last executing test programs: 3.023837534s ago: executing program 2 (id=3832): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1018e58, &(0x7f0000000440)={[{@bsdgroups}, {@noblock_validity}, {@grpjquota}, {@init_itable_val={'init_itable', 0x3d, 0x6}}, {@debug}, {@errors_remount}]}, 0x1, 0x5fc, &(0x7f0000000600)="$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") 2.856471087s ago: executing program 2 (id=3834): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0xfe, 0x0, 0x7ffc0002}]}) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x30, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2000000, 0x600, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x0) r3 = syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1018e58, &(0x7f0000000440)={[{@bsdgroups}, {@noblock_validity}, {@grpjquota}, {@init_itable_val={'init_itable', 0x3d, 0x6}}, {@debug}, {@errors_remount}]}, 0x1, 0x5fc, &(0x7f0000000600)="$eJzs3c9rHGUfAPDvzCZ5kzavaUXEFsWAhxakaVKLVS+29WAPBQv2IOKhoUlq6PYHTQq2FkzBg4KCiFeRXvwHvEvv3kRQb56FKlJRUOnK7M62m2Q3XdPsTpr5fGCzz/PM7D7PdydP5pmZPDsBlNZ49iON2BVx51QSMdaybDQaC8fz9W7/du109kiiVnv91ySG8rLm+kn+vD3PDEfEt0cjHq2srnfhytWz09Vaw3sR+xfPXdy/cOXqvvlz02dmz8yenzrwwsFDky9OHZzakDi358/Hjr/25Mfvv/383HfVfUkcjpOD787Eijg2yniMx508xNbygYg4lCXafC4Pmy0QQqlV8t/HwYh4PMaiUs81jMX8R4U2DuipWiWiBpRUov9DSTXHAc1j++6Og0/2eFTSP7eONA6AVsc/0Dg3EsP1Y6Ntt5OWI6PGuY0dG1B/Vsc/13Z/nj1i2XmIP+9unYENqKeTpesR8US7+JN623bUI83iT5e1I4mIyYj6OaCs/JUHaEPSku7FeZi1rDf+NCIO589Z+dF11j++It/v+AEop5tH8h35Upa7t//Lxh7N8U+0Gf+Mttl3rUfR+7/O47/m/n64fo48XTEOy8YsJ9q/5eDKgp8+PPZpp/pbx3/ZI6u/ORbsh1vXI3aviP+DLNh8/JPFn7TZ/tkqpw53V8er3/9yrNOyouOv3YjY0/b4596oNEutcX1y/9x8dXay8bNtHV9/89aXneovOv5s+2/rEH/L9k9Xvi77TC52WcdXJ26c67Rs9L7xpz8PJY3jzaG85J3pxcVLUxFDyfF8lZbyA2u3pblO8z2y+Pc+077/L/v9v778fUaafzK7cPGNs7c7LVvP9m+5mHyn1mUbOsnin7n/9l/V/7OyT7qs4483Lz/Vadla8Y88SGAAAAAAAABQQmn9GmySTtxNp+nERGO+7GOxLa1eWFh8du7C5fMzEXvr/w85mDavdI818kmWn8r/H7aZP7Ai/1xE7IyIzyoj9fzE6QvVmaKDBwAAAAAAAAAAAAAAAAAAgE1iez7/v3mf6t8rjfn/QEn08gZzwOam/0N51fv/qls8AWVg/w/lpf9Deen/UF76P5SX/g/lpf9Deen/UF76PwAAAABsSTufvvljEhFLL43UH5mhfJkZQbC1DRbdAKAwlaIbABTm7qV/g30ona7G/3/lXw7Y++YABUjaFdYHB7W1O//Ntq8EAAAAAAAAAAAAAHpgz67O8//NDYatzbQ/KK8HmP/vqwPgIeer/6G8HOMD95vFP9xpgfn/AAAAAAAAAAAAANA3o/VHkk7kc4FHI00nJiL+HxE7YjCZm6/OTkbEIxHxQ2Xwf1l+quhGAwAAAAAAAAAAAAAAAAAAwBazcOXq2elqdfZSa+LvVSVbO9G8C2of6no5/uOrIun/xzISEYVvlJ4lBlpKkoilbMtvioZdWojN0Yx6ouA/TAAAAAAAAAAAAAAAAAAAUEItc4/b2/1Fn1sEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP137/7/vUsUHSMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8HD6NwAA//+ipUAx") r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000200)=ANY=[@ANYRES64=r2, @ANYRES16=r1, @ANYRESHEX=r4, @ANYRES8=r3, @ANYRES8=r3], 0x0, 0xffffff4b, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94) r5 = msgget$private(0x0, 0x0) futex(&(0x7f0000000300), 0x2, 0x1, &(0x7f0000000400)={0x77359400}, &(0x7f00000004c0)=0x2, 0x2) msgctl$IPC_SET(r5, 0x1, &(0x7f0000258f88)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x18}, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x400000000000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={0x0, 0xffffffffffffffff, 0x0, 0x68e}, 0x18) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r7 = fcntl$dupfd(r0, 0x0, r6) openat$cgroup_ro(r2, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) ioctl$SG_IO(r7, 0x2285, &(0x7f0000000040)={0x53, 0x0, 0x6, 0x0, @buffer={0x17, 0xfffffffffffffee9, 0x0}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0}) msgsnd(r5, &(0x7f00000003c0)=ANY=[@ANYRESHEX=r2], 0x0, 0x0) msgrcv(r5, 0x0, 0x0, 0x3, 0x3000) msgctl$IPC_SET(r5, 0x1, &(0x7f0000258f88)={{0x1}, 0x0, 0x0, 0x800000000000000, 0x7, 0x2, 0x0, 0x3, 0xe8, 0x0, 0x0, 0x0, 0xffffffffffffffff}) msgctl$IPC_INFO(r5, 0x3, &(0x7f00000002c0)=""/14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) symlinkat(0x0, 0xffffffffffffffff, 0x0) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) io_setup(0xf, &(0x7f0000002400)) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000e58adb97a684f100", @ANYRES16=0x0, @ANYRES32=r8, @ANYRES8=r5, @ANYRESHEX=r7], 0x24}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 2.783273358s ago: executing program 4 (id=3835): r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000240)='./file1/file0\x00', 0x200010, &(0x7f0000000340)={[], [{@euid_eq}]}, 0xfe, 0x57a, &(0x7f0000000580)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) ioctl$AUTOFS_IOC_PROTOSUBVER(r3, 0x80049367, &(0x7f0000000380)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c80)={{}, &(0x7f0000001c00), &(0x7f0000001c40)=r4}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7140000000000008500000055000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_int(r5, &(0x7f00000001c0)='cpuset.cpus\x00', 0x2, 0x0) mknodat$loop(r0, &(0x7f0000000400)='./file1/file0\x00', 0xc000, 0x0) write$cgroup_int(r6, &(0x7f0000000040), 0x1) 2.469247973s ago: executing program 0 (id=3838): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0xfffffffff7ffffe9}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000406, &(0x7f00000006c0), 0x1, 0x512, &(0x7f0000000c40)="$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") 2.290767805s ago: executing program 0 (id=3841): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f60000008500"], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1, 0x0, 0x485f}, 0x18) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1800403, &(0x7f0000000940), 0x2, 0x5ad, &(0x7f0000000180)="$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") 2.01565691s ago: executing program 0 (id=3844): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1a, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000000000000000000000002001801000020646c4300000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x3a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000280)='sched_switch\x00', r0, 0x0, 0x2}, 0x18) r1 = gettid() process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f000000000000000002000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x4005}, 0x0) lstat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000240)) 1.955189751s ago: executing program 0 (id=3845): syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000340)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$EVIOCSFF(r3, 0x40304580, &(0x7f00000003c0)={0x55, 0x8ea9, 0xfffd, {0x4, 0x5}, {0x51, 0x2}, @cond=[{0x1ff, 0x5388, 0x6f5, 0x800, 0xc7, 0xb}, {0xffff, 0x5, 0x1, 0x46, 0x6, 0xfd}]}) r4 = syz_open_dev$evdev(&(0x7f0000000080), 0x2, 0x842) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) accept4$inet(r5, &(0x7f0000000580)={0x2, 0x0, @loopback}, 0x0, 0x80000) sendmsg$IPCTNL_MSG_EXP_GET(r5, &(0x7f00000049c0)={0x0, 0x0, &(0x7f0000004980)={&(0x7f00000006c0)={0xa8, 0x1, 0x2, 0x58279163a16bcc6a, 0x0, 0x0, {0x2b90df86e9768d2a, 0x0, 0xc}, [@CTA_EXPECT_MASTER={0x94, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @empty}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x14, 0x4, @private2}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @private=0xa010102}}}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x2000c0c0}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000700000000000000000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x8f, &(0x7f00000002c0)=""/143, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x4000054) ioctl$EVIOCGBITSND(r4, 0x40044591, 0x0) write$char_usb(r3, &(0x7f0000000040)="e2", 0x2250) socket$inet6_tcp(0xa, 0x1, 0x0) 1.912253151s ago: executing program 2 (id=3846): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$sysfs(0xffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x0, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000340)='.\x00', &(0x7f0000000400), 0x6, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}}) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x11, 0x6, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) move_mount(0xffffffffffffffff, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x15, &(0x7f0000000380)=0x819, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r3, 0x0, 0xffffffffffffffff}, 0x18) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000600)=@raw={'raw\x00', 0x8, 0x3, 0x3c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f0, 0xffffffff, 0xffffffff, 0x3f0, 0xffffffff, 0xb, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x1a}, @dev={0xfe, 0x80, '\x00', 0x28}, [0xffffff00, 0xffffff00, 0x0, 0xff000000], [0xff, 0x0, 0x9f19fd7a5e924fa7, 0xff], 'macvtap0\x00', 'bridge0\x00', {0xff}, {0xff}, 0x2b, 0x7, 0x5, 0x10}, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x81, 0x0, 0x24, 0x0, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xd0, 0x138, 0x0, {}, [@common=@inet=@tcpmss={{0x28}, {0x39d3, 0x9, 0x1}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x428) r4 = perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r5 = getpgrp(0x0) ptrace$poke(0x5, r5, &(0x7f0000000300), 0x5) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x1) r6 = gettid() r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r7, &(0x7f0000000200)=""/209, 0xd1) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000080000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000100000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000005c0)='sys_enter\x00', r8}, 0x18) times(0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r7, 0x4040534e, &(0x7f0000000500)={0x335, @tick, 0x3, {0x6}, 0x40}) tkill(r6, 0x7) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r7, 0x40505331, &(0x7f00000000c0)={{0x7, 0x7f}, {0x10, 0x9}, 0x8, 0x1, 0x80}) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000009c0)=ANY=[@ANYBLOB="1800000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000006007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000001c0)={r9}, 0xc) r10 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000080)={[{0x2d, 'net_cls'}, {0x2b, 'net_cls'}, {0x2b, 'freezer'}, {0x2d, 'cpu'}, {0x2d, 'blkio'}, {0x2d, 'net_prio'}]}, 0x31) sendmsg$inet(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000003c0)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fa1ff0000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) 1.879798722s ago: executing program 4 (id=3847): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000850000002300000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xe90492a97c76d70c, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r0}, 0x10) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, 0x0, 0x0) recvmmsg$unix(r1, &(0x7f0000004400)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000004c0)=""/53, 0x35}], 0x1}}], 0x1, 0x0, 0x0) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x9200000000000000) 1.651170735s ago: executing program 2 (id=3851): ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x13d, 0xda42, 0xd6e, 0x5, 0x1}}) rseq(0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r0 = socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket(0x10, 0x3, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={0xffffffffffffffff, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000080)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0], 0x0, 0x0, 0xe0, &(0x7f0000000180), 0x0, 0x10, &(0x7f00000001c0), &(0x7f00000002c0), 0x8, 0x9b, 0x8, 0x8, &(0x7f0000000300)}}, 0x10) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000780)={'gretap0\x00', &(0x7f0000000640)={'sit0\x00', r4, 0x7, 0x8, 0x1, 0x5544a5f9, {{0x2f, 0x4, 0x3, 0x1, 0xbc, 0x67, 0x0, 0x81, 0x2f, 0x0, @loopback, @local, {[@cipso={0x86, 0x42, 0x1, [{0x2, 0x6, "c756d503"}, {0x0, 0x6, "a8c66b07"}, {0x0, 0xf, "d2777853713ddf0e6cfe628f9d"}, {0x2, 0x4, 'y\b'}, {0x7, 0xd, "b1af84976b8448a1243572"}, {0x6, 0x10, "c203b800d28c0bb04ea8f165614b"}]}, @timestamp_addr={0x44, 0x2c, 0x2b, 0x1, 0x2, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x5}, {@rand_addr=0x64010100, 0x7f}, {@multicast1, 0x9}, {@remote, 0x7}, {@local, 0x5}]}, @rr={0x7, 0xf, 0xed, [@empty, @multicast2, @rand_addr=0x64010102]}, @timestamp_prespec={0x44, 0x24, 0x6e, 0x3, 0x5, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x7f}, {@rand_addr=0x64010102, 0xc}, {@multicast1, 0x23}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2}]}, @cipso={0x86, 0x6, 0x3}]}}}}}) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x9d, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x10) r6 = socket$inet6(0xa, 0x805, 0x0) r7 = epoll_create(0x7fffffff) epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, r6, &(0x7f0000000100)={0x3000201e}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010076657468305f746f5f687372000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c0003801400010076657468305f746f5f687372"], 0xfc}, 0x1, 0x0, 0x0, 0x8004}, 0x8050) sync() sync() ioctl$PPPIOCSACTIVE(0xffffffffffffffff, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) recvfrom(r0, &(0x7f0000000480)=""/110, 0x168f6f3d, 0x734, 0x0, 0xfffffffffffffecb) 1.444491098s ago: executing program 1 (id=3853): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0xfe, 0x0, 0x7ffc0002}]}) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x30, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2000000, 0x600, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x0) r3 = syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1018e58, &(0x7f0000000440)={[{@bsdgroups}, {@noblock_validity}, {@grpjquota}, {@init_itable_val={'init_itable', 0x3d, 0x6}}, {@debug}, {@errors_remount}]}, 0x1, 0x5fc, &(0x7f0000000600)="$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") r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000200)=ANY=[@ANYRES64=r2, @ANYRES16=r1, @ANYRESHEX=r4, @ANYRES8=r3, @ANYRES8=r3], 0x0, 0xffffff4b, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94) r5 = msgget$private(0x0, 0x0) futex(&(0x7f0000000300), 0x2, 0x1, &(0x7f0000000400)={0x77359400}, &(0x7f00000004c0)=0x2, 0x2) msgctl$IPC_SET(r5, 0x1, &(0x7f0000258f88)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x18}, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x400000000000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={0x0, 0xffffffffffffffff, 0x0, 0x68e}, 0x18) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r7 = fcntl$dupfd(r0, 0x0, r6) openat$cgroup_ro(r2, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) ioctl$SG_IO(r7, 0x2285, &(0x7f0000000040)={0x53, 0x0, 0x6, 0x0, @buffer={0x17, 0xfffffffffffffee9, 0x0}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0}) msgsnd(r5, &(0x7f00000003c0)=ANY=[@ANYRESHEX=r2], 0x0, 0x0) msgrcv(r5, 0x0, 0x0, 0x3, 0x3000) msgctl$IPC_SET(r5, 0x1, &(0x7f0000258f88)={{0x1}, 0x0, 0x0, 0x800000000000000, 0x7, 0x2, 0x0, 0x3, 0xe8, 0x0, 0x0, 0x0, 0xffffffffffffffff}) msgctl$IPC_INFO(r5, 0x3, &(0x7f00000002c0)=""/14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) symlinkat(0x0, 0xffffffffffffffff, 0x0) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) io_setup(0xf, &(0x7f0000002400)) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000e58adb97a684f100", @ANYRES16=0x0, @ANYRES32=r8, @ANYRES8=r5, @ANYRESHEX=r7], 0x24}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 952.114926ms ago: executing program 4 (id=3856): ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x13d, 0xda42, 0xd6e, 0x5, 0x1}}) rseq(0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r0 = socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket(0x10, 0x3, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={0xffffffffffffffff, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000080)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0], 0x0, 0x0, 0xe0, &(0x7f0000000180), 0x0, 0x10, &(0x7f00000001c0), &(0x7f00000002c0), 0x8, 0x9b, 0x8, 0x8, &(0x7f0000000300)}}, 0x10) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000780)={'gretap0\x00', &(0x7f0000000640)={'sit0\x00', r4, 0x7, 0x8, 0x1, 0x5544a5f9, {{0x2f, 0x4, 0x3, 0x1, 0xbc, 0x67, 0x0, 0x81, 0x2f, 0x0, @loopback, @local, {[@cipso={0x86, 0x42, 0x1, [{0x2, 0x6, "c756d503"}, {0x0, 0x6, "a8c66b07"}, {0x0, 0xf, "d2777853713ddf0e6cfe628f9d"}, {0x2, 0x4, 'y\b'}, {0x7, 0xd, "b1af84976b8448a1243572"}, {0x6, 0x10, "c203b800d28c0bb04ea8f165614b"}]}, @timestamp_addr={0x44, 0x2c, 0x2b, 0x1, 0x2, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x5}, {@rand_addr=0x64010100, 0x7f}, {@multicast1, 0x9}, {@remote, 0x7}, {@local, 0x5}]}, @rr={0x7, 0xf, 0xed, [@empty, @multicast2, @rand_addr=0x64010102]}, @timestamp_prespec={0x44, 0x24, 0x6e, 0x3, 0x5, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x7f}, {@rand_addr=0x64010102, 0xc}, {@multicast1, 0x23}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2}]}, @cipso={0x86, 0x6, 0x3}]}}}}}) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x9d, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x10) r6 = socket$inet6(0xa, 0x805, 0x0) r7 = epoll_create(0x7fffffff) epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, r6, &(0x7f0000000100)={0x3000201e}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010076657468305f746f5f687372000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c0003801400010076657468305f746f5f687372"], 0xfc}, 0x1, 0x0, 0x0, 0x8004}, 0x8050) sync() sync() ioctl$PPPIOCSACTIVE(0xffffffffffffffff, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) recvfrom(r0, &(0x7f0000000480)=""/110, 0x168f6f3d, 0x734, 0x0, 0xfffffffffffffecb) 930.539236ms ago: executing program 2 (id=3857): r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000240)='./file1/file0\x00', 0x200010, &(0x7f0000000340)={[], [{@euid_eq}]}, 0xfe, 0x57a, &(0x7f0000000580)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) ioctl$AUTOFS_IOC_PROTOSUBVER(r3, 0x80049367, &(0x7f0000000380)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c80)={{}, &(0x7f0000001c00), &(0x7f0000001c40)=r4}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7140000000000008500000055000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_int(r5, &(0x7f00000001c0)='cpuset.cpus\x00', 0x2, 0x0) mknodat$loop(r0, &(0x7f0000000400)='./file1/file0\x00', 0xc000, 0x0) write$cgroup_int(r6, &(0x7f0000000040), 0x1) 924.849207ms ago: executing program 0 (id=3858): openat$rdma_cm(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) creat(&(0x7f0000000280)='./file0\x00', 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xe315}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}]}, 0x44}}, 0x0) r4 = socket(0x10, 0x3, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x40, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r6, {0x0, 0xc}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_FLOWS={0x8, 0x5, 0x1}]}}]}, 0x40}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r9, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001940)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r10, @ANYBLOB="01dfffffff9a26000000210000000c00018008000100", @ANYRES32=r8], 0x20}, 0x1, 0x0, 0x0, 