last executing test programs: 2.307767335s ago: executing program 0 (id=597): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000100000000000000064000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x9) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) accept(r0, 0x0, 0x0) 2.131127601s ago: executing program 4 (id=602): r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000280), 0x88182, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000002500)='\f7', 0x2}, {&(0x7f0000000080)='0', 0x1}], 0x2) 2.071760657s ago: executing program 4 (id=605): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='sched_switch\x00', r0}, 0x10) r1 = syz_io_uring_setup(0x5c2, &(0x7f0000000740)={0x0, 0x12c3, 0x3080, 0x8003, 0x135}, &(0x7f0000000240)=0x0, &(0x7f00000007c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000004c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x68, 0x3, r1, 0x0, 0x0, 0x0, 0x1, 0x1, {0x2}}) io_uring_enter(r1, 0x6e2, 0x620, 0x1, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000b40)='neigh_create\x00', r5}, 0x10) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000700)={0x4d07, 0x0}, 0x8) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000ed074479000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095", @ANYRESOCT=r2, @ANYRES32], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0xc, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='neigh_create\x00', r7}, 0x18) r8 = socket$netlink(0x10, 0x3, 0x4) r9 = socket$inet6(0xa, 0x5, 0x0) r10 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r10, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) listen(r9, 0x8000) listen(r10, 0xfffeffff) writev(r8, &(0x7f0000000080)=[{&(0x7f0000000e40)="480000001400190d09004beafd0d36020a8447000b4e230f00004e20a2bc560119d7004f19dfb7f393d7359031033f817f00000000000000000101ff05c00e030002000000ffff01", 0x48}], 0x1) socket(0x8000000010, 0x2, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r11 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000480), 0xc0d00) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x8, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r13}, 0x10) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r11, 0x4058534c, &(0x7f0000000180)={0x80, 0x2f, 0x7, 0x5f, 0x7fffffff, 0x105}) 2.03487695s ago: executing program 2 (id=606): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001000001"], 0x50) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x3, &(0x7f0000000080)=[{0x3, 0x9, 0x6, 0x1}, {0xf010, 0x1, 0x2, 0x1}, {0xb74, 0x2, 0x10, 0x8}]}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_raw(r2, &(0x7f00000001c0)={0x1d, r3}, 0x10) setsockopt$CAN_RAW_RECV_OWN_MSGS(r2, 0x65, 0x4, &(0x7f00000003c0)=0x1, 0x4) recvfrom(r2, 0x0, 0x0, 0x40000102, 0x0, 0x0) sendmsg$can_raw(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@can={{}, 0x0, 0x1, 0x0, 0x0, "0000000000000003"}, 0x10}}, 0x20000000) read(r2, &(0x7f0000002340)=""/232, 0xe8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, 0x0) lseek(r4, 0x2000, 0x0) r5 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000300), 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r5) r6 = socket$pppl2tp(0x18, 0x1, 0x1) r7 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r6, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r7, 0x2, 0x0, 0x4, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_DELETE(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="010028bd7000fc060025020000000800090002"], 0x1c}, 0x1, 0x100000000000000}, 0x40) 2.034184541s ago: executing program 3 (id=607): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000200)={[{@nouid32}, {@nodioread_nolock}, {@noquota}, {@delalloc}, {@journal_dev={'journal_dev', 0x3d, 0x8}}, {@nodioread_nolock}]}, 0x1, 0x5a3, &(0x7f00000002c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42041, 0x0) pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f0000000180)={0x17c04, 0xffffffffffffffff, 0x84, 0x75ea, 0x800004}) 1.980448755s ago: executing program 4 (id=608): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x800000200000008, 0x8b}, 0x0) getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, 0x0, 0x310) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000440)={0x0, 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x4800) setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, &(0x7f00000005c0)={0x1, {{0xa, 0x0, 0x1, @mcast1, 0x8000}}, {{0xa, 0x0, 0xb53, @empty, 0x80}}}, 0x108) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, &(0x7f0000000400)=0xa) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0xc) sendmsg$AUDIT_SET(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, 0x3e9, 0x806, 0x70bd26, 0x25dfdbfd, {0x2, 0x0, 0x1, r0, 0xe, 0x9, 0x6, 0xffffffff, 0x0, 0x7fff, 0x9}, ["", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040001}, 0x0) r5 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_int(r5, 0x29, 0x19, &(0x7f0000000000)=0x84, 0xfde1) sendto$inet6(r5, 0x0, 0x0, 0x200cc0c5, &(0x7f0000000080)={0xa, 0x4c20, 0x0, @empty, 0x8}, 0x1c) sendto$inet6(r5, &(0x7f0000001cc0)="2501d77b330b7e73d6b1d1b8a473ff7420b4b43ce0861f000000714fa228ee1f5b", 0x21, 0x8000, 0x0, 0x0) recvmmsg(r5, &(0x7f0000002480), 0x0, 0x40002003, 0x0) unshare(0x64000600) 1.93241379s ago: executing program 3 (id=609): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newqdisc={0x2c, 0x24, 0xd0f, 0x70bd2b, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0x8}, {0xffff, 0xffff}, {0xfff2, 0xc}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x3000c81c) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002e00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000440)=ANY=[@ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="0500"], 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000014c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa2000000000000070200"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r4}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000900)=[{0x0}], 0x1}, 0x3) 1.904171762s ago: executing program 2 (id=610): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000580)='./file2\x00', 0x8010, &(0x7f0000000040), 0x1, 0x540, &(0x7f0000000b40)="$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") r0 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0xdc) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r0, 0x5000) fallocate(r0, 0x0, 0x0, 0x8800000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000040c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) fallocate(r1, 0x20, 0x4000, 0x8000) 1.788692973s ago: executing program 1 (id=611): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bf"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xc94284a3061bb7fe, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000ac0)={&(0x7f0000000b00)='kmem_cache_free\x00', r0, 0x0, 0x1034}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='locks_get_lock_context\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) fcntl$lock(r2, 0x26, &(0x7f0000000000)={0x2}) 1.759659766s ago: executing program 1 (id=612): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000a00)="449f6aed247d197178d7f0a82e1deae14825b22ab6c0ec1ca0c27cd21d8a48637cb781581aac75a2f848f285c99133f0435497bf6ae25625c64f82ecc0a7", 0x3e}, {&(0x7f0000000cc0)="cc5a4dbac0affd0a979c63ea8352d608a51fc8625318716ddf62b7752be4540c4ac7d344c53a3ad28313abc2437b60b03c0e587cafcf9a435bf90c618351f70a828238fdf90bc5d36c7d614b82552649954e0185662defd28f78449f073bad544f586136c5076a6f0f1b6fc9adf80557eb44db1b41824e9ef104c95e999766bbf27d74ad5d8fa63210cde65d384dd3e87c3fedaec3144d1ee66a0eb0", 0x9c}], 0x2}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)="d0f28c036a8b6293adbae6a1f4a98928a2efe08e665dac369f8749c5c15e9819ef3627a4cf2264401c991774440846e7b4146eca22035546a286d4571d16423012a6cc000f8a5fb3c2555ef48a1e7dc5a9c834f7dfdb9487e74566a7a9e2262d739ba78f19916bd9efee8442b70298a91798f9186dcd1a9e63316e7d18debc6fe4280aff3b3400849f8d659d4d", 0x8d}, {&(0x7f0000000380)="ba78a730565fdeecaa98beb3", 0xc}], 0x2}}], 0x2, 0x54004) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0xfffffffffffffffc}, 0x18) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 1.552997525s ago: executing program 2 (id=613): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffff"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x3}, 0x18) syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000080)='./file2\x00', 0x1808004, &(0x7f0000000680)=ANY=[@ANYRES16=0x0, @ANYRES64, @ANYRESHEX, @ANYBLOB="92208f8dd2478c4248608a57ea023ef8845944fce569f274772ca5201b4d19c9435b225c2703c4693641c3dab414ccfaa1ac12e42d3a51a9fd90dbb8dfe62fb80628dedad9cd7198cb4a3151acd3756581ae75ee414b0456b64ef7cc12f7f5a3fc858a533068bf99853d8609541e6b600f496ce1dfa65b139a86732db5e92567e310c4de67464d7250876ff8485fc19836a302e2d02a707c1a4324c8624df0f5f22dcebd53ffd3d6cd01d6d0d6ae9e8c05db3db0e1ac10e46b5cda59dfe7ab7cffd6bf7efd4d1b7068ef0b878aff95af9e3c3cdf815921a9ffe2c0f97cdeaba5e6a40289c27f3b0339b98f8cd7f6684801e60f7b"], 0x4, 0x7dc, &(0x7f0000002a00)="$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") creat(&(0x7f0000000000)='./file1\x00', 0x14c) 1.435431557s ago: executing program 1 (id=614): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socket$inet(0xa, 0x801, 0x84) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x2014, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd07, 0x40}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bind$netlink(0xffffffffffffffff, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000640)=0x1802, 0x4) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0xfd, &(0x7f00000004c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x40) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x4008084) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 1.385387731s ago: executing program 3 (id=615): r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f00000006c0)='.\x00', 0xaa) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000200)=@abs={0x1, 0x0, 0x4e22}, 0x6e) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000200)={[{@nouid32}, {@nodioread_nolock}, {@noquota}, {@auto_da_alloc}, {@journal_dev={'journal_dev', 0x3d, 0x9}}, {@nodioread_nolock}]}, 0x1, 0x5a3, &(0x7f00000002c0)="$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") r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00'}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18) bind$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 1.367681933s ago: executing program 0 (id=616): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000a00)="449f6aed247d197178d7f0a82e1deae14825b22ab6c0ec1ca0c27cd21d8a48637cb781581aac75a2f848f285c99133f0435497bf6ae25625c64f82ecc0a7", 0x3e}, {&(0x7f0000000cc0)="cc5a4dbac0affd0a979c63ea8352d608a51fc8625318716ddf62b7752be4540c4ac7d344c53a3ad28313abc2437b60b03c0e587cafcf9a435bf90c618351f70a828238fdf90bc5d36c7d614b82552649954e0185662defd28f78449f073bad544f586136c5076a6f0f1b6fc9adf80557eb44db1b41824e9ef104c95e999766bbf27d74ad5d8fa63210cde65d384dd3e87c3fedaec3144d1ee66a0eb0", 0x9c}], 0x2}}, {{0x0, 0x0, 0x0}}], 0x2, 0x54004) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 1.213169497s ago: executing program 2 (id=617): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff9}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b000000000000000000000000800000000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000016000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x18) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) syz_usb_connect(0x2, 0x24, &(0x7f0000000740)=ANY=[], 0x0) close_range(r3, 0xffffffffffffffff, 0x200000000000000) r4 = socket(0x10, 0x3, 0x0) r5 = epoll_create1(0x0) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000080)={0xe000202b}) epoll_pwait(r6, &(0x7f00008c9fc4)=[{}], 0x1, 0xfffffffffffffff7, 0x0, 0x0) r7 = dup3(r4, r6, 0x0) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r7) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r4, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x34, r8, 0x800, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r9}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x20000081) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r0, r9, 0x25, 0x15, @val=@tcx={@void, @value=r0}}, 0x1c) ioctl$BTRFS_IOC_QGROUP_CREATE(r2, 0x4010942a, &(0x7f00000000c0)={0x1, 0x3e15}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r10 = socket$nl_route(0x10, 0x3, 0x0) unshare(0x28000600) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x2, 0x4, 0x4, 0x12}, 0x50) r12 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r11, r12, 0x5}, 0x10) sendmsg$nl_route_sched(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@deltaction={0x18, 0x18, 0x1, 0x70bd2c, 0x25dfdbf5, {0xa}, [@TCA_ACT_TAB={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x34000805}, 0x20040844) 1.210235848s ago: executing program 0 (id=618): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', 0xffffffffffffffff, 0x0, 0x200000000}, 0x18) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021940000000c0a01030000000000000000070000000900020073797a31000000000900010073797a3000000000680003806400dec6080003400000000258000b80200001800a00010071756f7461000000100002800c0001400000000000000000340001800a0001006c696d69740000002400028008000440000000010c0002400000000000000000"], 0x118}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@enum64={0x4, 0x0, 0x0, 0x13, 0x1}]}, {0x0, [0x5f, 0x5f, 0x5f]}}, 0x0, 0x29, 0x0, 0x1}, 0x28) socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r1 = syz_io_uring_setup(0x5c6, &(0x7f0000000140)={0x0, 0x1001, 0x0, 0x4}, &(0x7f00000001c0)=0x0, &(0x7f0000000580)=0x0) r4 = timerfd_create(0x0, 0x0) timerfd_settime(r4, 0x3, &(0x7f0000000100)={{}, {0x0, 0x3938700}}, 0x0) clock_adjtime(0x0, &(0x7f0000000000)={0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3b9ac9ff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8}) timerfd_settime(r4, 0x3, &(0x7f0000000000)={{0x77359400}, {0x0, 0x3938700}}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x18, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x40, 0x1}) io_uring_enter(r1, 0x6e2, 0x3900, 0x1, 0x0, 0xe00) pause() 1.145287744s ago: executing program 3 (id=619): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', 0xffffffffffffffff, 0x0, 0x200000000}, 0x18) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021940000000c0a01030000000000000000070000000900020073797a31000000000900010073797a3000000000680003806400dec6080003400000000258000b80200001800a00010071756f7461000000100002800c0001400000000000000000340001800a0001006c696d69740000002400028008000440000000010c00024000000000"], 0x118}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@enum64={0x4, 0x0, 0x0, 0x13, 0x1}]}, {0x0, [0x5f, 0x5f, 0x5f]}}, 0x0, 0x29, 0x0, 0x1}, 0x28) socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r1 = syz_io_uring_setup(0x5c6, &(0x7f0000000140)={0x0, 0x1001, 0x0, 0x4}, &(0x7f00000001c0)=0x0, &(0x7f0000000580)=0x0) r4 = timerfd_create(0x0, 0x0) timerfd_settime(r4, 0x3, &(0x7f0000000100)={{}, {0x0, 0x3938700}}, 0x0) clock_adjtime(0x0, &(0x7f0000000000)={0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3b9ac9ff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8}) timerfd_settime(r4, 0x3, &(0x7f0000000000)={{0x77359400}, {0x0, 0x3938700}}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x18, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x40, 0x1}) io_uring_enter(r1, 0x6e2, 0x3900, 0x1, 0x0, 0xe00) pause() 1.07915149s ago: executing program 1 (id=620): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000200)={[{@nouid32}, {@nodioread_nolock}, {@noquota}, {@delalloc}, {@journal_dev={'journal_dev', 0x3d, 0x8}}, {@nodioread_nolock}]}, 0x1, 0x5a3, &(0x7f00000002c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42041, 0x0) pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f0000000180)={0x17c04, 0xffffffffffffffff, 0x84, 0x75ea, 0x800004}) 1.07357293s ago: executing program 4 (id=621): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', 0xffffffffffffffff, 0x0, 0x200000000}, 0x18) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021940000000c0a01030000000000000000070000000900020073797a31000000000900010073797a3000000000680003806400dec6080003400000000258000b80200001800a00010071756f7461000000100002800c0001400000000000000000340001800a0001006c696d69"], 0x118}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@enum64={0x4, 0x0, 0x0, 0x13, 0x1}]}, {0x0, [0x5f, 0x5f, 0x5f]}}, 0x0, 0x29, 0x0, 0x1}, 0x28) socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r1 = syz_io_uring_setup(0x5c6, &(0x7f0000000140)={0x0, 0x1001, 0x0, 0x4}, &(0x7f00000001c0)=0x0, &(0x7f0000000580)=0x0) r4 = timerfd_create(0x0, 0x0) timerfd_settime(r4, 0x3, &(0x7f0000000100)={{}, {0x0, 