last executing test programs: 5.857721084s ago: executing program 4 (id=960): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) mkdir(&(0x7f0000000140)='./control\x00', 0x5) rmdir(&(0x7f0000000100)='./control\x00') 5.678923416s ago: executing program 4 (id=962): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) ioctl$AUTOFS_IOC_READY(r0, 0x9360, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) r1 = getpid() r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r0) sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r3, 0x1, 0x70bd26, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) process_madvise(0xffffffffffffffff, 0x0, 0x0, 0x19, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r4}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) 5.178604444s ago: executing program 4 (id=968): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) ioctl$AUTOFS_IOC_READY(r0, 0x9360, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) r1 = getpid() r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r0) sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r3, 0x1, 0x70bd26, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000200)='gtp\x00\xe4\xaa\xae\xdf~2\xa6X\x14\x92\xdarV\xf4U\xf7\xa2\xc3l\x1b@\xaf\xf9\xc9\xa9#\xf0S\xd9=q\xd6\x14\xedt\xc8!W\xe9@\xeb\x7f~\tB0EE\x9a:\xb7\xff\xc1\xfc\x9a\x1f\xf2\xfb\x19\xda#x\xc5F\x1c~\x8c\xe1\xdf\xdc\x01k\f\xde0~\x95\r\xa2\x80\b4M\x14\xe7\xd0\t`n!g\x14\xe6\xd1\xc2\xd3\x88\xf8cVtd\xbeY\xa5\xe7\x16sD\x96}7\n\x88e\x00\xf0\xff\xff\xf0\xcb\x94\xb4S\x00\x00') r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r4}, 0x10) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) 3.451135399s ago: executing program 1 (id=990): mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3af, 0x4}, 0x100000, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = request_key(0x0, &(0x7f0000000300)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) request_key(&(0x7f0000000200)='ceph\x00', &(0x7f0000000240)={'syz', 0x2}, &(0x7f0000000280)='\',\xc8*\\\x00', r0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0xfffffffffffffffd}, 0x18) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240"], 0x7c}}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x1, @empty, 0x1}, 0x1c) listen(r4, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) accept(r3, 0x0, 0x0) 2.942320487s ago: executing program 0 (id=998): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000380)=0x7ffd) ioctl$PPPIOCSPASS(r1, 0x40107447, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x0) sendmsg$NFT_BATCH(r0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) connect$unix(0xffffffffffffffff, &(0x7f0000000580)=@file={0x1, './file0\x00'}, 0x6e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) sendmsg$SMC_PNETID_ADD(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000200000014000200626f6e64300000000000000000000000090001007379"], 0x40}}, 0x0) sendmsg$SMC_PNETID_DEL(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x14, r4, 0xe27, 0x70bd28, 0x0, {0x4, 0x7, 0x2}}, 0x14}, 0x1, 0x40030000000000}, 0x4000) 2.900565207s ago: executing program 0 (id=1001): socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x449e, &(0x7f0000000340)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@bh}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40}}, {@stripe={'stripe', 0x3d, 0x4000}}, {@auto_da_alloc}, {@minixdf}]}, 0x3, 0x44d, &(0x7f0000001280)="$eJzs28tvG8UfAPDvruP0/Ut+pTz6AAIFEfFImrRAD1xAIHEACQkO5RictJS6DWqCRKsICkLliCpx4IY4IvEXcIILAk5IXDjAHVWqUC4tnIzW3k0c106T1KlL/flITmZ2ZzPz9ezYszvZAPrWSPYjidgZEb9HxFAju7LASOPXtcWFyt+LC5UkarXX/0rq5a4uLlSKosVxO/LMaBqRfpLE/jb1zp07f2qqWk2Kg8bnT787Pnfu/FMnT0+dmDkxc2by6NEjhyeefWby6a7EmbXp6r4PZg/sffnNS69Wjl1666dvkiL+lji6ZGS1nY/Wal2urrd2NaWTgR42hHUpRUTWXeX6+B+KUix33lC89HFPGwdsqlqtVtvRefeFGnAHS2KtJU/lnxfAnaH4os+uf4vXLZp63BauPN+4ALq6uLA1Fhcq15biH4g0L1Nuub7tppGIOHbhny+zV2zOfQgAgBW+y+Y/T7ab/6VxT1O5/+VrQ8MR8f+I2B0Rd0XEnoi4O6Je9t6IuG+d9bcuklw//0kvbyiwNcrmf8/la1vXVsz/itlfDJfy3K56/OXk+MnqzKH8PRmN8pYsP7FKHd+/+OtnnfY1z/+yV1Z/MRfM23F5YMvKY6an5qduJuZmVz6K2DfQLv5kaSUgiYi9EbFvg3WcfPzrA532dYq/vJY/3IV1ptpXEY81+v9CtMRfSFZfnxzfGtWZQ+PFWXG9n3+5+FrLpt+KxA36/+0vbj7EVWX9v73t+b8U/3CyvF47c3Zu/XVc/OPTjtc0Gz3/B5M36unBfNv7U/PzZyciBpNXGo1u3j65fGyRL8pn8Y8ebD/+d8fyO7E/IrKT+P6IeCAiHszb/lBEPBwRB1eJ/8cXHnln4/Fvriz+6XX1/3JiMFq3tE+UTv3w7YpKh9cTf9b/R+qp0XzLWj7/1tKujZ3NAAAA8N+TRsTOSNKxpXSajo01/l9+T2xPq7Nz808cn33vzHTjGYHhKKfFna6hpvuhE/llfZGfbMkfzu8bf17aVs+PVWar070OHvrcjg7jP/NnqdetAzad57Wgfxn/0L+Mf+hfxj/0rzbjf1sv2gHceu2+/z/sQTuAW69l/Fv2gz7i+h/6l/EP/cv4h740ty1u/JC8hMR1iUhvi2ZIbFKi159MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3fFvAAAA//9oj+L0") r0 = openat(0xffffffffffffff9c, 0x0, 0x143042, 0x58) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000740)={{r0}, &(0x7f00000006c0), &(0x7f0000000700)='%pI4 \x00'}, 0x20) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000080)={0x0, 0xa004}, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendto$packet(r1, &(0x7f0000000180)="10030600e0ff020004004788aa96a13bb100001100007fca1a00", 0x10608, 0x0, &(0x7f0000000140)={0x11, 0x0, r3}, 0x14) 2.581543782s ago: executing program 1 (id=1002): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) r1 = getpid() r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r0) sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r3, 0x1, 0x70bd26, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) prctl$PR_SET_NAME(0xf, &(0x7f0000000200)='gtp\x00\xe4\xaa\xae\xdf~2\xa6X\x14\x92\xdarV\xf4U\xf7\xa2\xc3l\x1b@\xaf\xf9\xc9\xa9#\xf0S\xd9=q\xd6\x14\xedt\xc8!W\xe9@\xeb\x7f~\tB0EE\x9a:\xb7\xff\xc1\xfc\x9a\x1f\xf2\xfb\x19\xda#x\xc5F\x1c~\x8c\xe1\xdf\xdc\x01k\f\xde0~\x95\r\xa2\x80\b4M\x14\xe7\xd0\t`n!g\x14\xe6\xd1\xc2\xd3\x88\xf8cVtd\xbeY\xa5\xe7\x16sD\x96}7\n\x88e\x00\xf0\xff\xff\xf0\xcb\x94\xb4S\x00\x00') r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r4}, 0x10) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) 2.577644402s ago: executing program 0 (id=1012): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYRESDEC=r1, @ANYRES32=r1, @ANYRES32=r0, @ANYRES64, @ANYRESOCT=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000030000000"], 0x0, 0x2}, 0x94) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'pim6reg1\x00', 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x2, &(0x7f0000000280)=ANY=[@ANYRESDEC], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2c, '\x00', 0x0, 0x2}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'xfrm0\x00', 0x0}) sendmsg$ETHTOOL_MSG_RINGS_SET(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000002c0)=ANY=[@ANYBLOB='4\x00', @ANYRES16=r4, @ANYBLOB="010029bd7000ffdbdf251000000020000180140002006261746164765f736c6176655f31000008000100", @ANYRES32=r6, @ANYBLOB="35db3c4b7ccd0258b78c85ad881c06a26913fc0f181f0ab0114010430b765d77a4a4f3ee39c92153e562f6714b2d873f61337b0184a2e37c35e65256942475ec0ba7870dd7e8f2f6c3f0c481fd61d56a85dc9d49ac81231815497507c8dc07ff1167dad236daa7fff088d4bf6149ea60fea8cb7f07000100000000000000b8e95332de47c15c11cbec9e4168f4dbe47003087dcc9160fde94dbc1ded1fefc184a131c046ee3a89488b75bb0b447da674b065312231322a1d6cdbc545f3d728f292646b7b438625ce27b7bdfe542cd26f"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0x40400c0) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000600)={&(0x7f0000000a00)=ANY=[@ANYBLOB="80066c69", @ANYRES16=0x0, @ANYBLOB="000227bd7000ffdbdf2501000000040003000400030004000300580002801c0001800800010002000000080001000000000008000100010000001c0001800800010001000000080001000300000008000100060000001c0001800800010003000000080001000000000008000100020000004c00018008000100", @ANYRES32=0x0, @ANYBLOB="140002007665746830000000000000000000000014000200626f6e6430000000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="080003000000000008000300010000003c00018008000300020000001400020076657468305f746f5f7465616d00000008000100", @ANYRES32=r6, @ANYBLOB="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"], 0x280}}, 0x3000c014) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @link_local}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000ac4010000060a0b040000000000000000020000004c000480340001800b000100746172676574000024000280090001004d41524b000000000c00030002b51112d439c5920800024000000002140001800b0001006c6f6f6b75700000040002800900010073797a30000000000900020073797a32"], 0x1ec}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000840)={&(0x7f0000000680)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1b, 0x1b, 0x3, [@datasec={0xb, 0x1, 0x0, 0xf, 0x3, [{0x5, 0x5, 0x96f}], "02d773"}]}, {0x0, [0x2e]}}, &(0x7f00000006c0)=""/148, 0x37, 0x94, 0x1, 0xb}, 0x28) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000008c0), 0x42, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x18, 0x4, &(0x7f0000000980)=ANY=[@ANYBLOB="1801000000000000000000006dfeff00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x800000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x3, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', r9}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r11 = perf_event_open(&(0x7f0000000200)={0x0, 0x80, 0x8, 0x0, 0xf9, 0x2, 0x0, 0x5, 0x100, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x0, @perf_config_ext={0xffffffff, 0x40}, 0x1108, 0x8, 0xf0d8, 0x5, 0x9, 0x10000, 0x1, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_QUERY_BPF(r11, 0xc008240a, &(0x7f0000000000)={0x8, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r10, 0x0, 0xffffffffffffffff}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) close(r0) 2.253936307s ago: executing program 0 (id=1003): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r2 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000400)=@generic={&(0x7f00000003c0)='./file0\x00'}, 0x18) bpf$TOKEN_CREATE(0x24, &(0x7f0000000540)={0x0, r0}, 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r1, @ANYRES32=r2], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r1}, &(0x7f0000000000), &(0x7f00000005c0)=r3}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') chmod(&(0x7f0000000180)='./file0\x00', 0x44) bpf$PROG_LOAD(0x5, &(0x7f0000001b40)={0x1c, 0x20000000000000bb, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r5 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x1e, 0xc, &(0x7f0000000740)=ANY=[@ANYRES16=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r6}, 0x10) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/14, @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r7}, &(0x7f0000000340), 0x0}, 0x20) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r8}, 0x18) r9 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) write$selinux_validatetrans(r9, 0x0, 0x63) r10 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r10}, 0x10) sendmsg$TIPC_CMD_GET_MAX_PORTS(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x1c}, 0x1c}}, 0x0) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000040)="dc", 0x1}], 0x8) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet_mptcp(0x2, 0x1, 0x106) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000f1ffffff0000000000100000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0xb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000101000000000000000000000000001300000000000076fc0001"], 0x48) 2.003276231s ago: executing program 0 (id=1005): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0xa004}, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r4}, 0x10) sendto$packet(r0, &(0x7f0000000180)="10030600e0ff020004004788aa96a13bb100001100007fca1a00", 0x10608, 0x0, &(0x7f0000000140)={0x11, 0x0, r2}, 0x14) 1.906718243s ago: executing program 0 (id=1006): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) ioctl$AUTOFS_IOC_READY(r0, 0x9360, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) r1 = getpid() r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r0) sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r3, 0x1, 0x70bd26, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) process_madvise(0xffffffffffffffff, 0x0, 0x0, 0x19, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r4}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) 1.816512544s ago: executing program 1 (id=1007): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x38, '\x00', 0x0, @lirc_mode2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) io_setup(0x1, &(0x7f0000000b80)=0x0) io_getevents(r2, 0x0, 0x0, &(0x7f0000000000), 0x0) 1.678853445s ago: executing program 1 (id=1009): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=ANY=[@ANYBLOB="28000000020183e7de22cd4285ba1741da9a0e0404000280040001800c0019"], 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x4040) 1.626831146s ago: executing program 3 (id=1010): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='kfree\x00', r0}, 0x18) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000004c0)={'ipvlan1\x00', &(0x7f0000000440)=@ethtool_sset_info={0x37, 0x6, 0x9, [0x8, 0x5, 0x2, 0x9]}}) 1.625729276s ago: executing program 1 (id=1011): syz_emit_ethernet(0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb88a800002f0aa41e0806000108000604000000000000000000000000aaaaaaaaaaaaffffffff"], 0x0) (async) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f288476d2610054c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.606722076s ago: executing program 3 (id=1013): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000140)={{r0}, &(0x7f00000002c0), &(0x7f0000000500)='%pK \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdir(&(0x7f0000000440)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000130000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000700000045000000a000020095"], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='kfree\x00', r1}, 0x18) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000b40)=@filter={'filter\x00', 0x4, 0x4, 0x398, 0xffffffff, 0x260, 0x260, 0xe8, 0xfeffffff, 0xffffffff, 0x3e8, 0x3e8, 0x3e8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x29}, @private2, [0xffffffff, 0xff000000, 0xff, 0xffffff00], [0xffffff00, 0xffffffff, 0xffffffff, 0xffffffff], 'hsr0\x00', 'sit0\x00', {}, {}, 0x87, 0x3, 0x4, 0x5}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x7}}}}, {{@ipv6={@private2, @empty, [], [0x0, 0x0, 0xff000000], 'sit0\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x2000010}}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x21, 0x180, 0x5}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f8) 1.550799208s ago: executing program 3 (id=1014): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000380)=0x7ffd) ioctl$PPPIOCSPASS(r1, 0x40107447, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x0) sendmsg$NFT_BATCH(r0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) connect$unix(0xffffffffffffffff, &(0x7f0000000580)=@file={0x1, './file0\x00'}, 0x6e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) sendmsg$SMC_PNETID_ADD(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000200000014000200626f6e64300000000000000000000000090001007379"], 0x40}}, 0x0) sendmsg$SMC_PNETID_DEL(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x14, r4, 0xe27, 0x70bd28, 0x0, {0x4, 0x7, 0x2}}, 0x14}, 0x1, 0x40030000000000}, 0x4000) 1.503556018s ago: executing program 1 (id=1015): bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdir(0x0, 0x0) io_setup(0xacf, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) r3 = fsopen(&(0x7f0000000200)='mqueue\x00', 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRESOCT=r6, @ANYRES8=r3, @ANYRES8, @ANYRES32], &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f000000c300)=ANY=[@ANYBLOB="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"], 0x4318}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='block_bio_remap\x00', r7}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r4}, &(0x7f0000000000), &(0x7f0000000040)=r5}, 0x20) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r9}, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) unshare(0x400) open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000780)={[{@bsdgroups}, {@nodiscard}, {@oldalloc}, {@grpjquota}, {@nobarrier}, {@noquota}, {@abort}, {@nodiscard}, {@nodiscard}]}, 0x64, 0x50d, &(0x7f0000000200)="$eJzs3VFrHFsdAPD/bHZj06Y3ueqDXvB69V5Ji3Y3aWwbfKgVRJ8Kan2vMdmEkE02ZDdtE4qm+AEEERV80hdfBD+AIAVffBShoM+KiiLa6oMP2rns7iRN091k226zafb3g8mcc2Zm/+dsmNk5M4eZAAbWOxFxLSIep2l6PiLGsvJcNsV2a2qs9+jh3bnGlESa3vhnEklWtvNZSTY/k212KiK+9uWIbybPxq1tbi3PVirl9Sxfqq+slWqbWxeWVmYXy4vl1enpqcszV2YuzUz2pJ1nI+LqF//6g+/+7EtXf/WZ23+6+fdz32pUazRbvrcdzyl/0MJW0wvN72LvBusvGOw4yjdbmBlpt8bQMyX3XnGdAABor3GO/8GI+GREnI+xGDr4dBYAAAB4DaWfH43/JRFpe8MdygEAAIDXSK45BjbJFbOxAKORyxWLrTG8H47TuUq1Vv/0QnVjdb41VnY8CrmFpUp5MhsrPB6FpJGfaqaf5C/uy09HxJsR8f2xkWa+OFetzPf74gcAAAAMiDP7+v//GWv1/wEAAIATZrzfFQAAAABeOf1/AAAAOPn0/wEAAOBE+8r1640p3Xn/9fytzY3l6q0L8+XacnFlY644V11fKy5Wq4vNZ/atHPZ5lWp17bOxunGnVC/X6qXa5tbNlerGav3m0lOvwAYAAACO0Jsfv/+HJCK2PzfSnBqGu9u0y9WA4yq/m0qyeZvd+o9vtOZ/OaJKAUdiqN8VAPom3+8KAH1T6HcFgL5LDlnecfDOb7P5J3pbHwAAoPcmPtr5/n/uwC23D14MHHt2Yhhc7v/D4Gre/+92JK+TBThRCs4AYOC99P3/Q6Xpc1UIAADoudHmlOSK2eW90cjlisWIs83XAhSShaVKeTIi3oiI348VPtDITzW3TA7tMwAAAAAAAAAAAAAAAAAAAAAAAAAALWmaRAoAAACcaBG5vyW/bj3Lf2LsvdH91weGk/+ORfaK0Ns/vvHDO7P1+vpUo/xfu+X1H2XlF/txBQMAAAAGwnO9wH+nn77TjwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAXnr08O7cznSUcf/xhYgYbxc/H6ea81NRiIjT/04iv2e7JCKGehB/pPHnI+3iJ41q7YZsF3+kB/G37x0YP8azb2F//OGIONOD+DDI7jeOP9fa7X+5eKc5b7//5SOeyr+ozse/2D3+DXU4/pztMsZbD35R6hj/XsRb+fbHn534SYf473YZ/xtf39rqtCz9ScRE29+f5KlYpfrKWqm2uXVhaWV2sbxYXp2enro8c2Xm0sxkaWGpUs7+to3xvY/98vFB7T/dIf74Ie1/r8v2///BnYcfaiUL7eKfe7dN/N/8NFvj2fi57LfvU1m6sXxiJ73dSu/19s9/9/ZB7Z/v0P7D/v/numz/+a9+589drgoAHIHa5tbybKVSXj+xiUYv/RhUQ+IYJr7d0w9M0zRt7FMv8TlJHIevpZno95EJAADotScn/f2uCQAAAAAAAAAAAAAAAAAAAAyuo3ic2P6Y27uppBeP0AYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6In3AwAA///d8Nla") 