0x4000c00}, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000780), r12) getsockname$packet(r12, &(0x7f00000007c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="4400000010000104001007fb5c360dff9fe30000", @ANYRES32=r13, @ANYBLOB="0100000000000000240012000c000100627269646765000e1400020008000700"], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000001c00)={0x42c, r2, 0x300, 0x70bd2b, 0x25dfdbfe, {}, [@ETHTOOL_A_FEATURES_HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_FEATURES_WANTED={0x14, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x100}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_FEATURES_WANTED={0xfc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0xb, 0x4, "b0168c72b625bf"}, @ETHTOOL_A_BITSET_VALUE={0x19, 0x4, "fd88abc6f1968c218b06aee8f64d9eab59190c72f7"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x77, 0x4, "7470f8164a3f683b1a89b3a561009e99349f6cecf90273e0687b683effa31d1cb3cd2f85e7e3434e0379062e7a609e64c409ac08c90842d918920cf009d1af6e9a3de2889153f9c489e26fc9c74ec2c6d14c1017d82888f7aec0c6c74a2ce17188dc65bfb80db9c0bb00674cf8de0aeb4e3150"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xc}, @ETHTOOL_A_BITSET_VALUE={0x41, 0x4, "4189808031a1f614c5e3ea240b98265a41085185686f12c5e646fe332a00ecbfc76f4d8d0aa8b254a08b4bc495625c4930cb8339d274b6441f11ee54da"}, @ETHTOOL_A_BITSET_SIZE={0x8}]}, @ETHTOOL_A_FEATURES_HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}]}, @ETHTOOL_A_FEATURES_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_FEATURES_WANTED={0x10, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x6c}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_FEATURES_WANTED={0x254, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x60, 0x4, "40c631914ed015ed648513e32538f8b81432d149d4b8f584c5e150142374c22b7ca2646b166d9b335b4c42e2db0ca2bec6d582edd2d5735111d6d8a341f65e260f763be6346328ae681a2e24be6cfc52e60d02779b604481f0155efe"}, @ETHTOOL_A_BITSET_BITS={0x114, 0x3, 0x0, 0x1, [{0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, 'sched_switch\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x10}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4bda}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x90d}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x196e}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffff}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x91e}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'GPL\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffffff72}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '-\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3cf3}]}]}, @ETHTOOL_A_BITSET_BITS={0x4c, 0x3, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x68, 0x3, 0x0, 0x1, [{0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x1c, 0x2, '/dev/infiniband/rdma_cm\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x101}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_NAME={0x16, 0x2, '/%&$,\\*-\xc1-%(+$$\xc0{\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7f}, @ETHTOOL_A_BITSET_MASK={0x13, 0x5, "8dab4bf96bc3444186d26858a8a45c"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x640}]}, @ETHTOOL_A_FEATURES_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x42c}, 0x1, 0x0, 0x0, 0x20040090}, 0x10) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000700fc000000080011000700000008000e00800000000800", @ANYRES32=r0], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) r14 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r14, 0x0, 0xf904}, 0x18) syz_clone(0x44066000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) socketpair(0x18, 0x0, 0x2, &(0x7f0000000000)) 753.429859ms ago: executing program 1 (id=3859): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r2}, &(0x7f0000000000), &(0x7f0000000040)=r3}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000002540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) 719.48541ms ago: executing program 4 (id=3860): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) creat(&(0x7f0000000280)='./file0\x00', 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000700fc000000080011000700000008000e00800000000800", @ANYRES32=r0], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 671.5815ms ago: executing program 1 (id=3862): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bf"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x59dc6d71776a1654, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$rds(0x15, 0x5, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000025c0)) lremovexattr(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="18000006000040000000000007000000850000008900000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) r4 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r4, &(0x7f0000000000)={0x18, 0x0, {0x2, @multicast, 'ip_vti0\x00'}}, 0x1e) connect$pppoe(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0x0, {0x2, @multicast, 'veth1_to_bond\x00'}}, 0x1e) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x6, 0x10, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x9, 0x0, &(0x7f0000000080)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r6, 0x0, 0x2}, 0x18) syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@rdma_args={0x48, 0x114, 0x1, {{0x3, 0x2}, {0x0}, &(0x7f0000000340)=[{&(0x7f0000001140)=""/102, 0x66}], 0x1, 0x60, 0xfffffffefffffffe}}], 0x48, 0x8004}, 0x0) 671.28605ms ago: executing program 4 (id=3863): openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/slabinfo\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0x5169, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000600)='./file0\x00', 0xc8d0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x3e, 0x2f0, &(0x7f0000000280)="$eJzs3E1rE1sYwPEnaZKm6W2SxeVe7gXpQTe6Gdq4F4O0IAYstRFfQJy2Ew0Zk5IZKhGxunIrfggXpcvuCtov0I07V27cdSO4sAtxJPOSpGlq35LGtv8flHPSc57knDlteM7AnM07b56UCpZW0G0Jx5WERES2RNISlkDIL8NuPSatXsql4W+fzt26e+9GNpebmFZqMjtzOaOUSo6+f/p8yO+2Nigb6QebXzNfNv7Z+G/z58zjoqWKlipXbKWr2cpnW581DTVftEqaUlOmoVuGKpYto+q1V7z2gllZWKgpvTw/klioGpal9HJNlYyasivKrtaU/kgvlpWmaWokIdhLfnl6Ws8eMniuy4NBj1SrWX1ARIZ2tOSX+zIgAADQV37+38j2w/WU/jD5f6Rj/r9yft0evr2a9PP/tVg9/xdpyf8fNt9rW/4fF5Ge5/87M6KTbbDtteP8vv+R8n+cEPX8P+H//7pe3V8Zcyvk/wAAAAAAAAAAAAAAAAAAAAAAnARbjpNyHCcVlMHPoIjE3SdIvNf9Hid6g/U/25oHd0SSIubrxfxi3iv9DusiYoohY5KSH+7fg69ej4lyO6m6tHwwl/z4pcX8gNuSLUjRjR+XlKTb4x1n8npuYlx5tsdHJdEan5GU/N05PtMeH62XMbl4oSVek5R8nJOKmDLvPxkXxL8YV+razVzb5w+5/QAAAAAAOA001dDYv7eeIqNpO9u9/bHX3thfd7w/4O2vxzru7yPyf6RfswYAAAAA4Gyxas9Kumka1VNXCWa436jgXONd+oQktFtTFyrBhx8gKtmjFYzu64qFDzLURmU0dsBF6VgJbhsZVcv+q0MfmTrMOzspkaNew3/fvvvevbW4shpvzrSrqxzba6bR4/n2AQAAAHCcmkl/8Jur/R0QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABn0HEcxdfvOQIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB/il8BAAD//6b8BMI=") r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000000), 0xffffff6a) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, 0x0, 0x0) fallocate(r3, 0x0, 0x0, 0x2c2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) io_cancel(0x0, 0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x101402, 0xad) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x9c}, 0x1, 0x0, 0x0, 0x44040}, 0x20000094) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r6}, 0x10) r7 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$KDSKBENT(r7, 0x4b47, &(0x7f0000000580)={0x8, 0xff, 0x1}) ioctl$AUTOFS_IOC_FAIL(r5, 0x9361, 0x327) io_uring_enter(r0, 0x7368, 0x0, 0x0, 0x0, 0x0) 569.546542ms ago: executing program 1 (id=3864): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0xfe, 0x0, 0x7ffc0002}]}) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x30, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2000000, 0x600, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x0) r3 = syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1018e58, &(0x7f0000000440)={[{@bsdgroups}, {@noblock_validity}, {@grpjquota}, {@init_itable_val={'init_itable', 0x3d, 0x6}}, {@debug}, {@errors_remount}]}, 0x1, 0x5fc, &(0x7f0000000600)="$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") r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000200)=ANY=[@ANYRES64=r2, @ANYRES16=r1, @ANYRESHEX=r4, @ANYRES8=r3, @ANYRES8=r3], 0x0, 0xffffff4b, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94) r5 = msgget$private(0x0, 0x0) futex(&(0x7f0000000300), 0x2, 0x1, &(0x7f0000000400)={0x77359400}, &(0x7f00000004c0)=0x2, 0x2) msgctl$IPC_SET(r5, 0x1, &(0x7f0000258f88)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x18}, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x400000000000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={0x0, 0xffffffffffffffff, 0x0, 0x68e}, 0x18) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r7 = fcntl$dupfd(r0, 0x0, r6) openat$cgroup_ro(r2, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) ioctl$SG_IO(r7, 0x2285, &(0x7f0000000040)={0x53, 0x0, 0x6, 0x0, @buffer={0x17, 0xfffffffffffffee9, 0x0}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0}) msgsnd(r5, &(0x7f00000003c0)=ANY=[@ANYRESHEX=r2], 0x0, 0x0) msgrcv(r5, 0x0, 0x0, 0x3, 0x3000) msgctl$IPC_SET(r5, 0x1, &(0x7f0000258f88)={{0x1}, 0x0, 0x0, 0x800000000000000, 0x7, 0x2, 0x0, 0x3, 0xe8, 0x0, 0x0, 0x0, 0xffffffffffffffff}) msgctl$IPC_INFO(r5, 0x3, &(0x7f00000002c0)=""/14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) symlinkat(0x0, 0xffffffffffffffff, 0x0) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) io_setup(0xf, &(0x7f0000002400)) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000e58adb97a684f100", @ANYRES16=0x0, @ANYRES32=r8, @ANYRES8=r5, @ANYRESHEX=r7], 0x24}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 529.920792ms ago: executing program 3 (id=3865): flock(0xffffffffffffffff, 0x1) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x7}, 0x1c) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000002680)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)="18", 0x1}], 0x1}}], 0x1, 0x0) shutdown(r2, 0x1) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x4e21, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'geneve1\x00', 0x0}) sendto$packet(r3, &(0x7f0000000780)="14afa849641d0000000000000000", 0xe, 0x4000000, &(0x7f00000000c0)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x1}, 0x14) write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file0'}, 0xb) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) ioctl$USBDEVFS_IOCTL(r7, 0xc0105512, &(0x7f0000000040)) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r8, 0x0, 0x6}, 0x18) ioctl$USBDEVFS_IOCTL(r7, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000500)=@gcm_256={{0x303}, "2a4001011f891d5b", "11682d84dd05bb63ae661f051e1e79ceafeaa60a5bd1dc83db142ade2bd907fd", "fd6ed24e", "d4e9e1c90d89691c"}, 0x38) prctl$PR_SET_NAME(0xf, 0x0) 450.492623ms ago: executing program 0 (id=3866): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000850000002300000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xe90492a97c76d70c, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r0}, 0x10) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, 0x0, 0x0) recvmmsg$unix(r1, &(0x7f0000004400)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000004c0)=""/53, 0x35}], 0x1}}], 0x1, 0x0, 0x0) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x9200000000000000) 411.890244ms ago: executing program 3 (id=3867): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="190000000400000008000000"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000900)=@mangle={'mangle\x00', 0x44, 0x6, 0x510, 0x3a8, 0x210, 0x210, 0x0, 0x138, 0x478, 0x478, 0x478, 0x478, 0x478, 0x6, 0x0, {[{{@ip={@broadcast, @multicast1=0xe0007600, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@loopback, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_team\x00'}, 0x0, 0x70, 0x198}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'system_u:object_r:dbusd_etc_t:s0\x00'}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0xa0, 0xd0, 0x0, {}, [@common=@unspec=@mac={{0x30}, {@multicast}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x570) 338.743735ms ago: executing program 4 (id=3868): syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000340)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$EVIOCSFF(r3, 0x40304580, &(0x7f00000003c0)={0x55, 0x8ea9, 0xfffd, {0x4, 0x5}, {0x51, 0x2}, @cond=[{0x1ff, 0x5388, 0x6f5, 0x800, 0xc7, 0xb}, {0xffff, 0x5, 0x1, 0x46, 0x6, 0xfd}]}) r4 = syz_open_dev$evdev(&(0x7f0000000080), 0x2, 0x842) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) accept4$inet(r5, &(0x7f0000000580)={0x2, 0x0, @loopback}, 0x0, 0x80000) sendmsg$IPCTNL_MSG_EXP_GET(r5, &(0x7f00000049c0)={0x0, 0x0, &(0x7f0000004980)={&(0x7f00000006c0)={0xa8, 0x1, 0x2, 0x58279163a16bcc6a, 0x0, 0x0, {0x2b90df86e9768d2a, 0x0, 0xc}, [@CTA_EXPECT_MASTER={0x94, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @empty}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x14, 0x4, @private2}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @private=0xa010102}}}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x2000c0c0}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000700000000000000000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x8f, &(0x7f00000002c0)=""/143, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x4000054) ioctl$EVIOCGBITSND(r4, 0x40044591, 0x0) write$char_usb(r3, &(0x7f0000000040)="e2", 0x2250) socket$inet6_tcp(0xa, 0x1, 0x0) 318.952385ms ago: executing program 3 (id=3869): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, &(0x7f0000000000), &(0x7f0000000040)=r4}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f00000003c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010027bd7000000000000c000000040003800c00018008000100", @ANYRES32=r3], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) 289.606456ms ago: executing program 3 (id=3870): ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x13d, 0xda42, 0xd6e, 0x5, 0x1}}) rseq(0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r0 = socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket(0x10, 0x3, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={0xffffffffffffffff, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000080)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0], 0x0, 0x0, 0xe0, &(0x7f0000000180), 0x0, 0x10, &(0x7f00000001c0), &(0x7f00000002c0), 0x8, 0x9b, 0x8, 0x8, &(0x7f0000000300)}}, 0x10) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000780)={'gretap0\x00', &(0x7f0000000640)={'sit0\x00', r4, 0x7, 0x8, 0x1, 0x5544a5f9, {{0x2f, 0x4, 0x3, 0x1, 0xbc, 0x67, 0x0, 0x81, 0x2f, 0x0, @loopback, @local, {[@cipso={0x86, 0x42, 0x1, [{0x2, 0x6, "c756d503"}, {0x0, 0x6, "a8c66b07"}, {0x0, 0xf, "d2777853713ddf0e6cfe628f9d"}, {0x2, 0x4, 'y\b'}, {0x7, 0xd, "b1af84976b8448a1243572"}, {0x6, 0x10, "c203b800d28c0bb04ea8f165614b"}]}, @timestamp_addr={0x44, 0x2c, 0x2b, 0x1, 0x2, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x5}, {@rand_addr=0x64010100, 0x7f}, {@multicast1, 0x9}, {@remote, 0x7}, {@local, 0x5}]}, @rr={0x7, 0xf, 0xed, [@empty, @multicast2, @rand_addr=0x64010102]}, @timestamp_prespec={0x44, 0x24, 0x6e, 0x3, 0x5, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x7f}, {@rand_addr=0x64010102, 0xc}, {@multicast1, 0x23}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2}]}, @cipso={0x86, 0x6, 0x3}]}}}}}) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x9d, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x10) r6 = socket$inet6(0xa, 0x805, 0x0) r7 = epoll_create(0x7fffffff) epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, r6, &(0x7f0000000100)={0x3000201e}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010076657468305f746f5f687372000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c0003801400010076657468305f746f5f687372"], 0xfc}, 0x1, 0x0, 0x0, 0x8004}, 0x8050) sync() sync() ioctl$PPPIOCSACTIVE(0xffffffffffffffff, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) recvfrom(r0, &(0x7f0000000480)=""/110, 0x168f6f3d, 0x734, 0x0, 0xfffffffffffffecb) 181.722327ms ago: executing program 3 (id=3871): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f0000000200)=0x200001) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r4, 0x0, 0x2}, 0x18) setxattr$system_posix_acl(0x0, &(0x7f0000002a40)='system.posix_acl_default\x00', 0x0, 0x2c, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000002c0)={'batadv_slave_1\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r5, @ANYBLOB="06001500070000000c001680080001"], 0x38}}, 0x10) socket$can_raw(0x1d, 0x3, 0x1) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1018e58, &(0x7f0000000440)={[{@bsdgroups}, {@noblock_validity}, {@grpjquota}, {@init_itable_val={'init_itable', 0x3d, 0x6}}, {@debug}, {@errors_remount}]}, 0x1, 0x5fc, &(0x7f0000000600)="$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") 50.905329ms ago: executing program 3 (id=3872): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r2}, &(0x7f0000000000), &(0x7f0000000040)=r3}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000002540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) 39.32969ms ago: executing program 1 (id=3873): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x62, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1, 0x0, 0x3}, 0x18) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)) 465.01µs ago: executing program 2 (id=3874): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bf"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x59dc6d71776a1654, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$rds(0x15, 0x5, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000025c0)) lremovexattr(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="18000006000040000000000007000000850000008900000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) r4 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r4, &(0x7f0000000000)={0x18, 0x0, {0x2, @multicast, 'ip_vti0\x00'}}, 0x1e) connect$pppoe(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0x0, {0x2, @multicast, 'veth1_to_bond\x00'}}, 0x1e) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x6, 0x10, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x9, 0x0, &(0x7f0000000080)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r6, 0x0, 0x2}, 0x18) syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@rdma_args={0x48, 0x114, 0x1, {{0x3, 0x2}, {0x0}, &(0x7f0000000340)=[{&(0x7f0000001140)=""/102, 0x66}], 0x1, 0x60, 0xfffffffefffffffe}}], 0x48, 0x8004}, 0x0) 0s ago: executing program 1 (id=3875): openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) syz_genetlink_get_family_id$nl80211(0x0, r0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r2}, &(0x7f0000000000), &(0x7f0000000040)=r3}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000002540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) kernel console output (not intermixed with test programs): [ 312.078538][T14001] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 312.105370][T14012] 8021q: adding VLAN 0 to HW filter on device bond3 [ 312.114989][T14001] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3358'. [ 312.124428][T14001] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3358'. [ 