 (length 1) [ 284.572199][T14876] EXT4-fs error (device loop3): __ext4_get_inode_loc:4861: comm syz.3.4265: Invalid inode table block 1 in block_group 0 [ 284.618842][T14876] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 284.630590][ T37] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:2: lblock 1 mapped to illegal pblock 1 (length 1) [ 284.677792][T14876] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #2: comm syz.3.4265: mark_inode_dirty error [ 284.695682][ T37] Quota error (device loop3): remove_tree: Can't read quota data block 1 [ 284.704220][ T37] EXT4-fs error (device loop3): ext4_release_dquot:6973: comm kworker/u8:2: Failed to release dquot type 0 [ 284.726511][T14890] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #2: block 16: comm syz.3.4265: lblock 0 mapped to illegal pblock 16 (length 1) [ 284.774582][T14894] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4269'. [ 284.806602][ T37] EXT4-fs error (device loop3): __ext4_get_inode_loc:4861: comm kworker/u8:2: Invalid inode table block 1 in block_group 0 [ 284.865093][T12095] EXT4-fs error (device loop3): __ext4_get_inode_loc:4861: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 284.926086][ T3413] hid-generic 0000:0000:0000.001F: hidraw0: HID v0.00 Device [syz0] on syz1 [ 284.982788][T14900] loop4: detected capacity change from 0 to 8192 [ 284.991975][T14897] loop2: detected capacity change from 0 to 764 [ 284.996099][T14905] fido_id[14905]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 285.029089][T14888] netlink: 7 bytes leftover after parsing attributes in process `syz.0.4268'. [ 285.043063][T14907] loop1: detected capacity change from 0 to 2048 [ 285.049606][T14888] netlink: 7 bytes leftover after parsing attributes in process `syz.0.4268'. [ 285.084121][ T29] audit: type=1400 audit(1758988847.889:652367): avc: denied { wake_alarm } for pid=14896 comm="syz.2.4272" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 285.168811][T14907] EXT4-fs error (device loop1): ext4_find_extent:939: inode #2: comm syz.1.4273: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 285.196306][T14919] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4277'. [ 285.222874][T14907] EXT4-fs (loop1): Remounting filesystem read-only [ 285.257528][ T29] audit: type=1326 audit(1758988848.079:652368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14924 comm="syz.2.4279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b85c9eec9 code=0x7ffc0000 [ 285.281232][ T29] audit: type=1326 audit(1758988848.079:652369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14924 comm="syz.2.4279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8b85c9eec9 code=0x7ffc0000 [ 285.304999][ T29] audit: type=1326 audit(1758988848.079:652370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14924 comm="syz.2.4279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b85c9eec9 code=0x7ffc0000 [ 285.328848][ T29] audit: type=1326 audit(1758988848.079:652371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14924 comm="syz.2.4279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8b85c9eec9 code=0x7ffc0000 [ 285.352556][ T29] audit: type=1326 audit(1758988848.079:652372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14924 comm="syz.2.4279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b85c9eec9 code=0x7ffc0000 [ 286.016832][T14961] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4293'. [ 286.229894][T14972] loop4: detected capacity change from 0 to 1024 [ 286.241633][T14976] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4298'. [ 286.418935][T12046] hid-generic 0000:0000:0000.0020: hidraw0: HID v0.00 Device [syz0] on syz1 [ 286.461121][T14992] fido_id[14992]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 286.475465][T14991] bond11 (unregistering): Released all slaves [ 286.482423][T14984] loop4: detected capacity change from 0 to 8192 [ 286.503492][T14997] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4307'. [ 