1.472638589s ago: executing program 3 (id=1016): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r2 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000400)=@generic={&(0x7f00000003c0)='./file0\x00'}, 0x18) bpf$TOKEN_CREATE(0x24, &(0x7f0000000540)={0x0, r0}, 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r1, @ANYRES32=r2], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r1}, &(0x7f0000000000), &(0x7f00000005c0)=r3}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') chmod(&(0x7f0000000180)='./file0\x00', 0x44) bpf$PROG_LOAD(0x5, &(0x7f0000001b40)={0x1c, 0x20000000000000bb, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r5 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x1e, 0xc, &(0x7f0000000740)=ANY=[@ANYRES16=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r6}, 0x10) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/14, @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r7}, &(0x7f0000000340), 0x0}, 0x20) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r8}, 0x18) r9 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) write$selinux_validatetrans(r9, 0x0, 0x63) r10 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r10}, 0x10) sendmsg$TIPC_CMD_GET_MAX_PORTS(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x1c}, 0x1c}}, 0x0) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000040)="dc", 0x1}], 0x8) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet_mptcp(0x2, 0x1, 0x106) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000f1ffffff0000000000100000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0xb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000101000000000000000000000000001300000000000076fc0001"], 0x48) 1.145441913s ago: executing program 3 (id=1017): bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='rss_stat\x00', r0}, 0x10) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) 831.033178ms ago: executing program 3 (id=1019): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000100)='sched_switch\x00', r0, 0x0, 0x2}, 0x18) r1 = gettid() timer_create(0xb, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, 0x0, 0x0) r2 = socket$kcm(0x29, 0x5, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0xf3e, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000280)='kfree\x00'}, 0x18) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, 0x3, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004810}, 0x840) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 705.57861ms ago: executing program 2 (id=1021): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0xa004}, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r4}, 0x10) sendto$packet(r0, &(0x7f0000000180)="10030600e0ff020004004788aa96a13bb100001100007fca1a00", 0x10608, 0x0, &(0x7f0000000140)={0x11, 0x0, r2}, 0x14) 625.165001ms ago: executing program 2 (id=1022): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000008500000050", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r0}, &(0x7f0000000480), &(0x7f00000004c0)}, 0x20) 502.562983ms ago: executing program 2 (id=1023): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)) 437.126034ms ago: executing program 2 (id=1024): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='kfree\x00', r0}, 0x18) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000004c0)={'ipvlan1\x00', &(0x7f0000000440)=@ethtool_sset_info={0x37, 0x6, 0x9, [0x8, 0x5, 0x2, 0x9]}}) 334.527585ms ago: executing program 2 (id=1025): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000140)={{r0}, &(0x7f00000002c0), &(0x7f0000000500)='%pK \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdir(&(0x7f0000000440)='./file0\x00', 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000700000045000000a000020095"], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='kfree\x00', r1}, 0x18) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000b40)=@filter={'filter\x00', 0x4, 0x4, 0x398, 0xffffffff, 0x260, 0x260, 0xe8, 0xfeffffff, 0xffffffff, 0x3e8, 0x3e8, 0x3e8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x29}, @private2, [0xffffffff, 0xff000000, 0xff, 0xffffff00], [0xffffff00, 0xffffffff, 0xffffffff, 0xffffffff], 'hsr0\x00', 'sit0\x00', {}, {}, 0x87, 0x3, 0x4, 0x5}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x7}}}}, {{@ipv6={@private2, @empty, [], [0x0, 0x0, 0xff000000], 'sit0\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x2000010}}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x21, 0x180, 0x5}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f8) 296.485286ms ago: executing program 4 (id=1026): r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) flock(r0, 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) flock(r1, 0x2) dup3(r1, r0, 0x0) 211.100377ms ago: executing program 2 (id=1027): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r2 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000400)=@generic={&(0x7f00000003c0)='./file0\x00'}, 0x18) bpf$TOKEN_CREATE(0x24, &(0x7f0000000540)={0x0, r0}, 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r1, @ANYRES32=r2], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r1}, &(0x7f0000000000), &(0x7f00000005c0)=r3}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') chmod(&(0x7f0000000180)='./file0\x00', 0x44) bpf$PROG_LOAD(0x5, &(0x7f0000001b40)={0x1c, 0x20000000000000bb, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r5 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x1e, 0xc, &(0x7f0000000740)=ANY=[@ANYRES16=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r6}, 0x10) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/14, @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r7}, &(0x7f0000000340), 0x0}, 0x20) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r8}, 0x18) r9 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) write$selinux_validatetrans(r9, 0x0, 0x63) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r10}, 0x10) sendmsg$TIPC_CMD_GET_MAX_PORTS(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x1c}, 0x1c}}, 0x0) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000040)="dc", 0x1}], 0x8) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet_mptcp(0x2, 0x1, 0x106) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000f1ffffff0000000000100000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0xb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000101000000000000000000000000001300000000000076fc0001"], 0x48) 119.426669ms ago: executing program 4 (id=1028): r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) flock(r0, 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) flock(r1, 0x2) dup3(r1, r0, 0x0) 0s ago: executing program 4 (id=1029): r0 = bpf$TOKEN_CREATE(0x24, &(0x7f00000002c0), 0x8) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x11, 0x2a, &(0x7f0000000780)=ANY=[@ANYRES16=r0, @ANYRES32, @ANYRES32=r0, @ANYRES16, @ANYRESOCT=r0, @ANYRES64=r0, @ANYRESHEX=r0, @ANYRES64=r0], &(0x7f00000006c0)='syzkaller\x00', 0x8a9c, 0x1c, &(0x7f00000004c0)=""/28, 0xc02c93be8704a0dc, 0x6a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x4, 0x4}, 0x8, 0x10, &(0x7f00000005c0)={0x3, 0x14, 0xfffffe01, 0x1000}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000600)=[0x1, r0, 0xffffffffffffffff, 0x1, 0x1, 0x1, 0xffffffffffffffff, 0x1], 0x0, 0x10, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000640)={&(0x7f0000000440)='fsi_master_acf_crc_rsp_error\x00', r1}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0xb, &(0x7f00000009c0)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) rseq(&(0x7f0000000040)={0x0, 0x0, 0x0, 0x2}, 0x20, 0x0, 0x0) rseq(&(0x7f0000000040)={0x0, 0x0, 0x0, 0x2}, 0xfcb4, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2}, 0x18) r3 = getpgrp(0x0) ioprio_set$pid(0x1, r3, 0x4000) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB='trans=f']) r4 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000140), 0x8) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000240)={{0x1, 0x1, 0x18, r4}, './file1\x00'}) setsockopt$packet_int(r5, 0x107, 0x13, &(0x7f0000000280)=0x2, 0x4) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x3, &(0x7f0000000100)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0xffffff9d) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000f40), r7) sendmsg$IEEE802154_ADD_IFACE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0100fcff7f00000000e12100000009001f0070687931000000000a0001007770616e300000000a00010077"], 0x38}, 0x1, 0x0, 0x0, 0x2000c813}, 0x0) syz_open_dev$sg(&(0x7f0000000700), 0x200000000000, 0x1436cb147b705171) r9 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000500), 0x28102) r10 = dup(r9) r11 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=' wfdno=', @ANYRESHEX=r11, @ANYBLOB=',\x00']) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r6}, 0x10) r12 = openat(r10, &(0x7f0000000040)='./file2\x00', 0x42, 0x0) pwrite64(r12, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r13}, 0x10) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r15 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r15, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002ec0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r14, @ANYBLOB="5953fdfffffffddbdf256b00000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900020000007236a8107df68fd53900008028000d8804000380"], 0x38}}, 0x0) kernel console output (not intermixed with test programs): user_path_at+0x28/0x130 [ 68.680847][ T4647] __se_sys_mount+0x25b/0x2e0 [ 68.680907][ T4647] ? fput+0x8f/0xc0 [ 68.680975][ T4647] __x64_sys_mount+0x67/0x80 [ 68.681064][ T4647] x64_sys_call+0xd36/0x2fb0 [ 68.681085][ T4647] do_syscall_64+0xd2/0x200 [ 68.681102][ T4647] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 68.681129][ T4647] ? clear_bhb_loop+0x40/0x90 [ 68.681217][ T4647] ? clear_bhb_loop+0x40/0x90 [ 68.681238][ T4647] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.681258][ T4647] RIP: 0033:0x7f25246de929 [ 68.681325][ T4647] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 68.681348][ T4647] RSP: 002b:00007f2522d47038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 68.681371][ T4647] RAX: ffffffffffffffda RBX: 00007f2524905fa0 RCX: 00007f25246de929 [ 68.681396][ T4647] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000000 [ 68.681451][ T4647] RBP: 00007f2522d47090 R08: 0000000000000000 R09: 0000000000000000 [ 68.681466][ T4647] R10: 0000000000200000 R11: 0000000000000246 R12: 0000000000000001 [ 68.681577][ T4647] R13: 0000000000000000 R14: 00007f2524905fa0 R15: 00007ffc502552a8 [ 68.681601][ T4647] [ 68.894393][ T4650] loop2: detected capacity change from 0 to 512 [ 68.901355][ T4650] EXT4-fs: Ignoring removed bh option [ 68.927142][ T4650] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 68.968271][ T4650] EXT4-fs (loop2): 1 truncate cleaned up [ 68.998210][ T4659] loop0: detected capacity change from 0 to 256 [ 69.031497][ T4661] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.048928][ T4659] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 69.059250][ T4659] FAT-fs (loop0): Filesystem has been set read-only [ 69.076186][ T4661] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.116283][ T4661] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.213063][ T4093] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 2058 with max blocks 2047 with error 28 [ 69.225860][ T4093] EXT4-fs (loop3): This should not happen!! Data will be lost [ 69.225860][ T4093] [ 69.243764][ T4661] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.279219][ T4668] ipt_rpfilter: only valid in 'raw' or 'mangle' table, not '' [ 69.290078][ T4668] loop0: detected capacity change from 0 to 512 [ 69.311428][ T4661] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.329851][ T4668] ext4 filesystem being mounted at /82/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 69.331399][ T4661] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.355685][ T4661] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.358953][ T4668] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #18: comm syz.0.385: corrupted inode contents [ 69.368849][ T4661] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.395890][ T4668] EXT4-fs error (device loop0): ext4_dirty_inode:6459: inode #18: comm syz.0.385: mark_inode_dirty error [ 69.410870][ T4672] loop3: detected capacity change from 0 to 512 [ 69.417284][ T4668] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #18: comm syz.0.385: corrupted inode contents [ 69.421897][ T4674] loop4: detected capacity change from 0 to 512 [ 69.429837][ T4672] EXT4-fs: Ignoring removed bh option [ 69.444526][ T4672] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 69.455906][ T4668] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2991: inode #18: comm syz.0.385: mark_inode_dirty error [ 69.480872][ T4672] EXT4-fs (loop3): 1 truncate cleaned up [ 69.500456][ T4668] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2994: inode #18: comm syz.0.385: mark inode dirty (error -117) [ 69.529442][ T4668] EXT4-fs warning (device loop0): ext4_evict_inode:274: xattr delete (err -117) [ 69.551773][ T4674] ext4 filesystem being mounted at /85/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 69.573043][ T4677] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.590163][ T4683] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.628442][ T4682] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.653854][ T4677] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.686265][ T4683] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.699014][ T4682] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.716683][ T4677] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.735841][ T4682] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.748951][ T4683] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.786135][ T4677] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.825781][ T4683] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.837949][ T4682] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.922611][ T4683] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.934356][ T4683] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.945296][ T4682] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.958177][ T4683] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.969086][ T4682] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.980995][ T4683] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.992850][ T4682] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.004846][ T4682] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.057361][ T4699] loop3: detected capacity change from 0 to 512 [ 70.065934][ T4699] EXT4-fs: Ignoring removed bh option [ 70.071952][ T4699] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 70.083291][ T4699] EXT4-fs (loop3): 1 truncate cleaned up [ 70.116505][ T4701] loop1: detected capacity change from 0 to 512 [ 70.123219][ T4701] EXT4-fs: Ignoring removed mblk_io_submit option [ 70.131824][ T4701] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 70.132592][ T4705] pim6reg1: entered promiscuous mode [ 70.145990][ T4705] pim6reg1: entered allmulticast mode [ 70.154814][ T4701] ext4 filesystem being mounted at /75/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 70.165409][ T4705] loop3: detected capacity change from 0 to 512 [ 70.172344][ T4705] EXT4-fs: Ignoring removed nomblk_io_submit option [ 70.179958][ T4705] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 70.190998][ T4705] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 70.206028][ T4705] EXT4-fs (loop3): 1 truncate cleaned up [ 70.212085][ T4705] EXT4-fs mount: 58 callbacks suppressed [ 70.212108][ T4705] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.265604][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.341424][ T4713] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 70.351195][ T29] kauditd_printk_skb: 293 callbacks suppressed [ 70.351211][ T29] audit: type=1400 audit(1750891478.555:1082): avc: denied { relabelto } for pid=4704 comm="syz.3.396" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 70.540192][ T4717] netlink: 32 bytes leftover after parsing attributes in process `syz.0.398'. [ 70.582080][ T4719] loop0: detected capacity change from 0 to 512 [ 70.592233][ T4719] EXT4-fs: Ignoring removed bh option [ 70.602420][ T4719] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 70.621154][ T4719] EXT4-fs (loop0): 1 truncate cleaned up [ 70.629549][ T4719] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.661989][ T29] audit: type=1400 audit(1750891478.865:1083): avc: denied { read write } for pid=4711 comm="syz.4.397" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 70.686895][ T29] audit: type=1400 audit(1750891478.865:1084): avc: denied { open } for pid=4711 comm="syz.4.397" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 70.715127][ T29] audit: type=1400 audit(1750891478.925:1085): avc: denied { ioctl } for pid=4711 comm="syz.4.397" path="/dev/loop-control" dev="devtmpfs" ino=99 ioctlcmd=0x4c81 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 70.744625][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.752194][ T4701] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 70.768293][ T4701] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 9 with max blocks 2048 with error 28 [ 70.780932][ T4701] EXT4-fs (loop1): This should not happen!! Data will be lost [ 70.780932][ T4701] [ 70.790754][ T4701] EXT4-fs (loop1): Total free blocks count 0 [ 70.796862][ T4701] EXT4-fs (loop1): Free/Dirty block details [ 70.796876][ T4701] EXT4-fs (loop1): free_blocks=39626 [ 70.796888][ T4701] EXT4-fs (loop1): dirty_blocks=4096 [ 70.796899][ T4701] EXT4-fs (loop1): Block reservation details [ 70.796970][ T4701] EXT4-fs (loop1): i_reserved_data_blocks=4096 [ 70.845737][ T4724] netlink: 12 bytes leftover after parsing attributes in process `syz.0.401'. [ 70.854795][ T4724] smc: net device bond0 applied user defined pnetid SY [ 70.861972][ T4724] smc: net device bond0 erased user defined pnetid SY [ 70.960227][ T4728] loop0: detected capacity change from 0 to 512 [ 70.967048][ T4728] EXT4-fs: Ignoring removed mblk_io_submit option [ 70.974823][ T4728] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 70.987016][ T4728] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.999645][ T4728] ext4 filesystem being mounted at /91/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 71.097814][ T4733] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.145392][ T4733] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.195600][ T4733] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.245614][ T4733] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.311844][ T4733] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.325133][ T4733] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.346868][ T4733] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.365815][ T31] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 2058 with max blocks 2047 with error 28 [ 71.378344][ T4733] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.378624][ T31] EXT4-fs (loop1): This should not happen!! Data will be lost [ 71.378624][ T31] [ 71.536449][ T4744] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.567501][ T4728] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 71.582256][ T4728] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 9 with max blocks 2048 with error 28 [ 71.594827][ T4728] EXT4-fs (loop0): This should not happen!! Data will be lost [ 71.594827][ T4728] [ 71.604691][ T4728] EXT4-fs (loop0): Total free blocks count 0 [ 71.610737][ T4728] EXT4-fs (loop0): Free/Dirty block details [ 71.616688][ T4728] EXT4-fs (loop0): free_blocks=39626 [ 71.622013][ T4728] EXT4-fs (loop0): dirty_blocks=4096 [ 71.627359][ T4728] EXT4-fs (loop0): Block reservation details [ 71.633355][ T4728] EXT4-fs (loop0): i_reserved_data_blocks=4096 [ 71.655430][ T4744] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.695557][ T4744] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.755596][ T4744] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.207719][ T4082] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 2058 with max blocks 2047 with error 28 [ 72.368242][ T4756] netlink: 332 bytes leftover after parsing attributes in process `syz.4.414'. [ 72.368514][ T29] audit: type=1400 audit(1750891480.575:1086): avc: denied { ioctl } for pid=4755 comm="syz.4.414" path="socket:[10406]" dev="sockfs" ino=10406 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 72.418286][ T4760] FAULT_INJECTION: forcing a failure. [ 72.418286][ T4760] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 72.431563][ T4760] CPU: 0 UID: 0 PID: 4760 Comm: syz.0.415 Not tainted 6.16.0-rc3-syzkaller-00057-g92ca6c498a5e #0 PREEMPT(voluntary) [ 72.431597][ T4760] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 72.431612][ T4760] Call Trace: [ 72.431619][ T4760] [ 72.431628][ T4760] __dump_stack+0x1d/0x30 [ 72.431705][ T4760] dump_stack_lvl+0xe8/0x140 [ 72.431724][ T4760] dump_stack+0x15/0x1b [ 72.431739][ T4760] should_fail_ex+0x265/0x280 [ 72.431842][ T4760] should_fail+0xb/0x20 [ 72.431866][ T4760] should_fail_usercopy+0x1a/0x20 [ 72.431894][ T4760] _copy_from_user+0x1c/0xb0 [ 72.431912][ T4760] memdup_user+0x5e/0xd0 [ 72.431988][ T4760] strndup_user+0x68/0xb0 [ 72.432008][ T4760] __se_sys_mount+0x4d/0x2e0 [ 72.432025][ T4760] ? fput+0x8f/0xc0 [ 72.432101][ T4760] ? ksys_write+0x192/0x1a0 [ 72.432130][ T4760] __x64_sys_mount+0x67/0x80 [ 72.432146][ T4760] x64_sys_call+0xd36/0x2fb0 [ 72.432194][ T4760] do_syscall_64+0xd2/0x200 [ 72.432277][ T4760] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 72.432301][ T4760] ? clear_bhb_loop+0x40/0x90 [ 72.432319][ T4760] ? clear_bhb_loop+0x40/0x90 [ 72.432342][ T4760] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 72.432438][ T4760] RIP: 0033:0x7f25246de929 [ 72.432452][ T4760] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 72.432498][ T4760] RSP: 002b:00007f2522d47038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 72.432514][ T4760] RAX: ffffffffffffffda RBX: 00007f2524905fa0 RCX: 00007f25246de929 [ 72.432563][ T4760] RDX: 00002000000000c0 RSI: 0000200000000080 RDI: 0000000000000000 [ 72.432573][ T4760] RBP: 00007f2522d47090 R08: 00002000000003c0 R09: 0000000000000000 [ 72.432584][ T4760] R10: 0000000000200000 R11: 0000000000000246 R12: 0000000000000001 [ 72.432606][ T4760] R13: 0000000000000000 R14: 00007f2524905fa0 R15: 00007ffc502552a8 [ 72.432623][ T4760] [ 72.695301][ T4762] loop0: detected capacity change from 0 to 512 [ 72.701948][ T4762] EXT4-fs: Ignoring removed mblk_io_submit option [ 72.711807][ T4762] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 72.725601][ T4762] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.738340][ T4762] ext4 filesystem being mounted at /97/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 73.192742][ T4762] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 73.207389][ T4762] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 9 with max blocks 2048 with error 28 [ 73.219966][ T4762] EXT4-fs (loop0): This should not happen!! Data will be lost [ 73.219966][ T4762] [ 73.229663][ T4762] EXT4-fs (loop0): Total free blocks count 0 [ 73.235722][ T4762] EXT4-fs (loop0): Free/Dirty block details [ 73.241621][ T4762] EXT4-fs (loop0): free_blocks=39626 [ 73.247010][ T4762] EXT4-fs (loop0): dirty_blocks=4096 [ 73.252325][ T4762] EXT4-fs (loop0): Block reservation details [ 73.258346][ T4762] EXT4-fs (loop0): i_reserved_data_blocks=4096 [ 73.490221][ T4677] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.501456][ T4677] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.512689][ T4677] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.523932][ T4677] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.550819][ T4768] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.595732][ T4768] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.665419][ T4768] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.725384][ T4768] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.800998][ T31] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 2058 with max blocks 2047 with error 28 [ 73.840763][ T4744] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.852460][ T4744] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.865618][ T4744] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.877604][ T4744] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.894793][ T29] audit: type=1400 audit(1750891482.105:1087): avc: denied { accept } for pid=4772 comm="+}[@" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 73.927131][ T29] audit: type=1400 audit(1750891482.105:1088): avc: denied { watch watch_reads } for pid=4772 comm="+}[@" path="/98" dev="tmpfs" ino=541 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 73.955283][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.965069][ T29] audit: type=1326 audit(1750891482.175:1089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4776 comm="syz.0.420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25246de929 code=0x7ffc0000 [ 73.988564][ T29] audit: type=1326 audit(1750891482.175:1090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4776 comm="syz.0.420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25246de929 code=0x7ffc0000 [ 74.017442][ T4777] netlink: 20 bytes leftover after parsing attributes in process `syz.0.420'. [ 74.031030][ T29] audit: type=1326 audit(1750891482.225:1091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4776 comm="syz.0.420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f25246de929 code=0x7ffc0000 [ 74.078114][ T4781] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4781 comm=syz.1.422 [ 74.095684][ T4777] netlink: 8 bytes leftover after parsing attributes in process `syz.0.420'. [ 74.105190][ T4777] netlink: 8 bytes leftover after parsing attributes in process `syz.0.420'. [ 74.124746][ T4786] loop1: detected capacity change from 0 to 512 [ 74.131812][ T4786] EXT4-fs: Ignoring removed bh option [ 74.138816][ T4786] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 74.151920][ T4786] EXT4-fs (loop1): 1 truncate cleaned up [ 74.158704][ T4788] loop3: detected capacity change from 0 to 128 [ 74.158724][ T4786] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.201408][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.258435][ T4792] loop1: detected capacity change from 0 to 512 [ 74.261796][ T4788] bio_check_eod: 90 callbacks suppressed [ 74.261817][ T4788] syz.3.425: attempt to access beyond end of device [ 74.261817][ T4788] loop3: rw=1, sector=1033, nr_sectors = 8 limit=128 [ 74.268924][ T4792] EXT4-fs: Ignoring removed mblk_io_submit option [ 74.271032][ T4788] syz.3.425: attempt to access beyond end of device [ 74.271032][ T4788] loop3: rw=1, sector=137, nr_sectors = 8 limit=128 [ 74.303796][ T4788] syz.3.425: attempt to access beyond end of device [ 74.303796][ T4788] loop3: rw=1, sector=201, nr_sectors = 8 limit=128 [ 74.306445][ T4792] EXT4-fs error (device loop1): ext4_iget_extra_inode:5035: inode #15: comm syz.1.426: corrupted in-inode xattr: invalid ea_ino [ 74.317365][ T4788] syz.3.425: attempt to access beyond end of device [ 74.317365][ T4788] loop3: rw=1, sector=265, nr_sectors = 8 limit=128 [ 74.343367][ T4788] syz.3.425: attempt to access beyond end of device [ 74.343367][ T4788] loop3: rw=1, sector=329, nr_sectors = 8 limit=128 [ 74.356533][ T4788] syz.3.425: attempt to access beyond end of device [ 74.356533][ T4788] loop3: rw=1, sector=393, nr_sectors = 8 limit=128 [ 74.369669][ T4788] syz.3.425: attempt to access beyond end of device [ 74.369669][ T4788] loop3: rw=1, sector=457, nr_sectors = 8 limit=128 [ 74.369850][ T4791] netlink: 80 bytes leftover after parsing attributes in process `syz.3.425'. [ 74.382804][ T4788] syz.3.425: attempt to access beyond end of device [ 74.382804][ T4788] loop3: rw=1, sector=521, nr_sectors = 8 limit=128 [ 74.405121][ T4788] syz.3.425: attempt to access beyond end of device [ 74.405121][ T4788] loop3: rw=1, sector=585, nr_sectors = 8 limit=128 [ 74.414148][ T4792] EXT4-fs error (device loop1): ext4_orphan_get:1398: comm syz.1.426: couldn't read orphan inode 15 (err -117) [ 74.418660][ T4788] syz.3.425: attempt to access beyond end of device [ 74.418660][ T4788] loop3: rw=1, sector=649, nr_sectors = 8 limit=128 [ 74.445812][ T4792] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.502878][ T4803] loop0: detected capacity change from 0 to 512 [ 74.509735][ T4803] EXT4-fs: Ignoring removed mblk_io_submit option [ 74.522332][ T4803] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 74.523310][ T4805] netlink: 68 bytes leftover after parsing attributes in process `syz.1.426'. [ 74.545892][ T4803] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.558691][ T4803] ext4 filesystem being mounted at /101/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 75.002906][ T4812] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.029345][ T4803] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 75.044148][ T4803] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 9 with max blocks 2048 with error 28 [ 75.056807][ T4803] EXT4-fs (loop0): This should not happen!! Data will be lost [ 75.056807][ T4803] [ 75.066581][ T4803] EXT4-fs (loop0): Total free blocks count 0 [ 75.072630][ T4803] EXT4-fs (loop0): Free/Dirty block details [ 75.078584][ T4803] EXT4-fs (loop0): free_blocks=39626 [ 75.083892][ T4803] EXT4-fs (loop0): dirty_blocks=4096 [ 75.089223][ T4803] EXT4-fs (loop0): Block reservation details [ 75.095323][ T4803] EXT4-fs (loop0): i_reserved_data_blocks=4096 [ 75.102417][ T4812] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.155550][ T4812] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.176073][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.205962][ T4812] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.244449][ T4817] vhci_hcd: invalid port number 96 [ 75.249644][ T4817] vhci_hcd: default hub control req: 0017 vfffc i0060 l0 [ 75.263235][ T4812] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.280860][ T4812] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.292881][ T4812] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.308275][ T4812] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.355664][ T4826] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4826 comm=syz.3.434 [ 75.430393][ T4832] loop3: detected capacity change from 0 to 128 [ 75.522368][ T4832] netlink: 60 bytes leftover after parsing attributes in process `syz.3.436'. [ 75.532729][ T29] kauditd_printk_skb: 96 callbacks suppressed [ 75.532742][ T29] audit: type=1326 audit(1750891483.745:1188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4831 comm="syz.3.436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08183fe929 code=0x7ffc0000 [ 75.562271][ T29] audit: type=1326 audit(1750891483.745:1189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4831 comm="syz.3.436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08183fe929 code=0x7ffc0000 [ 75.585740][ T29] audit: type=1326 audit(1750891483.745:1190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4831 comm="syz.3.436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f08183fe929 code=0x7ffc0000 [ 75.609046][ T29] audit: type=1326 audit(1750891483.745:1191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4831 comm="syz.3.436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08183fe929 code=0x7ffc0000 [ 75.632479][ T29] audit: type=1326 audit(1750891483.745:1192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4831 comm="syz.3.436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f08183fe929 code=0x7ffc0000 [ 75.655900][ T29] audit: type=1326 audit(1750891483.745:1193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4831 comm="syz.3.436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08183fe929 code=0x7ffc0000 [ 75.679392][ T29] audit: type=1326 audit(1750891483.745:1194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4831 comm="syz.3.436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=128 compat=0 ip=0x7f08183fe929 code=0x7ffc0000 [ 75.782182][ T29] audit: type=1400 audit(1750891483.985:1195): avc: denied { create } for pid=4834 comm="syz.4.437" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 75.801897][ T29] audit: type=1400 audit(1750891483.985:1196): avc: denied { connect } for pid=4834 comm="syz.4.437" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 75.821522][ T29] audit: type=1400 audit(1750891483.985:1197): avc: denied { write } for pid=4834 comm="syz.4.437" name="mcfilter" dev="proc" ino=4026532778 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 75.862892][ T4837] netlink: 32 bytes leftover after parsing attributes in process `syz.4.438'. [ 76.036438][ T4851] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4851 comm=syz.4.445 [ 76.240245][ T4862] netlink: 32 bytes leftover after parsing attributes in process `syz.1.450'. [ 76.592211][ T4870] netlink: 20 bytes leftover after parsing attributes in process `syz.1.453'. [ 76.683778][ T4870] netlink: 8 bytes leftover after parsing attributes in process `syz.1.453'. [ 76.780460][ T4877] FAULT_INJECTION: forcing a failure. [ 76.780460][ T4877] name failslab, interval 1, probability 0, space 0, times 0 [ 76.793372][ T4877] CPU: 0 UID: 0 PID: 4877 Comm: syz.1.456 Not tainted 6.16.0-rc3-syzkaller-00057-g92ca6c498a5e #0 PREEMPT(voluntary) [ 76.793404][ T4877] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 76.793420][ T4877] Call