312.135020][T14012] bond3: (slave vti0): The slave device specified does not support setting the MAC address [ 312.156783][T14012] bond3: (slave vti0): Error -95 calling set_mac_address [ 312.173884][T14014] loop2: detected capacity change from 0 to 1024 [ 312.182538][T14014] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 312.221417][T14016] loop1: detected capacity change from 0 to 128 [ 312.227967][T14018] tc_dump_action: action bad kind [ 312.289803][T14020] loop3: detected capacity change from 0 to 1024 [ 312.299025][T14020] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 312.322774][T14022] loop2: detected capacity change from 0 to 1024 [ 312.568391][T14034] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 312.587064][T14034] loop1: detected capacity change from 0 to 2048 [ 312.654773][T14036] loop4: detected capacity change from 0 to 1024 [ 312.666986][T14036] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 312.678386][T14036] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 312.698627][T14036] JBD2: no valid journal superblock found [ 312.704563][T14036] EXT4-fs (loop4): Could not load journal inode [ 312.720935][T14038] loop1: detected capacity change from 0 to 128 [ 312.760682][T14040] loop4: detected capacity change from 0 to 512 [ 312.769587][T14040] EXT4-fs: Ignoring removed bh option [ 312.777058][T14040] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 312.786425][T14040] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 312.795948][T14040] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 312.815246][T14040] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 312.842613][T14040] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3372'. [ 312.851770][T14040] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3372'. [ 312.965976][T14051] tc_dump_action: action bad kind [ 313.100403][T14053] netlink: 248 bytes leftover after parsing attributes in process `syz.0.3373'. [ 313.447126][T14062] netlink: 'syz.2.3379': attribute type 7 has an invalid length. [ 313.454989][T14062] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3379'. [ 313.542604][T14070] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 313.732525][T14077] loop1: detected capacity change from 0 to 2048 [ 313.772939][T14077] EXT4-fs mount: 112 callbacks suppressed [ 313.772959][T14077] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 313.786459][T14084] loop2: detected capacity change from 0 to 1024 [ 313.843928][T14084] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 313.855040][T14084] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 313.868728][T14084] JBD2: no valid journal superblock found [ 313.874574][T14084] EXT4-fs (loop2): Could not load journal inode [ 313.924631][T13155] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 314.013401][T14089] netlink: 248 bytes leftover after parsing attributes in process `syz.0.3386'. [ 314.158611][T14092] loop2: detected capacity change from 0 to 1024 [ 314.195579][T14092] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 314.421179][T14098] loop3: detected capacity change from 0 to 128 [ 314.434892][T14096] netlink: 'syz.2.3392': attribute type 7 has an invalid length. [ 314.442790][T14096] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3392'. [ 314.454657][T14098] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535) [ 314.478841][T14098] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none. [ 314.635626][T14108] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 314.651381][T14098] netlink: 'syz.3.3391': attribute type 10 has an invalid length. [ 314.665968][T14098] 8021q: adding VLAN 0 to HW filter on device team0 [ 314.686166][T14098] bond0: (slave team0): Enslaving as an active interface with an up link [ 314.715240][T14112] loop4: detected capacity change from 0 to 2048 [ 314.733486][T12258] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 314.767421][T14112] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 314.824941][T12865] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 314.845344][T14109] netlink: 'syz.0.3396': attribute type 10 has an invalid length. [ 314.854416][T14109] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3396'. [ 314.881580][T14121] hub 9-0:1.0: USB hub found [ 314.887309][T14121] hub 9-0:1.0: 8 ports detected [ 315.030468][T14125] netlink: 248 bytes leftover after parsing attributes in process `syz.1.3397'. [ 315.374544][T14137] tc_dump_action: action bad kind [ 315.462133][T14143] loop3: detected capacity change from 0 to 512 [ 315.471413][T14143] EXT4-fs: Ignoring removed nobh option [ 315.480017][T14145] mmap: syz.2.3410 (14145) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 315.501121][T14145] loop2: detected capacity change from 0 to 1024 [ 315.517528][T14143] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #16: comm syz.3.3409: corrupted inode contents [ 315.536143][T14145] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 315.556847][T14145] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 315.603613][T14143] EXT4-fs (loop3): Remounting filesystem read-only [ 315.612569][T14143] EXT4-fs (loop3): 1 truncate cleaned up [ 315.620214][T14143] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 315.637019][ T5335] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 315.641302][T14145] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c840e02c, mo2=0000] [ 315.649675][ T5335] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 315.660411][T14143] ext4 filesystem being mounted at /85/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 315.685453][ T5335] EXT4-fs (loop3): Quota write (off=8, len=24) cancelled because transaction is not started [ 315.696175][T14145] EXT4-fs error (device loop2): ext4_map_blocks:780: inode #3: block 2: comm syz.2.3410: lblock 2 mapped to illegal pblock 2 (length 1) [ 315.716703][T14145] EXT4-fs (loop2): Remounting filesystem read-only [ 315.731045][T14143] 9pnet_fd: Insufficient options for proto=fd [ 315.763212][T12258] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 315.783836][T14145] EXT4-fs (loop2): 1 orphan inode deleted [ 315.845215][T14145] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 315.861528][T14157] loop1: detected capacity change from 0 to 128 [ 315.880666][T14145] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 315.995722][T14163] netlink: 'syz.4.3415': attribute type 13 has an invalid length. [ 316.043696][ T29] kauditd_printk_skb: 331 callbacks suppressed [ 316.043712][ T29] audit: type=1326 audit(1749364203.795:15842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14144 comm="syz.2.3410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6be149e929 code=0x7ffc0000 [ 316.113572][ T29] audit: type=1326 audit(1749364203.795:15843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14144 comm="syz.2.3410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6be149e929 code=0x7ffc0000 [ 316.142433][ T29] audit: type=1326 audit(1749364203.795:15844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14144 comm="syz.2.3410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=71 compat=0 ip=0x7f6be149e929 code=0x7ffc0000 [ 316.173055][ T29] audit: type=1326 audit(1749364203.795:15845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14144 comm="syz.2.3410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6be149e929 code=0x7ffc0000 [ 316.197678][ T29] audit: type=1326 audit(1749364203.795:15846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14144 comm="syz.2.3410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6be149e929 code=0x7ffc0000 [ 316.223845][ T29] audit: type=1326 audit(1749364203.795:15847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14144 comm="syz.2.3410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6be149e929 code=0x7ffc0000 [ 316.249518][ T29] audit: type=1326 audit(1749364203.795:15848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14144 comm="syz.2.3410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=266 compat=0 ip=0x7f6be149e929 code=0x7ffc0000 [ 316.281988][ T29] audit: type=1326 audit(1749364203.795:15849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14144 comm="syz.2.3410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6be149e929 code=0x7ffc0000 [ 316.309822][ T29] audit: type=1326 audit(1749364203.795:15850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14144 comm="syz.2.3410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6be149d290 code=0x7ffc0000 [ 316.334912][ T29] audit: type=1326 audit(1749364203.795:15851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14144 comm="syz.2.3410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f6be14a0157 code=0x7ffc0000 [ 316.361500][T14145] loop2: detected capacity change from 0 to 512 [ 316.397456][T14163] bridge0: port 2(bridge_slave_1) entered disabled state [ 316.406366][T14163] bridge0: port 1(bridge_slave_0) entered disabled state [ 316.463563][T14163] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 316.474081][T14163] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 316.510128][T14145] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.3410: Failed to acquire dquot type 1 [ 316.533868][T14163] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.545219][T14163] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.555561][T14163] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.565984][T14163] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.576505][T14145] EXT4-fs (loop2): 1 truncate cleaned up [ 316.584330][T14145] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 316.598353][T14145] ext4 filesystem being mounted at /116/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 316.614984][T14179] tc_dump_action: action bad kind [ 316.616653][T14177] hub 9-0:1.0: USB hub found [ 316.647290][T14145] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 316.663225][T14157] bio_check_eod: 446 callbacks suppressed [ 316.663245][T14157] syz.1.3414: attempt to access beyond end of device [ 316.663245][T14157] loop1: rw=2049, sector=129, nr_sectors = 8 limit=128 [ 316.685962][T14177] hub 9-0:1.0: 8 ports detected [ 316.718297][T14157] syz.1.3414: attempt to access beyond end of device [ 316.718297][T14157] loop1: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 316.771439][T14157] syz.1.3414: attempt to access beyond end of device [ 316.771439][T14157] loop1: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 316.821276][T14157] syz.1.3414: attempt to access beyond end of device [ 316.821276][T14157] loop1: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 316.838477][T14157] syz.1.3414: attempt to access beyond end of device [ 316.838477][T14157] loop1: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 316.843021][T14187] loop0: detected capacity change from 0 to 2048 [ 316.854213][T14157] syz.1.3414: attempt to access beyond end of device [ 316.854213][T14157] loop1: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 316.877001][T14157] syz.1.3414: attempt to access beyond end of device [ 316.877001][T14157] loop1: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 316.917545][T14157] syz.1.3414: attempt to access beyond end of device [ 316.917545][T14157] loop1: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 316.943919][T14157] syz.1.3414: attempt to access beyond end of device [ 316.943919][T14157] loop1: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 316.961042][T14157] syz.1.3414: attempt to access beyond end of device [ 316.961042][T14157] loop1: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 317.007116][T14189] netlink: 248 bytes leftover after parsing attributes in process `syz.3.3421'. [ 317.060033][T14187] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 317.213478][T14194] loop2: detected capacity change from 0 to 1024 [ 317.280408][T14194] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 317.294913][T12549] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 317.398426][T14203] loop1: detected capacity change from 0 to 128 [ 317.402886][T14200] netlink: 'syz.0.3426': attribute type 7 has an invalid length. [ 317.414292][T14200] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3426'. [ 317.623436][T14214] netlink: 'syz.3.3432': attribute type 7 has an invalid length. [ 317.636483][T14214] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3432'. [ 317.680978][T14218] loop3: detected capacity change from 0 to 128 [ 317.694486][T14218] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535) [ 317.729325][T14218] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none. [ 317.740645][T14216] hub 9-0:1.0: USB hub found [ 317.748572][T14216] hub 9-0:1.0: 8 ports detected [ 317.811932][T14226] loop0: detected capacity change from 0 to 128 [ 317.819599][T14226] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535) [ 317.889465][T14230] netlink: 'syz.3.3434': attribute type 10 has an invalid length. [ 317.949189][T14226] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none. [ 317.969599][T14225] loop1: detected capacity change from 0 to 512 [ 318.003466][T14226] netlink: 'syz.0.3436': attribute type 1 has an invalid length. [ 318.003801][T12258] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 318.029998][T14225] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 318.055574][T14239] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3441'. [ 318.086396][T14225] EXT4-fs error (device loop1): ext4_get_branch:178: inode #11: block 4294967295: comm syz.1.3435: invalid block [ 318.102016][T14226] 8021q: adding VLAN 0 to HW filter on device bond3 [ 318.120760][T14243] loop3: detected capacity change from 0 to 1024 [ 318.125929][T14225] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.3435: invalid indirect mapped block 4294967295 (level 1) [ 318.132655][T14243] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 318.171978][T14240] 8021q: adding VLAN 0 to HW filter on device bond3 [ 318.184169][T14225] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.3435: invalid indirect mapped block 4294967295 (level 1) [ 318.208982][T14240] bond3: (slave vti0): The slave device specified does not support setting the MAC address [ 318.233307][T14240] bond3: (slave vti0): Error -95 calling set_mac_address [ 318.244693][T14225] EXT4-fs (loop1): 2 truncates cleaned up [ 318.252192][T14225] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 318.273419][T14225] EXT4-fs (loop1): shut down requested (2) [ 318.338910][T14225] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 318.347822][T14225] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 318.456929][T13155] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 318.467030][T12549] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 318.527368][T14254] loop0: detected capacity change from 0 to 1024 [ 318.538530][T14254] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 318.549778][T14254] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 318.607987][T14255] loop2: detected capacity change from 0 to 128 [ 318.628421][T14254] JBD2: no valid journal superblock found [ 318.635926][T14254] EXT4-fs (loop0): Could not load journal inode [ 318.653678][T14258] loop3: detected capacity change from 0 to 512 [ 318.727977][T14259] netlink: 248 bytes leftover after parsing attributes in process `syz.1.3444'. [ 318.772059][T14258] EXT4-fs: Ignoring removed bh option [ 318.893970][T14261] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3446'. [ 318.932767][T14258] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 318.945536][T14258] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 319.036400][T14263] loop0: detected capacity change from 0 to 128 [ 319.150877][T14263] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535) [ 319.202671][T14258] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 319.224739][T14263] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none. [ 319.261093][T14263] netlink: 'syz.0.3447': attribute type 1 has an invalid length. [ 319.292758][T14258] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 319.309343][T14269] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 319.331283][T14263] 8021q: adding VLAN 0 to HW filter on device bond4 [ 319.489927][T14274] loop2: detected capacity change from 0 to 128 [ 319.500459][T14274] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535) [ 319.513033][T14271] 8021q: adding VLAN 0 to HW filter on device bond4 [ 319.524445][T14269] loop4: detected capacity change from 0 to 2048 [ 319.535017][ T3517] udevd[3517]: incorrect ext4 checksum on /dev/loop2 [ 319.542824][T14258] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 319.543063][T14274] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none. [ 319.579481][T14274] netlink: 'syz.2.3450': attribute type 1 has an invalid length. [ 319.580951][T14271] bond4: (slave vti0): The slave device specified does not support setting the MAC address [ 319.613799][T14279] loop1: detected capacity change from 0 to 128 [ 319.651811][T14279] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535) [ 319.714801][T14279] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none. [ 319.731572][T14271] bond4: (slave vti0): Error -95 calling set_mac_address [ 319.752868][T14282] hub 9-0:1.0: USB hub found [ 319.757866][T14282] hub 9-0:1.0: 8 ports detected [ 319.765835][T14274] 8021q: adding VLAN 0 to HW filter on device bond1 [ 319.799597][T14280] 8021q: adding VLAN 0 to HW filter on device bond1 [ 319.807622][T14285] netlink: 'syz.1.3451': attribute type 10 has an invalid length. [ 319.824419][T12549] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 319.851925][T14280] bond1: (slave vti0): The slave device specified does not support setting the MAC address [ 319.893339][T14280] bond1: (slave vti0): Error -95 calling set_mac_address [ 319.975028][T14289] loop4: detected capacity change from 0 to 1024 [ 320.030923][T12095] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 320.042031][T14289] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 320.061155][T14285] 8021q: adding VLAN 0 to HW filter on device team0 [ 320.130135][T14285] bond0: (slave team0): Enslaving as an active interface with an up link [ 320.154259][T14291] netlink: 'syz.2.3455': attribute type 7 has an invalid length. [ 320.163193][T14291] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3455'. [ 320.274757][T13155] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 320.403374][T14306] loop4: detected capacity change from 0 to 128 [ 320.452439][T12258] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 320.545412][T14311] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3460'. [ 320.565912][T14312] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 320.590957][T14312] loop2: detected capacity change from 0 to 2048 [ 320.674939][T14318] loop2: detected capacity change from 0 to 128 [ 