286.610587][T15004] netlink: 'syz.0.4310': attribute type 1 has an invalid length. [ 286.625008][T15005] loop2: detected capacity change from 0 to 2048 [ 286.644226][T14986] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 286.670982][T15005] EXT4-fs error (device loop2): ext4_find_extent:939: inode #2: comm : pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 286.717328][T15005] EXT4-fs (loop2): Remounting filesystem read-only [ 286.782795][T15017] loop2: detected capacity change from 0 to 1024 [ 286.789875][T15017] EXT4-fs: Ignoring removed mblk_io_submit option [ 286.796662][T15017] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 286.836972][T15020] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4313'. [ 286.981173][T14994] loop3: detected capacity change from 0 to 1024 [ 286.998021][T14994] EXT4-fs: Ignoring removed mblk_io_submit option [ 287.013532][T14994] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 287.053489][T14994] EXT4-fs error (device loop3): ext4_iget_extra_inode:5104: inode #15: comm syz.3.4306: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 287.080767][T14994] EXT4-fs (loop3): Remounting filesystem read-only [ 287.106590][T14994] netlink: 7 bytes leftover after parsing attributes in process `syz.3.4306'. [ 287.131567][T14994] netlink: 7 bytes leftover after parsing attributes in process `syz.3.4306'. [ 287.221832][ T3388] hid_parser_main: 150 callbacks suppressed [ 287.221856][ T3388] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 287.235358][ T3388] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 287.242949][ T3388] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 287.250449][ T3388] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 287.258069][ T3388] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 287.265712][ T3388] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 287.273145][ T3388] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 287.280649][ T3388] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 287.288085][ T3388] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 287.295601][ T3388] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 287.307278][ T3388] hid-generic 0000:0000:0000.0021: hidraw0: HID v0.00 Device [syz0] on syz1 [ 287.329953][T15035] loop3: detected capacity change from 0 to 1024 [ 287.372435][T15035] EXT4-fs: Ignoring removed bh option [ 287.386842][T15035] EXT4-fs: inline encryption not supported [ 287.389191][T15034] fido_id[15034]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 287.407399][T15039] bond5 (unregistering): Released all slaves [ 287.414270][T15035] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 287.528285][T15035] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 287.539818][T15035] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 2: comm syz.3.4319: lblock 2 mapped to illegal pblock 2 (length 1) [ 287.555119][T15035] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 48: comm syz.3.4319: lblock 0 mapped to illegal pblock 48 (length 1) [ 287.571879][T15035] EXT4-fs error (device loop3): ext4_acquire_dquot:6937: comm syz.3.4319: Failed to acquire dquot type 0 [ 287.589317][T15035] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 287.607257][T15035] EXT4-fs error (device loop3): ext4_evict_inode:254: inode #11: comm syz.3.4319: mark_inode_dirty error [ 287.630881][T15035] EXT4-fs warning (device loop3): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 287.652644][T15035] EXT4-fs (loop3): 1 orphan inode deleted [ 287.668221][ T31] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:1: lblock 1 mapped to illegal pblock 1 (length 1) [ 287.695689][T15035] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #2: block 16: comm syz.3.4319: lblock 0 mapped to illegal pblock 16 (length 1) [ 287.698374][T15050] loop1: detected capacity change from 0 to 1024 [ 287.724258][ T31] EXT4-fs error (device loop3): ext4_release_dquot:6973: comm kworker/u8:1: Failed to release dquot type 0 [ 