0x3938700}}, 0x0) clock_adjtime(0x0, &(0x7f0000000000)={0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3b9ac9ff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8}) timerfd_settime(r4, 0x3, &(0x7f0000000000)={{0x77359400}, {0x0, 0x3938700}}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$TIPC_CMD_GET_MAX_PORTS(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x1c, 0x0, 0x4}, 0x1c}}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x18, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x40, 0x1}) io_uring_enter(r1, 0x6e2, 0x3900, 0x1, 0x0, 0xe00) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r6, 0x6, 0x9, &(0x7f0000000580)=0x8, 0x4) pause() 956.870621ms ago: executing program 2 (id=622): set_mempolicy(0x3, &(0x7f0000000000)=0x4000000ffb, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x8}, 0x48) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005840)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r0, &(0x7f00000001c0), &(0x7f0000000080)=""/52}, 0x20) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x141) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r3}, 0x10) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) 955.659161ms ago: executing program 1 (id=623): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = getpgid(0x0) r2 = syz_pidfd_open(r1, 0x0) r3 = pidfd_getfd(r2, r2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000400)='sys_enter\x00', r4}, 0x18) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x8001) r7 = open$dir(&(0x7f0000000100)='./file0\x00', 0x149800, 0x0) r8 = syz_io_uring_setup(0x891, &(0x7f0000000140)={0x0, 0x8c36, 0x80, 0x2, 0xbfdffdfc}, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r9, r10, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r8, 0x47f6, 0x0, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000240)=[{r7, 0x1}, {r7, 0x4}], 0x2, 0x0, 0x0, 0x0) open(&(0x7f0000000200)='./file0\x00', 0xa5941, 0x5) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0xb, [@int={0xc, 0x0, 0x0, 0x1, 0x0, 0x4f, 0x0, 0x36}, @int={0xb, 0x0, 0x0, 0x1, 0x0, 0x10, 0x0, 0x1b}]}, {0x0, [0x61, 0x30, 0x61, 0x2e, 0x61, 0x2e, 0x2e, 0x5f, 0x61]}}, &(0x7f0000000800)=""/175, 0x43, 0xaf, 0x0, 0x7}, 0x28) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000002c0)='kfree\x00', r6, 0x0, 0x2}, 0x18) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x10, &(0x7f00000004c0)={[{@i_version}, {@nodiscard}, {@min_batch_time={'min_batch_time', 0x3d, 0x3ff}}]}, 0x1, 0x3f7, &(0x7f0000003080)="$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") r11 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x8d) getdents64(r11, &(0x7f0000000080)=""/234, 0xea) lseek(r11, 0x3, 0x1) getdents64(r11, 0x0, 0x0) setns(r3, 0x66020000) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0x40605346, &(0x7f00000000c0)={0xfffffffb, 0x2, {0x0, 0x0, 0x9, 0x0, 0x7}, 0x2}) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8982, &(0x7f0000000180)={0x6, 'syzkaller1\x00', {0x80}, 0x1}) lsetxattr$security_selinux(&(0x7f0000000040)='./cgroup.net/devices.allow/file0\x00', &(0x7f0000000000), &(0x7f0000000c80)='system_u:object_r:devlog_t:s0\x00', 0x4, 0xc0a44edc4f91b452) 633.782731ms ago: executing program 2 (id=624): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000a00)="449f6aed247d197178d7f0a82e1deae14825b22ab6c0ec1ca0c27cd21d8a48637cb781581aac75a2f848f285c99133f0435497bf6ae25625c64f82ecc0a7", 0x3e}, {&(0x7f0000000cc0)="cc5a4dbac0affd0a979c63ea8352d608a51fc8625318716ddf62b7752be4540c4ac7d344c53a3ad28313abc2437b60b03c0e587cafcf9a435bf90c618351f70a828238fdf90bc5d36c7d614b82552649954e0185662defd28f78449f073bad544f586136c5076a6f0f1b6fc9adf80557eb44db1b41824e9ef104c95e999766bbf27d74ad5d8fa63210cde65d384dd3e87c3fedaec3144d1ee66a0eb0", 0x9c}], 0x2}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)="d0f28c036a8b6293adbae6a1f4a98928a2efe08e665dac369f8749c5c15e9819ef3627a4cf2264401c991774440846e7b4146eca22035546a286d4571d16423012a6cc000f8a5fb3c2555ef48a1e7dc5a9c834f7dfdb9487e74566a7a9e2262d739ba78f19916bd9efee8442b70298a91798f9186dcd1a9e63316e7d18debc6fe4280aff3b3400849f8d659d4d", 0x8d}, {&(0x7f0000000380)="ba78a730565fdeecaa98beb3", 0xc}], 0x2}}], 0x2, 0x54004) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0xfffffffffffffffc}, 0x18) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 494.307784ms ago: executing program 1 (id=625): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=@newtaction={0x18, 0x30, 0x9e54f29ff072a93b, 0x0, 0x25dfdbfc, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x8000}, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kmem_cache_free\x00'}, 0x18) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="000000000000951b000000000000a4100000000000000000"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000100)={0xa000000d}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000400)={0xa}) epoll_pwait(r1, &(0x7f0000000080)=[{}], 0x1, 0x80000000, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) 335.876229ms ago: executing program 0 (id=626): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newqdisc={0x2c, 0x24, 0xd0f, 0x70bd2b, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0x8}, {0xffff, 0xffff}, {0xfff2, 0xc}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x3000c81c) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002e00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000440)=ANY=[@ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="0500"], 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000014c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa2000000000000070200"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r4}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000900)=[{0x0}], 0x1}, 0x3) 316.813861ms ago: executing program 0 (id=627): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x2}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x8020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x3000010, &(0x7f0000000240)={[{@errors_remount}, {@nodioread_nolock}]}, 0x1, 0x512, &(0x7f0000000380)="$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") close(0xffffffffffffffff) mount$tmpfs(0x0, &(0x7f0000000080)='.\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="73697a653d252c01"]) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='environ\x00') fcntl$setstatus(r0, 0x4, 0x40800) syz_io_uring_setup(0x616f, &(0x7f0000000780)={0x0, 0xfffffffd, 0x10100, 0x200, 0x1}, &(0x7f0000000380)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x2000, @fd_index=0x2, 0x792, &(0x7f0000000140)=[{&(0x7f0000000280)=""/4, 0x4}, {0x0}], 0x2}) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@broute={'broute\x00', 0x20, 0x4, 0x9c0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000008c0], 0x0, &(0x7f0000000040), &(0x7f00000008c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffc, 0x2, [{0x5, 0x1, 0x22eb, 'tunl0\x00', 'batadv_slave_0\x00', '\x00', 'netpci0\x00', @local, [0x0, 0x0, 0x0, 0xff], @remote, [0xff, 0x0, 0x0, 0xff, 0x0, 0xff], 0x6e, 0x116, 0x246, [], [@common=@nflog={'nflog\x00', 0x50, {{0x0, 0x6, 0x1, 0x0, 0x0, "20d9cf8f36fd3ad4b35fc1c1e7122b8bf842a332b65e23252617896444239ac2ba9b2b998c39e3c3428b2c353f77659788c0118bbfe05bc0c20a96497f20e034"}}}, @common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x4}}}], @common=@SECMARK={'SECMARK\x00', 0x108, {{0x9, 0x1, 'system_u:object_r:devtty_t:s0\x00'}}}}, {0x9, 0x10, 0x88a2, 'batadv0\x00', 'veth1_to_bridge\x00', 'dvmrp1\x00', 'xfrm0\x00', @local, [0x0, 0x0, 0x0, 0xff, 0xff], @remote, [0x0, 0x0, 0x0, 0xff, 0xff], 0xae, 0x11e, 0x14e, [@quota={{'quota\x00', 0x0, 0x18}, {{0x0, 0x0, 0x9, {0xffff}}}}], [@common=@dnat={'dnat\x00', 0x10, {{@multicast, 0xffffffffffffffff}}}, @common=@mark={'mark\x00', 0x10, {{0xffffffe0, 0xfffffffffffffffc}}}], @common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x8c2}}}}]}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x2, [{0x9, 0x0, 0x60, 'veth1_virt_wifi\x00', 'wlan0\x00', 'bridge_slave_1\x00', 'wlan0\x00', @random="f65bf3f8b737", [0xff, 0x0, 0xff, 0x0, 0xff], @local, [0x0, 0x0, 0xff, 0xff, 0x0, 0xff], 0xfe, 0x12e, 0x166, [@ipvs={{'ipvs\x00', 0x0, 0x28}, {{@ipv6=@private0, [0x0, 0xffffffff, 0xffffff00, 0xffffff00], 0x4e23, 0x6c, 0x3, 0x4e21, 0x10, 0x1}}}, @statistic={{'statistic\x00', 0x0, 0x18}, {{0x1, 0x1, 0x6, 0x101, 0xe, {0x10000}}}}], [@common=@AUDIT={'AUDIT\x00', 0x8, {{0x2}}}], @common=@dnat={'dnat\x00', 0x10, {{@local, 0xfffffffffffffffc}}}}, {0x5, 0x20, 0x6007, 'veth1_virt_wifi\x00', 'macsec0\x00', 'macsec0\x00', 'gretap0\x00', @multicast, [0x0, 0xff, 0xff, 0x0, 0xff], @broadcast, [0xff, 0xff, 0xff, 0x92f06fc385b0ff7a, 0x0, 0xff], 0x2d6, 0x306, 0x436, [@connlabel={{'connlabel\x00', 0x0, 0x8}, {{0x0, 0x6}}}, @bpf0={{'bpf\x00', 0x0, 0x210}, {{0x14, [{0x7, 0x1, 0x12, 0x8}, {0x3ff, 0xfb, 0x6, 0x4}, {0x7, 0x1, 0x4, 0x2}, {0xfffc, 0x1, 0x9, 0xffffffff}, {0x877, 0x0, 0xff}, {0x9, 0x6, 0x6, 0x9}, {0x400, 0x9, 0x80, 0x6b46}, {0x0, 0xa, 0xf5, 0x400}, {0xffff, 0x9, 0x6, 0x3}, {0x3ff, 0x6, 0x2, 0x7}, {0x8000, 0x7, 0xd, 0x10000}, {0x42f, 0x58, 0x6, 0x80000000}, {0x0, 0x2}, {0x8, 0x3, 0xfb, 0x6}, {0x0, 0x1, 0x2a, 0xf}, {0x9, 0x2, 0x40, 0x44ce}, {0x6, 0x9, 0xff}, {0x2, 0x7, 0x3d, 0x80000000}, {0x1, 0x9, 0x40, 0x5}, {0x28, 0x4, 0x1, 0xc7ac}, {0x819, 0xf, 0x7, 0x3c67634e}, {0x9, 0x2, 0xc, 0x8001}, {0x5d, 0x5, 0x2, 0x1}, {0x3, 0x0, 0xff, 0x6}, {0x1, 0x80, 0x48, 0x5}, {0xee6, 0x9, 0x0, 0x4}, {0x40, 0x4, 0x8, 0x2}, {0x9, 0x6, 0x81, 0x9}, {0x3, 0x5, 0xb, 0x800}, {0x7, 0x1, 0xf8, 0x200}, {0x7, 0x3, 0x4, 0x3}, {0x1, 0x9, 0x2, 0x5}, {0x7, 0x2, 0x0, 0x1}, {0x1, 0x0, 0x9, 0x5}, {0xa01b, 0xff, 0xb0, 0x6}, {0x6415, 0x4, 0x49, 0x2}, {0xeb4, 0x7, 0x6, 0x1}, {0x2, 0x8, 0x6, 0x9}, {0xff36, 0x6, 0x3, 0x70b89a8}, {0xdb, 0xa6, 0x31, 0x8}, {0x8, 0x3, 0x41, 0x5}, {0x4, 0x3, 0x8c, 0x80}, {0x7, 0x36, 0x5, 0x5}, {0x1, 0x3, 0x6, 0x1f}, {0x7f, 0x3, 0x7, 0x400}, {0xff, 0x7f, 0x9, 0x5}, {0x6, 0x2, 0x7, 0x6}, {0x1, 0x7, 0x1, 0x6}, {0x401, 0x7, 0x6, 0x1000}, {0x95, 0x3, 0xa}, {0x3, 0x2, 0xf6, 0x10}, {0xfff7, 0x1, 0x57, 0x1}, {0xf8db, 0x9, 0x3, 0xfffffffc}, {0x3, 0x2, 0xc, 0x8}, {0x24, 0x57, 0x6, 0x3}, {0x4, 0x10, 0x10, 0x1}, {0x2, 0x2, 0x5, 0x7dda}, {0x9, 0x1, 0x5, 0x6}, {0x10, 0x3, 0x8, 0x8}, {0xa, 0x2, 0x7f}, {0x8, 0x18, 0x1, 0x6}, {0x1, 0x1, 0x40, 0x8e}, {0x4, 0x4, 0x3, 0x7}, {0x8, 0x6, 0x1, 0x6}], {0xc}}}}], [@common=@CLASSIFY={'CLASSIFY\x00', 0x8}], @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x0, 'system_u:object_r:ipmi_device_t:s0\x00'}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffe}]}, 0xa38) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, &(0x7f0000000200)) 242.958748ms ago: executing program 3 (id=628): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffff"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x3}, 0x18) syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000080)='./file2\x00', 0x1808004, &(0x7f0000000680)=ANY=[@ANYRES16=0x0, @ANYRES64, @ANYRESHEX, @ANYBLOB="92208f8dd2478c4248608a57ea023ef8845944fce569f274772ca5201b4d19c9435b225c2703c4693641c3dab414ccfaa1ac12e42d3a51a9fd90dbb8dfe62fb80628dedad9cd7198cb4a3151acd3756581ae75ee414b0456b64ef7cc12f7f5a3fc858a533068bf99853d8609541e6b600f496ce1dfa65b139a86732db5e92567e310c4de67464d7250876ff8485fc19836a302e2d02a707c1a4324c8624df0f5f22dcebd53ffd3d6cd01d6d0d6ae9e8c05db3db0e1ac10e46b5cda59dfe7ab7cffd6bf7efd4d1b7068ef0b878aff95af9e3c3cdf815921a9ffe2c0f97cdeaba5e6a40289c27f3b0339b98f8cd7f6684801e60f7b"], 0x4, 0x7dc, &(0x7f0000002a00)="$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") creat(&(0x7f0000000000)='./file1\x00', 0x14c) 183.298014ms ago: executing program 4 (id=629): r0 = socket(0x2, 0x80805, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x2, 0x7fe2, 0x3, 0x12}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="180000200000000000006da400000001001018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) sendmmsg$inet(r0, &(0x7f0000000000)=[{{&(0x7f0000000080)={0x2, 0x4c21, @private=0xa01fdff}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000300)='Q', 0xffe0}], 0x1}, 0x20000000}, {{&(0x7f00000002c0)={0x2, 0x4e20, @local}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000ac0)="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", 0x541}], 0x1, 0x0, 0x0, 0x1000000}}], 0x2, 0x0) unshare(0x22020400) r3 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x800) ioctl$SG_GET_VERSION_NUM(r3, 0x2284, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f00000000c0)={[{@dioread_lock}, {@resgid}, {@nodioread_nolock}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@resgid}, {@dioread_nolock}, {@grpid}, {@orlov}]}, 0xfc, 0x5a6, &(0x7f0000000280)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x103042, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="d800000018007b7be00212ba0d1605040a003f00000f040b067c55a1bc0009001e0006990300000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b3162700e06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5005ccca262f3d40fad95667e04adcdf63cc1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e0700000004000000", 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r4, 0x8004587d, &(0x7f0000000340)={0x2, 0x2, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000240)='system.posix_acl_default\x00', 0x0, 0x0, 0x2) 106.133281ms ago: executing program 3 (id=630): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b7030000000000de850000000400000095"], &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r1}, &(0x7f0000000380), &(0x7f00000003c0)=r2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket(0x2a, 0x2, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x9, 0x5}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000006c0)=@newtfilter={0x68, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {}, {0x1, 0xfff1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x38, 0x2, [@TCA_CGROUP_EMATCHES={0x34, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x28, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x27, 0x7, 0x2000}, {{0x3, 0x0, 0x1, 0x1}, {0x4, 0x1, 0x0, 0x1}}}}, @TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0x3, 0x8, 0x1ff}, {0x6}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}]}]}}]}, 0x68}}, 0x1) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x3000010, &(0x7f0000000340)={[{@errors_remount}, {@nodioread_nolock}]}, 0x1, 0x512, &(0x7f0000000380)="$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") 37.740387ms ago: executing program 0 (id=631): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socket$inet(0xa, 0x801, 0x84) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x2014, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd07, 0x40}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bind$netlink(0xffffffffffffffff, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000640)=0x1802, 0x4) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0xfd, &(0x7f00000004c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x40) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x4008084) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 0s ago: executing program 4 (id=632): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0xfffffffffffffffd}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r0}, &(0x7f0000000000), &(0x7f0000000180)=r1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000300)='kfree\x00', r2, 0x0, 0xfffffffffffffffc}, 0x18) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000700002c0000000000000004850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x10) mq_open(&(0x7f0000000000)='..\x00', 0x0, 0x0, 0x0) open(&(0x7f0000000740)='./bus\x00', 0x143c62, 0x0) mount(&(0x7f0000000000), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,') r5 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r5, 0x1, 0x3c, 0x0, 0xfffffffffffffff8) r6 = socket(0xa, 0x3, 0x3a) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r6, 0x89f0, 0x0) r7 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r7, 0x0, 0x20) symlinkat(&(0x7f0000000000)='.