Trace: [ 76.793489][ T4877] [ 76.793498][ T4877] __dump_stack+0x1d/0x30 [ 76.793522][ T4877] dump_stack_lvl+0xe8/0x140 [ 76.793733][ T4877] dump_stack+0x15/0x1b [ 76.793752][ T4877] should_fail_ex+0x265/0x280 [ 76.793806][ T4877] should_failslab+0x8c/0xb0 [ 76.793829][ T4877] __kmalloc_noprof+0xa5/0x3e0 [ 76.793860][ T4877] ? nla_strdup+0x78/0xc0 [ 76.793919][ T4877] nla_strdup+0x78/0xc0 [ 76.793935][ T4877] nf_tables_newtable+0x3ba/0xea0 [ 76.794063][ T4877] nfnetlink_rcv+0xb96/0x1690 [ 76.794135][ T4877] netlink_unicast+0x59e/0x670 [ 76.794174][ T4877] netlink_sendmsg+0x58b/0x6b0 [ 76.794251][ T4877] ? __pfx_netlink_sendmsg+0x10/0x10 [ 76.794275][ T4877] __sock_sendmsg+0x142/0x180 [ 76.794376][ T4877] ____sys_sendmsg+0x31e/0x4e0 [ 76.794421][ T4877] ___sys_sendmsg+0x17b/0x1d0 [ 76.794483][ T4877] __x64_sys_sendmsg+0xd4/0x160 [ 76.794530][ T4877] x64_sys_call+0x2999/0x2fb0 [ 76.794588][ T4877] do_syscall_64+0xd2/0x200 [ 76.794610][ T4877] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 76.794638][ T4877] ? clear_bhb_loop+0x40/0x90 [ 76.794663][ T4877] ? clear_bhb_loop+0x40/0x90 [ 76.794759][ T4877] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.794783][ T4877] RIP: 0033:0x7f516386e929 [ 76.794798][ T4877] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 76.794816][ T4877] RSP: 002b:00007f5161ed7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 76.794836][ T4877] RAX: ffffffffffffffda RBX: 00007f5163a95fa0 RCX: 00007f516386e929 [ 76.794864][ T4877] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 76.794878][ T4877] RBP: 00007f5161ed7090 R08: 0000000000000000 R09: 0000000000000000 [ 76.794893][ T4877] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 76.794945][ T4877] R13: 0000000000000000 R14: 00007f5163a95fa0 R15: 00007ffe0b9a5438 [ 76.794969][ T4877] [ 77.042781][ T4880] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4880 comm=syz.1.457 [ 77.231646][ T4893] loop4: detected capacity change from 0 to 512 [ 77.239917][ T4893] EXT4-fs: Ignoring removed mblk_io_submit option [ 77.250863][ T4893] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 77.267989][ T4893] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.280625][ T4893] ext4 filesystem being mounted at /107/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 77.472811][ T37] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 2058 with max blocks 2047 with error 28 [ 77.584916][ T4900] loop0: detected capacity change from 0 to 128 [ 77.587098][ T4902] loop3: detected capacity change from 0 to 128 [ 77.850768][ T4768] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.861925][ T4893] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 77.863279][ T4768] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.877805][ T4893] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 9 with max blocks 2048 with error 28 [ 77.889230][ T4768] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.897109][ T4893] EXT4-fs (loop4): This should not happen!! Data will be lost [ 77.897109][ T4893] [ 77.897143][ T4893] EXT4-fs (loop4): Total free blocks count 0 [ 77.913140][ T4768] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.915032][ T4893] EXT4-fs (loop4): Free/Dirty block details [ 77.915050][ T4893] EXT4-fs (loop4): free_blocks=39626 [ 77.940577][ T4893] EXT4-fs (loop4): dirty_blocks=4096 [ 77.945942][ T4893] EXT4-fs (loop4): Block reservation details [ 77.952132][ T4893] EXT4-fs (loop4): i_reserved_data_blocks=4096 [ 78.070162][ T4914] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4914 comm=syz.2.468 [ 78.105416][ T4918] loop2: detected capacity change from 0 to 512 [ 78.113915][ T4918] EXT4-fs: Ignoring removed bh option [ 78.124443][ T4918] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 78.135460][ T4918] EXT4-fs (loop2): 1 truncate cleaned up [ 78.141659][ T4918] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.159534][ T4918] IPv4: Oversized IP packet from 127.202.26.0 [ 78.180802][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.182802][ T4923] loop1: detected capacity change from 0 to 256 [ 78.211118][ T4923] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 78.221724][ T4923] FAT-fs (loop1): Filesystem has been set read-only [ 78.229806][ T4925] loop2: detected capacity change from 0 to 2048 [ 78.275753][ T3750] loop2: p4 < > [ 78.281048][ T4925] loop2: p4 < > [ 78.337178][ T4928] loop1: detected capacity change from 0 to 512 [ 78.343927][ T4928] EXT4-fs: Ignoring removed mblk_io_submit option [ 78.358160][ T4928] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 78.368767][ T4928] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.368968][ T4928] ext4 filesystem being mounted at /98/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 78.474479][ T4936] IPv4: Oversized IP packet from 127.202.26.0 [ 78.484170][ T4938] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.535915][ T4938] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.567760][ T4066] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 2058 with max blocks 2047 with error 28 [ 78.598755][ T4938] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.675674][ T4938] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.842736][ T4965] loop0: detected capacity change from 0 to 128 [ 79.042647][ T4928] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 79.059261][ T4928] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 9 with max blocks 2048 with error 28 [ 79.071819][ T4928] EXT4-fs (loop1): This should not happen!! Data will be lost [ 79.071819][ T4928] [ 79.081753][ T4928] EXT4-fs (loop1): Total free blocks count 0 [ 79.087831][ T4928] EXT4-fs (loop1): Free/Dirty block details [ 79.093820][ T4928] EXT4-fs (loop1): free_blocks=39626 [ 79.099227][ T4928] EXT4-fs (loop1): dirty_blocks=4096 [ 79.104608][ T4928] EXT4-fs (loop1): Block reservation details [ 79.110609][ T4928] EXT4-fs (loop1): i_reserved_data_blocks=4096 [ 79.380806][ T4938] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.392763][ T4938] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.411158][ T4938] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.428350][ T4938] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.649778][ T5007] FAULT_INJECTION: forcing a failure. [ 79.649778][ T5007] name failslab, interval 1, probability 0, space 0, times 0 [ 79.662614][ T5007] CPU: 0 UID: 0 PID: 5007 Comm: syz.2.504 Not tainted 6.16.0-rc3-syzkaller-00057-g92ca6c498a5e #0 PREEMPT(voluntary) [ 79.662713][ T5007] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 79.662726][ T5007] Call Trace: [ 79.662733][ T5007] [ 79.662741][ T5007] __dump_stack+0x1d/0x30 [ 79.662761][ T5007] dump_stack_lvl+0xe8/0x140 [ 79.662783][ T5007] dump_stack+0x15/0x1b [ 79.662866][ T5007] should_fail_ex+0x265/0x280 [ 79.662907][ T5007] should_failslab+0x8c/0xb0 [ 79.662938][ T5007] kmem_cache_alloc_noprof+0x50/0x310 [ 79.662964][ T5007] ? getname_flags+0x80/0x3b0 [ 79.663068][ T5007] getname_flags+0x80/0x3b0 [ 79.663090][ T5007] user_path_at+0x28/0x130 [ 79.663116][ T5007] do_fchownat+0xb0/0x210 [ 79.663186][ T5007] __x64_sys_lchown+0x4a/0x60 [ 79.663217][ T5007] x64_sys_call+0x1c87/0x2fb0 [ 79.663243][ T5007] do_syscall_64+0xd2/0x200 [ 79.663262][ T5007] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 79.663318][ T5007] ? clear_bhb_loop+0x40/0x90 [ 79.663397][ T5007] ? clear_bhb_loop+0x40/0x90 [ 79.663425][ T5007] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.663451][ T5007] RIP: 0033:0x7f9f7903e929 [ 79.663465][ T5007] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 79.663485][ T5007] RSP: 002b:00007f9f776a7038 EFLAGS: 00000246 ORIG_RAX: 000000000000005e [ 79.663538][ T5007] RAX: ffffffffffffffda RBX: 00007f9f79265fa0 RCX: 00007f9f7903e929 [ 79.663550][ T5007] RDX: 000000000000ee01 RSI: 0000000000000000 RDI: 00002000000006c0 [ 79.663563][ T5007] RBP: 00007f9f776a7090 R08: 0000000000000000 R09: 0000000000000000 [ 79.663578][ T5007] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 79.663641][ T5007] R13: 0000000000000000 R14: 00007f9f79265fa0 R15: 00007ffda7a43388 [ 79.663661][ T5007] [ 79.862972][ T4066] bio_check_eod: 455 callbacks suppressed [ 79.862989][ T4066] kworker/u8:10: attempt to access beyond end of device [ 79.862989][ T4066] loop0: rw=1, sector=145, nr_sectors = 8 limit=128 [ 79.893133][ T4066] kworker/u8:10: attempt to access beyond end of device [ 79.893133][ T4066] loop0: rw=1, sector=161, nr_sectors = 8 limit=128 [ 79.907171][ T4066] kworker/u8:10: attempt to access beyond end of device [ 79.907171][ T4066] loop0: rw=1, sector=177, nr_sectors = 8 limit=128 [ 79.927391][ T4066] kworker/u8:10: attempt to access beyond end of device [ 79.927391][ T4066] loop0: rw=1, sector=193, nr_sectors = 8 limit=128 [ 79.944189][ T5015] __nla_validate_parse: 11 callbacks suppressed [ 79.944255][ T5015] netlink: 40 bytes leftover after parsing attributes in process `syz.3.509'. [ 79.949738][ T4066] kworker/u8:10: attempt to access beyond end of device [ 79.949738][ T4066] loop0: rw=1, sector=209, nr_sectors = 8 limit=128 [ 79.965196][ T5011] netlink: 4 bytes leftover after parsing attributes in process `syz.4.505'. [ 79.974720][ T4066] kworker/u8:10: attempt to access beyond end of device [ 79.974720][ T4066] loop0: rw=1, sector=225, nr_sectors = 8 limit=128 [ 79.996379][ T4066] kworker/u8:10: attempt to access beyond end of device [ 79.996379][ T4066] loop0: rw=1, sector=241, nr_sectors = 8 limit=128 [ 80.009919][ T4066] kworker/u8:10: attempt to access beyond end of device [ 80.009919][ T4066] loop0: rw=1, sector=257, nr_sectors = 8 limit=128 [ 80.028255][ T4066] kworker/u8:10: attempt to access beyond end of device [ 80.028255][ T4066] loop0: rw=1, sector=273, nr_sectors = 8 limit=128 [ 80.047332][ T5020] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.058753][ T4066] kworker/u8:10: attempt to access beyond end of device [ 80.058753][ T4066] loop0: rw=1, sector=289, nr_sectors = 8 limit=128 [ 80.081465][ T5011] capability: warning: `syz.4.505' uses deprecated v2 capabilities in a way that may be insecure [ 80.103466][ T5024] loop0: detected capacity change from 0 to 256 [ 80.111191][ T5020] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.125473][ T5024] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 80.135656][ T5024] FAT-fs (loop0): Filesystem has been set read-only [ 80.190704][ T5020] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.216578][ T5032] netlink: 20 bytes leftover after parsing attributes in process `syz.4.514'. [ 80.245889][ T5020] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.259901][ T5038] loop0: detected capacity change from 0 to 128 [ 80.338920][ T5044] loop2: detected capacity change from 0 to 512 [ 80.347714][ T5044] EXT4-fs: Ignoring removed bh option [ 80.358016][ T5044] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 80.369582][ T5044] EXT4-fs (loop2): 1 truncate cleaned up [ 80.375918][ T5044] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.396288][ T5044] IPv4: Oversized IP packet from 127.202.26.0 [ 80.412624][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.492745][ T5056] FAULT_INJECTION: forcing a failure. [ 80.492745][ T5056] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 80.506008][ T5056] CPU: 0 UID: 0 PID: 5056 Comm: syz.4.523 Not tainted 6.16.0-rc3-syzkaller-00057-g92ca6c498a5e #0 PREEMPT(voluntary) [ 80.506043][ T5056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 80.506058][ T5056] Call Trace: [ 80.506066][ T5056] [ 80.506076][ T5056] __dump_stack+0x1d/0x30 [ 80.506172][ T5056] dump_stack_lvl+0xe8/0x140 [ 80.506190][ T5056] dump_stack+0x15/0x1b [ 80.506209][ T5056] should_fail_ex+0x265/0x280 [ 80.506249][ T5056] should_fail+0xb/0x20 [ 80.506281][ T5056] should_fail_usercopy+0x1a/0x20 [ 80.506320][ T5056] _copy_to_user+0x20/0xa0 [ 80.506347][ T5056] simple_read_from_buffer+0xb5/0x130 [ 80.506381][ T5056] proc_fail_nth_read+0x100/0x140 [ 80.506421][ T5056] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 80.506453][ T5056] vfs_read+0x19d/0x6f0 [ 80.506536][ T5056] ? __rcu_read_unlock+0x4f/0x70 [ 80.506560][ T5056] ? __fget_files+0x184/0x1c0 [ 80.506585][ T5056] ksys_read+0xda/0x1a0 [ 80.506649][ T5056] __x64_sys_read+0x40/0x50 [ 80.506682][ T5056] x64_sys_call+0x2d77/0x2fb0 [ 80.506751][ T5056] do_syscall_64+0xd2/0x200 [ 80.506831][ T5056] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 80.506915][ T5056] ? clear_bhb_loop+0x40/0x90 [ 80.506993][ T5056] ? clear_bhb_loop+0x40/0x90 [ 80.507016][ T5056] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.507090][ T5056] RIP: 0033:0x7f2fa709d33c [ 80.507106][ T5056] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 80.507125][ T5056] RSP: 002b:00007f2fa5707030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 80.507145][ T5056] RAX: ffffffffffffffda RBX: 00007f2fa72c5fa0 RCX: 00007f2fa709d33c [ 80.507225][ T5056] RDX: 000000000000000f RSI: 00007f2fa57070a0 RDI: 0000000000000006 [ 80.507237][ T5056] RBP: 00007f2fa5707090 R08: 0000000000000000 R09: 0000000000000000 [ 80.507344][ T5056] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 80.507356][ T5056] R13: 0000000000000000 R14: 00007f2fa72c5fa0 R15: 00007fff9f40a348 [ 80.507376][ T5056] [ 80.732588][ T5060] netlink: 12 bytes leftover after parsing attributes in process `syz.4.525'. [ 80.742990][ T5060] smc: net device bond0 applied user defined pnetid SY [ 80.750574][ T5060] smc: net device bond0 erased user defined pnetid SY [ 80.790284][ T5062] loop4: detected capacity change from 0 to 2048 [ 80.809223][ T29] kauditd_printk_skb: 430 callbacks suppressed [ 80.809294][ T29] audit: type=1326 audit(1750891489.015:1626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5066 comm="syz.2.528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f7903e929 code=0x7ffc0000 [ 80.845584][ T29] audit: type=1326 audit(1750891489.015:1627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5066 comm="syz.2.528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9f7903e929 code=0x7ffc0000 [ 80.854682][ T5062] loop4: p4 < > [ 80.869013][ T29] audit: type=1326 audit(1750891489.015:1628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5066 comm="syz.2.528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f7903e929 code=0x7ffc0000 [ 80.895930][ T29] audit: type=1326 audit(1750891489.015:1629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5066 comm="syz.2.528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f7903e929 code=0x7ffc0000 [ 80.919452][ T29] audit: type=1326 audit(1750891489.015:1630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5066 comm="syz.2.528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9f7903e929 code=0x7ffc0000 [ 80.943138][ T29] audit: type=1326 audit(1750891489.015:1631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5066 comm="syz.2.528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f7903e929 code=0x7ffc0000 [ 80.946884][ T2995] loop4: p4 < > [ 80.966488][ T29] audit: type=1326 audit(1750891489.015:1632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5066 comm="syz.2.528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f7903e929 code=0x7ffc0000 [ 80.993602][ T29] audit: type=1326 audit(1750891489.015:1633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5066 comm="syz.2.528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f9f7903e929 code=0x7ffc0000 [ 81.016803][ T29] audit: type=1326 audit(1750891489.015:1634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5066 comm="syz.2.528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f7903e929 code=0x7ffc0000 [ 81.040308][ T29] audit: type=1326 audit(1750891489.015:1635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5066 comm="syz.2.528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f7903e929 code=0x7ffc0000 [ 81.064676][ T5062] FAULT_INJECTION: forcing a failure. [ 81.064676][ T5062] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 81.077919][ T5062] CPU: 0 UID: 0 PID: 5062 Comm: syz.4.526 Not tainted 6.16.0-rc3-syzkaller-00057-g92ca6c498a5e #0 PREEMPT(voluntary) [ 81.077947][ T5062] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 81.077959][ T5062] Call Trace: [ 81.077964][ T5062] [ 81.077970][ T5062] __dump_stack+0x1d/0x30 [ 81.078030][ T5062] dump_stack_lvl+0xe8/0x140 [ 81.078048][ T5062] dump_stack+0x15/0x1b [ 81.078063][ T5062] should_fail_ex+0x265/0x280 [ 81.078104][ T5062] should_fail+0xb/0x20 [ 81.078134][ T5062] should_fail_usercopy+0x1a/0x20 [ 81.078168][ T5062] _copy_from_iter+0xcf/0xe40 [ 81.078207][ T5062] ? __build_skb_around+0x1a0/0x200 [ 81.078236][ T5062] ? __alloc_skb+0x223/0x320 [ 81.078291][ T5062] netlink_sendmsg+0x471/0x6b0 [ 81.078320][ T5062] ? __pfx_netlink_sendmsg+0x10/0x10 [ 81.078345][ T5062] __sock_sendmsg+0x142/0x180 [ 81.078391][ T5062] ____sys_sendmsg+0x31e/0x4e0 [ 81.078435][ T5062] ___sys_sendmsg+0x17b/0x1d0 [ 81.078486][ T5062] __x64_sys_sendmsg+0xd4/0x160 [ 81.078560][ T5062] x64_sys_call+0x2999/0x2fb0 [ 81.078585][ T5062] do_syscall_64+0xd2/0x200 [ 81.078602][ T5062] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 81.078654][ T5062] ? clear_bhb_loop+0x40/0x90 [ 