287.741079][T15035] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #2: block 16: comm syz.3.4319: lblock 0 mapped to illegal pblock 16 (length 1) [ 287.756422][T15035] EXT4-fs error (device loop3): __ext4_get_inode_loc:4861: comm syz.3.4319: Invalid inode table block 1 in block_group 0 [ 287.816799][T15057] smc: net device bond0 erased user defined pnetid SYZ0 [ 287.827168][T15035] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 287.842560][T15057] smc: ib device syz1 ibport 1 erased user defined pnetid SYZ0 [ 287.850696][T15035] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #2: comm syz.3.4319: mark_inode_dirty error [ 287.863366][T15056] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #2: block 16: comm syz.3.4319: lblock 0 mapped to illegal pblock 16 (length 1) [ 287.892032][ T37] EXT4-fs error (device loop3): __ext4_get_inode_loc:4861: comm kworker/u8:2: Invalid inode table block 1 in block_group 0 [ 287.938703][T15035] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 287.947640][T15065] loop2: detected capacity change from 0 to 2048 [ 287.972440][T15068] netlink: 'syz.0.4330': attribute type 1 has an invalid length. [ 288.010370][T15074] loop3: detected capacity change from 0 to 1024 [ 288.012127][T15068] bond18: entered promiscuous mode [ 288.023385][T15068] 8021q: adding VLAN 0 to HW filter on device bond18 [ 288.037492][T15065] EXT4-fs error (device loop2): ext4_find_extent:939: inode #2: comm syz.2.4328: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 288.063759][T15065] EXT4-fs (loop2): Remounting filesystem read-only [ 288.175802][T15088] tipc: New replicast peer: 255.255.255.83 [ 288.181774][T15088] tipc: Enabled bearer , priority 10 [ 288.304404][T15095] smc: net device bond0 applied user defined pnetid SYZ0 [ 288.383124][ T29] kauditd_printk_skb: 69 callbacks suppressed [ 288.383138][ T29] audit: type=1326 audit(1758988851.209:652439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15103 comm="syz.4.4342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dd3afeec9 code=0x7ffc0000 [ 288.417926][ T29] audit: type=1326 audit(1758988851.209:652440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15103 comm="syz.4.4342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dd3afeec9 code=0x7ffc0000 [ 288.418488][T15104] FAULT_INJECTION: forcing a failure. [ 288.418488][T15104] name failslab, interval 1, probability 0, space 0, times 0 [ 288.441758][ T29] audit: type=1326 audit(1758988851.249:652441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15103 comm="syz.4.4342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5dd3afeec9 code=0x7ffc0000 [ 288.454471][T15104] CPU: 1 UID: 0 PID: 15104 Comm: syz.4.4342 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 288.454551][T15104] Tainted: [W]=WARN [ 288.454562][T15104] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 288.454607][T15104] Call Trace: [ 288.454615][T15104] [ 288.454627][T15104] __dump_stack+0x1d/0x30 [ 288.454658][T15104] dump_stack_lvl+0xe8/0x140 [ 288.454687][T15104] dump_stack+0x15/0x1b [ 288.454780][T15104] should_fail_ex+0x265/0x280 [ 288.454876][T15104] should_failslab+0x8c/0xb0 [ 288.454913][T15104] kmem_cache_alloc_node_noprof+0x57/0x320 [ 288.454991][T15104] ? __alloc_skb+0x101/0x320 [ 288.455021][T15104] __alloc_skb+0x101/0x320 [ 288.455070][T15104] ? audit_log_start+0x365/0x6c0 [ 288.455130][T15104] audit_log_start+0x380/0x6c0 [ 288.455187][T15104] audit_seccomp+0x48/0x100 [ 288.455227][T15104] ? __seccomp_filter+0x68c/0x10d0 [ 288.455259][T15104] __seccomp_filter+0x69d/0x10d0 [ 288.455293][T15104] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 288.455401][T15104] ? vfs_write+0x7e8/0x960 [ 288.455433][T15104] ? __rcu_read_unlock+0x4f/0x70 [ 288.455473][T15104] ? __fget_files+0x184/0x1c0 [ 288.455515][T15104] __secure_computing+0x82/0x150 [ 288.455547][T15104] syscall_trace_enter+0xcf/0x1e0 [ 288.455683][T15104] do_syscall_64+0xac/0x200 [ 288.455727][T15104] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 