320.682002][T14313] netlink: 'syz.3.3461': attribute type 10 has an invalid length. [ 320.690003][T14313] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3461'. [ 320.690183][T14304] loop0: detected capacity change from 0 to 8192 [ 320.801642][T14323] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 320.863633][T14325] hub 9-0:1.0: USB hub found [ 320.868903][T14325] hub 9-0:1.0: 8 ports detected [ 320.910380][T14330] loop4: detected capacity change from 0 to 128 [ 320.926189][T14330] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535) [ 320.949183][T14330] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none. [ 320.956167][T14328] loop3: detected capacity change from 0 to 1024 [ 320.975337][T14330] netlink: 'syz.4.3468': attribute type 10 has an invalid length. [ 320.981357][T14328] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 320.984495][T14330] 8021q: adding VLAN 0 to HW filter on device team0 [ 320.996248][T14328] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 321.018033][T14330] bond0: (slave team0): Enslaving as an active interface with an up link [ 321.028235][T14328] JBD2: no valid journal superblock found [ 321.035533][T14328] EXT4-fs (loop3): Could not load journal inode [ 321.088473][T12865] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 321.180396][T14337] loop4: detected capacity change from 0 to 512 [ 321.190316][T14337] EXT4-fs: Ignoring removed bh option [ 321.201847][T14337] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 321.211860][T14337] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 321.245968][T14339] loop1: detected capacity change from 0 to 1024 [ 321.259943][T14337] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 321.270348][T14339] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 321.281480][T14339] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 321.305663][T14337] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 321.316348][T14339] JBD2: no valid journal superblock found [ 321.322260][T14339] EXT4-fs (loop1): Could not load journal inode [ 321.323347][T14344] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 321.366286][T14337] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 321.386729][T14346] loop1: detected capacity change from 0 to 128 [ 321.410011][T14344] loop2: detected capacity change from 0 to 2048 [ 321.473579][T12865] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 321.544262][T14350] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3475'. [ 321.574775][T14351] loop4: detected capacity change from 0 to 1024 [ 321.671512][T14346] bio_check_eod: 510 callbacks suppressed [ 321.671531][T14346] syz.1.3475: attempt to access beyond end of device [ 321.671531][T14346] loop1: rw=2049, sector=129, nr_sectors = 8 limit=128 [ 321.696901][T14346] syz.1.3475: attempt to access beyond end of device [ 321.696901][T14346] loop1: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 321.720100][T14346] syz.1.3475: attempt to access beyond end of device [ 321.720100][T14346] loop1: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 321.741805][T14346] syz.1.3475: attempt to access beyond end of device [ 321.741805][T14346] loop1: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 321.761389][T14346] syz.1.3475: attempt to access beyond end of device [ 321.761389][T14346] loop1: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 321.776784][T14346] syz.1.3475: attempt to access beyond end of device [ 321.776784][T14346] loop1: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 321.798780][T14346] syz.1.3475: attempt to access beyond end of device [ 321.798780][T14346] loop1: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 321.815157][T14359] netlink: 'syz.0.3479': attribute type 7 has an invalid length. [ 321.823094][T14359] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3479'. [ 321.869534][T14346] syz.1.3475: attempt to access beyond end of device [ 321.869534][T14346] loop1: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 321.885060][T14346] syz.1.3475: attempt to access beyond end of device [ 321.885060][T14346] loop1: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 321.900597][T14346] syz.1.3475: attempt to access beyond end of device [ 321.900597][T14346] loop1: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 322.002864][T14368] loop4: detected capacity change from 0 to 128 [ 322.098837][T14375] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3485'. [ 322.114136][T14372] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 322.189906][T14378] loop2: detected capacity change from 0 to 1024 [ 322.206655][T14381] loop0: detected capacity change from 0 to 512 [ 322.216922][T14382] SELinux: syz.1.3488 (14382) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 322.230751][T14378] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 322.239193][T14381] EXT4-fs: Ignoring removed nobh option [ 322.244356][T14378] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 322.279922][T14378] JBD2: no valid journal superblock found [ 322.285837][T14378] EXT4-fs (loop2): Could not load journal inode [ 322.335940][T14381] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #16: comm syz.0.3487: corrupted inode contents [ 322.358398][T14381] EXT4-fs (loop0): Remounting filesystem read-only [ 322.365558][ T29] kauditd_printk_skb: 134 callbacks suppressed [ 322.365575][ T29] audit: type=1326 audit(1749364210.115:15984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14388 comm="syz.4.3490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d2f7ae929 code=0x7ffc0000 [ 322.375401][T14389] tc_dump_action: action bad kind [ 322.396680][ T29] audit: type=1326 audit(1749364210.115:15985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14388 comm="syz.4.3490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d2f7ae929 code=0x7ffc0000 [ 322.402792][T14381] EXT4-fs (loop0): 1 truncate cleaned up [ 322.428816][ T29] audit: type=1326 audit(1749364210.115:15986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14388 comm="syz.4.3490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1d2f7ae929 code=0x7ffc0000 [ 322.463400][ T29] audit: type=1326 audit(1749364210.115:15987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14388 comm="syz.4.3490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d2f7ae929 code=0x7ffc0000 [ 322.463588][ T1775] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 322.491453][ T29] audit: type=1326 audit(1749364210.125:15988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14388 comm="syz.4.3490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d2f7ae929 code=0x7ffc0000 [ 322.491495][ T29] audit: type=1326 audit(1749364210.125:15989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14388 comm="syz.4.3490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1d2f7ae929 code=0x7ffc0000 [ 322.502251][ T1775] Quota error (device loop0): write_blk: dquota write failed [ 322.526723][ T29] audit: type=1326 audit(1749364210.125:15990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14388 comm="syz.4.3490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d2f7ae929 code=0x7ffc0000 [ 322.551326][ T1775] Quota error (device loop0): remove_free_dqentry: Can't write block (5) with free entries [ 322.559127][ T29] audit: type=1326 audit(1749364210.125:15991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14388 comm="syz.4.3490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d2f7ae929 code=0x7ffc0000 [ 322.584734][ T1775] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 322.619898][T14381] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 322.682216][T14381] ext4 filesystem being mounted at /86/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 322.715895][T14394] loop1: detected capacity change from 0 to 128 [ 322.780673][T14397] loop4: detected capacity change from 0 to 1024 [ 322.790672][T14381] 9pnet_fd: Insufficient options for proto=fd [ 322.817954][T14397] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 322.823303][ T1775] EXT4-fs (loop0): Quota write (off=8, len=24) cancelled because transaction is not started [ 322.829222][T14397] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 322.859099][T14400] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3492'. [ 322.875098][T12549] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 322.922981][T14397] JBD2: no valid journal superblock found [ 322.928927][T14397] EXT4-fs (loop4): Could not load journal inode [ 323.002368][T14411] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3498'. [ 323.060421][T14413] netlink: 'syz.4.3500': attribute type 7 has an invalid length. [ 323.212397][T14423] loop1: detected capacity change from 0 to 1024 [ 323.405389][T14433] hub 9-0:1.0: USB hub found [ 323.412124][T14433] hub 9-0:1.0: 8 ports detected [ 323.426629][T14437] loop4: detected capacity change from 0 to 512 [ 323.435242][T14437] EXT4-fs: Ignoring removed nobh option [ 323.473600][T14437] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #16: comm syz.4.3510: corrupted inode contents [ 323.488722][T14439] loop3: detected capacity change from 0 to 2048 [ 323.497791][T14443] netlink: 'syz.2.3512': attribute type 7 has an invalid length. [ 323.507309][T14437] EXT4-fs (loop4): Remounting filesystem read-only [ 323.515692][T14437] EXT4-fs (loop4): 1 truncate cleaned up [ 323.523298][T14437] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 323.538893][T14437] ext4 filesystem being mounted at /83/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 323.538962][ T5335] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 323.538987][ T5335] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 323.583396][T14437] 9pnet_fd: Insufficient options for proto=fd [ 323.607515][ T5335] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started [ 323.621035][T14439] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 323.625061][T12865] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 323.649434][T14447] netlink: 'syz.2.3513': attribute type 1 has an invalid length. [ 323.663161][T12258] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 323.665770][T14447] 8021q: adding VLAN 0 to HW filter on device bond2 [ 323.716768][T14447] 8021q: adding VLAN 0 to HW filter on device bond2 [ 323.724740][T14447] bond2: (slave vti0): The slave device specified does not support setting the MAC address [ 323.737455][T14447] bond2: (slave vti0): Error -95 calling set_mac_address [ 323.781569][T14456] capability: warning: `syz.4.3516' uses 32-bit capabilities (legacy support in use) [ 323.807530][T14456] FAULT_INJECTION: forcing a failure. [ 323.807530][T14456] name failslab, interval 1, probability 0, space 0, times 0 [ 323.827830][T14456] CPU: 1 UID: 0 PID: 14456 Comm: syz.4.3516 Not tainted 6.15.0-syzkaller-13743-g8630c59e9936 #0 PREEMPT(voluntary) [ 323.827862][T14456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 323.827876][T14456] Call Trace: [ 323.827952][T14456] [ 323.827962][T14456] __dump_stack+0x1d/0x30 [ 323.827990][T14456] dump_stack_lvl+0xe8/0x140 [ 323.828021][T14456] dump_stack+0x15/0x1b [ 323.828043][T14456] should_fail_ex+0x265/0x280 [ 323.828070][T14456] should_failslab+0x8c/0xb0 [ 323.828106][T14456] kmem_cache_alloc_noprof+0x50/0x310 [ 323.828220][T14456] ? audit_log_start+0x365/0x6c0 [ 323.828265][T14456] audit_log_start+0x365/0x6c0 [ 323.828308][T14456] audit_seccomp+0x48/0x100 [ 323.828371][T14456] ? __seccomp_filter+0x68c/0x10d0 [ 323.828404][T14456] __seccomp_filter+0x69d/0x10d0 [ 323.828442][T14456] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 323.828466][T14456] ? vfs_write+0x75e/0x8e0 [ 323.828665][T14456] ? __rcu_read_unlock+0x4f/0x70 [ 323.828692][T14456] ? __fget_files+0x184/0x1c0 [ 323.828719][T14456] __secure_computing+0x82/0x150 [ 323.828743][T14456] syscall_trace_enter+0xcf/0x1e0 [ 323.828781][T14456] do_syscall_64+0xac/0x200 [ 323.828804][T14456] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 323.828844][T14456] ? clear_bhb_loop+0x40/0x90 [ 323.828869][T14456] ? clear_bhb_loop+0x40/0x90 [ 323.828972][T14456] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 323.829030][T14456] RIP: 0033:0x7f1d2f7ae929 [ 323.829045][T14456] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 323.829067][T14456] RSP: 002b:00007f1d2de17038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 323.829093][T14456] RAX: ffffffffffffffda RBX: 00007f1d2f9d5fa0 RCX: 00007f1d2f7ae929 [ 323.829110][T14456] RDX: 0000000000000048 RSI: 00002000000017c0 RDI: 0000000000000005 [ 323.829178][T14456] RBP: 00007f1d2de17090 R08: 0000000000000000 R09: 0000000000000000 [ 323.829192][T14456] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 323.829209][T14456] R13: 0000000000000000 R14: 00007f1d2f9d5fa0 R15: 00007ffc8ce88cc8 [ 323.829235][T14456] [ 324.138114][T14461] loop2: detected capacity change from 0 to 128 [ 324.178352][T14461] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535) [ 324.209033][T14454] netlink: 'syz.3.3517': attribute type 10 has an invalid length. [ 324.214215][T14461] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none. [ 324.217820][T14454] __nla_validate_parse: 2 callbacks suppressed [ 324.217837][T14454] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3517'. [ 324.259547][T14468] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3522'. [ 324.311140][T14473] loop1: detected capacity change from 0 to 128 [ 324.448445][T12095] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 324.531151][T14485] loop2: detected capacity change from 0 to 1024 [ 324.547491][T14485] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 324.558736][T14485] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 324.586338][T14485] JBD2: no valid journal superblock found [ 324.594228][T14485] EXT4-fs (loop2): Could not load journal inode [ 324.606014][T14489] loop3: detected capacity change from 0 to 128 [ 324.765575][T14497] loop4: detected capacity change from 0 to 1024 [ 324.780368][T14497] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 324.792242][T14497] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 324.814012][T14499] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 324.843571][T14499] loop2: detected capacity change from 0 to 2048 [ 324.870189][T14497] JBD2: no valid journal superblock found [ 324.877656][T14497] EXT4-fs (loop4): Could not load journal inode [ 324.936178][T14505] tc_dump_action: action bad kind [ 325.023560][T14512] hub 9-0:1.0: USB hub found [ 325.035949][T14512] hub 9-0:1.0: 8 ports detected [ 325.078335][T14517] validate_nla: 2 callbacks suppressed [ 325.078354][T14517] netlink: 'syz.2.3541': attribute type 7 has an invalid length. [ 325.092267][T14517] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3541'. [ 325.194410][T14524] hub 9-0:1.0: USB hub found [ 325.207323][T14524] hub 9-0:1.0: 8 ports detected [ 325.252165][T14526] netlink: 'syz.3.3545': attribute type 7 has an invalid length. [ 325.261703][T14526] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3545'. [ 325.264769][T14530] FAULT_INJECTION: forcing a failure. [ 325.264769][T14530] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 325.286530][T14530] CPU: 0 UID: 0 PID: 14530 Comm: syz.0.3547 Not tainted 6.15.0-syzkaller-13743-g8630c59e9936 #0 PREEMPT(voluntary) [ 325.286641][T14530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 325.286659][T14530] Call Trace: [ 325.286667][T14530] [ 325.286677][T14530] __dump_stack+0x1d/0x30 [ 325.286736][T14530] dump_stack_lvl+0xe8/0x140 [ 325.286800][T14530] dump_stack+0x15/0x1b [ 325.286822][T14530] should_fail_ex+0x265/0x280 [ 325.286848][T14530] should_fail+0xb/0x20 [ 325.286870][T14530] should_fail_usercopy+0x1a/0x20 [ 325.286983][T14530] _copy_from_user+0x1c/0xb0 [ 325.287017][T14530] input_event_from_user+0x5f/0x160 [ 325.287179][T14530] evdev_write+0x1b1/0x290 [ 325.287211][T14530] ? __pfx_evdev_write+0x10/0x10 [ 325.287241][T14530] vfs_write+0x266/0x8e0 [ 325.287268][T14530] ? __rcu_read_unlock+0x4f/0x70 [ 325.287315][T14530] ? __fget_files+0x184/0x1c0 [ 325.287349][T14530] ksys_write+0xda/0x1a0 [ 325.287378][T14530] __x64_sys_write+0x40/0x50 [ 325.287405][T14530] x64_sys_call+0x2cdd/0x2fb0 [ 325.287442][T14530] do_syscall_64+0xd2/0x200 [ 325.287471][T14530] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 325.287553][T14530] ? clear_bhb_loop+0x40/0x90 [ 325.287581][T14530] ? clear_bhb_loop+0x40/0x90 [ 325.287610][T14530] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 325.287675][T14530] RIP: 0033:0x7f7cca85e929 [ 325.287694][T14530] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 325.287718][T14530] RSP: 002b:00007f7cc8ec7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 325.287815][T14530] RAX: ffffffffffffffda RBX: 00007f7ccaa85fa0 RCX: 00007f7cca85e929 [ 325.287832][T14530] RDX: 0000000000002250 RSI: 0000200000000040 RDI: 0000000000000004 [ 325.287848][T14530] RBP: 00007f7cc8ec7090 R08: 0000000000000000 R09: 0000000000000000 [ 325.287864][T14530] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 325.287880][T14530] R13: 0000000000000000 R14: 00007f7ccaa85fa0 R15: 00007ffd69ac8878 [ 325.287904][T14530] [ 325.545396][T14534] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 325.581380][T14534] loop1: detected capacity change from 0 to 2048 [ 325.700060][T14541] loop4: detected capacity change from 0 to 1024 [ 325.726424][T14541] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 325.740060][T14541] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 325.756090][T14541] JBD2: no valid journal superblock found [ 325.763547][T14541] EXT4-fs (loop4): Could not load journal inode [ 325.850808][T14549] loop2: detected capacity change from 0 to 512 [ 325.875423][T14548] hub 9-0:1.0: USB hub found [ 325.883061][T14549] EXT4-fs: Ignoring removed bh option [ 325.902695][T14549] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 325.908864][T14548] hub 9-0:1.0: 8 ports detected [ 325.914778][T14549] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 326.042048][T14549] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 326.112211][T14564] SELinux: syz.4.3560 (14564) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 326.140828][T14566] loop1: detected capacity change from 0 to 512 [ 326.171966][T14570] loop0: detected capacity change from 0 to 1024 [ 326.180396][T14570] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 326.198761][T14549] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 326.210951][T14566] EXT4-fs: Ignoring removed nobh option [ 326.218561][T14570] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 326.244524][T14575] loop4: detected capacity change from 0 to 512 [ 326.255320][T14549] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 326.275280][T14570] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c840e02c, mo2=0000] [ 326.285469][T14575] EXT4-fs: Ignoring removed bh option [ 326.295241][T14566] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #16: comm syz.1.3558: corrupted inode contents [ 326.315592][T14575] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 326.325502][T14575] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 326.338292][T14570] EXT4-fs error (device loop0): ext4_map_blocks:780: inode #3: block 2: comm syz.0.3562: lblock 2 mapped to illegal pblock 2 (length 1) [ 326.354572][T14566] EXT4-fs (loop1): Remounting filesystem read-only [ 326.368672][T14570] EXT4-fs (loop0): Remounting filesystem read-only [ 326.368793][T14575] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 326.388788][T14570] EXT4-fs (loop0): 1 orphan inode deleted [ 326.396081][T14570] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 326.418859][T14566] EXT4-fs (loop1): 1 truncate cleaned up [ 326.425231][T14570] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 326.435897][T14566] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 326.451312][ T160] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 326.451357][T14566] ext4 filesystem being mounted at /79/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 326.463241][ T160] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 326.480250][T14575] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 326.513535][T14566] 9pnet_fd: Insufficient options for proto=fd [ 326.524932][T14575] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 326.552314][T13155] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 326.560079][ T160] EXT4-fs (loop1): Quota write (off=8, len=24) cancelled because transaction is not started [ 326.670372][T12865] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 326.732582][T14587] loop1: detected capacity change from 0 to 1024 [ 326.766621][T14587] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 326.813402][T14587] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 326.839193][T14587] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c840e02c, mo2=0000] [ 326.861283][T14587] EXT4-fs error (device loop1): ext4_map_blocks:780: inode #3: block 2: comm syz.1.3566: lblock 2 mapped to illegal pblock 2 (length 1) [ 326.899060][T14587] EXT4-fs (loop1): Remounting filesystem read-only [ 326.916388][T14587] EXT4-fs (loop1): 1 orphan inode deleted [ 326.941355][T14587] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 326.984677][T14587] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 327.005116][T14609] netlink: 'syz.4.3576': attribute type 1 has an invalid length. [ 327.019193][T14604] netlink: 'syz.0.3574': attribute type 10 has an invalid length. [ 327.030006][T14604] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3574'. [ 327.058765][T14609] 8021q: adding VLAN 0 to HW filter on device bond2 [ 327.073145][T14612] 8021q: adding VLAN 0 to HW filter on device bond2 [ 327.089369][T14612] bond2: (slave vti0): The slave device specified does not support setting the MAC address [ 327.113677][T14612] bond2: (slave vti0): Error -95 calling set_mac_address [ 327.122061][T14614] loop1: detected capacity change from 0 to 512 [ 327.124742][T12095] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 327.129990][T14614] EXT4-fs: Ignoring removed nobh option [ 327.188126][T14620] hub 9-0:1.0: USB hub found [ 327.192795][T14614] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #16: comm syz.1.3577: corrupted inode contents [ 327.194690][T14620] hub 9-0:1.0: 8 ports detected [ 327.230732][T14614] EXT4-fs (loop1): Remounting filesystem read-only [ 327.243499][T14614] EXT4-fs (loop1): 1 truncate cleaned up [ 327.258363][ T12] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 327.269612][ T12] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 327.285451][T14626] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 327.297433][ T12] EXT4-fs (loop1): Quota write (off=8, len=24) cancelled because transaction is not started [ 327.299433][T14614] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 327.324435][T14614] ext4 filesystem being mounted at /81/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 327.352094][T14626] loop4: detected capacity change from 0 to 2048 [ 327.368327][ T29] kauditd_printk_skb: 253 callbacks suppressed [ 327.368347][ T29] audit: type=1326 audit(1749364215.115:16217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14613 comm="syz.1.3577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f500fc0d290 code=0x7ffc0000 [ 327.369915][T14614] 9pnet_fd: Insufficient options for proto=fd [ 327.379151][ T29] audit: type=1326 audit(1749364215.125:16218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14613 comm="syz.1.3577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f500fc0e929 code=0x7ffc0000 [ 327.446305][ T29] audit: type=1326 audit(1749364215.125:16219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14613 comm="syz.1.3577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f500fc0e929 code=0x7ffc0000 [ 327.519225][T13155] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 327.546267][T14635] netlink: 'syz.4.3587': attribute type 7 has an invalid length. [ 327.555884][T14635] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3587'. [ 327.556579][T14637] loop0: detected capacity change from 0 to 1024 [ 327.567144][ T29] audit: type=1326 audit(1749364215.295:16220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14636 comm="syz.0.3584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7cca85e929 code=0x7ffc0000 [ 327.600435][ T29] audit: type=1326 audit(1749364215.295:16221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14636 comm="syz.0.3584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7cca85e929 code=0x7ffc0000 [ 327.626282][ T29] audit: type=1326 audit(1749364215.295:16222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14636 comm="syz.0.3584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f7cca85e929 code=0x7ffc0000 [ 327.654044][ T29] audit: type=1326 audit(1749364215.295:16223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14636 comm="syz.0.3584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7cca85e929 code=0x7ffc0000 [ 327.656540][T14637] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 327.680875][ T29] audit: type=1326 audit(1749364215.295:16224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14636 comm="syz.0.3584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7cca85e929 code=0x7ffc0000 [ 327.695616][T14637] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 327.720240][ T29] audit: type=1326 audit(1749364215.295:16225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14636 comm="syz.0.3584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=216 compat=0 ip=0x7f7cca85e929 code=0x7ffc0000 [ 327.763029][ T29] audit: type=1326 audit(1749364215.295:16226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14636 comm="syz.0.3584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7cca85e929 code=0x7ffc0000 [ 327.850577][T14637] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c840e02c, mo2=0000] [ 327.876400][T14647] loop2: detected capacity change from 0 to 128 [ 327.884678][T14643] loop3: detected capacity change from 0 to 128 [ 327.943558][T14637] EXT4-fs error (device loop0): ext4_map_blocks:780: inode #3: block 2: comm syz.0.3584: lblock 2 mapped to illegal pblock 2 (length 1) [ 327.962955][T14637] EXT4-fs (loop0): Remounting filesystem read-only [ 327.973120][T14637] EXT4-fs (loop0): 1 orphan inode deleted [ 327.980369][T14637] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 327.996825][T14651] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3590'. [ 328.011779][T14637] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 328.032464][T14653] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3588'. [ 328.151968][T14643] bio_check_eod: 560 callbacks suppressed [ 328.151988][T14643] syz.3.3588: attempt to access beyond end of device [ 328.151988][T14643] loop3: rw=2049, sector=129, nr_sectors = 8 limit=128 [ 328.188334][T14643] syz.3.3588: attempt to access beyond end of device [ 328.188334][T14643] loop3: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 328.237310][T14643] syz.3.3588: attempt to access beyond end of device [ 328.237310][T14643] loop3: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 328.249213][T14647] syz.2.3590: attempt to access beyond end of device [ 328.249213][T14647] loop2: rw=2049, sector=129, nr_sectors = 8 limit=128 [ 328.263350][T14663] loop4: detected capacity change from 0 to 128 [ 328.283900][T14643] syz.3.3588: attempt to access beyond end of device [ 328.283900][T14643] loop3: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 328.285822][T14664] loop0: detected capacity change from 0 to 512 [ 328.297882][T14647] syz.2.3590: attempt to access beyond end of device [ 328.297882][T14647] loop2: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 328.314630][T14664] EXT4-fs: Ignoring removed bh option [ 328.324751][T14664] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 328.334065][T14664] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 328.342522][T14643] syz.3.3588: attempt to access beyond end of device [ 328.342522][T14643] loop3: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 328.364932][T14647] syz.2.3590: attempt to access beyond end of device [ 328.364932][T14647] loop2: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 328.379311][T14643] syz.3.3588: attempt to access beyond end of device [ 328.379311][T14643] loop3: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 328.381373][T14664] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended [ 328.409297][T14647] syz.2.3590: attempt to access beyond end of device [ 328.409297][T14647] loop2: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 328.434805][T14664] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 328.445812][T14664] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 328.537216][T12549] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 328.600731][T14674] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 328.625043][T14674] loop0: detected capacity change from 0 to 2048 [ 328.802038][T14688] loop0: detected capacity change from 0 to 1024 [ 328.805738][T14690] loop4: detected capacity change from 0 to 512 [ 328.820654][T14692] loop1: detected capacity change from 0 to 512 [ 328.820796][T14694] SELinux: syz.3.3606 (14694) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 328.830972][T14692] EXT4-fs: Ignoring removed bh option [ 328.851044][T14688] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 328.853442][T14690] EXT4-fs: Ignoring removed nobh option [ 328.863738][T14688] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 328.890596][T14692] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 328.901481][T14692] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 328.914748][T14688] JBD2: no valid journal superblock found [ 328.920862][T14688] EXT4-fs (loop0): Could not load journal inode [ 328.934269][T14690] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #16: comm syz.4.3605: corrupted inode contents [ 328.935112][T14692] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 328.966855][T14690] EXT4-fs (loop4): Remounting filesystem read-only [ 328.968635][T14699] loop3: detected capacity change from 0 to 1024 [ 328.989943][T14699] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 329.001879][T14699] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 329.023143][T14690] EXT4-fs (loop4): 1 truncate cleaned up [ 329.033289][T14699] JBD2: no valid journal superblock found [ 329.040043][T14699] EXT4-fs (loop3): Could not load journal inode [ 329.050354][ T1775] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 329.050476][T14703] netlink: 'syz.0.3610': attribute type 1 has an invalid length. [ 329.061651][ T1775] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 329.070937][T14690] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 329.084783][T14692] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 329.098127][ T1775] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started [ 329.111740][T14703] 8021q: adding VLAN 0 to HW filter on device bond5 [ 329.121822][T14690] ext4 filesystem being mounted at /109/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 329.124789][T14692] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 329.156040][T14703] 8021q: adding VLAN 0 to HW filter on device bond5 [ 329.164320][T14703] bond5: (slave vti0): The slave device specified does not support setting the MAC address [ 329.193305][T14703] bond5: (slave vti0): Error -95 calling set_mac_address [ 329.208830][T14707] loop3: detected capacity change from 0 to 1024 [ 329.248648][T13155] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 329.268702][T14690] 9pnet_fd: Insufficient options for proto=fd [ 329.293934][T12865] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 329.349137][T14712] SELinux: syz.4.3613 (14712) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 329.402062][T14714] loop1: detected capacity change from 0 to 128 [ 329.413133][T14718] loop0: detected capacity change from 0 to 1024 [ 329.422270][T14718] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 329.433512][T14718] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 329.448448][T14718] JBD2: no valid journal superblock found [ 329.454257][T14718] EXT4-fs (loop0): Could not load journal inode [ 329.556870][T14724] netlink: 'syz.2.3619': attribute type 7 has an invalid length. [ 329.566215][T14724] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3619'. [ 329.589169][T14732] loop1: detected capacity change from 0 to 128 [ 329.598488][T14730] loop0: detected capacity change from 0 to 512 [ 329.605537][T14728] loop4: detected capacity change from 0 to 1024 [ 329.614889][T14730] EXT4-fs: Ignoring removed bh option [ 329.623039][T14728] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 329.634995][T14728] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 329.650204][T14730] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 329.661367][T14730] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 329.670906][T14728] JBD2: no valid journal superblock found [ 329.678139][T14728] EXT4-fs (loop4): Could not load journal inode [ 329.707531][T14730] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended [ 329.726568][T14730] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 329.735402][T14730] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 329.758762][T14738] hub 9-0:1.0: USB hub found [ 329.763554][T14738] hub 9-0:1.0: 8 ports detected [ 329.799589][T12549] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 329.938883][T14745] loop4: detected capacity change from 0 to 128 [ 330.014684][T14749] loop2: detected capacity change from 0 to 1024 [ 330.023193][T14751] loop1: detected capacity change from 0 to 1024 [ 330.046567][T14751] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 330.059332][T14751] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 330.082804][T14751] JBD2: no valid journal superblock found [ 330.088865][T14751] EXT4-fs (loop1): Could not load journal inode [ 330.204553][T14760] loop3: detected capacity change from 0 to 1024 [ 330.219671][T14760] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 330.233599][T14760] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 330.441328][T14760] JBD2: no valid journal superblock found [ 330.450767][T14760] EXT4-fs (loop3): Could not load journal inode [ 330.770959][T14770] loop1: detected capacity change from 0 to 512 [ 330.782968][T14770] EXT4-fs: Ignoring removed bh option [ 330.794059][T14770] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 330.803880][T14770] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 330.838676][T14770] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 330.851471][T14770] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 330.861738][T14770] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 330.876811][T14775] netlink: 'syz.3.3638': attribute type 7 has an invalid length. [ 330.885924][T14775] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3638'. [ 330.910927][T14778] loop2: detected capacity change from 0 to 128 [ 330.923655][T14776] loop4: detected capacity change from 0 to 512 [ 330.967146][T14776] EXT4-fs: Ignoring removed bh option [ 330.997811][T14776] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 331.007949][T14776] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 331.027735][T13155] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 331.064316][T14776] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 331.311238][T14776] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 331.589142][T14795] loop1: detected capacity change from 0 to 512 [ 331.596419][T14797] loop3: detected capacity change from 0 to 1024 [ 331.682363][T14795] EXT4-fs (loop1): 1 orphan inode deleted [ 331.712104][ T12] EXT4-fs error (device loop1): ext4_release_dquot:6969: comm kworker/u8:0: Failed to release dquot type 1 [ 331.746958][T14795] ext4 filesystem being mounted at /94/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 331.907490][T14812] loop0: detected capacity change from 0 to 512 [ 331.932690][T14812] EXT4-fs: Ignoring removed bh option [ 331.951832][T14812] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 331.962134][T14812] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 332.009038][T14812] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended [ 332.028888][T14812] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 332.107092][T14815] loop0: detected capacity change from 0 to 512 [ 332.116709][T14815] EXT4-fs: Ignoring removed bh option [ 332.136592][T14815] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 332.150044][T14815] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 332.203557][T14815] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended [ 332.236715][T14815] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 332.282383][T14819] netlink: 'syz.1.3651': attribute type 7 has an invalid length. [ 332.291777][T14819] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3651'. [ 332.469599][ T29] kauditd_printk_skb: 59 callbacks suppressed [ 332.469620][ T29] audit: type=1326 audit(1749364220.185:16277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14829 comm="syz.1.3656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f500fc0e929 code=0x7ffc0000 [ 332.503513][ T29] audit: type=1326 audit(1749364220.185:16278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14829 comm="syz.1.3656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f500fc0e929 code=0x7ffc0000 [ 332.530677][ T29] audit: type=1326 audit(1749364220.185:16279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14829 comm="syz.1.3656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f500fc0e929 code=0x7ffc0000 [ 332.558990][ T29] audit: type=1326 audit(1749364220.185:16280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14829 