81.078681][ T5062] ? clear_bhb_loop+0x40/0x90 [ 81.078717][ T5062] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.078742][ T5062] RIP: 0033:0x7f2fa709e929 [ 81.078757][ T5062] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 81.078781][ T5062] RSP: 002b:00007f2fa5707038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 81.078799][ T5062] RAX: ffffffffffffffda RBX: 00007f2fa72c5fa0 RCX: 00007f2fa709e929 [ 81.078849][ T5062] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000006 [ 81.078864][ T5062] RBP: 00007f2fa5707090 R08: 0000000000000000 R09: 0000000000000000 [ 81.078880][ T5062] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 81.078895][ T5062] R13: 0000000000000000 R14: 00007f2fa72c5fa0 R15: 00007fff9f40a348 [ 81.078920][ T5062] [ 81.332160][ T5072] loop0: detected capacity change from 0 to 512 [ 81.348298][ T5072] EXT4-fs error (device loop0): ext4_orphan_get:1393: inode #15: comm syz.0.530: casefold flag without casefold feature [ 81.362275][ T5072] EXT4-fs error (device loop0): ext4_orphan_get:1398: comm syz.0.530: couldn't read orphan inode 15 (err -117) [ 81.375020][ T5072] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.413424][ T31] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 2058 with max blocks 2047 with error 28 [ 81.459238][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.581581][ T5082] loop2: detected capacity change from 0 to 256 [ 81.611960][ T5082] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 81.622199][ T5082] FAT-fs (loop2): Filesystem has been set read-only [ 81.706230][ T5093] loop1: detected capacity change from 0 to 128 [ 81.716689][ T5095] loop2: detected capacity change from 0 to 2048 [ 81.772696][ T3750] loop2: p4 < > [ 81.781444][ T5095] loop2: p4 < > [ 81.803697][ T5095] bridge0: entered promiscuous mode [ 81.815211][ T5095] macsec1: entered promiscuous mode [ 81.822034][ T5095] bridge0: port 3(macsec1) entered blocking state [ 81.828641][ T5095] bridge0: port 3(macsec1) entered disabled state [ 81.844284][ T5095] macsec1: entered allmulticast mode [ 81.849655][ T5095] bridge0: entered allmulticast mode [ 81.863460][ T5095] macsec1: left allmulticast mode [ 81.868612][ T5095] bridge0: left allmulticast mode [ 81.877775][ T5095] bridge0: left promiscuous mode [ 82.062255][ T5106] loop2: detected capacity change from 0 to 512 [ 82.092449][ T5106] EXT4-fs: Ignoring removed mblk_io_submit option [ 82.125061][ T5106] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 82.143349][ T5112] netlink: 32 bytes leftover after parsing attributes in process `syz.0.545'. [ 82.156738][ T5106] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.184126][ T5106] ext4 filesystem being mounted at /90/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 82.525878][ T5125] IPv4: Oversized IP packet from 127.202.26.0 [ 82.749046][ T5106] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 82.763618][ T5106] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 9 with max blocks 2048 with error 28 [ 82.776332][ T5106] EXT4-fs (loop2): This should not happen!! Data will be lost [ 82.776332][ T5106] [ 82.786116][ T5106] EXT4-fs (loop2): Total free blocks count 0 [ 82.792323][ T5106] EXT4-fs (loop2): Free/Dirty block details [ 82.798301][ T5106] EXT4-fs (loop2): free_blocks=39626 [ 82.803634][ T5106] EXT4-fs (loop2): dirty_blocks=4096 [ 82.808996][ T5106] EXT4-fs (loop2): Block reservation details [ 82.815059][ T5106] EXT4-fs (loop2): i_reserved_data_blocks=4096 [ 83.365136][ T37] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 2058 with max blocks 2047 with error 28 [ 83.400871][ T5153] netlink: 20 bytes leftover after parsing attributes in process `syz.0.559'. [ 83.464509][ T5157] loop2: detected capacity change from 0 to 128 [ 83.543573][ T5168] loop4: detected capacity change from 0 to 256 [ 83.563452][ T5020] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.575811][ T5020] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.586891][ T5170] IPv4: Oversized IP packet from 127.202.26.0 [ 83.595101][ T5168] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 83.597768][ T5020] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.605299][ T5168] FAT-fs (loop4): Filesystem has been set read-only [ 83.635358][ T5020] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.748578][ T5186] IPv4: Oversized IP packet from 127.202.26.0 [ 83.775280][ T5180] loop3: detected capacity change from 0 to 512 [ 83.787411][ T5180] EXT4-fs: Ignoring removed mblk_io_submit option [ 83.796144][ T5189] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.838952][ T5180] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 83.871738][ T5180] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.884543][ T5180] ext4 filesystem being mounted at /101/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 83.896631][ T5189] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.926182][ T5189] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.966478][ T5189] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.025245][ T5189] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.038578][ T5189] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.051317][ T5189] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.065573][ T5189] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.278897][ T5207] IPv4: Oversized IP packet from 127.202.26.0 [ 84.332122][ T5209] loop1: detected capacity change from 0 to 256 [ 84.362714][ T5211] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.391657][ T5209] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 84.401906][ T5209] FAT-fs (loop1): Filesystem has been set read-only [ 84.457541][ T5211] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.535372][ T5211] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.565963][ T5180] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 84.595440][ T5180] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 9 with max blocks 2048 with error 28 [ 84.595563][ T5211] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.607982][ T5180] EXT4-fs (loop3): This should not happen!! Data will be lost [ 84.607982][ T5180] [ 84.608005][ T5180] EXT4-fs (loop3): Total free blocks count 0 [ 84.608020][ T5180] EXT4-fs (loop3): Free/Dirty block details [ 84.608033][ T5180] EXT4-fs (loop3): free_blocks=39626 [ 84.608045][ T5180] EXT4-fs (loop3): dirty_blocks=4096 [ 84.608056][ T5180] EXT4-fs (loop3): Block reservation details [ 84.608067][ T5180] EXT4-fs (loop3): i_reserved_data_blocks=4096 [ 84.726040][ T5211] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.747914][ T5211] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.767035][ T5211] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.786856][ T5211] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.931063][ T5231] netlink: 8 bytes leftover after parsing attributes in process `syz.2.588'. [ 84.946166][ T5231] netlink: 332 bytes leftover after parsing attributes in process `syz.2.588'. [ 84.985845][ T5234] IPv4: Oversized IP packet from 127.202.26.0 [ 85.248340][ T4066] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 2058 with max blocks 2047 with error 28 [ 85.501203][ T5243] IPv4: Oversized IP packet from 127.202.26.0 [ 85.544370][ T5216] kexec: Could not allocate control_code_buffer [ 85.587475][ T5248] loop1: detected capacity change from 0 to 256 [ 85.623927][ T5248] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 85.634302][ T5248] FAT-fs (loop1): Filesystem has been set read-only [ 85.719713][ T5256] netlink: 12 bytes leftover after parsing attributes in process `syz.1.597'. [ 85.729760][ T5256] smc: net device bond0 applied user defined pnetid SY [ 85.737116][ T5256] smc: net device bond0 erased user defined pnetid SY [ 85.841134][ T5260] loop1: detected capacity change from 0 to 512 [ 85.847923][ T5260] EXT4-fs: Ignoring removed mblk_io_submit option [ 85.855267][ T5260] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 85.875570][ T5260] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.888257][ T5260] ext4 filesystem being mounted at /121/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 86.258918][ T5266] loop4: detected capacity change from 0 to 512 [ 86.272015][ T5266] EXT4-fs error (device loop4): ext4_orphan_get:1393: inode #15: comm syz.4.600: casefold flag without casefold feature [ 86.293485][ T5266] EXT4-fs error (device loop4): ext4_orphan_get:1398: comm syz.4.600: couldn't read orphan inode 15 (err -117) [ 86.307262][ T5266] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.345293][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.414157][ T5260] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 86.430336][ T5260] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 9 with max blocks 2048 with error 28 [ 86.442953][ T5260] EXT4-fs (loop1): This should not happen!! Data will be lost [ 86.442953][ T5260] [ 86.452807][ T5260] EXT4-fs (loop1): Total free blocks count 0 [ 86.458836][ T5260] EXT4-fs (loop1): Free/Dirty block details [ 86.464826][ T5260] EXT4-fs (loop1): free_blocks=39626 [ 86.470156][ T5260] EXT4-fs (loop1): dirty_blocks=4096 [ 86.475521][ T5260] EXT4-fs (loop1): Block reservation details [ 86.481528][ T5260] EXT4-fs (loop1): i_reserved_data_blocks=4096 [ 86.517348][ T29] kauditd_printk_skb: 224 callbacks suppressed [ 86.517363][ T29] audit: type=1326 audit(1750891494.725:1860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5273 comm="syz.3.602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08183fe929 code=0x7ffc0000 [ 86.547103][ T29] audit: type=1326 audit(1750891494.725:1861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5273 comm="syz.3.602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08183fe929 code=0x7ffc0000 [ 86.583522][ T29] audit: type=1326 audit(1750891494.725:1862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5273 comm="syz.3.602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f08183fe929 code=0x7ffc0000 [ 86.607006][ T29] audit: type=1326 audit(1750891494.725:1863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5273 comm="syz.3.602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08183fe929 code=0x7ffc0000 [ 86.630422][ T29] audit: type=1326 audit(1750891494.725:1864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5273 comm="syz.3.602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08183fe929 code=0x7ffc0000 [ 86.653788][ T29] audit: type=1326 audit(1750891494.725:1865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5273 comm="syz.3.602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f08183fe929 code=0x7ffc0000 [ 86.677288][ T29] audit: type=1326 audit(1750891494.725:1866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5273 comm="syz.3.602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08183fe929 code=0x7ffc0000 [ 86.700680][ T29] audit: type=1326 audit(1750891494.725:1867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5273 comm="syz.3.602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f08183fe929 code=0x7ffc0000 [ 86.724081][ T29] audit: type=1326 audit(1750891494.725:1868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5273 comm="syz.3.602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08183fe929 code=0x7ffc0000 [ 86.747460][ T29] audit: type=1326 audit(1750891494.725:1869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5273 comm="syz.3.602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08183fe929 code=0x7ffc0000 [ 86.851261][ T5279] loop3: detected capacity change from 0 to 512 [ 86.862816][ T5279] EXT4-fs: Ignoring removed bh option [ 86.869510][ T5279] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 86.880694][ T5279] EXT4-fs (loop3): 1 truncate cleaned up [ 86.886875][ T5279] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 86.901306][ T5279] IPv4: Oversized IP packet from 127.202.26.0 [ 86.920649][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.230492][ T5289] loop4: detected capacity change from 0 to 256 [ 87.240700][ T5289] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 87.251059][ T5289] FAT-fs (loop4): Filesystem has been set read-only [ 87.269094][ T267] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 2058 with max blocks 2047 with error 28 [ 87.307321][ T5291] netlink: 12 bytes leftover after parsing attributes in process `syz.4.609'. [ 87.319689][ T5291] smc: net device bond0 applied user defined pnetid SY [ 87.330369][ T5291] smc: net device bond0 erased user defined pnetid SY [ 87.489930][ T5307] netlink: 12 bytes leftover after parsing attributes in process `syz.1.615'. [ 87.499247][ T5307] smc: net device bond0 applied user defined pnetid SY [ 87.510455][ T5307] smc: net device bond0 erased user defined pnetid SY [ 87.900538][ T5316] loop1: detected capacity change from 0 to 512 [ 87.903608][ T5321] loop0: detected capacity change from 0 to 256 [ 87.915398][ T5321] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 87.925676][ T5321] FAT-fs (loop0): Filesystem has been set read-only [ 87.942078][ T5316] EXT4-fs: Ignoring removed mblk_io_submit option [ 87.968465][ T5316] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 88.004588][ T5316] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.017476][ T5327] loop0: detected capacity change from 0 to 512 [ 88.017561][ T5316] ext4 filesystem being mounted at /128/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 88.356474][ T5338] IPv4: Oversized IP packet from 127.202.26.0 [ 88.477990][ T5344] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5344 comm=syz.4.628 [ 88.510170][ T5346] IPv4: Oversized IP packet from 127.202.26.0 [ 88.549369][ T5316] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 88.564252][ T5316] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 9 with max blocks 2048 with error 28 [ 88.576788][ T5316] EXT4-fs (loop1): This should not happen!! Data will be lost [ 88.576788][ T5316] [ 88.586511][ T5316] EXT4-fs (loop1): Total free blocks count 0 [ 88.592543][ T5316] EXT4-fs (loop1): Free/Dirty block details [ 88.598510][ T5316] EXT4-fs (loop1): free_blocks=39626 [ 88.603834][ T5316] EXT4-fs (loop1): dirty_blocks=4096 [ 88.609269][ T5316] EXT4-fs (loop1): Block reservation details [ 88.615304][ T5316] EXT4-fs (loop1): i_reserved_data_blocks=4096 [ 88.679677][ T5353] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.725831][ T5353] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.776105][ T5353] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.825541][ T5353] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.855031][ T5356] loop0: detected capacity change from 0 to 128 [ 88.892440][ T5353] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.905612][ T5353] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.919186][ T5353] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.926677][ T5357] bio_check_eod: 429 callbacks suppressed [ 88.926698][ T5357] syz.0.633: attempt to access beyond end of device [ 88.926698][ T5357] loop0: rw=1, sector=713, nr_sectors = 8 limit=128 [ 88.932208][ T5353] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.933217][ T5357] syz.0.633: attempt to access beyond end of device [ 88.933217][ T5357] loop0: rw=1, sector=777, nr_sectors = 8 limit=128 [ 88.967646][ T5357] syz.0.633: attempt to access beyond end of device [ 88.967646][ T5357] loop0: rw=1, sector=841, nr_sectors = 8 limit=128 [ 88.999230][ T5357] syz.0.633: attempt to access beyond end of device [ 88.999230][ T5357] loop0: rw=1, sector=905, nr_sectors = 8 limit=128 [ 89.026176][ T5357] syz.0.633: attempt to access beyond end of device [ 89.026176][ T5357] loop0: rw=1, sector=969, nr_sectors = 8 limit=128 [ 89.039538][ T5357] syz.0.633: attempt to access beyond end of device [ 89.039538][ T5357] loop0: rw=1, sector=1033, nr_sectors = 8 limit=128 [ 89.054782][ T5357] syz.0.633: attempt to access beyond end of device [ 89.054782][ T5357] loop0: rw=1, sector=201, nr_sectors = 8 limit=128 [ 89.068403][ T5357] syz.0.633: attempt to access beyond end of device [ 89.068403][ T5357] loop0: rw=1, sector=329, nr_sectors = 8 limit=128 [ 89.082860][ T5357] syz.0.633: attempt to access beyond end of device [ 89.082860][ T5357] loop0: rw=1, sector=457, nr_sectors = 8 limit=128 [ 89.096285][ T5357] syz.0.633: attempt to access beyond end of device [ 89.096285][ T5357] loop0: rw=1, sector=585, nr_sectors = 8 limit=128 [ 89.193523][ T37] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 2058 with max blocks 2047 with error 28 [ 89.278202][ T5367] netlink: 332 bytes leftover after parsing attributes in process `syz.1.636'. [ 89.405949][ T5373] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5373 comm=syz.4.638 [ 89.440566][ T5375] loop4: detected capacity change from 0 to 128 [ 89.469596][ T5377] netlink: 20 bytes leftover after parsing attributes in process `syz.1.639'. [ 89.720477][ T5389] netlink: 32 bytes leftover after parsing attributes in process `syz.0.644'. [ 89.826477][ T5393] loop0: detected capacity change from 0 to 512 [ 89.833360][ T5393] EXT4-fs: Ignoring removed mblk_io_submit option [ 89.841976][ T5393] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 89.875783][ T5393] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 89.906395][ T5393] ext4 filesystem being mounted at /140/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 90.319297][ T5406] loop4: detected capacity change from 0 to 256 [ 90.385214][ T5393] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 90.400079][ T5393] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 9 with max blocks 2048 with error 28 [ 90.412603][ T5393] EXT4-fs (loop0): This should not happen!! Data will be lost [ 90.412603][ T5393] [ 90.422367][ T5393] EXT4-fs (loop0): Total free blocks count 0 [ 90.428452][ T5393] EXT4-fs (loop0): Free/Dirty block details [ 90.434404][ T5393] EXT4-fs (loop0): free_blocks=39626 [ 90.439706][ T5393] EXT4-fs (loop0): dirty_blocks=4096 [ 90.445076][ T5393] EXT4-fs (loop0): Block reservation details [ 90.451128][ T5393] EXT4-fs (loop0): i_reserved_data_blocks=4096 [ 90.521713][ T5414] program syz.1.653 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 90.565276][ T5418] hub 9-0:1.0: USB hub found [ 90.570070][ T5418] hub 9-0:1.0: 8 ports detected [ 90.656012][ T5424] netlink: 8 bytes leftover after parsing attributes in process `syz.1.654'. [ 90.724254][ T5427] loop1: detected capacity change from 0 to 512 [ 90.730895][ T5427] EXT4-fs: Ignoring removed oldalloc option [ 90.738424][ T5427] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 90.748890][ T5427] EXT4-fs (loop1): orphan cleanup on readonly fs [ 90.756429][ T5427] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.654: Failed to acquire dquot type 1 [ 90.768848][ T5427] EXT4-fs (loop1): 1 truncate cleaned up [ 90.776128][ T5427] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 90.789181][ T5427] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.008648][ T5433] netlink: 332 bytes leftover after parsing attributes in process `syz.3.660'. [ 91.240975][ T4082] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 2058 with max blocks 2047 with error 28 [ 91.829938][ T5448] loop2: detected capacity change from 0 to 512 [ 91.855050][ T5450] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5450 comm=syz.4.666 [ 91.857695][ T5448] EXT4-fs: Ignoring removed bh option [ 91.904600][ T5448] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 91.928330][ T5448] EXT4-fs (loop2): 1 truncate cleaned up [ 91.935963][ T5448] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 91.951927][ T5448] IPv4: Oversized IP packet from 127.202.26.0 [ 91.976921][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.034221][ T29] kauditd_printk_skb: 146 callbacks suppressed [ 92.034240][ T29] audit: type=1326 audit(1750891500.215:2014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5453 comm="syz.4.668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fa709e929 code=0x7ffc0000 [ 92.064004][ T29] audit: type=1326 audit(1750891500.215:2015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5453 comm="syz.4.668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fa709e929 code=0x7ffc0000 [ 92.087537][ T29] audit: type=1326 audit(1750891500.215:2016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5453 comm="syz.4.668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2fa709e929 code=0x7ffc0000 [ 92.110991][ T29] audit: type=1326 audit(1750891500.215:2017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5453 comm="syz.4.668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fa709e929 code=0x7ffc0000 [ 92.134380][ T29] audit: type=1326 audit(1750891500.215:2018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5453 comm="syz.4.668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fa709e929 code=0x7ffc0000 [ 92.157785][ T29] audit: type=1326 audit(1750891500.215:2019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5453 comm="syz.4.668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2fa709e929 code=0x7ffc0000 [ 92.181130][ T29] audit: type=1326 audit(1750891500.215:2020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5453 comm="syz.4.668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fa709e929 code=0x7ffc0000 [ 92.204607][ T29] audit: type=1326 audit(1750891500.215:2021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5453 comm="syz.4.668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fa709e929 code=0x7ffc0000 [ 92.227959][ T29] audit: type=1326 audit(1750891500.215:2022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5453 comm="syz.4.668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2fa709e929 code=0x7ffc0000 [ 92.251331][ T29] audit: type=1326 audit(1750891500.215:2023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5453 comm="syz.4.668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fa709e929 code=0x7ffc0000 [ 92.677950][ T5485] loop2: detected capacity change from 0 to 512 [ 92.686328][ T5483] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5483 comm=syz.4.679 [ 92.687148][ T5485] EXT4-fs: Ignoring removed bh option [ 92.742949][ T5485] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 92.775740][ T5485] EXT4-fs (loop2): 1 truncate cleaned up [ 92.782219][ T5485] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 92.800297][ T5485] IPv4: Oversized IP packet from 127.202.26.0 [ 92.819660][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.833568][ T5492] loop1: detected capacity change from 0 to 512 [ 92.853898][ T5492] EXT4-fs: Ignoring removed mblk_io_submit option [ 92.890996][ T5492] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 92.918010][ T5492] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 92.932100][ T5492] ext4 filesystem being mounted at /143/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 93.021417][ T5507] netlink: 4 bytes leftover after parsing attributes in process `syz.4.683'. [ 93.038262][ T5508] netlink: 8 bytes leftover after parsing attributes in process `syz.0.685'. [ 93.094680][ T5508] loop0: detected capacity change from 0 to 512 [ 93.101594][ T5508] EXT4-fs: Ignoring removed oldalloc option [ 93.157470][ T5508] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 93.229318][ T5508] EXT4-fs (loop0): orphan cleanup on readonly fs [ 93.238512][ T5508] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.685: Failed to acquire dquot type 1 [ 93.254083][ T5508] EXT4-fs (loop0): 1 truncate cleaned up [ 93.262656][ T5508] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 93.276190][ T5508] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.911009][ T5512] netlink: 12 bytes leftover after parsing attributes in process `syz.3.688'. [ 93.996830][ T5512] smc: net device bond0 applied user defined pnetid S [ 94.023759][ T5512] smc: net device bond0 erased user defined pnetid S [ 94.140942][ T5516] netlink: 12 bytes leftover after parsing attributes in process `syz.3.690'. [ 94.186910][ T5516] smc: net device bond0 applied user defined pnetid SY [ 94.224264][ T5516] smc: net device bond0 erased user defined pnetid SY [ 94.290686][ T5521] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5521 comm=syz.4.692 [ 94.550131][ T5492] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 94.629794][ T5492] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 9 with max blocks 2048 with error 28 [ 94.642467][ T5492] EXT4-fs (loop1): This should not happen!! Data will be lost [ 94.642467][ T5492] [ 94.652342][ T5492] EXT4-fs (loop1): Total free blocks count 0 [ 94.658391][ T5492] EXT4-fs (loop1): Free/Dirty block details [ 94.664385][ T5492] EXT4-fs (loop1): free_blocks=39626 [ 94.669701][ T5492] EXT4-fs (loop1): dirty_blocks=2295 [ 94.675061][ T5492] EXT4-fs (loop1): Block reservation details [ 94.681050][ T5492] EXT4-fs (loop1): i_reserved_data_blocks=2295 [ 94.840793][ T5541] loop3: detected capacity change from 0 to 128 [ 94.939898][ T5543] loop4: detected capacity change from 0 to 512 [ 94.956652][ T5546] bio_check_eod: 216 callbacks suppressed [ 94.956686][ T5546] syz.3.701: attempt to access beyond end of device [ 94.956686][ T5546] loop3: rw=1, sector=745, nr_sectors = 97 limit=128 [ 95.001910][ T5543] EXT4-fs: Ignoring removed bh option [ 95.019643][ T5543] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 95.041691][ T267] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 2058 with max blocks 245 with error 28 [ 95.095665][ T5548] FAULT_INJECTION: forcing a failure. [ 95.095665][ T5548] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 95.108963][ T5548] CPU: 0 UID: 0 PID: 5548 Comm: syz.2.704 Not tainted 6.16.0-rc3-syzkaller-00057-g92ca6c498a5e #0 PREEMPT(voluntary) [ 95.109001][ T5548] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 95.109018][ T5548] Call Trace: [ 95.109027][ T5548] [ 95.109036][ T5548] __dump_stack+0x1d/0x30 [ 95.109116][ T5548] dump_stack_lvl+0xe8/0x140 [ 95.109137][ T5548] dump_stack+0x15/0x1b [ 95.109153][ T5548] should_fail_ex+0x265/0x280 [ 95.109183][ T5548] should_fail+0xb/0x20 [ 95.109253][ T5548] should_fail_usercopy+0x1a/0x20 [ 95.109292][ T5548] _copy_to_user+0x20/0xa0 [ 95.109315][ T5548] simple_read_from_buffer+0xb5/0x130 [ 95.109434][ T5548] proc_fail_nth_read+0x100/0x140 [ 95.109490][ T5548] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 95.109527][ T5548] vfs_read+0x19d/0x6f0 [ 95.109564][ T5548] ? __rcu_read_unlock+0x4f/0x70 [ 95.109635][ T5548] ? __fget_files+0x184/0x1c0 [ 95.109661][ T5548] ksys_read+0xda/0x1a0 [ 95.109703][ T5548] __x64_sys_read+0x40/0x50 [ 95.109750][ T5548] x64_sys_call+0x2d77/0x2fb0 [ 95.109774][ T5548] do_syscall_64+0xd2/0x200 [ 95.109796][ T5548] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 95.109834][ T5548] ? clear_bhb_loop+0x40/0x90 [ 95.109908][ T5548] ? clear_bhb_loop+0x40/0x90 [ 95.109936][ T5548] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.109963][ T5548] RIP: 0033:0x7f9f7903d33c [ 95.110049][ T5548] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 95.110073][ T5548] RSP: 002b:00007f9f776a7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 95.110121][ T5548] RAX: ffffffffffffffda RBX: 00007f9f79265fa0 RCX: 00007f9f7903d33c [ 95.110149][ T5548] RDX: 000000000000000f RSI: 00007f9f776a70a0 RDI: 0000000000000006 [ 95.110163][ T5548] RBP: 00007f9f776a7090 R08: 0000000000000000 R09: 0000000000000000 [ 95.110183][ T5548] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 95.110258][ T5548] R13: 0000000000000000 R14: 00007f9f79265fa0 R15: 00007ffda7a43388 [ 95.110277][ T5548] [ 95.110736][ T5543] EXT4-fs (loop4): 1 truncate cleaned up [ 95.335430][ T5543] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 95.382869][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.387556][ T5565] netlink: 488 bytes leftover after parsing attributes in process `syz.1.705'. [ 95.514649][ T5570] loop4: detected capacity change from 0 to 512 [ 95.520118][ T5578] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5578 comm=syz.2.717 [ 95.521545][ T5570] EXT4-fs: Ignoring removed mblk_io_submit option [ 95.555039][ T5570] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 95.588153][ T5570] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 95.621399][ T5570] ext4 filesystem being mounted at /182/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 95.684605][ T4066] kworker/u8:10: attempt to access beyond end of device [ 95.684605][ T4066] loop3: rw=1, sector=145, nr_sectors = 8 limit=128 [ 95.702707][ T5591] loop0: detected capacity change from 0 to 512 [ 95.709850][ T5591] EXT4-fs: Ignoring removed bh option [ 95.720563][ T4066] kworker/u8:10: attempt to access beyond end of device [ 95.720563][ T4066] loop3: rw=1, sector=161, nr_sectors = 8 limit=128 [ 95.740094][ T5595] loop1: detected capacity change from 0 to 512 [ 95.742159][ T4066] kworker/u8:10: attempt to access beyond end of device [ 95.742159][ T4066] loop3: rw=1, sector=177, nr_sectors = 8 limit=128 [ 95.749230][ T5595] EXT4-fs: Ignoring removed bh option [ 95.761705][ T4066] kworker/u8:10: attempt to access beyond end of device [ 95.761705][ T4066] loop3: rw=1, sector=193, nr_sectors = 8 limit=128 [ 95.783760][ T5595] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 95.794460][ T5591] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 95.808062][ T4066] kworker/u8:10: attempt to access beyond end of device [ 95.808062][ T4066] loop3: rw=1, sector=209, nr_sectors = 8 limit=128 [ 95.823203][ T4066] kworker/u8:10: attempt to access beyond end of device [ 95.823203][ T4066] loop3: rw=1, sector=225, nr_sectors = 8 limit=128 [ 95.838645][ T4066] kworker/u8:10: attempt to access beyond end of device [ 95.838645][ T4066] loop3: rw=1, sector=241, nr_sectors = 8 limit=128 [ 95.844763][ T5591] EXT4-fs (loop0): 1 truncate cleaned up [ 95.861638][ T5595] EXT4-fs (loop1): 1 truncate cleaned up [ 95.873855][ T5595] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 95.888770][ T4066] kworker/u8:10: attempt to access beyond end of device [ 95.888770][ T4066] loop3: rw=1, sector=257, nr_sectors = 8 limit=128 [ 95.893403][ T5591] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 95.970248][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.980405][ T4066] kworker/u8:10: attempt to access beyond end of device [ 95.980405][ T4066] loop3: rw=1, sector=273, nr_sectors = 8 limit=128 [ 96.111748][ T5613] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(11) [ 96.118434][ T5613] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 96.126236][ T5613] vhci_hcd vhci_hcd.0: Device attached [ 96.140801][ T5591] IPv4: Oversized IP packet from 127.202.26.0 [ 96.147485][ T5617] netlink: 12 bytes leftover after parsing attributes in process `syz.2.729'. [ 96.156640][ T5617] smc: net device bond0 applied user defined pnetid SY [ 96.164132][ T5617] smc: net device bond0 erased user defined pnetid SY [ 96.207531][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.220133][ T5614] vhci_hcd: connection closed [ 96.221312][ T4082] vhci_hcd: stop threads [ 96.230410][ T4082] vhci_hcd: release socket [ 96.235027][ T4082] vhci_hcd: disconnect device [ 96.256487][ T5625] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5625 comm=syz.2.730 [ 96.327467][ T5633] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.375777][ T5570] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 96.392410][ T5570] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 9 with max blocks 2048 with error 28 [ 96.404996][ T5570] EXT4-fs (loop4): This should not happen!! Data will be lost [ 96.404996][ T5570] [ 96.414901][ T5570] EXT4-fs (loop4): Total free blocks count 0 [ 96.421077][ T5570] EXT4-fs (loop4): Free/Dirty block details [ 96.427055][ T5570] EXT4-fs (loop4): free_blocks=39626 [ 96.432426][ T5570] EXT4-fs (loop4): dirty_blocks=4096 [ 96.437842][ T5570] EXT4-fs (loop4): Block reservation details [ 96.443853][ T5570] EXT4-fs (loop4): i_reserved_data_blocks=4096 [ 96.465860][ T5633] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.525739][ T5633] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.554218][ T5642] loop1: detected capacity change from 0 to 512 [ 96.561112][ T5642] EXT4-fs: Ignoring removed mblk_io_submit option [ 96.569607][ T5642] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 96.585639][ T5633] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.587147][ T5642] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 96.608394][ T5642] ext4 filesystem being mounted at /153/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 96.651684][ T5633] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.663350][ T5633] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.675340][ T5633] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.686838][ T5633] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.770331][ T5651] netlink: 12 bytes leftover after parsing attributes in process `syz.3.741'. [ 96.775785][ T5653] netlink: 488 bytes leftover after parsing attributes in process `syz.2.742'. [ 96.779677][ T5651] smc: net device bond0 applied user defined pnetid SY [ 96.796790][ T5651] smc: net device bond0 erased user defined pnetid SY [ 97.012319][ T51] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 2058 with max blocks 2047 with error 28 [ 97.013909][ T5673] syz.3.751 uses obsolete (PF_INET,SOCK_PACKET) [ 97.123483][ T5678] netlink: 488 bytes leftover after parsing attributes in process `syz.3.754'. [ 97.186704][ T5682] loop4: detected capacity change from 0 to 256 [ 97.241429][ T5682] netlink: 4 bytes leftover after parsing attributes in process `syz.4.752'. [ 97.250966][ T29] kauditd_printk_skb: 87 callbacks suppressed [ 97.250984][ T29] audit: type=1326 audit(1750891505.445:2109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5685 comm="syz.2.758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f7903e929 code=0x7ffc0000 [ 97.280514][ T29] audit: type=1326 audit(1750891505.445:2110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5685 comm="syz.2.758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f7903e929 code=0x7ffc0000 [ 97.288968][ T5682] netlink: 'syz.4.752': attribute type 196 has an invalid length. [ 97.355513][ T29] audit: type=1326 audit(1750891505.525:2111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5685 