\x00', r8, &(0x7f0000000140)='./file0\x00') openat(r8, &(0x7f00000000c0)='./file0\x00', 0x515a02, 0x52abe154ad664f26) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000280)={r9, 0x0, 0x0}, 0x20) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x4000081, 0xffffffff}) capset(&(0x7f0000000380)={0x20080522}, &(0x7f0000000040)={0x200000, 0x40200003, 0x0, 0x6, 0x7}) write$tcp_congestion(0xffffffffffffffff, 0x0, 0x0) kernel console output (not intermixed with test programs): 3869] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 50.748704][ T3869] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.126: invalid indirect mapped block 4294967295 (level 1) [ 50.769207][ T3869] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.126: invalid indirect mapped block 4294967295 (level 1) [ 50.790178][ T3869] EXT4-fs (loop3): 2 truncates cleaned up [ 50.812706][ T3869] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.088902][ T3878] rock: directory entry would overflow storage [ 51.095135][ T3878] rock: sig=0x4f50, size=4, remaining=3 [ 51.101042][ T3878] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 51.123965][ T3880] netlink: 12 bytes leftover after parsing attributes in process `syz.1.128'. [ 51.160910][ T3878] Symlink component flag not implemented [ 51.166628][ T3878] Symlink component flag not implemented (129) [ 51.178909][ T3878] rock: directory entry would overflow storage [ 51.185129][ T3878] rock: sig=0x4f50, size=4, remaining=3 [ 51.190757][ T3878] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 51.214403][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.272812][ T29] kauditd_printk_skb: 193 callbacks suppressed [ 51.272837][ T29] audit: type=1326 audit(1767195991.998:1142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3884 comm="syz.3.131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82083ff749 code=0x7ffc0000 [ 51.335947][ T3888] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 51.369283][ T3888] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 51.377518][ T3888] EXT4-fs (loop0): orphan cleanup on readonly fs [ 51.384332][ T3888] EXT4-fs error (device loop0): ext4_free_blocks:6728: comm syz.0.132: Freeing blocks not in datazone - block = 0, count = 4096 [ 51.398191][ T29] audit: type=1326 audit(1767195992.028:1143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3884 comm="syz.3.131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f82083ff749 code=0x7ffc0000 [ 51.422185][ T29] audit: type=1326 audit(1767195992.028:1144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3884 comm="syz.3.131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82083ff749 code=0x7ffc0000 [ 51.446817][ T29] audit: type=1326 audit(1767195992.028:1145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3884 comm="syz.3.131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f82083ff749 code=0x7ffc0000 [ 51.470117][ T29] audit: type=1326 audit(1767195992.038:1146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3884 comm="syz.3.131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82083ff749 code=0x7ffc0000 [ 51.493518][ T29] audit: type=1326 audit(1767195992.038:1147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3884 comm="syz.3.131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82083ff749 code=0x7ffc0000 [ 51.516884][ T29] audit: type=1326 audit(1767195992.038:1148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3884 comm="syz.3.131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7f82083ff749 code=0x7ffc0000 [ 51.540234][ T29] audit: type=1326 audit(1767195992.038:1149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3884 comm="syz.3.131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82083ff749 code=0x7ffc0000 [ 51.563660][ T29] audit: type=1326 audit(1767195992.038:1150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3884 comm="syz.3.131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82083ff749 code=0x7ffc0000 [ 51.587104][ T29] audit: type=1326 audit(1767195992.038:1151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3884 comm="syz.3.131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7f82083ff749 code=0x7ffc0000 [ 51.611817][ T3888] EXT4-fs (loop0): 1 orphan inode deleted [ 51.619322][ T3888] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 51.758230][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.880425][ T3900] set_capacity_and_notify: 7 callbacks suppressed [ 51.880508][ T3900] loop4: detected capacity change from 0 to 512 [ 51.964338][ T3903] netlink: 12 bytes leftover after parsing attributes in process `syz.3.139'. [ 52.090476][ T3907] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3907 comm=syz.4.140 [ 52.644066][ T3916] loop1: detected capacity change from 0 to 764 [ 52.658024][ T3916] rock: directory entry would overflow storage [ 52.664266][ T3916] rock: sig=0x4f50, size=4, remaining=3 [ 52.670356][ T3916] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 52.708262][ T3916] Symlink component flag not implemented [ 52.714314][ T3916] Symlink component flag not implemented (129) [ 52.721309][ T3916] rock: directory entry would overflow storage [ 52.727556][ T3916] rock: sig=0x4f50, size=4, remaining=3 [ 52.733361][ T3916] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 53.149934][ T3932] netlink: 80 bytes leftover after parsing attributes in process `syz.0.146'. [ 53.159032][ T3932] netlink: 80 bytes leftover after parsing attributes in process `syz.0.146'. [ 53.834570][ T3942] loop3: detected capacity change from 0 to 128 [ 53.854238][ T3942] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 53.924530][ T3942] ext4 filesystem being mounted at /39/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 54.041915][ T3952] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3952 comm=syz.2.154 [ 54.181898][ T3961] loop4: detected capacity change from 0 to 512 [ 54.196951][ T3964] loop1: detected capacity change from 0 to 1024 [ 54.209734][ T3961] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 54.225383][ T3961] EXT4-fs error (device loop4): ext4_get_branch:178: inode #11: block 4294967295: comm syz.4.155: invalid block [ 54.263104][ T3968] netlink: 28 bytes leftover after parsing attributes in process `syz.0.156'. [ 54.272107][ T3968] netlink: 28 bytes leftover after parsing attributes in process `syz.0.156'. [ 54.283992][ T3961] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.155: invalid indirect mapped block 4294967295 (level 1) [ 54.299648][ T3964] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 54.301112][ T3961] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.155: invalid indirect mapped block 4294967295 (level 1) [ 54.312022][ T3964] ext4 filesystem being mounted at /33/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 54.329756][ T3961] EXT4-fs (loop4): 2 truncates cleaned up [ 54.343382][ T3321] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 54.353206][ T3964] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.158: bg 0: block 112: padding at end of block bitmap is not set [ 54.353210][ T3961] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.393976][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 54.502661][ T3980] loop1: detected capacity change from 0 to 764 [ 54.512807][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.523745][ T3980] Symlink component flag not implemented [ 54.529552][ T3980] Symlink component flag not implemented (129) [ 54.536516][ T3980] rock: directory entry would overflow storage [ 54.542757][ T3980] rock: sig=0x4f50, size=4, remaining=3 [ 54.548373][ T3980] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 54.643308][ T3988] loop1: detected capacity change from 0 to 1024 [ 54.671926][ T3988] ext4 filesystem being mounted at /38/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 54.687523][ T3988] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.166: bg 0: block 112: padding at end of block bitmap is not set [ 54.802829][ T3997] loop1: detected capacity change from 0 to 128 [ 54.817650][ T3997] ext4 filesystem being mounted at /41/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 55.294842][ T4017] netlink: 'syz.4.177': attribute type 10 has an invalid length. [ 55.367560][ T4023] loop3: detected capacity change from 0 to 1024 [ 55.396414][ T4023] ext4 filesystem being mounted at /42/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 55.413304][ T4025] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4025 comm=syz.4.180 [ 55.432066][ T4023] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.179: bg 0: block 112: padding at end of block bitmap is not set [ 55.602118][ T4035] loop3: detected capacity change from 0 to 1024 [ 55.609935][ T4035] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 55.620991][ T4035] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 55.629277][ T4035] EXT4-fs (loop3): orphan cleanup on readonly fs [ 55.636200][ T4035] EXT4-fs error (device loop3): ext4_free_blocks:6728: comm syz.3.183: Freeing blocks not in datazone - block = 0, count = 4096 [ 55.649812][ T4035] EXT4-fs (loop3): 1 orphan inode deleted [ 55.659272][ T4033] netlink: 28 bytes leftover after parsing attributes in process `syz.0.182'. [ 55.668422][ T4033] netlink: 28 bytes leftover after parsing attributes in process `syz.0.182'. [ 55.714983][ T4040] netlink: 4280 bytes leftover after parsing attributes in process `syz.3.185'. [ 55.724332][ T4040] netlink: 4280 bytes leftover after parsing attributes in process `syz.3.185'. [ 55.769492][ T4042] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 55.780132][ T4042] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.186: invalid indirect mapped block 4294967295 (level 1) [ 55.794540][ T4042] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.186: invalid indirect mapped block 4294967295 (level 1) [ 55.810301][ T4042] EXT4-fs (loop3): 2 truncates cleaned up [ 55.953647][ T4047] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 55.968979][ T4047] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.188: invalid indirect mapped block 4294967295 (level 1) [ 55.983861][ T4047] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.188: invalid indirect mapped block 4294967295 (level 1) [ 56.000524][ T4047] EXT4-fs (loop2): 2 truncates cleaned up [ 56.032349][ T4052] netlink: 'syz.3.190': attribute type 10 has an invalid length. [ 56.192352][ T4056] __nla_validate_parse: 2 callbacks suppressed [ 56.192395][ T4056] netlink: 4280 bytes leftover after parsing attributes in process `syz.3.192'. [ 56.230246][ T4056] netlink: 4280 bytes leftover after parsing attributes in process `syz.3.192'. [ 56.243718][ T4062] Symlink component flag not implemented [ 56.257009][ T4062] Symlink component flag not implemented (129) [ 56.264385][ T4062] rock: directory entry would overflow storage [ 56.270699][ T4062] rock: sig=0x4f50, size=4, remaining=3 [ 56.276357][ T4062] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 56.299424][ T4060] ext4 filesystem being mounted at /43/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 56.319113][ T4060] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.194: bg 0: block 112: padding at end of block bitmap is not set [ 56.362147][ T4064] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 56.384718][ T4064] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 56.393178][ T4064] EXT4-fs (loop4): orphan cleanup on readonly fs [ 56.400452][ T4064] EXT4-fs error (device loop4): ext4_free_blocks:6728: comm syz.4.196: Freeing blocks not in datazone - block = 0, count = 4096 [ 56.414164][ T4064] EXT4-fs (loop4): 1 orphan inode deleted [ 56.492356][ T29] kauditd_printk_skb: 792 callbacks suppressed [ 56.492370][ T29] audit: type=1326 audit(1767196037.216:1944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4074 comm="syz.1.199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0076c5f749 code=0x7ffc0000 [ 56.499317][ T4073] netlink: 4280 bytes leftover after parsing attributes in process `syz.3.208'. [ 56.536728][ T29] audit: type=1326 audit(1767196037.256:1945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4074 comm="syz.1.199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0076c5f749 code=0x7ffc0000 [ 56.565384][ T4073] netlink: 4280 bytes leftover after parsing attributes in process `syz.3.208'. [ 56.575589][ T4079] netlink: 4280 bytes leftover after parsing attributes in process `syz.0.200'. [ 56.593829][ T4075] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 56.602339][ T4077] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 56.611395][ T4079] netlink: 4280 bytes leftover after parsing attributes in process `syz.0.200'. [ 56.626774][ T4075] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.199: invalid indirect mapped block 4294967295 (level 1) [ 56.634709][ T29] audit: type=1326 audit(1767196037.286:1946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4074 comm="syz.1.199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0076c5f749 code=0x7ffc0000 [ 56.642026][ T4075] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.199: invalid indirect mapped block 4294967295 (level 1) [ 56.663970][ T29] audit: type=1326 audit(1767196037.286:1947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4074 comm="syz.1.199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0076c5f749 code=0x7ffc0000 [ 56.664007][ T29] audit: type=1326 audit(1767196037.286:1948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4074 comm="syz.1.199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0076c5f749 code=0x7ffc0000 [ 56.707864][ T4077] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.201: invalid indirect mapped block 4294967295 (level 1) [ 56.724636][ T29] audit: type=1326 audit(1767196037.286:1949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4074 comm="syz.1.199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0076c5f749 code=0x7ffc0000 [ 56.724669][ T29] audit: type=1326 audit(1767196037.286:1950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4074 comm="syz.1.199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0076c5f749 code=0x7ffc0000 [ 56.760662][ T4075] EXT4-fs (loop1): 2 truncates cleaned up [ 56.762749][ T29] audit: type=1326 audit(1767196037.286:1951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4074 comm="syz.1.199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0076c5f749 code=0x7ffc0000 [ 56.814601][ T29] audit: type=1326 audit(1767196037.286:1952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4074 comm="syz.1.199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0076c5f749 code=0x7ffc0000 [ 56.837968][ T29] audit: type=1326 audit(1767196037.286:1953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4074 comm="syz.1.199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0076c61667 code=0x7ffc0000 [ 56.877290][ T4077] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.201: invalid indirect mapped block 4294967295 (level 1) [ 56.891965][ T4077] EXT4-fs (loop4): 2 truncates cleaned up [ 56.940764][ T4087] netlink: 'syz.3.204': attribute type 10 has an invalid length. [ 57.008975][ T4095] set_capacity_and_notify: 8 callbacks suppressed [ 57.008992][ T4095] loop3: detected capacity change from 0 to 1024 [ 57.024970][ T4095] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 57.056504][ T4095] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 57.064700][ T4095] EXT4-fs (loop3): orphan cleanup on readonly fs [ 57.071286][ T4095] EXT4-fs error (device loop3): ext4_free_blocks:6728: comm syz.3.209: Freeing blocks not in datazone - block = 0, count = 4096 [ 57.089079][ T4095] EXT4-fs (loop3): 1 orphan inode deleted [ 57.189178][ T4104] netlink: 12 bytes leftover after parsing attributes in process `syz.1.211'. [ 57.283382][ T4105] netlink: 28 bytes leftover after parsing attributes in process `syz.3.212'. [ 57.292371][ T4105] netlink: 28 bytes leftover after parsing attributes in process `syz.3.212'. [ 57.935058][ T4122] loop4: detected capacity change from 0 to 128 [ 57.947755][ T4118] 9p: Could not find request transport: fd0x0000000000000005 [ 57.964509][ T4122] ext4 filesystem being mounted at /34/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 58.214211][ T4138] loop3: detected capacity change from 0 to 764 [ 58.238072][ T4138] rock: directory entry would overflow storage [ 58.244284][ T4138] rock: sig=0x4f50, size=4, remaining=3 [ 58.249914][ T4138] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 58.283322][ T4138] Symlink component flag not implemented [ 58.298385][ T4138] Symlink component flag not implemented (129) [ 58.305666][ T4138] rock: directory entry would overflow storage [ 58.311909][ T4138] rock: sig=0x4f50, size=4, remaining=3 [ 58.317568][ T4138] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 58.910749][ T4145] loop0: detected capacity change from 0 to 512 [ 59.065021][ T4151] loop0: detected capacity change from 0 to 512 [ 59.108251][ T4153] 9p: Could not find request transport: fd0x0000000000000005 [ 59.229468][ T4168] loop4: detected capacity change from 0 to 128 [ 59.245118][ T4166] loop0: detected capacity change from 0 to 1024 [ 59.275817][ T4168] ext4 filesystem being mounted at /36/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 59.291022][ T4166] ext4 filesystem being mounted at /47/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 59.308626][ T4171] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4171 comm=syz.3.237 [ 