comm="syz.1.3656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f500fc0e929 code=0x7ffc0000 [ 332.589451][ T29] audit: type=1326 audit(1749364220.185:16281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14829 comm="syz.1.3656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f500fc0e929 code=0x7ffc0000 [ 332.614438][ T29] audit: type=1326 audit(1749364220.185:16282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14829 comm="syz.1.3656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f500fc0e929 code=0x7ffc0000 [ 332.642198][ T29] audit: type=1326 audit(1749364220.185:16283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14829 comm="syz.1.3656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f500fc0e929 code=0x7ffc0000 [ 332.662862][T14834] loop3: detected capacity change from 0 to 1024 [ 332.666652][ T29] audit: type=1326 audit(1749364220.185:16284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14829 comm="syz.1.3656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f500fc0e929 code=0x7ffc0000 [ 332.700084][ T29] audit: type=1326 audit(1749364220.185:16285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14829 comm="syz.1.3656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f500fc0d290 code=0x7ffc0000 [ 332.725876][ T29] audit: type=1326 audit(1749364220.185:16286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14829 comm="syz.1.3656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f500fc0d290 code=0x7ffc0000 [ 332.738248][T14834] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 332.767127][T14828] hub 9-0:1.0: USB hub found [ 332.786007][T14828] hub 9-0:1.0: 8 ports detected [ 332.801014][T14837] loop1: detected capacity change from 0 to 128 [ 332.834197][T14834] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 332.915414][T14834] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c840e02c, mo2=0000] [ 332.977066][T14834] EXT4-fs error (device loop3): ext4_map_blocks:780: inode #3: block 2: comm syz.3.3657: lblock 2 mapped to illegal pblock 2 (length 1) [ 333.030105][T14834] EXT4-fs (loop3): Remounting filesystem read-only [ 333.039212][T14834] EXT4-fs (loop3): 1 orphan inode deleted [ 333.123784][T14846] tc_dump_action: action bad kind [ 333.241250][T14852] loop2: detected capacity change from 0 to 2048 [ 333.424285][T14832] loop3: detected capacity change from 0 to 512 [ 333.460167][T14832] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.3657: Failed to acquire dquot type 1 [ 333.494319][T14854] bond0: (slave team0): Releasing backup interface [ 333.587766][T14832] EXT4-fs (loop3): 1 truncate cleaned up [ 333.608948][T14832] ext4 filesystem being mounted at /132/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 333.622134][T14861] netlink: 'syz.0.3662': attribute type 10 has an invalid length. [ 333.643964][T14854] dummy0: left allmulticast mode [ 333.657212][T14854] bridge0: port 3(dummy0) entered disabled state [ 333.724939][T14854] bridge_slave_0: left allmulticast mode [ 333.731012][T14854] bridge_slave_0: left promiscuous mode [ 333.737262][T14854] bridge0: port 1(bridge_slave_0) entered disabled state [ 333.769852][T14854] bridge_slave_1: left allmulticast mode [ 333.776919][T14854] bridge_slave_1: left promiscuous mode [ 333.782875][T14854] bridge0: port 2(bridge_slave_1) entered disabled state [ 333.846615][T14854] bond0: (slave bond_slave_0): Releasing backup interface [ 333.859449][T14868] netlink: 'syz.1.3666': attribute type 10 has an invalid length. [ 333.869157][T14868] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3666'. [ 333.942078][T14854] bond0: (slave bond_slave_1): Releasing backup interface [ 333.962182][T14854] team0: Port device team_slave_0 removed [ 333.972650][T14854] team0: Port device team_slave_1 removed [ 333.981293][T14854] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 333.989287][T14854] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 334.021035][T14854] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 334.029172][T14854] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 334.053465][T14855] netlink: 248 bytes leftover after parsing attributes in process `syz.4.3660'. [ 334.144305][T14876] netlink: 248 bytes leftover after parsing attributes in process `syz.3.3668'. [ 334.179563][T14856] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 334.212241][T14861] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 334.261305][T14868] dummy0: entered promiscuous mode [ 334.292243][T14868] bridge0: port 3(dummy0) entered blocking state [ 334.299110][T14868] bridge0: port 3(dummy0) entered disabled state [ 334.343791][T14877] loop2: detected capacity change from 0 to 512 [ 334.370604][T14868] dummy0: entered allmulticast mode [ 334.420735][T14868] bridge0: port 3(dummy0) entered blocking state [ 334.427574][T14868] bridge0: port 3(dummy0) entered forwarding state [ 334.480972][T14877] EXT4-fs: Ignoring removed bh option [ 334.533899][T14877] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 334.543256][T14877] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 334.586239][T14886] loop4: detected capacity change from 0 to 1024 [ 334.597286][T14886] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 334.620591][T14886] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 334.623729][T14877] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 334.651580][T14886] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c840e02c, mo2=0000] [ 334.683864][T14886] EXT4-fs error (device loop4): ext4_map_blocks:780: inode #3: block 2: comm syz.4.3671: lblock 2 mapped to illegal pblock 2 (length 1) [ 334.685023][T14877] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 334.758127][T14886] EXT4-fs (loop4): Remounting filesystem read-only [ 334.766105][T14886] EXT4-fs (loop4): 1 orphan inode deleted [ 334.859471][T14895] loop0: detected capacity change from 0 to 512 [ 334.868865][T14895] EXT4-fs: Ignoring removed nobh option [ 334.904172][T14899] loop3: detected capacity change from 0 to 512 [ 334.934005][T14899] EXT4-fs: Ignoring removed nobh option [ 334.945258][T14886] loop4: detected capacity change from 0 to 512 [ 334.960928][T14895] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #16: comm syz.0.3675: corrupted inode contents [ 335.001836][T14886] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.3671: Failed to acquire dquot type 1 [ 335.021603][T14899] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #16: comm syz.3.3676: corrupted inode contents [ 335.051334][T14899] EXT4-fs (loop3): Remounting filesystem read-only [ 335.059070][T14895] EXT4-fs (loop0): Remounting filesystem read-only [ 335.066211][T14886] EXT4-fs (loop4): 1 truncate cleaned up [ 335.077393][T14899] EXT4-fs (loop3): 1 truncate cleaned up [ 335.093532][ T1775] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 335.104368][ T1775] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 335.118402][T14895] EXT4-fs (loop0): 1 truncate cleaned up [ 335.122499][T14899] ext4 filesystem being mounted at /135/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 335.128038][T14895] ext4 filesystem being mounted at /127/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 335.138523][ T1775] EXT4-fs (loop3): Quota write (off=8, len=24) cancelled because transaction is not started [ 335.148807][T14886] ext4 filesystem being mounted at /122/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 335.159981][ T1775] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 335.177918][ T1775] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 335.189495][ T1775] EXT4-fs (loop0): Quota write (off=8, len=24) cancelled because transaction is not started [ 335.211244][T14899] 9pnet_fd: Insufficient options for proto=fd [ 335.220346][T14895] 9pnet_fd: Insufficient options for proto=fd [ 335.292836][T14914] netlink: 'syz.3.3679': attribute type 7 has an invalid length. [ 335.302075][T14914] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3679'. [ 335.395913][T14918] hub 9-0:1.0: USB hub found [ 335.400703][T14918] hub 9-0:1.0: 8 ports detected [ 335.431674][T14920] loop0: detected capacity change from 0 to 1024 [ 335.445113][T14920] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 335.456750][T14920] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 335.478446][T14920] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c840e02c, mo2=0000] [ 335.494687][T14920] EXT4-fs error (device loop0): ext4_map_blocks:780: inode #3: block 2: comm syz.0.3682: lblock 2 mapped to illegal pblock 2 (length 1) [ 335.558753][T14920] EXT4-fs (loop0): Remounting filesystem read-only [ 335.579738][T14920] EXT4-fs (loop0): 1 orphan inode deleted [ 335.705544][T14932] loop3: detected capacity change from 0 to 1024 [ 335.757251][T14932] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 335.775506][T14932] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 335.886356][T14932] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c840e02c, mo2=0000] [ 335.899006][T14940] loop0: detected capacity change from 0 to 512 [ 335.926465][T14940] EXT4-fs: Ignoring removed nobh option [ 335.952882][T14932] EXT4-fs error (device loop3): ext4_map_blocks:780: inode #3: block 2: comm syz.3.3686: lblock 2 mapped to illegal pblock 2 (length 1) [ 335.968731][T14932] EXT4-fs (loop3): Remounting filesystem read-only [ 335.975605][T14932] EXT4-fs (loop3): 1 orphan inode deleted [ 335.985518][T14940] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #16: comm syz.0.3690: corrupted inode contents [ 335.999068][T14940] EXT4-fs (loop0): Remounting filesystem read-only [ 336.019862][T14940] EXT4-fs (loop0): 1 truncate cleaned up [ 336.031758][T14940] ext4 filesystem being mounted at /132/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 336.044696][ T12] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 336.055342][ T12] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 336.096823][T14952] loop1: detected capacity change from 0 to 512 [ 336.096870][ T12] EXT4-fs (loop0): Quota write (off=8, len=24) cancelled because transaction is not started [ 336.117104][T14940] 9pnet_fd: Insufficient options for proto=fd [ 336.142151][T14952] EXT4-fs: Ignoring removed bh option [ 336.148976][T14953] loop3: detected capacity change from 0 to 512 [ 336.155905][T14952] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 336.165165][T14952] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 336.216244][T14953] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.3686: Failed to acquire dquot type 1 [ 336.257509][T14953] EXT4-fs (loop3): 1 truncate cleaned up [ 336.287270][T14953] ext4 filesystem being mounted at /137/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 336.325371][T14952] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 336.405219][T14960] netlink: 248 bytes leftover after parsing attributes in process `syz.0.3692'. [ 336.482615][T14962] hub 9-0:1.0: USB hub found [ 336.487567][T14962] hub 9-0:1.0: 8 ports detected [ 336.652255][T14952] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 336.912037][T14969] loop4: detected capacity change from 0 to 512 [ 336.939469][T14969] EXT4-fs: Ignoring removed nobh option [ 336.978739][T14969] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #16: comm syz.4.3696: corrupted inode contents [ 337.005224][T14969] EXT4-fs (loop4): Remounting filesystem read-only [ 337.081502][T14969] EXT4-fs (loop4): 1 truncate cleaned up [ 337.123928][T14969] ext4 filesystem being mounted at /125/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 337.137845][ T31] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 337.144171][T14969] 9pnet_fd: Insufficient options for proto=fd [ 337.152805][ T31] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 337.245635][ T31] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started [ 337.299144][T14974] netlink: 'syz.0.3697': attribute type 10 has an invalid length. [ 337.308368][T14974] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3697'. [ 337.328554][T14974] bridge0: port 1(dummy0) entered blocking state [ 337.335405][T14974] bridge0: port 1(dummy0) entered disabled state [ 337.360047][T14974] dummy0: entered allmulticast mode [ 337.377003][T14974] bridge0: port 1(dummy0) entered blocking state [ 337.384421][T14974] bridge0: port 1(dummy0) entered forwarding state [ 337.716743][ T29] kauditd_printk_skb: 354 callbacks suppressed [ 337.716773][ T29] audit: type=1400 audit(1749364225.465:16603): avc: denied { watch watch_reads } for pid=14989 comm="syz.2.3703" path="/172" dev="tmpfs" ino=946 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 337.735565][T14992] hub 9-0:1.0: USB hub found [ 337.757510][T14992] hub 9-0:1.0: 8 ports detected [ 337.846659][T14994] netlink: 'syz.4.3705': attribute type 1 has an invalid length. [ 337.876136][T14997] netlink: 'syz.2.3703': attribute type 10 has an invalid length. [ 337.958274][T14994] 8021q: adding VLAN 0 to HW filter on device bond3 [ 338.133520][T15004] loop4: detected capacity change from 0 to 512 [ 338.162474][T15004] EXT4-fs: Ignoring removed nobh option [ 338.176800][T15003] netlink: 248 bytes leftover after parsing attributes in process `syz.0.3707'. [ 338.228096][T15004] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #16: comm syz.4.3708: corrupted inode contents [ 338.328769][T15004] EXT4-fs (loop4): Remounting filesystem read-only [ 338.357442][T15004] EXT4-fs (loop4): 1 truncate cleaned up [ 338.377010][T15013] loop2: detected capacity change from 0 to 1024 [ 338.390571][ T1775] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 338.403599][ T1775] Quota error (device loop4): write_blk: dquota write failed [ 338.411334][ T1775] Quota error (device loop4): remove_free_dqentry: Can't write block (5) with free entries [ 338.418080][T15004] ext4 filesystem being mounted at /130/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 338.421563][ T1775] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 338.444385][ T1775] Quota error (device loop4): write_blk: dquota write failed [ 338.449114][T15013] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 338.452313][ T1775] Quota error (device loop4): free_dqentry: Can't move quota data block (5) to free list [ 338.479649][ T29] audit: type=1326 audit(1749364226.235:16604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15002 comm="syz.4.3708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d2f7ae929 code=0x7ffc0000 [ 338.483911][ T1775] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started [ 338.513600][T15013] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 338.522183][ T1775] Quota error (device loop4): v2_write_file_info: Can't write info structure [ 338.538539][T15004] 9pnet_fd: Insufficient options for proto=fd [ 338.564472][T15013] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c840e02c, mo2=0000] [ 338.573960][T15013] EXT4-fs error (device loop2): ext4_map_blocks:780: inode #3: block 2: comm syz.2.3711: lblock 2 mapped to illegal pblock 2 (length 1) [ 338.591717][ T29] audit: type=1326 audit(1749364226.285:16605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15002 comm="syz.4.3708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1d2f7ae929 code=0x7ffc0000 [ 338.616447][ T29] audit: type=1326 audit(1749364226.285:16606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15002 comm="syz.4.3708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d2f7ae929 code=0x7ffc0000 [ 338.621458][T15013] EXT4-fs (loop2): Remounting filesystem read-only [ 338.644756][ T29] audit: type=1326 audit(1749364226.285:16607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15002 comm="syz.4.3708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1d2f7ae929 code=0x7ffc0000 [ 338.688687][T15013] EXT4-fs (loop2): 1 orphan inode deleted [ 338.742350][T15018] loop4: detected capacity change from 0 to 1024 [ 338.753690][T15020] loop1: detected capacity change from 0 to 128 [ 338.795987][T15018] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 338.809522][T15018] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 338.966318][T15018] JBD2: no valid journal superblock found [ 338.973157][T15018] EXT4-fs (loop4): Could not load journal inode [ 339.027362][T15013] loop2: detected capacity change from 0 to 512 [ 339.103970][T15020] bio_check_eod: 668 callbacks suppressed [ 339.103992][T15020] syz.1.3712: attempt to access beyond end of device [ 339.103992][T15020] loop1: rw=2049, sector=129, nr_sectors = 8 limit=128 [ 339.144237][T15013] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.3711: Failed to acquire dquot type 1 [ 339.171566][T15020] syz.1.3712: attempt to access beyond end of device [ 339.171566][T15020] loop1: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 339.200561][T15013] EXT4-fs (loop2): 1 truncate cleaned up [ 339.220163][T15013] ext4 filesystem being mounted at /174/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 339.243906][T15037] netlink: 'syz.4.3718': attribute type 7 has an invalid length. [ 339.248382][T15020] syz.1.3712: attempt to access beyond end of device [ 339.248382][T15020] loop1: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 339.252936][T15037] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3718'. [ 339.288365][T15020] syz.1.3712: attempt to access beyond end of device [ 339.288365][T15020] loop1: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 339.320073][T15020] syz.1.3712: attempt to access beyond end of device [ 339.320073][T15020] loop1: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 339.365603][T15020] syz.1.3712: attempt to access beyond end of device [ 339.365603][T15020] loop1: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 339.392969][T15020] syz.1.3712: attempt to access beyond end of device [ 339.392969][T15020] loop1: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 339.409495][T15020] syz.1.3712: attempt to access beyond end of device [ 339.409495][T15020] loop1: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 339.417561][T15044] loop2: detected capacity change from 0 to 128 [ 339.430158][T15020] syz.1.3712: attempt to access beyond end of device [ 339.430158][T15020] loop1: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 339.439064][T15044] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535) [ 339.457938][T15020] syz.1.3712: attempt to access beyond end of device [ 339.457938][T15020] loop1: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 339.636117][T15044] netlink: 'syz.2.3720': attribute type 10 has an invalid length. [ 339.846031][T15056] loop3: detected capacity change from 0 to 128 [ 339.909717][T15054] netlink: 'syz.2.3724': attribute type 10 has an invalid length. [ 339.918455][T15054] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3724'. [ 340.185601][T15069] loop4: detected capacity change from 0 to 1024 [ 340.204313][T15069] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 