comm="syz.2.758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9f7903e929 code=0x7ffc0000 [ 97.378941][ T29] audit: type=1326 audit(1750891505.525:2112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5685 comm="syz.2.758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f7903e929 code=0x7ffc0000 [ 97.402302][ T29] audit: type=1326 audit(1750891505.525:2113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5685 comm="syz.2.758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f7903e929 code=0x7ffc0000 [ 97.425748][ T29] audit: type=1326 audit(1750891505.525:2114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5685 comm="syz.2.758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9f7903e929 code=0x7ffc0000 [ 97.449105][ T29] audit: type=1326 audit(1750891505.525:2115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5685 comm="syz.2.758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f7903e929 code=0x7ffc0000 [ 97.472627][ T29] audit: type=1326 audit(1750891505.525:2116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5685 comm="syz.2.758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9f7903e929 code=0x7ffc0000 [ 97.496123][ T29] audit: type=1326 audit(1750891505.525:2117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5685 comm="syz.2.758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f7903e929 code=0x7ffc0000 [ 97.519547][ T29] audit: type=1326 audit(1750891505.525:2118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5685 comm="syz.2.758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f9f7903e929 code=0x7ffc0000 [ 97.544319][ T5642] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 97.559641][ T5642] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 9 with max blocks 2048 with error 28 [ 97.572262][ T5642] EXT4-fs (loop1): This should not happen!! Data will be lost [ 97.572262][ T5642] [ 97.582008][ T5642] EXT4-fs (loop1): Total free blocks count 0 [ 97.588232][ T5642] EXT4-fs (loop1): Free/Dirty block details [ 97.594245][ T5642] EXT4-fs (loop1): free_blocks=39626 [ 97.599801][ T5642] EXT4-fs (loop1): dirty_blocks=4096 [ 97.605225][ T5642] EXT4-fs (loop1): Block reservation details [ 97.611370][ T5642] EXT4-fs (loop1): i_reserved_data_blocks=4096 [ 97.657189][ T5707] loop3: detected capacity change from 0 to 512 [ 97.675745][ T5707] EXT4-fs: Ignoring removed bh option [ 97.683125][ T5707] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 97.695000][ T5711] netlink: 12 bytes leftover after parsing attributes in process `syz.4.769'. [ 97.704702][ T5711] smc: net device bond0 applied user defined pnetid SY [ 97.719208][ T5711] smc: net device bond0 erased user defined pnetid SY [ 97.727089][ T5707] EXT4-fs (loop3): 1 truncate cleaned up [ 97.733132][ T5707] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 97.797814][ T5718] IPv4: Oversized IP packet from 127.202.26.0 [ 97.828106][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.943552][ T5723] netlink: 488 bytes leftover after parsing attributes in process `syz.0.773'. [ 98.153171][ T5740] loop0: detected capacity change from 0 to 512 [ 98.164227][ T5740] EXT4-fs: Ignoring removed oldalloc option [ 98.180798][ T5740] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 98.214672][ T5744] netlink: 12 bytes leftover after parsing attributes in process `syz.3.781'. [ 98.228205][ T5744] smc: net device bond0 applied user defined pnetid SY [ 98.242019][ T5744] smc: net device bond0 erased user defined pnetid SY [ 98.393666][ T5740] EXT4-fs (loop0): orphan cleanup on readonly fs [ 98.410756][ T4066] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 2058 with max blocks 2047 with error 28 [ 98.426519][ T5740] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.778: Failed to acquire dquot type 1 [ 98.445718][ T5740] EXT4-fs (loop0): 1 truncate cleaned up [ 98.451892][ T5740] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 98.504787][ T5748] IPv4: Oversized IP packet from 127.202.26.0 [ 98.535077][ T5740] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.846960][ T5774] IPv4: Oversized IP packet from 127.202.26.0 [ 98.899412][ T5772] loop1: detected capacity change from 0 to 512 [ 98.925499][ T5772] EXT4-fs: Ignoring removed mblk_io_submit option [ 98.959663][ T5772] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 99.019726][ T5772] ext4 filesystem being mounted at /157/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 99.513458][ T5802] netlink: 16 bytes leftover after parsing attributes in process `syz.2.803'. [ 99.980507][ T5813] IPv4: Oversized IP packet from 127.202.26.0 [ 100.060847][ T5772] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 100.076692][ T5772] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 9 with max blocks 2048 with error 28 [ 100.089603][ T5772] EXT4-fs (loop1): This should not happen!! Data will be lost [ 100.089603][ T5772] [ 100.099473][ T5772] EXT4-fs (loop1): Total free blocks count 0 [ 100.105523][ T5772] EXT4-fs (loop1): Free/Dirty block details [ 100.111439][ T5772] EXT4-fs (loop1): free_blocks=39626 [ 100.116795][ T5772] EXT4-fs (loop1): dirty_blocks=4096 [ 100.122115][ T5772] EXT4-fs (loop1): Block reservation details [ 100.128187][ T5772] EXT4-fs (loop1): i_reserved_data_blocks=4096 [ 100.136402][ T5817] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.196938][ T5817] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.210725][ T5821] netlink: 332 bytes leftover after parsing attributes in process `syz.3.812'. [ 100.265923][ T5817] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.289394][ T5827] loop4: detected capacity change from 0 to 512 [ 100.315587][ T5827] EXT4-fs: Ignoring removed mblk_io_submit option [ 100.324829][ T5827] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 100.334699][ T5817] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.357379][ T5827] EXT4-fs mount: 1 callbacks suppressed [ 100.357395][ T5827] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.388905][ T5827] ext4 filesystem being mounted at /196/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 100.769540][ T267] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 2058 with max blocks 2047 with error 28 [ 100.782415][ T267] EXT4-fs (loop1): This should not happen!! Data will be lost [ 100.782415][ T267] [ 100.920020][ T5827] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 100.936096][ T5827] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 9 with max blocks 2048 with error 28 [ 100.948913][ T5827] EXT4-fs (loop4): This should not happen!! Data will be lost [ 100.948913][ T5827] [ 100.958830][ T5827] EXT4-fs (loop4): Total free blocks count 0 [ 100.964939][ T5827] EXT4-fs (loop4): Free/Dirty block details [ 100.970884][ T5827] EXT4-fs (loop4): free_blocks=39626 [ 100.976325][ T5827] EXT4-fs (loop4): dirty_blocks=4096 [ 100.981648][ T5827] EXT4-fs (loop4): Block reservation details [ 100.987740][ T5827] EXT4-fs (loop4): i_reserved_data_blocks=4096 [ 101.001159][ T5851] loop1: detected capacity change from 0 to 512 [ 101.031154][ T5851] EXT4-fs: Ignoring removed bh option [ 101.037476][ T5851] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 101.053193][ T5851] EXT4-fs (loop1): 1 truncate cleaned up [ 101.059365][ T5851] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.073550][ T5851] IPv4: Oversized IP packet from 127.202.26.0 [ 101.094449][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.137130][ T5860] IPv4: Oversized IP packet from 127.202.26.0 [ 101.218221][ T5869] IPv4: Oversized IP packet from 127.202.26.0 [ 101.331299][ T5875] __nla_validate_parse: 2 callbacks suppressed [ 101.331319][ T5875] netlink: 164 bytes leftover after parsing attributes in process `syz.1.830'. [ 101.486936][ T5888] loop1: detected capacity change from 0 to 512 [ 101.493847][ T5888] EXT4-fs: Ignoring removed bh option [ 101.501297][ T5888] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 101.521518][ T5888] EXT4-fs (loop1): 1 truncate cleaned up [ 101.536278][ T5888] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.555984][ T5888] IPv4: Oversized IP packet from 127.202.26.0 [ 101.605123][ T51] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 2058 with max blocks 2047 with error 28 [ 101.621263][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.673426][ T5893] IPv4: Oversized IP packet from 127.202.26.0 [ 101.692242][ T5817] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.738684][ T5817] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.762144][ T5817] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.797799][ T5897] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.817580][ T5817] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.866776][ T5897] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.935877][ T5897] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.995761][ T5897] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.076825][ T5897] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.107883][ T5897] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.129324][ T5897] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.175282][ T5897] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.322918][ T5930] IPv4: Oversized IP packet from 127.202.26.0 [ 102.393069][ T29] kauditd_printk_skb: 146 callbacks suppressed [ 102.393108][ T29] audit: type=1326 audit(1750891510.595:2263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5935 comm="syz.4.854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fa709e929 code=0x7ffc0000 [ 102.430084][ T29] audit: type=1326 audit(1750891510.635:2264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5935 comm="syz.4.854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2fa709e929 code=0x7ffc0000 [ 102.453563][ T29] audit: type=1326 audit(1750891510.635:2265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5935 comm="syz.4.854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fa709e929 code=0x7ffc0000 [ 102.477048][ T29] audit: type=1326 audit(1750891510.635:2266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5935 comm="syz.4.854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fa709e929 code=0x7ffc0000 [ 102.502799][ T29] audit: type=1326 audit(1750891510.665:2267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5935 comm="syz.4.854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2fa709e929 code=0x7ffc0000 [ 102.526234][ T29] audit: type=1326 audit(1750891510.665:2268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5935 comm="syz.4.854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fa709e929 code=0x7ffc0000 [ 102.549881][ T29] audit: type=1326 audit(1750891510.665:2269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5935 comm="syz.4.854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fa709e929 code=0x7ffc0000 [ 102.591997][ T29] audit: type=1326 audit(1750891510.715:2270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5935 comm="syz.4.854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2fa709e929 code=0x7ffc0000 [ 102.615616][ T29] audit: type=1326 audit(1750891510.715:2271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5935 comm="syz.4.854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fa709e929 code=0x7ffc0000 [ 102.639174][ T29] audit: type=1326 audit(1750891510.715:2272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5935 comm="syz.4.854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fa709e929 code=0x7ffc0000 [ 102.650654][ T5941] netlink: 332 bytes leftover after parsing attributes in process `syz.3.856'. [ 102.760551][ T5951] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 102.800231][ T5955] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.888226][ T5964] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.900847][ T5966] netlink: 12 bytes leftover after parsing attributes in process `syz.3.866'. [ 102.916795][ T5955] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.937224][ T5966] smc: net device bond0 applied user defined pnetid SY [ 102.945920][ T5966] smc: net device bond0 erased user defined pnetid SY [ 102.965711][ T5964] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.993699][ T5971] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.006771][ T5955] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.039927][ T5964] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.076322][ T5971] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.095084][ T5955] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.116539][ T5964] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.155964][ T5971] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.175069][ T5955] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.186979][ T5955] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.198491][ T5955] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.209806][ T5955] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.236063][ T5971] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.282237][ T5971] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.293347][ T5971] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.304942][ T5971] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.316394][ T5971] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.489555][ T5980] netlink: 56 bytes leftover after parsing attributes in process `syz.3.871'. [ 103.605714][ T5992] IPv4: Oversized IP packet from 127.202.26.0 [ 103.616224][ T5986] loop3: detected capacity change from 0 to 512 [ 103.623118][ T5986] EXT4-fs: Ignoring removed mblk_io_submit option [ 103.630345][ T5986] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 103.648853][ T5986] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.665014][ T5996] netlink: 488 bytes leftover after parsing attributes in process `syz.2.878'. [ 103.669341][ T5986] ext4 filesystem being mounted at /161/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 103.877652][ T6014] netlink: 56 bytes leftover after parsing attributes in process `syz.1.884'. [ 103.958344][ T6020] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.037350][ T6020] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.097318][ T6020] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.166793][ T6020] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.219465][ T5986] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 104.229033][ T6020] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.234824][ T5986] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 9 with max blocks 2048 with error 28 [ 104.250189][ T6020] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.255086][ T5986] EXT4-fs (loop3): This should not happen!! Data will be lost [ 104.255086][ T5986] [ 104.272173][ T6020] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.273033][ T5986] EXT4-fs (loop3): Total free blocks count 0 [ 104.287238][ T5986] EXT4-fs (loop3): Free/Dirty block details [ 104.288944][ T6020] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.293149][ T5986] EXT4-fs (loop3): free_blocks=39626 [ 104.293214][ T5986] EXT4-fs (loop3): dirty_blocks=4096 [ 104.312048][ T5986] EXT4-fs (loop3): Block reservation details [ 104.318094][ T5986] EXT4-fs (loop3): i_reserved_data_blocks=4096 [ 104.487629][ T6026] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.536332][ T6026] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.539640][ T6028] IPv4: Oversized IP packet from 127.202.26.0 [ 104.576769][ T6031] netlink: 12 bytes leftover after parsing attributes in process `syz.0.891'. [ 104.587250][ T6031] smc: net device bond0 applied user defined pnetid SY [ 104.595152][ T6031] smc: net device bond0 erased user defined pnetid SY [ 104.596245][ T6026] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.656044][ T6026] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.935449][ T267] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 2058 with max blocks 2047 with error 28 [ 105.514745][ T6059] IPv4: Oversized IP packet from 127.202.26.0 [ 106.039476][ T5964] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.051150][ T5964] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.063021][ T5964] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.074879][ T5964] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.264593][ T6091] loop3: detected capacity change from 0 to 512 [ 106.271481][ T6091] EXT4-fs: Ignoring removed mblk_io_submit option [ 106.289325][ T6091] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 106.316640][ T6091] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.329345][ T6091] ext4 filesystem being mounted at /172/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 106.404722][ T6098] netlink: 488 bytes leftover after parsing attributes in process `syz.2.916'. [ 106.720648][ T6112] IPv4: Oversized IP packet from 127.202.26.0 [ 106.858019][ T6091] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 106.873070][ T6091] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 9 with max blocks 2048 with error 28 [ 106.885793][ T6091] EXT4-fs (loop3): This should not happen!! Data will be lost [ 