288.455763][T15104] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 288.455804][T15104] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 288.455880][T15104] RIP: 0033:0x7f5dd3afeec9 [ 288.455903][T15104] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 288.455931][T15104] RSP: 002b:00007f5dd255f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 288.455959][T15104] RAX: ffffffffffffffda RBX: 00007f5dd3d55fa0 RCX: 00007f5dd3afeec9 [ 288.455980][T15104] RDX: 0000200000000440 RSI: 00000000400454d9 RDI: 0000000000000003 [ 288.455999][T15104] RBP: 00007f5dd255f090 R08: 0000000000000000 R09: 0000000000000000 [ 288.456021][T15104] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 288.456039][T15104] R13: 00007f5dd3d56038 R14: 00007f5dd3d55fa0 R15: 00007ffc895f76f8 [ 288.456068][T15104] [ 288.456081][T15104] audit: audit_lost=28671 audit_rate_limit=0 audit_backlog_limit=64 [ 288.478221][ T29] audit: type=1326 audit(1758988851.249:652442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15103 comm="syz.4.4342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dd3afeec9 code=0x7ffc0000 [ 288.489652][T15104] audit: out of memory in audit_log_start [ 288.493436][ T29] audit: type=1326 audit(1758988851.249:652443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15103 comm="syz.4.4342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=88 compat=0 ip=0x7f5dd3afeec9 code=0x7ffc0000 [ 288.760021][ T29] audit: type=1326 audit(1758988851.249:652444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15103 comm="syz.4.4342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dd3afeec9 code=0x7ffc0000 [ 288.783753][ T29] audit: type=1326 audit(1758988851.249:652445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15103 comm="syz.4.4342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dd3afeec9 code=0x7ffc0000 [ 288.807550][ T29] audit: type=1326 audit(1758988851.249:652446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15103 comm="syz.4.4342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=89 compat=0 ip=0x7f5dd3afeec9 code=0x7ffc0000 [ 288.883781][T15111] loop4: detected capacity change from 0 to 1024 [ 288.903557][T15108] bond5 (unregistering): Released all slaves [ 288.970623][T15119] netlink: 'syz.4.4345': attribute type 1 has an invalid length. [ 289.003295][T15119] bond7: entered promiscuous mode [ 289.009049][T15119] 8021q: adding VLAN 0 to HW filter on device bond7 [ 289.291473][T15141] FAULT_INJECTION: forcing a failure. [ 289.291473][T15141] name failslab, interval 1, probability 0, space 0, times 0 [ 289.304189][T15141] CPU: 0 UID: 0 PID: 15141 Comm: syz.2.4354 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 289.304257][T15141] Tainted: [W]=WARN [ 289.304264][T15141] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 289.304277][T15141] Call Trace: [ 289.304285][T15141] [ 289.304323][T15141] __dump_stack+0x1d/0x30 [ 289.304349][T15141] dump_stack_lvl+0xe8/0x140 [ 289.304375][T15141] dump_stack+0x15/0x1b [ 289.304392][T15141] should_fail_ex+0x265/0x280 [ 289.304458][T15141] ? audit_log_d_path+0x8d/0x150 [ 289.304492][T15141] should_failslab+0x8c/0xb0 [ 289.304525][T15141] __kmalloc_cache_noprof+0x4c/0x320 [ 289.304567][T15141] audit_log_d_path+0x8d/0x150 [ 289.304627][T15141] audit_log_d_path_exe+0x42/0x70 [ 289.304670][T15141] audit_log_task+0x1e9/0x250 [ 289.304703][T15141] audit_seccomp+0x61/0x100 [ 289.304766][T15141] ? __seccomp_filter+0x68c/0x10d0 [ 289.304789][T15141] __seccomp_filter+0x69d/0x10d0 [ 289.304815][T15141] ? _raw_spin_unlock+0x26/0x50 [ 289.304846][T15141] __secure_computing+0x82/0x150 [ 289.304875][T15141] syscall_trace_enter+0xcf/0x1e0 [ 289.304970][T15141] do_syscall_64+0xac/0x200 [ 289.305005][T15141] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 289.305043][T15141] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 289.305129][T15141] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.305187][T15141] RIP: 0033:0x7f8b85c9d8dc [ 289.305204][T15141] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 289.305223][T15141] RSP: 002b:00007f8b846ff030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 289.305242][T15141] RAX: ffffffffffffffda RBX: 00007f8b85ef5fa0 RCX: 00007f8b85c9d8dc [ 289.305259][T15141] RDX: 000000000000000f RSI: 00007f8b846ff0a0 RDI: 0000000000000005 [ 289.305320][T15141] RBP: 00007f8b846ff090 R08: 0000000000000000 R09: 0000000000000000 [ 289.305336][T15141] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000002 [ 289.305353][T15141] R13: 00007f8b85ef6038 R14: 00007f8b85ef5fa0 R15: 00007ffcd8016e48 [ 289.305378][T15141] [ 289.519460][T15133] loop1: detected capacity change from 0 to 1024 [ 289.544952][T15133] EXT4-fs: Ignoring removed mblk_io_submit option [ 289.566469][T15147] loop2: detected capacity change from 0 to 1024 [ 289.574845][T15133] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 289.587129][T15147] EXT4-fs mount: 31 callbacks suppressed [ 289.592956][T15147] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 289.614832][T15133] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 289.630481][T15133] EXT4-fs error (device loop1): ext4_iget_extra_inode:5104: inode #15: comm syz.1.4352: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 289.631174][T10899] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 289.663174][T15133] EXT4-fs (loop1): Remounting filesystem read-only [ 289.669914][T15152] loop3: detected capacity change from 0 to 8192 [ 289.700322][T11752] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 289.700641][T15156] loop2: detected capacity change from 0 to 2048 [ 289.742057][ T8371] ================================================================== [ 289.750227][ T8371] BUG: KCSAN: data-race in fill_mg_cmtime / shmem_unlink [ 289.757308][ T8371] [ 289.759637][ T8371] write to 0xffff888103d05b1c of 4 bytes by task 2988 on cpu 0: [ 289.767271][ T8371] shmem_unlink+0x13c/0x170 [ 289.771835][ T8371] vfs_unlink+0x26c/0x420 [ 289.776184][ T8371] do_unlinkat+0x24e/0x480 [ 289.780614][ T8371] __x64_sys_unlink+0x2e/0x40 [ 289.785305][ T8371] x64_sys_call+0x2dc0/0x2ff0 [ 289.790095][ T8371] do_syscall_64+0xd2/0x200 [ 289.794623][ T8371] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.800525][ T8371] [ 289.802856][ T8371] read to 0xffff888103d05b1c of 4 bytes by task 8371 on cpu 1: [ 289.810525][ T8371] fill_mg_cmtime+0x5b/0x260 [ 289.815135][ T8371] generic_fillattr+0x24a/0x340 [ 289.820005][ T8371] shmem_getattr+0x181/0x200 [ 289.824607][ T8371] vfs_getattr_nosec+0x146/0x1e0 [ 289.829565][ T8371] vfs_statx+0x113/0x390 [ 289.833827][ T8371] vfs_fstatat+0x115/0x170 [ 289.838271][ T8371] __se_sys_newfstatat+0x55/0x260 [ 289.843408][ T8371] __x64_sys_newfstatat+0x55/0x70 [ 289.848455][ T8371] x64_sys_call+0x135a/0x2ff0 [ 289.853162][ T8371] do_syscall_64+0xd2/0x200 [ 289.857722][ T8371] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.863640][ T8371] [ 289.866014][ T8371] value changed: 0x2274d436 -> 0x229254be [ 289.871741][ T8371] [ 289.874074][ T8371] Reported by Kernel Concurrency Sanitizer on: [ 289.880260][ T8371] CPU: 1 UID: 0 PID: 8371 Comm: udevd Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 289.891306][ T8371] Tainted: [W]=WARN [ 289.895111][ T8371] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 289.905183][ T8371] ================================================================== [ 289.925461][T15160] netlink: 'syz.1.4359': attribute type 1 has an invalid length. [ 290.000478][T15160] bond5: entered promiscuous mode [ 290.005750][T15160] 8021q: adding VLAN 0 to HW filter on device bond5 [ 290.033767][T15156] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 290.099284][T15156] EXT4-fs error (device loop2): ext4_find_extent:939: inode #2: comm syz.2.4358: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 290.124591][T15156] EXT4-fs (loop2): Remounting filesystem read-only [ 290.150522][T10899] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.