340.238303][T15069] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 340.266629][T15074] loop2: detected capacity change from 0 to 1024 [ 340.299213][T15069] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c840e02c, mo2=0000] [ 340.310805][T15074] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 340.327005][T15074] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 340.342780][T15069] EXT4-fs error (device loop4): ext4_map_blocks:780: inode #3: block 2: comm syz.4.3729: lblock 2 mapped to illegal pblock 2 (length 1) [ 340.364046][T15074] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c840e02c, mo2=0000] [ 340.387937][T15074] EXT4-fs error (device loop2): ext4_map_blocks:780: inode #3: block 2: comm syz.2.3731: lblock 2 mapped to illegal pblock 2 (length 1) [ 340.395283][T15069] EXT4-fs (loop4): Remounting filesystem read-only [ 340.412990][T15069] EXT4-fs (loop4): 1 orphan inode deleted [ 340.428756][T15074] EXT4-fs (loop2): Remounting filesystem read-only [ 340.443052][T15074] EXT4-fs (loop2): 1 orphan inode deleted [ 340.468155][T15085] netlink: 'syz.0.3734': attribute type 7 has an invalid length. [ 340.476537][T15085] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3734'. [ 340.557897][T15090] loop3: detected capacity change from 0 to 512 [ 340.567748][T15090] EXT4-fs: Ignoring removed nobh option [ 340.586811][T15093] loop1: detected capacity change from 0 to 512 [ 340.594866][T15093] EXT4-fs: Ignoring removed bh option [ 340.608431][T15069] loop4: detected capacity change from 0 to 512 [ 340.609441][T15090] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #16: comm syz.3.3735: corrupted inode contents [ 340.629462][T15093] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 340.640064][T15093] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 340.640803][T15090] EXT4-fs (loop3): Remounting filesystem read-only [ 340.656953][T15090] EXT4-fs (loop3): 1 truncate cleaned up [ 340.658747][T15093] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 340.664423][T15090] ext4 filesystem being mounted at /146/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 340.698011][ T4297] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 340.710527][ T4297] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 340.738129][T15090] 9pnet_fd: Insufficient options for proto=fd [ 340.749020][ T4297] EXT4-fs (loop3): Quota write (off=8, len=24) cancelled because transaction is not started [ 340.760518][T15069] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.3729: Failed to acquire dquot type 1 [ 340.778478][T15093] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 340.790397][T15069] EXT4-fs (loop4): 1 truncate cleaned up [ 340.798435][T15069] ext4 filesystem being mounted at /135/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 340.809238][T15093] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3736'. [ 340.819331][T15093] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3736'. [ 340.909137][T15101] netlink: 'syz.0.3737': attribute type 10 has an invalid length. [ 340.919270][T15101] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3737'. [ 340.996808][T15116] loop0: detected capacity change from 0 to 512 [ 341.006531][T15116] EXT4-fs: Ignoring removed bh option [ 341.009991][T15106] netlink: 'syz.1.3739': attribute type 10 has an invalid length. [ 341.023988][T15106] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3739'. [ 341.036970][T15116] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 341.048040][T15116] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 341.076360][T15116] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended [ 341.109645][T15116] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 341.136900][T15116] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3742'. [ 341.166811][T15125] netlink: 'syz.2.3745': attribute type 1 has an invalid length. [ 341.176695][T15123] loop1: detected capacity change from 0 to 2048 [ 341.284877][T15125] 8021q: adding VLAN 0 to HW filter on device bond3 [ 341.311991][T15140] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3747'. [ 341.437691][T15146] hub 9-0:1.0: USB hub found [ 341.481474][T15146] hub 9-0:1.0: 8 ports detected [ 341.506842][T15139] 8021q: adding VLAN 0 to HW filter on device bond3 [ 341.534886][T15139] bond3: (slave vti0): The slave device specified does not support setting the MAC address [ 341.569049][T15139] bond3: (slave vti0): Error -95 calling set_mac_address [ 341.612545][T15150] loop1: detected capacity change from 0 to 512 [ 341.633336][T15150] EXT4-fs: Ignoring removed nobh option [ 341.715677][T15150] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #16: comm syz.1.3752: corrupted inode contents [ 341.759861][T15150] EXT4-fs (loop1): Remounting filesystem read-only [ 341.774311][T15150] EXT4-fs (loop1): 1 truncate cleaned up [ 341.786885][T15150] ext4 filesystem being mounted at /116/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 341.798086][ T31] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 341.821444][ T31] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 341.903832][ T31] EXT4-fs (loop1): Quota write (off=8, len=24) cancelled because transaction is not started [ 342.069398][T15155] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3753'. [ 342.107783][T15164] loop1: detected capacity change from 0 to 1024 [ 342.134186][T15164] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 342.151154][T15164] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 342.166752][T15164] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c840e02c, mo2=0000] [ 342.167374][T15166] loop0: detected capacity change from 0 to 1024 [ 342.185098][T15164] EXT4-fs error (device loop1): ext4_map_blocks:780: inode #3: block 2: comm syz.1.3756: lblock 2 mapped to illegal pblock 2 (length 1) [ 342.244083][T15164] EXT4-fs (loop1): Remounting filesystem read-only [ 342.258940][T15164] EXT4-fs (loop1): 1 orphan inode deleted [ 342.382972][T15176] loop2: detected capacity change from 0 to 128 [ 342.671704][T15183] loop4: detected capacity change from 0 to 1024 [ 342.773885][T15183] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 342.798850][T15187] loop3: detected capacity change from 0 to 512 [ 342.800672][T15183] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 342.843219][T15183] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c840e02c, mo2=0000] [ 342.854158][T15183] EXT4-fs error (device loop4): ext4_map_blocks:780: inode #3: block 2: comm syz.4.3762: lblock 2 mapped to illegal pblock 2 (length 1) [ 342.854654][T15187] EXT4-fs (loop3): 1 orphan inode deleted [ 342.877225][ T4297] __quota_error: 230 callbacks suppressed [ 342.877243][ T4297] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 342.879283][T15183] EXT4-fs (loop4): Remounting filesystem read-only [ 342.883484][ T4297] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u8:8: Failed to release dquot type 1 [ 342.893789][T15183] Quota error (device loop4): qtree_write_dquot: dquota write failed [ 342.903632][T15187] ext4 filesystem being mounted at /155/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 342.912533][T15183] Quota error (device loop4): v2_write_file_info: Can't write info structure [ 342.984260][T15183] EXT4-fs (loop4): 1 orphan inode deleted [ 343.039570][T15194] validate_nla: 2 callbacks suppressed [ 343.039616][T15194] netlink: 'syz.0.3766': attribute type 7 has an invalid length. [ 343.056667][T15194] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3766'. [ 343.241832][T15210] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 343.319063][T15214] loop4: detected capacity change from 0 to 1024 [ 343.336544][ T29] audit: type=1326 audit(1749364231.085:16813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15219 comm="syz.1.3774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f500fc0e929 code=0x7ffc0000 [ 343.356563][T15217] loop2: detected capacity change from 0 to 1024 [ 343.363873][ T29] audit: type=1326 audit(1749364231.085:16814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15219 comm="syz.1.3774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f500fc0e929 code=0x7ffc0000 [ 343.381066][T15214] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 343.408010][ T29] audit: type=1326 audit(1749364231.085:16815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15219 comm="syz.1.3774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f500fc0e929 code=0x7ffc0000 [ 343.422225][T15214] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 343.450214][ T29] audit: type=1326 audit(1749364231.085:16816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15219 comm="syz.1.3774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f500fc0e929 code=0x7ffc0000 [ 343.487744][ T29] audit: type=1326 audit(1749364231.085:16817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15219 comm="syz.1.3774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f500fc0e929 code=0x7ffc0000 [ 343.491448][T15218] loop3: detected capacity change from 0 to 128 [ 343.514342][ T29] audit: type=1326 audit(1749364231.085:16818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15219 comm="syz.1.3774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f500fc0e929 code=0x7ffc0000 [ 343.524435][T15218] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535) [ 343.546337][ T29] audit: type=1326 audit(1749364231.085:16819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15219 comm="syz.1.3774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f500fc0e929 code=0x7ffc0000 [ 343.662427][T15214] JBD2: no valid journal superblock found [ 343.669055][T15214] EXT4-fs (loop4): Could not load journal inode [ 343.701838][T15225] loop0: detected capacity change from 0 to 128 [ 343.715587][T15228] loop1: detected capacity change from 0 to 128 [ 343.885127][T15228] EXT4-fs mount: 67 callbacks suppressed [ 343.885148][T15228] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 344.052955][T15218] netlink: 'syz.3.3775': attribute type 10 has an invalid length. [ 344.222340][T15228] ext4 filesystem being mounted at /124/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 344.285569][T15228] netlink: 'syz.1.3779': attribute type 30 has an invalid length. [ 344.295165][T12258] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 344.329945][T15240] loop2: detected capacity change from 0 to 1024 [ 344.351303][T15240] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 344.369134][T15240] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 344.379574][T13155] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 344.392777][T15244] loop3: detected capacity change from 0 to 2048 [ 344.411842][T15240] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c840e02c, mo2=0000] [ 344.445738][T15240] EXT4-fs error (device loop2): ext4_map_blocks:780: inode #3: block 2: comm syz.2.3782: lblock 2 mapped to illegal pblock 2 (length 1) [ 344.478504][T15244] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 344.502341][T15240] EXT4-fs (loop2): Remounting filesystem read-only [ 344.502670][T15225] bio_check_eod: 332 callbacks suppressed [ 344.502693][T15225] syz.0.3777: attempt to access beyond end of device [ 344.502693][T15225] loop0: rw=2049, sector=129, nr_sectors = 8 limit=128 [ 344.548842][T15225] syz.0.3777: attempt to access beyond end of device [ 344.548842][T15225] loop0: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 344.579325][T12258] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 344.582043][T15240] EXT4-fs (loop2): 1 orphan inode deleted [ 344.596655][T15240] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 344.612749][T15225] syz.0.3777: attempt to access beyond end of device [ 344.612749][T15225] loop0: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 344.627099][T15225] syz.0.3777: attempt to access beyond end of device [ 344.627099][T15225] loop0: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 344.643969][T15225] syz.0.3777: attempt to access beyond end of device [ 344.643969][T15225] loop0: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 344.658959][T15225] syz.0.3777: attempt to access beyond end of device [ 344.658959][T15225] loop0: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 344.691068][T15225] syz.0.3777: attempt to access beyond end of device [ 344.691068][T15225] loop0: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 344.717986][T15254] netlink: 248 bytes leftover after parsing attributes in process `syz.4.3787'. [ 344.745715][T15225] syz.0.3777: attempt to access beyond end of device [ 344.745715][T15225] loop0: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 344.768317][T12095] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 344.779156][T15225] syz.0.3777: attempt to access beyond end of device [ 344.779156][T15225] loop0: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 344.796393][T15225] syz.0.3777: attempt to access beyond end of device [ 344.796393][T15225] loop0: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 344.821287][T15259] netlink: 'syz.3.3788': attribute type 7 has an invalid length. [ 344.827785][T15260] loop4: detected capacity change from 0 to 1024 [ 344.841226][T15260] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 344.887567][T15260] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 344.906380][T15260] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c840e02c, mo2=0000] [ 344.920165][T15260] EXT4-fs error (device loop4): ext4_map_blocks:780: inode #3: block 2: comm syz.4.3790: lblock 2 mapped to illegal pblock 2 (length 1) [ 344.935293][T15260] EXT4-fs (loop4): Remounting filesystem read-only [ 344.944929][T15260] EXT4-fs (loop4): 1 orphan inode deleted [ 344.956851][T15260] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 344.976334][T15269] loop2: detected capacity change from 0 to 1024 [ 345.014956][T15260] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 345.030168][T15271] loop0: detected capacity change from 0 to 512 [ 345.150269][T15271] EXT4-fs (loop0): 1 orphan inode deleted [ 345.702187][ T12] EXT4-fs error (device loop0): ext4_release_dquot:6969: comm kworker/u8:0: Failed to release dquot type 1 [ 345.723249][T15271] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 345.751759][T15271] ext4 filesystem being mounted at /154/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 345.778423][T15272] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -4 [ 345.790041][T15272] platform regulatory.0: Direct firmware load for regulatory.db failed with error -4 [ 345.805363][T12549] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 345.857944][T15260] loop4: detected capacity change from 0 to 512 [ 345.922612][T15286] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 345.956918][T15260] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.3790: Failed to acquire dquot type 1 [ 346.000276][T15260] EXT4-fs (loop4): 1 truncate cleaned up [ 346.006566][T15260] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 346.028316][T15260] ext4 filesystem being mounted at /146/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 346.046325][T15293] loop0: detected capacity change from 0 to 2048 [ 346.062884][T15295] netlink: 'syz.3.3800': attribute type 1 has an invalid length. [ 346.072778][T15260] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 346.082910][T15290] loop1: detected capacity change from 0 to 1024 [ 346.095188][T15290] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 346.103677][T15293] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 346.127448][T15295] 8021q: adding VLAN 0 to HW filter on device bond4 [ 346.141399][T15290] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 346.163813][T15290] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c840e02c, mo2=0000] [ 346.183658][T15299] 8021q: adding VLAN 0 to HW filter on device bond4 [ 346.193203][T12549] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 346.194754][T15299] bond4: (slave vti0): The slave device specified does not support setting the MAC address [ 346.215545][T15290] EXT4-fs error (device loop1): ext4_map_blocks:780: inode #3: block 2: comm syz.1.3799: lblock 2 mapped to illegal pblock 2 (length 1) [ 346.216562][T15299] bond4: (slave vti0): Error -95 calling set_mac_address [ 346.240775][T15290] EXT4-fs (loop1): Remounting filesystem read-only [ 346.270402][T15304] loop0: detected capacity change from 0 to 128 [ 346.301703][T15290] EXT4-fs (loop1): 1 orphan inode deleted [ 346.317559][T15290] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 346.358681][T15290] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 346.463208][T15316] loop3: detected capacity change from 0 to 1024 [ 346.474762][T15316] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 346.486617][T15316] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 346.499254][T15316] JBD2: no valid journal superblock found [ 346.506313][T15316] EXT4-fs (loop3): Could not load journal inode [ 346.676889][T15290] loop1: detected capacity change from 0 to 512 [ 346.695938][T15323] loop0: detected capacity change from 0 to 128 [ 346.729811][T15290] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.3799: Failed to acquire dquot type 1 [ 346.769214][T15328] loop4: detected capacity change from 0 to 512 [ 346.776976][T15290] EXT4-fs (loop1): 1 truncate cleaned up [ 346.799521][T15290] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 346.816770][T15328] EXT4-fs: Ignoring removed bh option [ 346.832916][T15330] __nla_validate_parse: 1 callbacks suppressed [ 346.832933][T15330] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3808'. [ 346.854860][T15290] ext4 filesystem being mounted at /126/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 346.876676][T15290] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 346.893140][T15328] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 346.903081][T15328] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 347.012105][T15328] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 347.037528][T15334] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 347.080090][T15328] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 347.102552][T15328] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 347.223115][T15338] hub 9-0:1.0: USB hub found [ 347.228117][T15338] hub 9-0:1.0: 8 ports detected [ 347.306129][T15343] loop0: detected capacity change from 0 to 1024 [ 347.351052][T15341] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.375969][T15346] loop2: detected capacity change from 0 to 128 [ 347.402402][T15341] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.503500][T15341] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.552173][T15341] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.569101][T15349] netlink: 'syz.3.3815': attribute type 10 has an invalid length. [ 347.577013][T15349] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3815'. [ 