106.885793][ T6091] [ 106.895572][ T6091] EXT4-fs (loop3): Total free blocks count 0 [ 106.901655][ T6091] EXT4-fs (loop3): Free/Dirty block details [ 106.907668][ T6091] EXT4-fs (loop3): free_blocks=39626 [ 106.912998][ T6091] EXT4-fs (loop3): dirty_blocks=4096 [ 106.918368][ T6091] EXT4-fs (loop3): Block reservation details [ 106.924422][ T6091] EXT4-fs (loop3): i_reserved_data_blocks=4096 [ 106.990842][ T6117] netlink: 12 bytes leftover after parsing attributes in process `syz.0.924'. [ 107.000138][ T6117] smc: net device bond0 applied user defined pnetid SY [ 107.007895][ T6117] smc: net device bond0 erased user defined pnetid SY [ 107.062106][ T6123] netlink: 488 bytes leftover after parsing attributes in process `syz.0.927'. [ 107.152160][ T6126] netlink: 12 bytes leftover after parsing attributes in process `syz.0.928'. [ 107.478475][ T6140] netlink: 40 bytes leftover after parsing attributes in process `syz.4.933'. [ 107.519177][ T51] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 2058 with max blocks 2047 with error 28 [ 107.566027][ T6144] netlink: 332 bytes leftover after parsing attributes in process `syz.4.936'. [ 107.671519][ T6154] netlink: 488 bytes leftover after parsing attributes in process `syz.3.939'. [ 107.713780][ T6026] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.727422][ T6026] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.739591][ T6026] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.754075][ T6026] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.780087][ T6162] netlink: 12 bytes leftover after parsing attributes in process `syz.1.943'. [ 107.789178][ T6162] smc: net device bond0 applied user defined pnetid SY [ 107.796604][ T6162] smc: net device bond0 erased user defined pnetid SY [ 107.875314][ T6164] loop1: detected capacity change from 0 to 512 [ 107.882013][ T6164] EXT4-fs: Ignoring removed mblk_io_submit option [ 107.889384][ T6164] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 107.915828][ T6164] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.929190][ T6164] ext4 filesystem being mounted at /188/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 108.217570][ T6173] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6173 comm=syz.2.946 [ 108.270068][ T6175] 9pnet: Could not find request transport: f [ 108.598451][ T6164] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 108.613042][ T6164] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 9 with max blocks 2048 with error 28 [ 108.625920][ T6164] EXT4-fs (loop1): This should not happen!! Data will be lost [ 108.625920][ T6164] [ 108.635778][ T6164] EXT4-fs (loop1): Total free blocks count 0 [ 108.641785][ T6164] EXT4-fs (loop1): Free/Dirty block details [ 108.647779][ T6164] EXT4-fs (loop1): free_blocks=39626 [ 108.653095][ T6164] EXT4-fs (loop1): dirty_blocks=4096 [ 108.658473][ T6164] EXT4-fs (loop1): Block reservation details [ 108.664517][ T6164] EXT4-fs (loop1): i_reserved_data_blocks=4096 [ 108.812748][ T6184] IPv4: Oversized IP packet from 127.202.26.0 [ 108.924612][ T6192] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.985746][ T6192] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.035759][ T6192] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.105548][ T6192] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.172051][ T6192] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.185387][ T6192] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.208888][ T6192] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.235822][ T6192] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.316711][ T51] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 2058 with max blocks 2047 with error 28 [ 109.419104][ T6200] loop3: detected capacity change from 0 to 512 [ 109.440266][ T6202] netlink: 8 bytes leftover after parsing attributes in process `syz.0.956'. [ 109.462547][ T6200] EXT4-fs: Ignoring removed mblk_io_submit option [ 109.469657][ T6200] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 109.489944][ T6200] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.563702][ T6200] ext4 filesystem being mounted at /187/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 109.864095][ T29] kauditd_printk_skb: 101 callbacks suppressed [ 109.864112][ T29] audit: type=1326 audit(1750891518.045:2374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6211 comm="syz.1.959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f516386e929 code=0x7ffc0000 [ 109.893825][ T29] audit: type=1326 audit(1750891518.045:2375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6211 comm="syz.1.959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f516386e929 code=0x7ffc0000 [ 109.917482][ T29] audit: type=1326 audit(1750891518.045:2376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6211 comm="syz.1.959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7f516386e929 code=0x7ffc0000 [ 109.941102][ T29] audit: type=1326 audit(1750891518.045:2377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6211 comm="syz.1.959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f516386e929 code=0x7ffc0000 [ 109.964472][ T29] audit: type=1326 audit(1750891518.045:2378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6211 comm="syz.1.959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f516386e929 code=0x7ffc0000 [ 110.433652][ T29] audit: type=1326 audit(1750891518.625:2379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6216 comm="syz.4.960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fa709e929 code=0x7ffc0000 [ 110.457114][ T29] audit: type=1326 audit(1750891518.625:2380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6216 comm="syz.4.960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fa709e929 code=0x7ffc0000 [ 110.480489][ T29] audit: type=1326 audit(1750891518.625:2381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6216 comm="syz.4.960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2fa709e929 code=0x7ffc0000 [ 110.503910][ T29] audit: type=1326 audit(1750891518.625:2382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6216 comm="syz.4.960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fa709e929 code=0x7ffc0000 [ 110.527322][ T29] audit: type=1326 audit(1750891518.625:2383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6216 comm="syz.4.960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fa709e929 code=0x7ffc0000 [ 110.648845][ T6225] loop1: detected capacity change from 0 to 512 [ 110.673695][ T6221] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.691429][ T6225] EXT4-fs: Ignoring removed bh option [ 110.698610][ T6225] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 110.714893][ T6225] EXT4-fs (loop1): 1 truncate cleaned up [ 110.721131][ T6225] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 110.785896][ T6221] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.833058][ T6225] IPv4: Oversized IP packet from 127.202.26.0 [ 110.849474][ T6221] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.870595][ T6229] IPv4: Oversized IP packet from 127.202.26.0 [ 110.885813][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.905984][ T6221] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.952870][ T6231] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6231 comm=syz.2.967 [ 110.981507][ T6221] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.994815][ T6221] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.007763][ T6221] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.019310][ T6221] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.111100][ T6234] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.191339][ T6234] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.286343][ T6234] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.300211][ T6197] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 111.330467][ T6197] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 9 with max blocks 2048 with error 28 [ 111.343077][ T6197] EXT4-fs (loop3): This should not happen!! Data will be lost [ 111.343077][ T6197] [ 111.352881][ T6197] EXT4-fs (loop3): Total free blocks count 0 [ 111.358984][ T6197] EXT4-fs (loop3): Free/Dirty block details [ 111.364976][ T6197] EXT4-fs (loop3): free_blocks=39626 [ 111.370378][ T6197] EXT4-fs (loop3): dirty_blocks=4096 [ 111.375773][ T6197] EXT4-fs (loop3): Block reservation details [ 111.381808][ T6197] EXT4-fs (loop3): i_reserved_data_blocks=4096 [ 111.399921][ T6234] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.523771][ T6254] IPv4: Oversized IP packet from 127.202.26.0 [ 111.566570][ T6258] loop1: detected capacity change from 0 to 512 [ 111.575876][ T6258] EXT4-fs: Ignoring removed bh option [ 111.584192][ T6258] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 111.602096][ T6258] EXT4-fs (loop1): 1 truncate cleaned up [ 111.610703][ T6258] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 111.625670][ T6258] IPv4: Oversized IP packet from 127.202.26.0 [ 111.642641][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.664034][ T6263] IPv4: Oversized IP packet from 127.202.26.0 [ 112.050499][ T4082] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 2058 with max blocks 2047 with error 28 [ 112.348868][ T6275] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.361825][ T6277] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.406371][ T6275] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.446691][ T6277] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.476872][ T6275] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.506569][ T6277] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.556624][ T6275] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.596716][ T6277] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.643086][ T6291] netlink: 40 bytes leftover after parsing attributes in process `syz.1.988'. [ 112.714246][ T6277] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.726826][ T6277] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.739000][ T6277] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.751945][ T6277] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.232317][ T6303] IPv4: Oversized IP packet from 127.202.26.0 [ 113.257484][ T6305] netlink: 488 bytes leftover after parsing attributes in process `syz.0.994'. [ 113.287457][ T6309] netlink: 48 bytes leftover after parsing attributes in process `syz.0.996'. [ 113.317355][ T6313] netlink: 12 bytes leftover after parsing attributes in process `syz.0.998'. [ 113.326739][ T6313] smc: net device bond0 applied user defined pnetid SY [ 113.334020][ T6313] smc: net device bond0 erased user defined pnetid SY [ 113.362883][ T6319] IPv4: Oversized IP packet from 127.202.26.0 [ 113.459625][ T6321] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1000'. [ 113.526432][ T6322] loop2: detected capacity change from 0 to 512 [ 113.533121][ T6322] EXT4-fs: Ignoring removed oldalloc option [ 113.543226][ T6322] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 113.553040][ T6322] EXT4-fs (loop2): orphan cleanup on readonly fs [ 113.561007][ T6322] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.1000: Failed to acquire dquot type 1 [ 113.573840][ T6322] EXT4-fs (loop2): 1 truncate cleaned up [ 113.584099][ T6322] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 113.727699][ T6326] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.760160][ T6328] netlink: 332 bytes leftover after parsing attributes in process `syz.0.1012'. [ 113.796320][ T6326] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.896401][ T6326] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.938534][ T6275] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.968140][ T6275] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.003187][ T6326] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.040863][ T6275] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.057393][ T6334] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6334 comm=syz.0.1003 [ 114.077549][ T6275] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.115347][ T6326] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.181085][ T6326] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.277367][ T6337] IPv4: Oversized IP packet from 127.202.26.0 [ 114.283986][ T6326] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.323061][ T6326] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.362725][ T6340] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.446811][ T6340] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.515576][ T6340] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.585655][ T6340] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.729518][ T6356] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1014'. [ 114.752102][ T6356] smc: net device bond0 applied user defined pnetid SY [ 114.762014][ T6356] smc: net device bond0 erased user defined pnetid SY [ 114.797506][ T6360] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6360 comm=syz.3.1016 [ 115.064320][ T6362] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1015'. [ 115.098836][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.155533][ T6365] loop1: detected capacity change from 0 to 512 [ 115.162124][ T6365] EXT4-fs: Ignoring removed oldalloc option [ 115.169042][ T6365] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 115.181547][ T6365] EXT4-fs (loop1): orphan cleanup on readonly fs [ 115.189161][ T6365] __quota_error: 64 callbacks suppressed [ 115.189181][ T6365] Quota error (device loop1): do_check_range: Getting block 196613 out of range 1-5 [ 115.204346][ T6365] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 115.213734][ T6365] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.1015: Failed to acquire dquot type 1 [ 115.226043][ T6365] EXT4-fs (loop1): 1 truncate cleaned up [ 115.232681][ T6365] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 115.246320][ T6365] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.591535][ T6375] IPv4: Oversized IP packet from 127.202.26.0 [ 115.693764][ T6234] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.728645][ T6234] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.789534][ T6234] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.849077][ T6234] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.110546][ T6388] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6388 comm=syz.2.1027 [ 116.208640][ T3401] ================================================================== [ 116.216807][ T3401] BUG: KCSAN: data-race in __filemap_remove_folio / nr_blockdev_pages [ 116.225006][ T3401] [ 116.227361][ T3401] read-write to 0xffff8881004811f0 of 8 bytes by task 6365 on cpu 0: [ 116.235460][ T3401] __filemap_remove_folio+0x1bc/0x2a0 [ 116.240885][ T3401] __remove_mapping+0x338/0x460 [ 116.245782][ T3401] remove_mapping+0x22/0x90 [ 116.250349][ T3401] mapping_try_invalidate+0x26a/0x3f0 [ 116.255763][ T3401] invalidate_mapping_pages+0x27/0x40 [ 116.261191][ T3401] invalidate_bdev+0x58/0x70 [ 116.265829][ T3401] ext4_put_super+0x624/0x7d0 [ 116.270565][ T3401] generic_shutdown_super+0xe3/0x210 [ 116.272259][ T6394] 9pnet: Could not find request transport: f [ 116.275872][ T3401] kill_block_super+0x2a/0x70 [ 116.275914][ T3401] ext4_kill_sb+0x42/0x80 [ 116.290953][ T3401] deactivate_locked_super+0x75/0x1c0 [ 116.296380][ T3401] deactivate_super+0x97/0xa0 [ 116.301111][ T3401] cleanup_mnt+0x269/0x2e0 [ 116.305567][ T3401] __cleanup_mnt+0x19/0x20 [ 116.310023][ T3401] task_work_run+0x12e/0x1a0 [ 116.314645][ T3401] exit_to_user_mode_loop+0xe4/0x100 [ 116.319973][ T3401] do_syscall_64+0x1d6/0x200 [ 116.324604][ T3401] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.330541][ T3401] [ 116.332884][ T3401] read to 0xffff8881004811f0 of 8 bytes by task 3401 on cpu 1: [ 116.340460][ T3401] nr_blockdev_pages+0x7e/0xd0 [ 116.345258][ T3401] si_meminfo+0x87/0xd0 [ 116.349472][ T3401] update_defense_level+0x47/0x5c0 [ 116.354627][ T3401] defense_work_handler+0x1f/0x80 [ 116.359685][ T3401] process_scheduled_works+0x4ce/0x9d0 [ 116.365189][ T3401] worker_thread+0x582/0x770 [ 116.369927][ T3401] kthread+0x486/0x510 [ 116.374039][ T3401] ret_from_fork+0xda/0x150 [ 116.378583][ T3401] ret_from_fork_asm+0x1a/0x30 [ 116.383379][ T3401] [ 116.385723][ T3401] value changed: 0x0000000000000002 -> 0x0000000000000001 [ 116.392864][ T3401] [ 116.395214][ T3401] Reported by Kernel Concurrency Sanitizer on: [ 116.401401][ T3401] CPU: 1 UID: 0 PID: 3401 Comm: kworker/1:4 Not tainted 6.16.0-rc3-syzkaller-00057-g92ca6c498a5e #0 PREEMPT(voluntary) [ 116.413943][ T3401] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 116.424040][ T3401] Workqueue: events_long defense_work_handler [ 116.430161][ T3401] ================================================================== [ 116.970305][ T6340] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.011780][ T6340] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.050797][ T6340] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.073375][ T6340] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0