59.314573][ T4166] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.236: bg 0: block 112: padding at end of block bitmap is not set [ 59.432604][ T4179] loop0: detected capacity change from 0 to 764 [ 59.447960][ T4179] Symlink component flag not implemented [ 59.465164][ T4179] Symlink component flag not implemented (129) [ 59.494761][ T4179] rock: directory entry would overflow storage [ 59.501043][ T4179] rock: sig=0x4f50, size=4, remaining=3 [ 59.506686][ T4179] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 59.673518][ T4189] loop0: detected capacity change from 0 to 2048 [ 59.715540][ T4191] loop4: detected capacity change from 0 to 1024 [ 59.723714][ T4191] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 59.749819][ T4191] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 59.759439][ T4191] EXT4-fs (loop4): orphan cleanup on readonly fs [ 59.766516][ T4189] loop0: p2 p3 p7 [ 59.773984][ T4191] EXT4-fs error (device loop4): ext4_free_blocks:6728: comm syz.4.243: Freeing blocks not in datazone - block = 0, count = 4096 [ 59.792269][ T4191] EXT4-fs (loop4): 1 orphan inode deleted [ 59.804559][ T4189] tipc: Started in network mode [ 59.809635][ T4189] tipc: Node identity aaaaaaaaaa34, cluster identity 4711 [ 59.816928][ T4189] tipc: Enabled bearer , priority 10 [ 59.829668][ T3004] loop0: p2 p3 p7 [ 59.889253][ T4194] mmap: syz.4.244 (4194) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 59.939600][ T3688] udevd[3688]: inotify_add_watch(7, /dev/loop0p7, 10) failed: No such file or directory [ 59.950270][ T3503] udevd[3503]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 60.005469][ T3688] udevd[3688]: inotify_add_watch(7, /dev/loop0p7, 10) failed: No such file or directory [ 60.009690][ T3503] udevd[3503]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 60.090564][ T4202] netlink: 52 bytes leftover after parsing attributes in process `syz.4.244'. [ 60.331616][ T4208] ext4 filesystem being mounted at /44/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 60.346124][ T4208] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.249: bg 0: block 112: padding at end of block bitmap is not set [ 60.509791][ T4221] ext4 filesystem being mounted at /52/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 60.912891][ T4228] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 60.929783][ T3655] tipc: Node number set to 10398378 [ 60.941507][ T4228] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.255: invalid indirect mapped block 4294967295 (level 1) [ 61.148851][ T4228] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.255: invalid indirect mapped block 4294967295 (level 1) [ 61.189272][ T4231] usb usb1: usbfs: interface 0 claimed by hub while 'syz.1.256' sets config #0 [ 61.199088][ T4231] usb usb1: usbfs: interface 0 claimed by hub while 'syz.1.256' sets config #1 [ 61.377307][ T4228] EXT4-fs (loop0): 2 truncates cleaned up [ 61.503929][ T29] kauditd_printk_skb: 1025 callbacks suppressed [ 61.503988][ T29] audit: type=1400 audit(1767196066.223:2979): avc: denied { create } for pid=4240 comm="syz.3.260" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 61.537229][ T29] audit: type=1400 audit(1767196066.223:2980): avc: denied { write } for pid=4240 comm="syz.3.260" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 61.703614][ T4243] __nla_validate_parse: 2 callbacks suppressed [ 61.703685][ T4243] netlink: 80 bytes leftover after parsing attributes in process `syz.0.261'. [ 61.718910][ T4243] netlink: 80 bytes leftover after parsing attributes in process `syz.0.261'. [ 61.782160][ T4246] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 61.801767][ T4245] netlink: 36 bytes leftover after parsing attributes in process `syz.3.260'. [ 61.856371][ T29] audit: type=1400 audit(1767196066.523:2981): avc: denied { ioctl } for pid=4240 comm="syz.3.260" path="socket:[7432]" dev="sockfs" ino=7432 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 61.882235][ T4246] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 61.890522][ T3503] loop3: p1 p2 p3 < p5 p6 > [ 61.896051][ T4246] EXT4-fs (loop0): orphan cleanup on readonly fs [ 61.903014][ T4246] EXT4-fs error (device loop0): ext4_free_blocks:6728: comm syz.0.262: Freeing blocks not in datazone - block = 0, count = 4096 [ 61.916636][ T3503] loop3: p2 size 16775168 extends beyond EOD, truncated [ 61.924733][ T3503] loop3: p5 start 4294970168 is beyond EOD, truncated [ 61.936275][ T4241] loop3: p1 p2 p3 < p5 p6 > [ 61.939588][ T4246] EXT4-fs (loop0): 1 orphan inode deleted [ 61.962794][ T4241] loop3: p2 size 16775168 extends beyond EOD, truncated [ 61.976889][ T4241] loop3: p5 start 4294970168 is beyond EOD, truncated [ 61.999612][ T4249] ext4 filesystem being mounted at /54/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 62.019465][ T4249] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.263: bg 0: block 112: padding at end of block bitmap is not set [ 62.141892][ T29] audit: type=1326 audit(1767196066.863:2982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4261 comm="syz.0.268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0dba9f749 code=0x7ffc0000 [ 62.165287][ T29] audit: type=1326 audit(1767196066.863:2983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4261 comm="syz.0.268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0dba9f749 code=0x7ffc0000 [ 62.256635][ T3503] udevd[3503]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 62.268649][ T3308] udevd[3308]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 62.279772][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop3p6, 10) failed: No such file or directory [ 62.284217][ T3688] udevd[3688]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 62.305938][ T29] audit: type=1326 audit(1767196066.863:2984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4261 comm="syz.0.268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fd0dba9f749 code=0x7ffc0000 [ 62.329557][ T29] audit: type=1326 audit(1767196066.863:2985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4261 comm="syz.0.268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fd0dba9f783 code=0x7ffc0000 [ 62.352748][ T29] audit: type=1326 audit(1767196066.863:2986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4261 comm="syz.0.268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fd0dba9f783 code=0x7ffc0000 [ 62.376102][ T29] audit: type=1326 audit(1767196066.863:2987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4261 comm="syz.0.268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0dba9f749 code=0x7ffc0000 [ 62.399667][ T29] audit: type=1326 audit(1767196066.863:2988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4261 comm="syz.0.268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7fd0dba9f749 code=0x7ffc0000 [ 62.428165][ T3503] udevd[3503]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 62.440092][ T3688] udevd[3688]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 62.527881][ T4269] netlink: 12 bytes leftover after parsing attributes in process `syz.1.270'. [ 62.550350][ T4266] set_capacity_and_notify: 6 callbacks suppressed [ 62.550366][ T4266] loop2: detected capacity change from 0 to 512 [ 62.571369][ T4266] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 62.609749][ T4266] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 62.628445][ T4266] EXT4-fs (loop2): orphan cleanup on readonly fs [ 62.641172][ T4266] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #16: comm syz.2.269: corrupted inode contents [ 62.653361][ T4266] EXT4-fs (loop2): Remounting filesystem read-only [ 62.660286][ T4266] EXT4-fs (loop2): 1 truncate cleaned up [ 62.666180][ T323] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 62.676843][ T323] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 62.688331][ T323] EXT4-fs (loop2): Quota write (off=8, len=24) cancelled because transaction is not started [ 62.914894][ T4280] loop2: detected capacity change from 0 to 764 [ 63.045868][ T4280] Symlink component flag not implemented [ 63.059496][ T4280] Symlink component flag not implemented (129) [ 63.078219][ T4280] rock: directory entry would overflow storage [ 63.084535][ T4280] rock: sig=0x4f50, size=4, remaining=3 [ 63.090284][ T4280] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 63.139034][ T4281] usb usb1: usbfs: interface 0 claimed by hub while 'syz.3.272' sets config #0 [ 63.176766][ T4281] usb usb1: usbfs: interface 0 claimed by hub while 'syz.3.272' sets config #1 [ 63.188906][ T4291] loop0: detected capacity change from 0 to 512 [ 63.212744][ T4291] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 63.245990][ T4291] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.275: invalid indirect mapped block 4294967295 (level 1) [ 63.318642][ T4291] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.275: invalid indirect mapped block 4294967295 (level 1) [ 63.392183][ T4291] EXT4-fs (loop0): 2 truncates cleaned up [ 63.626248][ T4294] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 63.730590][ T4305] loop2: detected capacity change from 0 to 512 [ 63.819150][ T4305] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 63.970803][ T4305] EXT4-fs error (device loop2): ext4_get_branch:178: inode #11: block 4294967295: comm syz.2.279: invalid block [ 64.018581][ T4305] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.279: invalid indirect mapped block 4294967295 (level 1) [ 64.048871][ T4305] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.279: invalid indirect mapped block 4294967295 (level 1) [ 64.066476][ T4305] EXT4-fs (loop2): 2 truncates cleaned up [ 64.092086][ T4312] loop0: detected capacity change from 0 to 512 [ 64.224924][ T4312] EXT4-fs warning (device loop0): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 64.260883][ T4312] EXT4-fs (loop0): mount failed [ 64.325063][ T4322] netlink: 128 bytes leftover after parsing attributes in process `syz.4.284'. [ 64.405186][ T4324] loop2: detected capacity change from 0 to 512 [ 64.637460][ T4328] loop0: detected capacity change from 0 to 8192 [ 64.687586][ T3503] loop0: p1 p4 < > [ 64.691562][ T3503] loop0: partition table partially beyond EOD, truncated [ 64.714534][ T3503] loop0: p1 start 16777216 is beyond EOD, truncated [ 64.721393][ T3503] loop0: p4 start 16777216 is beyond EOD, truncated [ 64.739146][ T4328] loop0: p1 p4 < > [ 64.743133][ T4328] loop0: partition table partially beyond EOD, truncated [ 64.753116][ T4328] loop0: p1 start 16777216 is beyond EOD, truncated [ 64.759995][ T4328] loop0: p4 start 16777216 is beyond EOD, truncated [ 64.771039][ T4328] netlink: 148 bytes leftover after parsing attributes in process `syz.0.286'. [ 65.382103][ T4358] loop4: detected capacity change from 0 to 1024 [ 65.492550][ T4358] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 65.508429][ T4358] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 65.517475][ T4358] EXT4-fs (loop4): orphan cleanup on readonly fs [ 65.540096][ T4358] EXT4-fs error (device loop4): ext4_free_blocks:6728: comm syz.4.296: Freeing blocks not in datazone - block = 0, count = 4096 [ 65.562231][ T4361] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4361 comm=syz.2.297 [ 65.567933][ T4358] EXT4-fs (loop4): 1 orphan inode deleted [ 65.710809][ T4368] netlink: 12 bytes leftover after parsing attributes in process `syz.1.298'. [ 65.944169][ T4379] loop4: detected capacity change from 0 to 1024 [ 65.958309][ T4380] loop0: detected capacity change from 0 to 1024 [ 65.983486][ T4379] ext4 filesystem being mounted at /45/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 66.021200][ T4380] ext4 filesystem being mounted at /68/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 66.036381][ T4379] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.303: bg 0: block 112: padding at end of block bitmap is not set [ 66.069468][ T4380] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.304: bg 0: block 112: padding at end of block bitmap is not set [ 66.119756][ T4376] usb usb1: usbfs: interface 0 claimed by hub while 'syz.3.299' sets config #0 [ 66.163994][ T4376] usb usb1: usbfs: interface 0 claimed by hub while 'syz.3.299' sets config #1 [ 66.232379][ T4391] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4391 comm=syz.4.306 [ 66.357393][ T4394] Symlink component flag not implemented [ 66.373235][ T4394] Symlink component flag not implemented (129) [ 66.392715][ T4394] rock: directory entry would overflow storage [ 66.399041][ T4394] rock: sig=0x4f50, size=4, remaining=3 [ 66.404638][ T4394] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 66.460373][ T4397] Symlink component flag not implemented [ 66.506733][ T4397] Symlink component flag not implemented (129) [ 66.513292][ T29] kauditd_printk_skb: 575 callbacks suppressed [ 66.513306][ T29] audit: type=1326 audit(1767196103.242:3557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4389 comm="syz.4.306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=34 compat=0 ip=0x7fd14e5df749 code=0x7ffc0000 [ 66.553893][ T4397] rock: directory entry would overflow storage [ 66.560328][ T4397] rock: sig=0x4f50, size=4, remaining=3 [ 66.565943][ T4397] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 66.575816][ T29] audit: type=1326 audit(1767196103.272:3558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4389 comm="syz.4.306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=34 compat=0 ip=0x7fd14e5df749 code=0x7ffc0000 [ 66.599369][ T29] audit: type=1326 audit(1767196103.272:3559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4389 comm="syz.4.306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=34 compat=0 ip=0x7fd14e5df749 code=0x7ffc0000 [ 66.622700][ T29] audit: type=1326 audit(1767196103.282:3560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4389 comm="syz.4.306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=34 compat=0 ip=0x7fd14e5df749 code=0x7ffc0000 [ 66.646207][ T29] audit: type=1326 audit(1767196103.292:3561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4389 comm="syz.4.306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=34 compat=0 ip=0x7fd14e5df749 code=0x7ffc0000 [ 66.714271][ T4400] netlink: 4280 bytes leftover after parsing attributes in process `syz.2.311'. [ 66.737734][ T29] audit: type=1326 audit(1767196103.402:3562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4389 comm="syz.4.306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=34 compat=0 ip=0x7fd14e5df749 code=0x7ffc0000 [ 66.761062][ T29] audit: type=1326 audit(1767196103.402:3563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4389 comm="syz.4.306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=34 compat=0 ip=0x7fd14e5df749 code=0x7ffc0000 [ 66.784507][ T29] audit: type=1326 audit(1767196103.412:3564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4389 comm="syz.4.306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=34 compat=0 ip=0x7fd14e5df749 code=0x7ffc0000 [ 66.808090][ T29] audit: type=1326 audit(1767196103.422:3565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4389 comm="syz.4.306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=34 compat=0 ip=0x7fd14e5df749 code=0x7ffc0000 [ 66.831428][ T29] audit: type=1326 audit(1767196103.432:3566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4389 comm="syz.4.306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=34 compat=0 ip=0x7fd14e5df749 code=0x7ffc0000 [ 66.857636][ T4400] netlink: 4280 bytes leftover after parsing attributes in process `syz.2.311'. [ 66.923790][ T4415] bridge0: entered promiscuous mode [ 66.937629][ T4415] bridge0: left promiscuous mode [ 67.377324][ T4423] netlink: 'syz.3.315': attribute type 10 has an invalid length. [ 67.395001][ T4415] netlink: 44 bytes leftover after parsing attributes in process `syz.2.312'. [ 67.405742][ T4415] netlink: 44 bytes leftover after parsing attributes in process `syz.2.312'. [ 67.505831][ T4421] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 67.525359][ T4421] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.314: invalid indirect mapped block 4294967295 (level 1) [ 67.560750][ T4430] set_capacity_and_notify: 5 callbacks suppressed [ 67.560766][ T4430] loop3: detected capacity change from 0 to 512 [ 67.615372][ T4432] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 67.641135][ T4421] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.314: invalid indirect mapped block 4294967295 (level 1) [ 67.675570][ T4432] EXT4-fs (loop1): orphan cleanup on readonly fs [ 67.679821][ T4421] EXT4-fs (loop4): 2 truncates cleaned up [ 67.689531][ T4432] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #16: comm syz.1.319: corrupted inode contents [ 67.707934][ T4443] loop2: detected capacity change from 0 to 764 [ 67.713243][ T4432] EXT4-fs (loop1): Remounting filesystem read-only [ 67.721232][ T4432] EXT4-fs (loop1): 1 truncate cleaned up [ 67.727235][ T312] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 67.737831][ T312] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 67.748614][ T312] EXT4-fs (loop1): Quota write (off=8, len=24) cancelled because transaction is not started [ 67.765740][ T4443] Symlink component flag not implemented [ 67.772239][ T4443] Symlink component flag not implemented (129) [ 67.779214][ T4443] rock: directory entry would overflow storage [ 67.785418][ T4443] rock: sig=0x4f50, size=4, remaining=3 [ 67.791070][ T4443] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 67.911038][ T4454] syz.2.328 uses obsolete (PF_INET,SOCK_PACKET) [ 67.920342][ T4455] netlink: 12 bytes leftover after parsing attributes in process `syz.1.327'. [ 67.948473][ T4454] netlink: 8 bytes leftover after parsing attributes in process `syz.2.328'. [ 67.961459][ T4454] netlink: 8 bytes leftover after parsing attributes in process `syz.2.328'. [ 68.000779][ T4454] netlink: 40 bytes leftover after parsing attributes in process `syz.2.328'. [ 68.157586][ T4461] loop4: detected capacity change from 0 to 2048 [ 68.217618][ T3503] loop4: p2 < > p4 [ 68.227379][ T3503] loop4: p4 size 262144 extends beyond EOD, truncated [ 68.246979][ T4461] loop4: p2 < > p4 [ 68.262287][ T4461] loop4: p4 size 262144 extends beyond EOD, truncated [ 68.353438][ T3308] udevd[3308]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 68.365709][ T3503] udevd[3503]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 68.382524][ T4474] loop4: detected capacity change from 0 to 512 [ 68.409580][ T4474] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 68.419259][ T4474] EXT4-fs (loop4): orphan cleanup on readonly fs [ 68.444605][ T4474] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #16: comm syz.4.334: corrupted inode contents [ 68.463740][ T4474] EXT4-fs (loop4): Remounting filesystem read-only [ 68.478267][ T4474] EXT4-fs (loop4): 1 truncate cleaned up [ 68.484214][ T3832] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 68.494982][ T3832] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 68.507268][ T4478] netlink: 8 bytes leftover after parsing attributes in process `syz.2.335'. [ 68.550715][ T3832] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started [ 68.738960][ T4500] netlink: 16 bytes leftover after parsing attributes in process `syz.2.344'. [ 69.135777][ T4519] loop4: detected capacity change from 0 to 512 [ 69.171966][ T4519] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 69.194015][ T4519] EXT4-fs (loop4): orphan cleanup on readonly fs [ 69.301380][ T4519] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #16: comm syz.4.350: corrupted inode contents [ 69.345448][ T4519] EXT4-fs (loop4): Remounting filesystem read-only [ 69.375213][ T4519] EXT4-fs (loop4): 1 truncate cleaned up [ 69.381067][ T52] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 69.391697][ T52] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 69.427666][ T52] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started [ 69.452689][ T4520] sctp: [Deprecated]: syz.0.349 (pid 4520) Use of int in max_burst socket option. [ 69.452689][ T4520] Use struct sctp_assoc_value instead [ 69.849144][ T4547] tipc: Enabling of bearer rejected, failed to enable media [ 69.929675][ T4544] loop4: detected capacity change from 0 to 512 [ 69.944928][ T4544] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 69.967860][ T4544] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2857: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 69.984172][ T4544] EXT4-fs (loop4): 1 truncate cleaned up [ 70.007454][ T4553] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4553 comm=syz.1.360 [ 70.029632][ T4544] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 70.064023][ T4544] bridge0: entered promiscuous mode [ 70.073759][ T4544] bridge0: port 3(vlan0) entered blocking state [ 70.081088][ T4544] bridge0: port 3(vlan0) entered disabled state [ 70.089165][ T4544] vlan0: entered allmulticast mode [ 70.094612][ T4544] bridge0: entered allmulticast mode [ 70.103283][ T4544] vlan0: left allmulticast mode [ 70.108973][ T4544] bridge0: left allmulticast mode [ 70.116930][ T4544] bridge0: left promiscuous mode [ 70.185396][ T4555] bridge0: entered promiscuous mode [ 70.196238][ T4555] bridge0: port 3(vlan0) entered blocking state [ 70.204423][ T4555] bridge0: port 3(vlan0) entered disabled state [ 70.212292][ T4555] vlan0: entered allmulticast mode [ 70.217526][ T4555] bridge0: entered allmulticast mode [ 70.224694][ T4555] vlan0: left allmulticast mode [ 70.229783][ T4555] bridge0: left allmulticast mode [ 70.236423][ T4555] bridge0: left promiscuous mode [ 70.682089][ T4565] FAULT_INJECTION: forcing a failure. [ 70.682089][ T4565] name failslab, interval 1, probability 0, space 0, times 0 [ 70.694932][ T4565] CPU: 1 UID: 0 PID: 4565 Comm: syz.2.364 Not tainted syzkaller #0 PREEMPT(voluntary) [ 70.694999][ T4565] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 70.695061][ T4565] Call Trace: [ 70.695071][ T4565] [ 70.695078][ T4565] __dump_stack+0x1d/0x30 [ 70.695165][ T4565] dump_stack_lvl+0x95/0xd0 [ 70.695183][ T4565] dump_stack+0x15/0x1b [ 70.695263][ T4565] should_fail_ex+0x265/0x280 [ 70.695285][ T4565] should_failslab+0x8c/0xb0 [ 70.695316][ T4565] kmem_cache_alloc_noprof+0x69/0x4b0 [ 70.695378][ T4565] ? audit_log_start+0x342/0x720 [ 70.695403][ T4565] audit_log_start+0x342/0x720 [ 70.695423][ T4565] audit_seccomp+0x48/0x100 [ 70.695580][ T4565] ? __seccomp_filter+0x832/0x1260 [ 70.695605][ T4565] __seccomp_filter+0x843/0x1260 [ 70.695637][ T4565] __secure_computing+0x82/0x150 [ 70.695711][ T4565] syscall_trace_enter+0xcf/0x1e0 [ 70.695796][ T4565] do_syscall_64+0xa4/0x2b0 [ 70.695841][ T4565] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.695904][ T4565] RIP: 0033:0x7f5d9046e15c [ 70.695943][ T4565] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 70.695972][ T4565] RSP: 002b:00007f5d8eecf030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 70.696001][ T4565] RAX: ffffffffffffffda RBX: 00007f5d906c5fa0 RCX: 00007f5d9046e15c [ 70.696028][ T4565] RDX: 000000000000000f RSI: 00007f5d8eecf0a0 RDI: 0000000000000005 [ 70.696053][ T4565] RBP: 00007f5d8eecf090 R08: 0000000000000000 R09: 0000000000000000 [ 70.696068][ T4565] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 70.696092][ T4565] R13: 00007f5d906c6038 R14: 00007f5d906c5fa0 R15: 00007ffcd66a0828 [ 70.696179][ T4565] [ 70.920107][ T4571] loop2: detected capacity change from 0 to 512 [ 71.188952][ T4585] loop4: detected capacity change from 0 to 1024 [ 71.228050][ T4585] EXT4-fs error (device loop4): ext4_free_blocks:6728: comm syz.4.371: Freeing blocks not in datazone - block = 0, count = 16 [ 71.255372][ T52] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm kworker/u8:3: bg 0: block 112: padding at end of block bitmap is not set [ 71.270896][ T52] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 29 with max blocks 39 with error 28 [ 71.283353][ T52] EXT4-fs (loop4): This should not happen!! Data will be lost [ 71.283353][ T52] [ 71.293106][ T52] EXT4-fs (loop4): Total free blocks count 0 [ 71.299149][ T52] EXT4-fs (loop4): Free/Dirty block details [ 71.305068][ T52] EXT4-fs (loop4): free_blocks=0 [ 71.310081][ T52] EXT4-fs (loop4): dirty_blocks=64 [ 71.315224][ T52] EXT4-fs (loop4): Block reservation details [ 71.321258][ T52] EXT4-fs (loop4): i_reserved_data_blocks=4 [ 71.345464][ T4589] loop4: detected capacity change from 0 to 1024 [ 71.374338][ T4589] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.372: bg 0: block 112: padding at end of block bitmap is not set [ 71.448022][ T4593] netlink: 'syz.4.373': attribute type 10 has an invalid length. [ 71.459440][ T4593] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.468546][ T4593] team0: Port device bond0 added [ 71.476681][ T4593] loop4: detected capacity change from 0 to 512 [ 71.488607][ T4593] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 71.512034][ T4593] syz.4.373 (4593) used greatest stack depth: 9952 bytes left [ 71.548222][ T4597] Symlink component flag not implemented [ 71.554439][ T4597] Symlink component flag not implemented (129) [ 71.562243][ T4597] rock: directory entry would overflow storage [ 71.568502][ T4597] rock: sig=0x4f50, size=4, remaining=3 [ 71.574131][ T4597] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 71.632483][ T4599] Symlink component flag not implemented [ 71.638864][ T4599] Symlink component flag not implemented (129) [ 71.654296][ T4599] rock: directory entry would overflow storage [ 71.660657][ T4599] rock: sig=0x4f50, size=4, remaining=3 [ 71.666349][ T4599] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 71.704136][ T29] kauditd_printk_skb: 444 callbacks suppressed [ 71.704163][ T29] audit: type=1400 audit(87.676:3991): avc: denied { append } for pid=4600 comm="syz.4.376" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 71.733183][ T29] audit: type=1400 audit(87.676:3992): avc: denied { open } for pid=4600 comm="syz.4.376" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 71.759804][ T29] audit: type=1400 audit(87.736:3993): avc: denied { ioctl } for pid=4600 comm="syz.4.376" path="/dev/autofs" dev="devtmpfs" ino=91 ioctlcmd=0x9374 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 71.826585][ T29] audit: type=1326 audit(87.796:3994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4602 comm="syz.4.377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd14e5df749 code=0x7ffc0000 [ 71.860214][ T4603] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 71.881882][ T29] audit: type=1326 audit(87.796:3995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4602 comm="syz.4.377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd14e5df749 code=0x7ffc0000 [ 71.904493][ T29] audit: type=1326 audit(87.796:3996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4602 comm="syz.4.377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd14e5df749 code=0x7ffc0000 [ 71.927241][ T29] audit: type=1326 audit(87.796:3997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4602 comm="syz.4.377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd14e5df749 code=0x7ffc0000 [ 71.949955][ T29] audit: type=1326 audit(87.796:3998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4602 comm="syz.4.377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd14e5df749 code=0x7ffc0000 [ 71.972821][ T29] audit: type=1326 audit(87.796:3999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4602 comm="syz.4.377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd14e5df749 code=0x7ffc0000 [ 71.995555][ T29] audit: type=1326 audit(87.796:4000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4602 comm="syz.4.377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd14e5df749 code=0x7ffc0000 [ 72.080135][ T4607] __nla_validate_parse: 3 callbacks suppressed [ 72.080149][ T4607] netlink: 4 bytes leftover after parsing attributes in process `syz.2.379'. [ 72.095698][ T4607] netlink: 4 bytes leftover after parsing attributes in process `syz.2.379'. [ 72.170458][ T4607] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 72.179099][ T4607] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 72.198513][ T4603] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.377: invalid indirect mapped block 4294967295 (level 1) [ 72.214036][ T4603] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.377: invalid indirect mapped block 4294967295 (level 1) [ 72.229425][ T4603] EXT4-fs (loop4): 2 truncates cleaned up [ 72.235632][ T4603] EXT4-fs mount: 70 callbacks suppressed [ 72.235649][ T4603] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.427136][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.793568][ T4621] set_capacity_and_notify: 3 callbacks suppressed [ 72.793589][ T4621] loop1: detected capacity change from 0 to 1024 [ 72.821450][ T4621] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 72.856325][ T4621] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.383: bg 0: block 112: padding at end of block bitmap is not set [ 72.920568][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 73.040522][ T4630] netlink: 4280 bytes leftover after parsing attributes in process `syz.1.386'. [ 73.049792][ T4630] netlink: 4280 bytes leftover after parsing attributes in process `syz.1.386'. [ 73.156591][ T4632] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4632 comm=syz.1.387 [ 73.196234][ T4626] netlink: 52 bytes leftover after parsing attributes in process `syz.2.384'. [ 73.281048][ T4636] loop3: detected capacity change from 0 to 512 [ 73.328710][ T4636] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 73.345672][ T4636] EXT4-fs (loop3): orphan cleanup on readonly fs [ 73.365674][ T4636] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #16: comm syz.3.388: corrupted inode contents [ 73.407288][ T4636] EXT4-fs (loop3): Remounting filesystem read-only [ 73.427475][ T4636] EXT4-fs (loop3): 1 truncate cleaned up [ 73.433416][ T2917] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 73.443998][ T2917] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 73.467136][ T2917] EXT4-fs (loop3): Quota write (off=8, len=24) cancelled because transaction is not started [ 73.487875][ T4636] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 73.529424][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.898408][ T4650] netlink: 80 bytes leftover after parsing attributes in process `syz.4.392'. [ 73.907386][ T4650] netlink: 80 bytes leftover after parsing attributes in process `syz.4.392'. [ 74.163409][ T4658] netlink: 36 bytes leftover after parsing attributes in process `syz.2.395'. [ 74.172534][ T4658] netlink: 36 bytes leftover after parsing attributes in process `syz.2.395'. [ 74.182014][ T4658] netlink: 36 bytes leftover after parsing attributes in process `syz.2.395'. [ 74.454119][ T4665] IPVS: set_ctl: invalid protocol: 43 255.255.255.255:20003 [ 74.510716][ T4669] loop3: detected capacity change from 0 to 1024 [ 74.528672][ T4669] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 74.545503][ T4669] EXT4-fs error (device loop3): ext4_free_blocks:6728: comm syz.3.398: Freeing blocks not in datazone - block = 0, count = 16 [ 74.569124][ T52] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm kworker/u8:3: bg 0: block 112: padding at end of block bitmap is not set [ 74.586377][ T52] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 29 with max blocks 39 with error 28 [ 74.598872][ T52] EXT4-fs (loop3): This should not happen!! Data will be lost [ 74.598872][ T52] [ 74.608558][ T52] EXT4-fs (loop3): Total free blocks count 0 [ 74.614574][ T52] EXT4-fs (loop3): Free/Dirty block details [ 74.620525][ T52] EXT4-fs (loop3): free_blocks=0 [ 74.625487][ T52] EXT4-fs (loop3): dirty_blocks=64 [ 74.630799][ T52] EXT4-fs (loop3): Block reservation details [ 74.636808][ T52] EXT4-fs (loop3): i_reserved_data_blocks=4 [ 74.644365][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 74.700997][ T4675] loop4: detected capacity change from 0 to 512 [ 74.730283][ T4677] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4677 comm=syz.3.401 [ 74.960471][ T4688] loop1: detected capacity change from 0 to 512 [ 74.983610][ T4688] EXT4-fs (loop1): orphan cleanup on readonly fs [ 74.990492][ T4688] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.403: bg 0: block 127: padding at end of block bitmap is not set [ 75.008248][ T4688] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #15: comm syz.1.403: corrupted inode contents [ 75.020172][ T4688] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 75.028861][ T4688] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #15: comm syz.1.403: corrupted inode contents [ 75.040746][ T4688] EXT4-fs error (device loop1): ext4_evict_inode:301: inode #15: comm syz.1.403: mark_inode_dirty error [ 75.052230][ T4688] EXT4-fs (loop1): 1 orphan inode deleted [ 75.058961][ T4688] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 75.098214][ T4691] loop2: detected capacity change from 0 to 512 [ 75.128166][ T4691] EXT4-fs warning (device loop2): ext4_xattr_inode_get:560: inode #11: comm syz.2.404: EA inode hash validation failed [ 75.141014][ T4691] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #15: comm syz.2.404: corrupted inode contents [ 75.153108][ T4691] EXT4-fs error (device loop2): ext4_dirty_inode:6502: inode #15: comm syz.2.404: mark_inode_dirty error [ 75.164902][ T4691] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #15: comm syz.2.404: corrupted inode contents [ 75.177500][ T4691] EXT4-fs error (device loop2): ext4_xattr_delete_inode:3000: inode #15: comm syz.2.404: mark_inode_dirty error [ 75.191047][ T4691] EXT4-fs error (device loop2): ext4_xattr_delete_inode:3003: inode #15: comm syz.2.404: mark inode dirty (error -117) [ 75.203863][ T4691] EXT4-fs warning (device loop2): ext4_evict_inode:273: xattr delete (err -117) [ 75.220479][ T4691] EXT4-fs (loop2): 1 orphan inode deleted [ 75.228822][ T4691] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.281084][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.311188][ T4694] loop1: detected capacity change from 0 to 512 [ 75.501912][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.523995][ T4701] loop2: detected capacity change from 0 to 764 [ 75.532775][ T4701] Symlink component flag not implemented [ 75.538908][ T4701] Symlink component flag not implemented (129) [ 75.546213][ T4701] rock: directory entry would overflow storage [ 75.552531][ T4701] rock: sig=0x4f50, size=4, remaining=3 [ 75.558196][ T4701] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 75.586951][ T4703] loop2: detected capacity change from 0 to 764 [ 75.613254][ T4703] Symlink component flag not implemented [ 75.621654][ T4703] Symlink component flag not implemented (129) [ 75.629463][ T4703] rock: directory entry would overflow storage [ 75.635685][ T4703] rock: sig=0x4f50, size=4, remaining=3 [ 75.641452][ T4703] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 75.659160][ T4705] xt_CT: You must specify a L4 protocol and not use inversions on it [ 75.671239][ T4705] loop3: detected capacity change from 0 to 512 [ 75.678897][ T4705] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 75.689787][ T4705] EXT4-fs (loop3): orphan cleanup on readonly fs [ 75.700468][ T4705] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4215: comm syz.3.409: Allocating blocks 41-42 which overlap fs metadata [ 75.721263][ T4705] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4215: comm syz.3.409: Allocating blocks 41-42 which overlap fs metadata [ 75.738390][ T4705] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.409: Failed to acquire dquot type 1 [ 75.754763][ T4705] EXT4-fs error (device loop3): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 75.769687][ T4705] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #12: comm syz.3.409: corrupted inode contents [ 75.781891][ T4705] EXT4-fs error (device loop3): ext4_dirty_inode:6502: inode #12: comm syz.3.409: mark_inode_dirty error [ 75.793405][ T4705] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #12: comm syz.3.409: corrupted inode contents [ 75.805692][ T4705] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #12: comm syz.3.409: mark_inode_dirty error [ 75.817353][ T4705] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #12: comm syz.3.409: corrupted inode contents [ 75.829879][ T4705] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 75.838852][ T4705] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #12: comm syz.3.409: corrupted inode contents [ 75.851254][ T4705] EXT4-fs error (device loop3): ext4_truncate:4635: inode #12: comm syz.3.409: mark_inode_dirty error [ 75.862490][ T4705] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem [ 75.871786][ T4705] EXT4-fs (loop3): 1 truncate cleaned up [ 75.878051][ T4705] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 75.883376][ T4708] Symlink component flag not implemented [ 75.897987][ T4708] Symlink component flag not implemented (129) [ 75.911377][ T4708] rock: directory entry would overflow storage [ 75.917633][ T4708] rock: sig=0x4f50, size=4, remaining=3 [ 75.923260][ T4708] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 75.974659][ T4712] Symlink component flag not implemented [ 75.987239][ T4712] Symlink component flag not implemented (129) [ 75.999400][ T4713] openvswitch: netlink: Missing key (keys=40, expected=80) [ 76.008498][ T4712] rock: directory entry would overflow storage [ 76.014688][ T4712] rock: sig=0x4f50, size=4, remaining=3 [ 76.020341][ T4712] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 76.079845][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.216644][ T4727] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 76.239014][ T4727] EXT4-fs error (device loop1): ext4_free_blocks:6728: comm syz.1.416: Freeing blocks not in datazone - block = 0, count = 16 [ 76.255567][ T4732] hsr_slave_0: left promiscuous mode [ 76.261915][ T4732] hsr_slave_1: left promiscuous mode [ 76.274744][ T2917] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm kworker/u8:9: bg 0: block 112: padding at end of block bitmap is not set [ 76.299684][ T2917] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 29 with max blocks 39 with error 28 [ 76.312134][ T2917] EXT4-fs (loop1): This should not happen!! Data will be lost [ 76.312134][ T2917] [ 76.321991][ T2917] EXT4-fs (loop1): Total free blocks count 0 [ 76.328055][ T2917] EXT4-fs (loop1): Free/Dirty block details [ 76.334089][ T2917] EXT4-fs (loop1): free_blocks=0 [ 76.339107][ T2917] EXT4-fs (loop1): dirty_blocks=64 [ 76.344244][ T2917] EXT4-fs (loop1): Block reservation details [ 76.345904][ T4734] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.418: Failed to acquire dquot type 0 [ 76.350404][ T2917] EXT4-fs (loop1): i_reserved_data_blocks=4 [ 76.353487][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 76.378068][ T4734] EXT4-fs error (device loop3): mb_free_blocks:2037: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 76.393103][ T4734] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #13: comm syz.3.418: corrupted inode contents [ 76.405545][ T4734] EXT4-fs error (device loop3): ext4_dirty_inode:6502: inode #13: comm syz.3.418: mark_inode_dirty error [ 76.425331][ T4734] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #13: comm syz.3.418: corrupted inode contents [ 76.438242][ T4734] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #13: comm syz.3.418: mark_inode_dirty error [ 76.451150][ T4738] Symlink component flag not implemented [ 76.456902][ T4738] Symlink component flag not implemented (129) [ 76.483232][ T4738] rock: directory entry would overflow storage [ 76.489586][ T4738] rock: sig=0x4f50, size=4, remaining=3 [ 76.495183][ T4738] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 76.504612][ T4734] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #13: comm syz.3.418: corrupted inode contents [ 76.541463][ T4734] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #13: comm syz.3.418: mark_inode_dirty error [ 76.553172][ T4734] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #13: comm syz.3.418: corrupted inode contents [ 76.566013][ T4734] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 76.574876][ T4734] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #13: comm syz.3.418: corrupted inode contents [ 76.587680][ T4734] EXT4-fs error (device loop3): ext4_truncate:4635: inode #13: comm syz.3.418: mark_inode_dirty error [ 76.599517][ T4734] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem [ 76.609364][ T4734] EXT4-fs (loop3): 1 truncate cleaned up [ 76.615549][ T4734] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.692204][ T4734] netlink: 'syz.3.418': attribute type 3 has an invalid length. [ 76.710253][ T29] kauditd_printk_skb: 845 callbacks suppressed [ 76.710270][ T29] audit: type=1326 audit(124.680:4834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4717 comm="syz.4.414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=34 compat=0 ip=0x7fd14e5df749 code=0x7ffc0000 [ 76.741935][ T29] audit: type=1326 audit(124.710:4835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4717 comm="syz.4.414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=34 compat=0 ip=0x7fd14e5df749 code=0x7ffc0000 [ 76.767583][ T29] audit: type=1326 audit(124.740:4836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4717 comm="syz.4.414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=34 compat=0 ip=0x7fd14e5df749 code=0x7ffc0000 [ 76.797323][ T29] audit: type=1326 audit(124.770:4837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4717 comm="syz.4.414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=34 compat=0 ip=0x7fd14e5df749 code=0x7ffc0000 [ 76.820394][ T29] audit: type=1326 audit(124.800:4838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4717 comm="syz.4.414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=34 compat=0 ip=0x7fd14e5df749 code=0x7ffc0000 [ 76.846884][ T29] audit: type=1326 audit(124.820:4839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4717 comm="syz.4.414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=34 compat=0 ip=0x7fd14e5df749 code=0x7ffc0000 [ 76.868341][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.870499][ T29] audit: type=1326 audit(124.850:4840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4717 comm="syz.4.414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=34 compat=0 ip=0x7fd14e5df749 code=0x7ffc0000 [ 76.905912][ T29] audit: type=1326 audit(124.880:4841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4717 comm="syz.4.414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=34 compat=0 ip=0x7fd14e5df749 code=0x7ffc0000 [ 76.928921][ T29] audit: type=1326 audit(124.880:4842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4717 comm="syz.4.414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=34 compat=0 ip=0x7fd14e5df749 code=0x7ffc0000 [ 76.951680][ T29] audit: type=1326 audit(124.890:4843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4717 comm="syz.4.414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=34 compat=0 ip=0x7fd14e5df749 code=0x7ffc0000 [ 77.198179][ T4756] __nla_validate_parse: 19 callbacks suppressed [ 77.198201][ T4756] netlink: 12 bytes leftover after parsing attributes in process `syz.3.424'. [ 77.528736][ T4764] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 77.593855][ T4755] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 77.604240][ T4764] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.427: bg 0: block 112: padding at end of block bitmap is not set [ 77.653666][ T4755] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.425: invalid indirect mapped block 4294967295 (level 1) [ 77.701257][ T4755] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.425: invalid indirect mapped block 4294967295 (level 1) [ 77.753328][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 77.773051][ T4755] EXT4-fs (loop4): 2 truncates cleaned up [ 77.779411][ T4755] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.875059][ T4780] netlink: 28 bytes leftover after parsing attributes in process `syz.2.431'. [ 77.884457][ T4780] netem: change failed [ 77.890458][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.941458][ T4783] set_capacity_and_notify: 7 callbacks suppressed [ 77.941480][ T4783] loop2: detected capacity change from 0 to 764 [ 77.971592][ T4787] netlink: 'syz.4.432': attribute type 10 has an invalid length. [ 77.986111][ T4787] bond0: (slave dummy0): Releasing backup interface [ 78.003113][ T4783] Symlink component flag not implemented [ 78.013180][ T4787] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 78.022628][ T4785] loop1: detected capacity change from 0 to 1024 [ 78.024578][ T4783] Symlink component flag not implemented (129) [ 78.036487][ T4787] team0: Failed to send options change via netlink (err -105) [ 78.044146][ T4787] team0: Port device dummy0 added [ 78.064806][ T4783] rock: directory entry would overflow storage [ 78.070581][ T4785] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 78.071246][ T4783] rock: sig=0x4f50, size=4, remaining=3 [ 78.088802][ T4783] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 78.099387][ T4785] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.434: bg 0: block 112: padding at end of block bitmap is not set [ 78.114521][ T4787] syz.4.432 (4787) used greatest stack depth: 9824 bytes left [ 78.206083][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 78.255884][ T4797] loop0: detected capacity change from 0 to 512 [ 78.288751][ T4797] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 78.318047][ T4797] EXT4-fs (loop0): orphan cleanup on readonly fs [ 78.327559][ T4799] loop2: detected capacity change from 0 to 512 [ 78.342544][ T4803] loop1: detected capacity change from 0 to 512 [ 78.358039][ T4799] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 78.381390][ T4799] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.439: invalid indirect mapped block 4294967295 (level 1) [ 78.392063][ T4797] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #16: comm syz.0.438: corrupted inode contents [ 78.408655][ T4799] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.439: invalid indirect mapped block 4294967295 (level 1) [ 78.429708][ T4799] EXT4-fs (loop2): 2 truncates cleaned up [ 78.437725][ T4799] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.450641][ T4797] EXT4-fs (loop0): Remounting filesystem read-only [ 78.457629][ T4797] EXT4-fs (loop0): 1 truncate cleaned up [ 78.463471][ T323] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 78.474572][ T323] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 78.486798][ T323] EXT4-fs (loop0): Quota write (off=8, len=24) cancelled because transaction is not started [ 78.498628][ T4797] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 78.524651][ T4803] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 78.547153][ T4803] EXT4-fs (loop1): orphan cleanup on readonly fs [ 78.564503][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.579554][ T4803] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #16: comm syz.1.436: corrupted inode contents [ 78.608501][ T4803] EXT4-fs (loop1): Remounting filesystem read-only [ 78.615486][ T4803] EXT4-fs (loop1): 1 truncate cleaned up [ 78.622233][ T52] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 78.632142][ T4808] openvswitch: netlink: Missing key (keys=40, expected=80) [ 78.632936][ T52] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 78.660665][ T52] EXT4-fs (loop1): Quota write (off=8, len=24) cancelled because transaction is not started [ 78.671629][ T4803] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 78.700902][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.736525][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.938812][ T4822] loop3: detected capacity change from 0 to 512 [ 78.969185][ T4822] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 78.978504][ T4822] EXT4-fs (loop3): orphan cleanup on readonly fs [ 78.987090][ T4822] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #16: comm syz.3.446: corrupted inode contents [ 79.000045][ T4822] EXT4-fs (loop3): Remounting filesystem read-only [ 79.006820][ T4822] EXT4-fs (loop3): 1 truncate cleaned up [ 79.012750][ T323] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 79.023361][ T323] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 79.056875][ T323] EXT4-fs (loop3): Quota write (off=8, len=24) cancelled because transaction is not started [ 79.075809][ T4822] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 79.099839][ T4827] loop4: detected capacity change from 0 to 764 [ 79.113279][ T4827] Symlink component flag not implemented [ 79.122084][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.139335][ T4827] Symlink component flag not implemented (129) [ 79.163795][ T4827] rock: directory entry would overflow storage [ 79.170122][ T4827] rock: sig=0x4f50, size=4, remaining=3 [ 79.175768][ T4827] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 79.197182][ T4829] loop3: detected capacity change from 0 to 1024 [ 79.220772][ T4829] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 79.240112][ T4829] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.448: bg 0: block 112: padding at end of block bitmap is not set [ 79.276374][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 79.318464][ T4837] loop3: detected capacity change from 0 to 764 [ 79.328695][ T4837] Symlink component flag not implemented [ 79.336154][ T4837] Symlink component flag not implemented (129) [ 79.347417][ T4837] rock: directory entry would overflow storage [ 79.353662][ T4837] rock: sig=0x4f50, size=4, remaining=3 [ 79.359414][ T4837] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 79.391791][ T4841] openvswitch: netlink: Missing key (keys=40, expected=80) [ 79.577126][ T4849] netlink: 24 bytes leftover after parsing attributes in process `syz.0.454'. [ 79.839165][ T4854] Illegal XDP return value 4294967262 on prog (id 262) dev syz_tun, expect packet loss! [ 79.975649][ T4860] loop0: detected capacity