347.606308][T15341] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.619343][T15341] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.632759][T15341] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.646839][T15341] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.733268][T15355] hub 9-0:1.0: USB hub found [ 347.751476][T15355] hub 9-0:1.0: 8 ports detected [ 347.819455][T15361] loop3: detected capacity change from 0 to 512 [ 347.839066][T12865] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 347.853065][T15361] EXT4-fs (loop3): 1 orphan inode deleted [ 347.853641][T15365] netlink: 'syz.1.3820': attribute type 13 has an invalid length. [ 347.869327][T15361] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 347.883437][ T160] __quota_error: 309 callbacks suppressed [ 347.883454][ T160] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 347.899076][ T160] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u8:4: Failed to release dquot type 1 [ 347.899255][ T29] audit: type=1400 audit(1749364235.635:17118): avc: denied { write } for pid=15364 comm="syz.1.3820" name="file0" dev="tmpfs" ino=714 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 347.933204][ T29] audit: type=1400 audit(1749364235.635:17119): avc: denied { open } for pid=15364 comm="syz.1.3820" path="/129/file0" dev="tmpfs" ino=714 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 347.959441][T15361] ext4 filesystem being mounted at /169/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 348.042173][T12258] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 348.090865][ T29] audit: type=1326 audit(1749364235.845:17120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15373 comm="syz.3.3824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e65afe929 code=0x7ffc0000 [ 348.109118][T15375] loop3: detected capacity change from 0 to 1024 [ 348.116572][ T29] audit: type=1326 audit(1749364235.845:17121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15373 comm="syz.3.3824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e65afe929 code=0x7ffc0000 [ 348.184038][T15375] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 348.236712][T15375] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 348.269635][T15382] loop1: detected capacity change from 0 to 128 [ 348.275781][T15384] loop0: detected capacity change from 0 to 1024 [ 348.293674][ T29] audit: type=1326 audit(1749364235.845:17122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15373 comm="syz.3.3824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f4e65afe929 code=0x7ffc0000 [ 348.320978][ T29] audit: type=1326 audit(1749364235.845:17123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15373 comm="syz.3.3824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e65afe929 code=0x7ffc0000 [ 348.346901][ T29] audit: type=1326 audit(1749364235.845:17124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15373 comm="syz.3.3824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e65afe929 code=0x7ffc0000 [ 348.372044][ T29] audit: type=1326 audit(1749364235.845:17125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15373 comm="syz.3.3824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=216 compat=0 ip=0x7f4e65afe929 code=0x7ffc0000 [ 348.397989][T15384] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 348.399995][ T29] audit: type=1326 audit(1749364235.845:17126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15373 comm="syz.3.3824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e65afe929 code=0x7ffc0000 [ 348.414311][T15384] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 348.466481][T15375] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c840e02c, mo2=0000] [ 348.478545][T15375] EXT4-fs error (device loop3): ext4_map_blocks:780: inode #3: block 2: comm syz.3.3824: lblock 2 mapped to illegal pblock 2 (length 1) [ 348.496557][T15390] loop2: detected capacity change from 0 to 1024 [ 348.507052][T15384] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c840e02c, mo2=0000] [ 348.514290][T15390] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 348.518856][T15384] EXT4-fs error (device loop0): ext4_map_blocks:780: inode #3: block 2: comm syz.0.3828: lblock 2 mapped to illegal pblock 2 (length 1) [ 348.529717][T15390] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 348.557269][T15375] EXT4-fs (loop3): Remounting filesystem read-only [ 348.564444][T15375] EXT4-fs (loop3): 1 orphan inode deleted [ 348.570509][T15384] EXT4-fs (loop0): Remounting filesystem read-only [ 348.572071][T15390] JBD2: no valid journal superblock found [ 348.583728][T15390] EXT4-fs (loop2): Could not load journal inode [ 348.584249][T15375] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 348.602558][T15384] EXT4-fs (loop0): 1 orphan inode deleted [ 348.609736][T15384] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 348.634472][T15375] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 348.683995][T12549] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 348.717062][T15393] hub 9-0:1.0: USB hub found [ 348.724340][T15393] hub 9-0:1.0: 8 ports detected [ 348.737003][T15395] loop0: detected capacity change from 0 to 1024 [ 348.756426][T15395] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 348.779338][T15395] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 348.781429][T15398] loop2: detected capacity change from 0 to 1024 [ 348.796324][T15395] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c840e02c, mo2=0000] [ 348.803019][T15398] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 348.815529][T15398] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 348.821584][T15395] EXT4-fs error (device loop0): ext4_map_blocks:780: inode #3: block 2: comm syz.0.3830: lblock 2 mapped to illegal pblock 2 (length 1) [ 348.845032][T15398] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c840e02c, mo2=0000] [ 348.858178][T15375] loop3: detected capacity change from 0 to 512 [ 348.860113][T15402] loop1: detected capacity change from 0 to 512 [ 348.872631][T15398] EXT4-fs error (device loop2): ext4_map_blocks:780: inode #3: block 2: comm syz.2.3832: lblock 2 mapped to illegal pblock 2 (length 1) [ 348.889451][T15398] EXT4-fs (loop2): Remounting filesystem read-only [ 348.896675][T15398] EXT4-fs (loop2): 1 orphan inode deleted [ 348.903926][T15398] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 348.918958][T15402] EXT4-fs: Ignoring removed nobh option [ 348.924930][T15395] EXT4-fs (loop0): Remounting filesystem read-only [ 348.936222][T12095] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 348.946073][T15395] EXT4-fs (loop0): 1 orphan inode deleted [ 348.954767][T15395] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 348.979955][T15395] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 348.985193][T15402] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #16: comm syz.1.3833: corrupted inode contents [ 349.020236][T15375] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.3824: Failed to acquire dquot type 1 [ 349.039898][T15402] EXT4-fs (loop1): Remounting filesystem read-only [ 349.047576][T15375] EXT4-fs (loop3): 1 truncate cleaned up [ 349.048351][T15402] EXT4-fs (loop1): 1 truncate cleaned up [ 349.055961][T15375] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 349.075160][ T37] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 349.078643][T15375] ext4 filesystem being mounted at /170/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 349.086693][ T37] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 349.107381][T15411] loop4: detected capacity change from 0 to 1024 [ 349.111075][ T37] EXT4-fs (loop1): Quota write (off=8, len=24) cancelled because transaction is not started [ 349.122041][T15402] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 349.142231][T15375] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 349.152358][T15402] ext4 filesystem being mounted at /133/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 349.188692][T15409] loop2: detected capacity change from 0 to 1024 [ 349.216486][T15402] 9pnet_fd: Insufficient options for proto=fd [ 349.225720][T15409] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 349.251639][T15409] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 349.322909][T13155] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 349.324413][T15409] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c840e02c, mo2=0000] [ 349.350609][T15419] loop0: detected capacity change from 0 to 512 [ 349.353070][T15409] EXT4-fs error (device loop2): ext4_map_blocks:780: inode #3: block 2: comm syz.2.3834: lblock 2 mapped to illegal pblock 2 (length 1) [ 349.375170][T15409] EXT4-fs (loop2): Remounting filesystem read-only [ 349.386503][T15419] EXT4-fs (loop0): 1 orphan inode deleted [ 349.394870][T15409] EXT4-fs (loop2): 1 orphan inode deleted [ 349.402606][ T37] EXT4-fs error (device loop0): ext4_release_dquot:6969: comm kworker/u8:2: Failed to release dquot type 1 [ 349.403186][T15419] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 349.434365][T15409] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 349.443925][T15419] ext4 filesystem being mounted at /167/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 349.476593][T15409] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 349.491604][T15425] loop3: detected capacity change from 0 to 1024 [ 349.501695][T15425] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 349.509734][T15423] tc_dump_action: action bad kind [ 349.513330][T15425] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 349.521999][T12549] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 349.543612][T15425] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c840e02c, mo2=0000] [ 349.560933][T15425] EXT4-fs error (device loop3): ext4_map_blocks:780: inode #3: block 2: comm syz.3.3840: lblock 2 mapped to illegal pblock 2 (length 1) [ 349.587090][T15425] EXT4-fs (loop3): Remounting filesystem read-only [ 349.605686][T15428] loop0: detected capacity change from 0 to 1024 [ 349.616752][T15425] EXT4-fs (loop3): 1 orphan inode deleted [ 349.623292][T15428] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 349.635126][T15428] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 349.636617][T15425] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 349.660774][T15428] JBD2: no valid journal superblock found [ 349.667539][T15428] EXT4-fs (loop0): Could not load journal inode [ 349.668970][T15425] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 349.686399][T15430] loop1: detected capacity change from 0 to 1024 [ 349.695388][T15430] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 349.708271][T15430] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 349.720873][T15430] JBD2: no valid journal superblock found [ 349.727447][T15430] EXT4-fs (loop1): Could not load journal inode [ 349.780407][T15434] loop1: detected capacity change from 0 to 128 [ 350.009481][T15442] netlink: 'syz.2.3846': attribute type 10 has an invalid length. [ 350.018106][T15442] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3846'. [ 350.044148][T15434] bio_check_eod: 515 callbacks suppressed [ 350.044169][T15434] syz.1.3843: attempt to access beyond end of device [ 350.044169][T15434] loop1: rw=2049, sector=129, nr_sectors = 8 limit=128 [ 350.069388][T15434] syz.1.3843: attempt to access beyond end of device [ 350.069388][T15434] loop1: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 350.093244][T15434] syz.1.3843: attempt to access beyond end of device [ 350.093244][T15434] loop1: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 350.114989][T15455] hub 9-0:1.0: USB hub found [ 350.120260][T15455] hub 9-0:1.0: 8 ports detected [ 350.120495][T15434] syz.1.3843: attempt to access beyond end of device [ 350.120495][T15434] loop1: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 350.142672][T15434] syz.1.3843: attempt to access beyond end of device [ 350.142672][T15434] loop1: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 350.163582][T15434] syz.1.3843: attempt to access beyond end of device [ 350.163582][T15434] loop1: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 350.177944][T15434] syz.1.3843: attempt to access beyond end of device [ 350.177944][T15434] loop1: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 350.194872][T15434] syz.1.3843: attempt to access beyond end of device [ 350.194872][T15434] loop1: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 350.209851][T15434] syz.1.3843: attempt to access beyond end of device [ 350.209851][T15434] loop1: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 350.242891][T15460] loop3: detected capacity change from 0 to 1024 [ 350.243347][T15434] syz.1.3843: attempt to access beyond end of device [ 350.243347][T15434] loop1: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 350.256677][T15460] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 350.301177][T15460] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 350.315641][T15460] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c840e02c, mo2=0000] [ 350.332668][T15460] EXT4-fs error (device loop3): ext4_map_blocks:780: inode #3: block 2: comm syz.3.3852: lblock 2 mapped to illegal pblock 2 (length 1) [ 350.350176][T15460] EXT4-fs (loop3): Remounting filesystem read-only [ 350.357391][T15460] EXT4-fs (loop3): 1 orphan inode deleted [ 350.364471][T15460] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 350.415719][T12258] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 350.430570][T15465] loop1: detected capacity change from 0 to 1024 [ 350.440956][T15465] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 350.459009][T15465] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 350.492482][T15465] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c840e02c, mo2=0000] [ 350.505259][T15465] EXT4-fs error (device loop1): ext4_map_blocks:780: inode #3: block 2: comm syz.1.3853: lblock 2 mapped to illegal pblock 2 (length 1) [ 350.521181][T15467] loop3: detected capacity change from 0 to 1024 [ 350.523423][T15465] EXT4-fs (loop1): Remounting filesystem read-only [ 350.536031][T15467] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 350.547904][T15467] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 350.553458][T15465] EXT4-fs (loop1): 1 orphan inode deleted [ 350.563220][T15467] JBD2: no valid journal superblock found [ 350.567662][T15465] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 350.577560][T15467] EXT4-fs (loop3): Could not load journal inode [ 350.597631][T15465] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 350.904754][T15477] loop2: detected capacity change from 0 to 1024 [ 350.977015][T15470] netlink: 'syz.3.3855': attribute type 10 has an invalid length. [ 350.986056][T15470] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3855'. [ 351.011386][T15479] netlink: 'syz.0.3858': attribute type 7 has an invalid length. [ 351.022239][T15479] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3858'. [ 351.127930][T15489] loop3: detected capacity change from 0 to 1024 [ 351.140940][T15489] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 351.153189][T15489] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 351.171952][T15492] loop4: detected capacity change from 0 to 128 [ 351.193380][T15489] JBD2: no valid journal superblock found [ 351.200463][T15489] EXT4-fs (loop3): Could not load journal inode [ 351.245486][T15497] loop1: detected capacity change from 0 to 1024 [ 351.267517][T15497] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 351.283916][T15497] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 351.303513][T15497] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c840e02c, mo2=0000] [ 351.323992][T15497] EXT4-fs error (device loop1): ext4_map_blocks:780: inode #3: block 2: comm syz.1.3864: lblock 2 mapped to illegal pblock 2 (length 1) [ 351.349188][T15500] hub 9-0:1.0: USB hub found [ 351.354670][T15500] hub 9-0:1.0: 8 ports detected [ 351.398361][T15497] EXT4-fs (loop1): Remounting filesystem read-only [ 351.405317][T15497] EXT4-fs (loop1): 1 orphan inode deleted [ 351.412451][T15497] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 351.433410][T15507] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 351.440494][T15497] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 351.639027][T15517] loop3: detected capacity change from 0 to 1024 [ 351.646599][T15517] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 351.655547][T15517] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 351.669293][T15517] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c840e02c, mo2=0000] [ 351.679943][T15517] EXT4-fs error (device loop3): ext4_map_blocks:780: inode #3: block 2: comm syz.3.3871: lblock 2 mapped to illegal pblock 2 (length 1) [ 351.697642][T15517] EXT4-fs (loop3): Remounting filesystem read-only [ 351.705390][T15517] EXT4-fs (loop3): 1 orphan inode deleted [ 351.712285][T15517] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 351.764211][T12258] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 351.811921][ T3517] ================================================================== [ 351.822102][ T3517] BUG: KCSAN: data-race in fill_mg_cmtime / shmem_unlink [ 351.829475][ T3517] [ 351.832369][ T3517] write to 0xffff8881037f66bc of 4 bytes by task 3514 on cpu 0: [ 351.840919][ T3517] shmem_unlink+0x13c/0x170 [ 351.845689][ T3517] shmem_rename2+0x1a1/0x290 [ 351.850993][ T3517] vfs_rename+0x7d9/0xa20 [ 351.855429][ T3517] do_renameat2+0x764/0xab0 [ 351.861379][ T3517] __x64_sys_rename+0x58/0x70 [ 351.866649][ T3517] x64_sys_call+0x2aee/0x2fb0 [ 351.871730][ T3517] do_syscall_64+0xd2/0x200 [ 351.876703][ T3517] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 351.883486][ T3517] [ 351.886087][ T3517] read to 0xffff8881037f66bc of 4 bytes by task 3517 on cpu 1: [ 351.894358][ T3517] fill_mg_cmtime+0x5b/0x260 [ 351.899164][ T3517] generic_fillattr+0x24a/0x340 [ 351.905190][ T3517] shmem_getattr+0x181/0x200 [ 351.909900][ T3517] vfs_getattr_nosec+0x146/0x1e0 [ 351.915557][ T3517] vfs_statx+0x113/0x390 [ 351.920621][ T3517] vfs_fstatat+0x115/0x170 [ 351.926381][ T3517] __se_sys_newfstatat+0x55/0x260 [ 351.931804][ T3517] __x64_sys_newfstatat+0x55/0x70 [ 351.937244][ T3517] x64_sys_call+0x2c22/0x2fb0 [ 351.943021][ T3517] do_syscall_64+0xd2/0x200 [ 351.948306][ T3517] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 351.955458][ T3517] [ 351.957806][ T3517] value changed: 0x21bbfc73 -> 0x21f61b4c [ 351.965228][ T3517] [ 351.967655][ T3517] Reported by Kernel Concurrency Sanitizer on: [ 351.974551][ T3517] CPU: 1 UID: 0 PID: 3517 Comm: udevd Not tainted 6.15.0-syzkaller-13743-g8630c59e9936 #0 PREEMPT(voluntary) [ 351.986794][ T3517] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 351.998802][ T3517] ==================================================================