change from 0 to 512 [ 80.106311][ T4860] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 80.131747][ T4868] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 80.207369][ T4865] Symlink component flag not implemented [ 80.239979][ T4860] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.459: invalid indirect mapped block 4294967295 (level 1) [ 80.269660][ T4870] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.296279][ T4865] Symlink component flag not implemented (129) [ 80.333706][ T4865] rock: directory entry would overflow storage [ 80.340062][ T4865] rock: sig=0x4f50, size=4, remaining=3 [ 80.345676][ T4865] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 80.372443][ T4860] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.459: invalid indirect mapped block 4294967295 (level 1) [ 80.402324][ T4870] netlink: 12 bytes leftover after parsing attributes in process `syz.2.461'. [ 80.460785][ T4860] EXT4-fs (loop0): 2 truncates cleaned up [ 80.496478][ T4860] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.520311][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.592330][ T2917] Bluetooth: hci0: Frame reassembly failed (-84) [ 80.616624][ T4888] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 80.631140][ T4888] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 80.639754][ T4888] EXT4-fs (loop4): orphan cleanup on readonly fs [ 80.642342][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.646961][ T4888] EXT4-fs error (device loop4): ext4_free_blocks:6728: comm syz.4.467: Freeing blocks not in datazone - block = 0, count = 4096 [ 80.687291][ T4888] EXT4-fs (loop4): 1 orphan inode deleted [ 80.694317][ T4888] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 80.741593][ T4891] netlink: 16 bytes leftover after parsing attributes in process `syz.3.469'. [ 80.774168][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.817175][ T4893] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4893 comm=syz.0.468 [ 80.861279][ T4895] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 80.881276][ T4895] EXT4-fs (loop4): orphan cleanup on readonly fs [ 80.891704][ T4895] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #16: comm syz.4.470: corrupted inode contents [ 80.903956][ T4895] EXT4-fs (loop4): Remounting filesystem read-only [ 80.910746][ T4895] EXT4-fs (loop4): 1 truncate cleaned up [ 80.916901][ T3809] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 80.927958][ T3809] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 80.939098][ T3809] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started [ 80.949884][ T4895] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 80.974312][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.022144][ T4906] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.037710][ T4911] netlink: 'syz.3.473': attribute type 10 has an invalid length. [ 81.046944][ T4911] bond0: (slave dummy0): Releasing backup interface [ 81.074267][ T4911] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 81.083782][ T4911] team0: Failed to send options change via netlink (err -105) [ 81.091528][ T4911] team0: Port device dummy0 added [ 81.111164][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.158981][ T4917] Symlink component flag not implemented [ 81.164959][ T4917] Symlink component flag not implemented (129) [ 81.172580][ T4917] rock: directory entry would overflow storage [ 81.178827][ T4917] rock: sig=0x4f50, size=4, remaining=3 [ 81.184509][ T4917] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 81.247415][ T4923] Symlink component flag not implemented [ 81.253643][ T4923] Symlink component flag not implemented (129) [ 81.260614][ T4923] rock: directory entry would overflow storage [ 81.266834][ T4923] rock: sig=0x4f50, size=4, remaining=3 [ 81.272499][ T4923] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 81.451384][ T4931] Symlink component flag not implemented [ 81.469531][ T4931] Symlink component flag not implemented (129) [ 81.476760][ T4931] rock: directory entry would overflow storage [ 81.483184][ T4931] rock: sig=0x4f50, size=4, remaining=3 [ 81.488929][ T4931] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 81.748622][ T29] kauditd_printk_skb: 623 callbacks suppressed [ 81.748641][ T29] audit: type=1400 audit(137.717:5443): avc: denied { mount } for pid=4935 comm="syz.2.483" name="/" dev="loop2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 81.819521][ T29] audit: type=1400 audit(137.757:5444): avc: denied { write } for pid=4935 comm="syz.2.483" name="udp6" dev="proc" ino=4026532752 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 81.936269][ T4940] netlink: 'syz.0.484': attribute type 30 has an invalid length. [ 82.115878][ T4943] netlink: 'syz.4.485': attribute type 10 has an invalid length. [ 82.150871][ T4945] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 82.183272][ T29] audit: type=1400 audit(138.157:5445): avc: denied { watch } for pid=4948 comm="syz.4.487" path="/88" dev="tmpfs" ino=500 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 82.241423][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.272221][ T4949] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 82.289633][ T4949] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.487: bg 0: block 112: padding at end of block bitmap is not set [ 82.295539][ T29] audit: type=1400 audit(138.267:5446): avc: denied { create } for pid=4948 comm="syz.4.487" name=E91F7189591E9233614B scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=sock_file permissive=1 [ 82.330532][ T4953] netlink: 128 bytes leftover after parsing attributes in process `syz.3.489'. [ 82.347488][ T29] audit: type=1400 audit(138.327:5447): avc: denied { tracepoint } for pid=4954 comm="syz.0.488" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 82.371355][ T29] audit: type=1326 audit(138.347:5448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4954 comm="syz.0.488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0dba9f749 code=0x7ffc0000 [ 82.373745][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 82.413505][ T29] audit: type=1326 audit(138.377:5449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4954 comm="syz.0.488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd0dba9f749 code=0x7ffc0000 [ 82.421617][ T4953] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4953 comm=syz.3.489 [ 82.436356][ T29] audit: type=1326 audit(138.377:5450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4954 comm="syz.0.488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0dba9f749 code=0x7ffc0000 [ 82.471872][ T29] audit: type=1326 audit(138.377:5451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4954 comm="syz.0.488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd0dba9f749 code=0x7ffc0000 [ 82.494783][ T29] audit: type=1326 audit(138.377:5452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4954 comm="syz.0.488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0dba9f749 code=0x7ffc0000 [ 82.512196][ T4955] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 82.544324][ T4961] Symlink component flag not implemented [ 82.550467][ T4961] Symlink component flag not implemented (129) [ 82.558279][ T4961] rock: directory entry would overflow storage [ 82.564501][ T4961] rock: sig=0x4f50, size=4, remaining=3 [ 82.570136][ T4961] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 82.586063][ T4962] vlan0: entered promiscuous mode [ 82.591250][ T4962] team0: entered promiscuous mode [ 82.596580][ T4962] team_slave_0: entered promiscuous mode [ 82.602558][ T4962] team_slave_1: entered promiscuous mode [ 82.608536][ T4962] vlan0: entered allmulticast mode [ 82.613692][ T4962] team0: entered allmulticast mode [ 82.618897][ T4962] team_slave_0: entered allmulticast mode [ 82.624834][ T4962] team_slave_1: entered allmulticast mode [ 82.632545][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 82.639374][ T4955] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.488: invalid indirect mapped block 4294967295 (level 1) [ 82.657646][ T4955] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.488: invalid indirect mapped block 4294967295 (level 1) [ 82.687846][ T4955] EXT4-fs (loop0): 2 truncates cleaned up [ 82.694204][ T4955] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.849398][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.868675][ T4974] netlink: 4 bytes leftover after parsing attributes in process `syz.0.495'. [ 82.880309][ T4974] xt_CT: You must specify a L4 protocol and not use inversions on it [ 82.892891][ T4974] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 82.905313][ T4974] EXT4-fs (loop0): orphan cleanup on readonly fs [ 82.917009][ T4974] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4215: comm syz.0.495: Allocating blocks 41-42 which overlap fs metadata [ 82.931873][ T4974] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4215: comm syz.0.495: Allocating blocks 41-42 which overlap fs metadata [ 82.946207][ T4974] EXT4-fs error (device loop0): ext4_acquire_dquot:6986: comm syz.0.495: Failed to acquire dquot type 1 [ 82.959281][ T4974] EXT4-fs error (device loop0): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 82.973933][ T4974] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #12: comm syz.0.495: corrupted inode contents [ 82.986320][ T4974] EXT4-fs error (device loop0): ext4_dirty_inode:6502: inode #12: comm syz.0.495: mark_inode_dirty error [ 82.997916][ T4974] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #12: comm syz.0.495: corrupted inode contents [ 83.009985][ T4974] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #12: comm syz.0.495: mark_inode_dirty error [ 83.021752][ T4974] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #12: comm syz.0.495: corrupted inode contents [ 83.037749][ T4974] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 83.046759][ T4974] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #12: comm syz.0.495: corrupted inode contents [ 83.059344][ T4974] EXT4-fs error (device loop0): ext4_truncate:4635: inode #12: comm syz.0.495: mark_inode_dirty error [ 83.072288][ T4974] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem [ 83.081865][ T4974] EXT4-fs (loop0): 1 truncate cleaned up [ 83.088246][ T4974] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 83.219423][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.246529][ T4983] netlink: 4280 bytes leftover after parsing attributes in process `syz.3.499'. [ 83.256510][ T4983] netlink: 4280 bytes leftover after parsing attributes in process `syz.3.499'. [ 83.460029][ T4986] set_capacity_and_notify: 14 callbacks suppressed [ 83.460044][ T4986] loop3: detected capacity change from 0 to 2048 [ 83.473637][ T4986] ext2: Unknown parameter 'fowner' [ 83.578505][ T5007] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 83.587199][ T5007] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 83.603980][ T5005] loop4: detected capacity change from 0 to 512 [ 83.611608][ T5005] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 83.622382][ T5005] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.506: invalid indirect mapped block 4294967295 (level 1) [ 83.636917][ T5005] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.506: invalid indirect mapped block 4294967295 (level 1) [ 83.651916][ T5005] EXT4-fs (loop4): 2 truncates cleaned up [ 83.658756][ T5005] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.699118][ T5011] netlink: 128 bytes leftover after parsing attributes in process `syz.1.508'. [ 83.713315][ T5011] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5011 comm=syz.1.508 [ 83.748588][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.850387][ T5020] loop2: detected capacity change from 0 to 1024 [ 83.859686][ T5020] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 83.878779][ T5020] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 83.888173][ T5020] EXT4-fs (loop2): orphan cleanup on readonly fs [ 83.894803][ T5020] EXT4-fs error (device loop2): ext4_free_blocks:6728: comm syz.2.512: Freeing blocks not in datazone - block = 0, count = 4096 [ 83.908786][ T5020] EXT4-fs (loop2): 1 orphan inode deleted [ 83.915007][ T5020] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 83.945988][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.972302][ T5023] loop2: detected capacity change from 0 to 1024 [ 83.998850][ T5023] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 84.050829][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.084647][ T5027] netlink: 24 bytes leftover after parsing attributes in process `syz.2.514'. [ 84.099143][ T5029] netlink: 24 bytes leftover after parsing attributes in process `syz.4.515'. [ 84.114968][ T5027] FAULT_INJECTION: forcing a failure. [ 84.114968][ T5027] name failslab, interval 1, probability 0, space 0, times 0 [ 84.127762][ T5027] CPU: 0 UID: 0 PID: 5027 Comm: syz.2.514 Not tainted syzkaller #0 PREEMPT(voluntary) [ 84.127787][ T5027] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 84.127798][ T5027] Call Trace: [ 84.127804][ T5027] [ 84.127812][ T5027] __dump_stack+0x1d/0x30 [ 84.127834][ T5027] dump_stack_lvl+0x95/0xd0 [ 84.127855][ T5027] dump_stack+0x15/0x1b [ 84.127878][ T5027] should_fail_ex+0x265/0x280 [ 84.127899][ T5027] should_failslab+0x8c/0xb0 [ 84.127919][ T5027] __kmalloc_cache_noprof+0x65/0x4c0 [ 84.127941][ T5027] ? tc_ctl_chain+0x584/0xca0 [ 84.128034][ T5027] tc_ctl_chain+0x584/0xca0 [ 84.128069][ T5027] ? ns_capable+0x7d/0xb0 [ 84.128096][ T5027] ? __pfx_tc_ctl_chain+0x10/0x10 [ 84.128202][ T5027] rtnetlink_rcv_msg+0x65a/0x6d0 [ 84.128260][ T5027] netlink_rcv_skb+0x123/0x220 [ 84.128357][ T5027] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 84.128393][ T5027] rtnetlink_rcv+0x1c/0x30 [ 84.128421][ T5027] netlink_unicast+0x5c0/0x690 [ 84.128447][ T5027] netlink_sendmsg+0x58b/0x6b0 [ 84.128569][ T5027] ? __pfx_netlink_sendmsg+0x10/0x10 [ 84.128629][ T5027] __sock_sendmsg+0x145/0x180 [ 84.128653][ T5027] ____sys_sendmsg+0x31e/0x4a0 [ 84.128711][ T5027] ___sys_sendmsg+0x17b/0x1d0 [ 84.128746][ T5027] __x64_sys_sendmsg+0xd4/0x160 [ 84.128778][ T5027] x64_sys_call+0x17ba/0x3000 [ 84.128800][ T5027] do_syscall_64+0xca/0x2b0 [ 84.128829][ T5027] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.128915][ T5027] RIP: 0033:0x7f5d9046f749 [ 84.128929][ T5027] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 84.128944][ T5027] RSP: 002b:00007f5d8eecf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 84.128961][ T5027] RAX: ffffffffffffffda RBX: 00007f5d906c5fa0 RCX: 00007f5d9046f749 [ 84.128972][ T5027] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000004 [ 84.128983][ T5027] RBP: 00007f5d8eecf090 R08: 0000000000000000 R09: 0000000000000000 [ 84.129124][ T5027] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 84.129141][ T5027] R13: 00007f5d906c6038 R14: 00007f5d906c5fa0 R15: 00007ffcd66a0828 [ 84.129170][ T5027] [ 84.131292][ T5027] netlink: 4 bytes leftover after parsing attributes in process `syz.2.514'. [ 84.187167][ T5030] netlink: 'syz.4.515': attribute type 1 has an invalid length. [ 84.350734][ T5035] netlink: 4 bytes leftover after parsing attributes in process `syz.4.515'. [ 84.358432][ T5030] netlink: 224 bytes leftover after parsing attributes in process `syz.4.515'. [ 84.554927][ T5043] loop2: detected capacity change from 0 to 512 [ 84.568258][ T5043] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 84.581455][ T5043] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.519: invalid indirect mapped block 4294967295 (level 1) [ 84.596927][ T5043] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.519: invalid indirect mapped block 4294967295 (level 1) [ 84.611308][ T5043] EXT4-fs (loop2): 2 truncates cleaned up [ 84.617989][ T5043] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.699310][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.966977][ T5053] loop4: detected capacity change from 0 to 1024 [ 84.989311][ T5053] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 85.004262][ T5053] EXT4-fs error (device loop4): ext4_free_blocks:6728: comm syz.4.522: Freeing blocks not in datazone - block = 0, count = 16 [ 85.027159][ T2917] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm kworker/u8:9: bg 0: block 112: padding at end of block bitmap is not set [ 85.042358][ T2917] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 29 with max blocks 39 with error 28 [ 85.054936][ T2917] EXT4-fs (loop4): This should not happen!! Data will be lost [ 85.054936][ T2917] [ 85.064626][ T2917] EXT4-fs (loop4): Total free blocks count 0 [ 85.070664][ T2917] EXT4-fs (loop4): Free/Dirty block details [ 85.076588][ T2917] EXT4-fs (loop4): free_blocks=0 [ 85.081614][ T2917] EXT4-fs (loop4): dirty_blocks=64 [ 85.086861][ T2917] EXT4-fs (loop4): Block reservation details [ 85.092986][ T2917] EXT4-fs (loop4): i_reserved_data_blocks=4 [ 85.100474][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 85.124646][ T5057] loop4: detected capacity change from 0 to 764 [ 85.133388][ T5057] Symlink component flag not implemented [ 85.139250][ T5057] Symlink component flag not implemented (129) [ 85.146132][ T5057] rock: directory entry would overflow storage [ 85.152493][ T5057] rock: sig=0x4f50, size=4, remaining=3 [ 85.158230][ T5057] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 85.188115][ T5059] loop4: detected capacity change from 0 to 764 [ 85.199876][ T5059] Symlink component flag not implemented [ 85.205751][ T5059] Symlink component flag not implemented (129) [ 85.213107][ T5059] rock: directory entry would overflow storage [ 85.219445][ T5059] rock: sig=0x4f50, size=4, remaining=3 [ 85.225125][ T5059] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 85.334653][ T5066] loop0: detected capacity change from 0 to 1024 [ 85.358753][ T5066] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 85.373434][ T5066] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.527: bg 0: block 112: padding at end of block bitmap is not set [ 85.400146][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 85.727587][ T5089] netlink: 'syz.0.535': attribute type 10 has an invalid length. [ 85.740772][ T5089] team0: Failed to send options change via netlink (err -105) [ 85.748468][ T5089] team0: Port device dummy0 added [ 85.797550][ T5091] xt_CT: You must specify a L4 protocol and not use inversions on it [ 85.809840][ T5091] loop0: detected capacity change from 0 to 512 [ 85.821361][ T5091] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 85.846800][ T5091] EXT4-fs (loop0): orphan cleanup on readonly fs [ 85.854007][ T5091] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4215: comm syz.0.536: Allocating blocks 41-42 which overlap fs metadata [ 85.868135][ T5091] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4215: comm syz.0.536: Allocating blocks 41-42 which overlap fs metadata [ 85.882379][ T5091] EXT4-fs error (device loop0): ext4_acquire_dquot:6986: comm syz.0.536: Failed to acquire dquot type 1 [ 85.893864][ T5091] EXT4-fs error (device loop0): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 85.908600][ T5091] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #12: comm syz.0.536: corrupted inode contents [ 85.920647][ T5091] EXT4-fs error (device loop0): ext4_dirty_inode:6502: inode #12: comm syz.0.536: mark_inode_dirty error [ 85.932208][ T5091] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #12: comm syz.0.536: corrupted inode contents [ 85.944365][ T5091] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #12: comm syz.0.536: mark_inode_dirty error [ 85.955966][ T5091] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #12: comm syz.0.536: corrupted inode contents [ 85.968064][ T5091] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 85.976899][ T5091] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #12: comm syz.0.536: corrupted inode contents [ 85.989136][ T5091] EXT4-fs error (device loop0): ext4_truncate:4635: inode #12: comm syz.0.536: mark_inode_dirty error [ 86.000392][ T5091] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem [ 86.009778][ T5091] EXT4-fs (loop0): 1 truncate cleaned up [ 86.058028][ T5091] openvswitch: netlink: Missing key (keys=40, expected=80) [ 86.096039][ T5094] FAULT_INJECTION: forcing a failure. [ 86.096039][ T5094] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 86.109429][ T5094] CPU: 1 UID: 0 PID: 5094 Comm: syz.0.537 Not tainted syzkaller #0 PREEMPT(voluntary) [ 86.109461][ T5094] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 86.109476][ T5094] Call Trace: [ 86.109484][ T5094] [ 86.109494][ T5094] __dump_stack+0x1d/0x30 [ 86.109520][ T5094] dump_stack_lvl+0x95/0xd0 [ 86.109608][ T5094] dump_stack+0x15/0x1b [ 86.109633][ T5094] should_fail_ex+0x265/0x280 [ 86.109663][ T5094] should_fail+0xb/0x20 [ 86.109765][ T5094] should_fail_usercopy+0x1a/0x20 [ 86.109797][ T5094] _copy_to_user+0x20/0xa0 [ 86.109829][ T5094] simple_read_from_buffer+0xb5/0x130 [ 86.109901][ T5094] proc_fail_nth_read+0x10e/0x150 [ 86.109948][ T5094] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 86.110003][ T5094] vfs_read+0x1a8/0x770 [ 86.110020][ T5094] ? __rcu_read_unlock+0x4f/0x70 [ 86.110042][ T5094] ? __fget_files+0x184/0x1c0 [ 86.110067][ T5094] ? mutex_lock+0x58/0x90 [ 86.110145][ T5094] ksys_read+0xda/0x1a0 [ 86.110170][ T5094] __x64_sys_read+0x40/0x50 [ 86.110195][ T5094] x64_sys_call+0x2889/0x3000 [ 86.110219][ T5094] do_syscall_64+0xca/0x2b0 [ 86.110279][ T5094] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.110308][ T5094] RIP: 0033:0x7fd0dba9e15c [ 86.110326][ T5094] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 86.110344][ T5094] RSP: 002b:00007fd0da4ff030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 86.110373][ T5094] RAX: ffffffffffffffda RBX: 00007fd0dbcf5fa0 RCX: 00007fd0dba9e15c [ 86.110389][ T5094] RDX: 000000000000000f RSI: 00007fd0da4ff0a0 RDI: 0000000000000006 [ 86.110405][ T5094] RBP: 00007fd0da4ff090 R08: 0000000000000000 R09: 0000000000000000 [ 86.110421][ T5094] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 86.110437][ T5094] R13: 00007fd0dbcf6038 R14: 00007fd0dbcf5fa0 R15: 00007ffe8a14d9a8 [ 86.110561][ T5094] [ 86.452449][ T5101] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 86.479334][ T5101] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.541: invalid indirect mapped block 4294967295 (level 1) [ 86.514645][ T5101] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.541: invalid indirect mapped block 4294967295 (level 1) [ 86.548813][ T5101] EXT4-fs (loop4): 2 truncates cleaned up [ 86.578170][ T5111] Symlink component flag not implemented [ 86.587552][ T5111] Symlink component flag not implemented (129) [ 86.610359][ T5111] rock: directory entry would overflow storage [ 86.616585][ T5111] rock: sig=0x4f50, size=4, remaining=3 [ 86.622311][ T5111] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 86.713504][ T5120] netlink: 'syz.4.546': attribute type 10 has an invalid length. [ 86.878768][ T5126] Symlink component flag not implemented [ 86.887917][ T5126] Symlink component flag not implemented (129) [ 86.895149][ T5126] rock: directory entry would overflow storage [ 86.901546][ T5126] rock: sig=0x4f50, size=4, remaining=3 [ 86.907182][ T5126] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 87.290302][ T5124] usb usb1: usbfs: interface 0 claimed by hub while 'syz.0.547' sets config #0 [ 87.299750][ T5124] usb usb1: usbfs: interface 0 claimed by hub while 'syz.0.547' sets config #1 [ 87.324772][ T29] kauditd_printk_skb: 574 callbacks suppressed [ 87.324790][ T29] audit: type=1400 audit(159.282:6019): avc: denied { cpu } for pid=5117 comm="syz.0.547" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 87.358998][ T29] audit: type=1400 audit(159.322:6020): avc: denied { create } for pid=5134 comm="syz.3.550" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 87.394422][ T29] audit: type=1400 audit(159.362:6021): avc: denied { ioctl } for pid=5134 comm="syz.3.550" path="socket:[10791]" dev="sockfs" ino=10791 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 87.435996][ T29] audit: type=1400 audit(159.372:6022): avc: denied { create } for pid=5134 comm="syz.3.550" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 87.525420][ T5141] EXT4-fs error (device loop2): ext4_free_blocks:6728: comm syz.2.553: Freeing blocks not in datazone - block = 0, count = 16 [ 87.561005][ T31] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm kworker/u8:1: bg 0: block 112: padding at end of block bitmap is not set [ 87.579898][ T31] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 29 with max blocks 39 with error 28 [ 87.592797][ T31] EXT4-fs (loop2): This should not happen!! Data will be lost [ 87.592797][ T31] [ 87.602507][ T31] EXT4-fs (loop2): Total free blocks count 0 [ 87.608600][ T31] EXT4-fs (loop2): Free/Dirty block details [ 87.614541][ T31] EXT4-fs (loop2): free_blocks=0 [ 87.619665][ T31] EXT4-fs (loop2): dirty_blocks=64 [ 87.624908][ T31] EXT4-fs (loop2): Block reservation details [ 87.631088][ T31] EXT4-fs (loop2): i_reserved_data_blocks=4 [ 87.693065][ T5148] __nla_validate_parse: 7 callbacks suppressed [ 87.693087][ T5148] netlink: 24 bytes leftover after parsing attributes in process `syz.4.555'. [ 87.730025][ T5148] netlink: 4 bytes leftover after parsing attributes in process `syz.4.555'. [ 87.731483][ T29] audit: type=1326 audit(159.702:6023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5149 comm="syz.1.556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0076c5f749 code=0x7ffc0000 [ 87.762443][ T29] audit: type=1326 audit(159.712:6024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5149 comm="syz.1.556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0076c5f749 code=0x7ffc0000 [ 87.786312][ T29] audit: type=1326 audit(159.762:6025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5149 comm="syz.1.556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0076c5f749 code=0x7ffc0000 [ 87.813210][ T29] audit: type=1326 audit(159.762:6026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5149 comm="syz.1.556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0076c5f749 code=0x7ffc0000 [ 87.836018][ T29] audit: type=1326 audit(159.762:6027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5149 comm="syz.1.556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0076c5f749 code=0x7ffc0000 [ 87.858773][ T29] audit: type=1326 audit(159.762:6028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5149 comm="syz.1.556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f0076c5f749 code=0x7ffc0000 [ 87.934405][ T5160] netlink: 'syz.1.558': attribute type 10 has an invalid length. [ 87.944558][ T5160] bond0: (slave dummy0): Releasing backup interface [ 87.958560][ T5160] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 87.967394][ T5160] team0: Failed to send options change via netlink (err -105) [ 87.975109][ T5160] team0: Port device dummy0 added [ 87.997766][ T5160] syz.1.558 (5160) used greatest stack depth: 9760 bytes left [ 88.061955][ T5165] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 88.083466][ T5165] EXT4-fs (loop4): orphan cleanup on readonly fs [ 88.110798][ T5165] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #16: comm syz.4.560: corrupted inode contents [ 88.123623][ T5165] EXT4-fs (loop4): Remounting filesystem read-only [ 88.130508][ T5165] EXT4-fs (loop4): 1 truncate cleaned up [ 88.136394][ T3832] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 88.147125][ T3832] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 88.158023][ T3832] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started [ 88.249380][ T5187] netlink: 4 bytes leftover after parsing attributes in process `syz.4.563'. [ 88.261387][ T5187] xt_CT: You must specify a L4 protocol and not use inversions on it [ 88.281595][ T5187] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 88.291696][ T5187] EXT4-fs (loop4): orphan cleanup on readonly fs [ 88.306885][ T5187] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4215: comm syz.4.563: Allocating blocks 41-42 which overlap fs metadata [ 88.352378][ T5187] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4215: comm syz.4.563: Allocating blocks 41-42 which overlap fs metadata [ 88.370295][ T5187] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.563: Failed to acquire dquot type 1 [ 88.381947][ T5187] EXT4-fs error (device loop4): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 88.398789][ T5187] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #12: comm syz.4.563: corrupted inode contents [ 88.411043][ T5187] EXT4-fs error (device loop4): ext4_dirty_inode:6502: inode #12: comm syz.4.563: mark_inode_dirty error [ 88.423080][ T5187] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #12: comm syz.4.563: corrupted inode contents [ 88.449848][ T5187] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #12: comm syz.4.563: mark_inode_dirty error [ 88.461566][ T5187] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #12: comm syz.4.563: corrupted inode contents [ 88.473685][ T5187] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 88.482653][ T5187] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #12: comm syz.4.563: corrupted inode contents [ 88.495524][ T5187] EXT4-fs error (device loop4): ext4_truncate:4635: inode #12: comm syz.4.563: mark_inode_dirty error [ 88.506899][ T5187] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem [ 88.516344][ T5187] EXT4-fs (loop4): 1 truncate cleaned up [ 88.537518][ T5196] set_capacity_and_notify: 8 callbacks suppressed [ 88.537537][ T5196] loop0: detected capacity change from 0 to 1024 [ 88.631257][ T5187] openvswitch: netlink: Missing key (keys=40, expected=80) [ 88.741032][ T5209] FAULT_INJECTION: forcing a failure. [ 88.741032][ T5209] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 88.754278][ T5209] CPU: 1 UID: 0 PID: 5209 Comm: syz.4.570 Not tainted syzkaller #0 PREEMPT(voluntary) [ 88.754312][ T5209] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 88.754378][ T5209] Call Trace: [ 88.754409][ T5209] [ 88.754465][ T5209] __dump_stack+0x1d/0x30 [ 88.754500][ T5209] dump_stack_lvl+0x95/0xd0 [ 88.754539][ T5209] dump_stack+0x15/0x1b [ 88.754561][ T5209] should_fail_ex+0x265/0x280 [ 88.754585][ T5209] should_fail+0xb/0x20 [ 88.754624][ T5209] should_fail_usercopy+0x1a/0x20 [ 88.754649][ T5209] _copy_from_user+0x1c/0xb0 [ 88.754678][ T5209] ___sys_sendmsg+0xc1/0x1d0 [ 88.754736][ T5209] __x64_sys_sendmsg+0xd4/0x160 [ 88.754814][ T5209] x64_sys_call+0x17ba/0x3000 [ 88.754841][ T5209] do_syscall_64+0xca/0x2b0 [ 88.754886][ T5209] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.754990][ T5209] RIP: 0033:0x7fd14e5df749 [ 88.755011][ T5209] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 88.755035][ T5209] RSP: 002b:00007fd14d03f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 88.755058][ T5209] RAX: ffffffffffffffda RBX: 00007fd14e835fa0 RCX: 00007fd14e5df749 [ 88.755074][ T5209] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 88.755090][ T5209] RBP: 00007fd14d03f090 R08: 0000000000000000 R09: 0000000000000000 [ 88.755104][ T5209] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 88.755165][ T5209] R13: 00007fd14e836038 R14: 00007fd14e835fa0 R15: 00007fffe01ced88 [ 88.755188][ T5209] [ 88.765682][ T5211] netlink: 'syz.1.571': attribute type 10 has an invalid length. [ 89.004877][ T5221] netlink: 4 bytes leftover after parsing attributes in process `syz.4.575'. [ 89.030313][ T5221] xt_CT: You must specify a L4 protocol and not use inversions on it [ 89.042073][ T5221] loop4: detected capacity change from 0 to 512 [ 89.054618][ T5221] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 89.064939][ T5221] EXT4-fs (loop4): orphan cleanup on readonly fs [ 89.078352][ T5221] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4215: comm syz.4.575: Allocating blocks 41-42 which overlap fs metadata [ 89.093973][ T5221] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4215: comm syz.4.575: Allocating blocks 41-42 which overlap fs metadata [ 89.108932][ T5221] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.575: Failed to acquire dquot type 1 [ 89.123523][ T5221] EXT4-fs error (device loop4): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 89.138778][ T5221] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #12: comm syz.4.575: corrupted inode contents [ 89.150840][ T5221] EXT4-fs error (device loop4): ext4_dirty_inode:6502: inode #12: comm syz.4.575: mark_inode_dirty error [ 89.163226][ T5221] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #12: comm syz.4.575: corrupted inode contents [ 89.175313][ T5221] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #12: comm syz.4.575: mark_inode_dirty error [ 89.187086][ T5221] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #12: comm syz.4.575: corrupted inode contents [ 89.199462][ T5221] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 89.208665][ T5221] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #12: comm syz.4.575: corrupted inode contents [ 89.221012][ T5221] EXT4-fs error (device loop4): ext4_truncate:4635: inode #12: comm syz.4.575: mark_inode_dirty error [ 89.297065][ T5221] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem [ 89.322647][ T5221] EXT4-fs (loop4): 1 truncate cleaned up [ 89.367795][ T5221] openvswitch: netlink: Missing key (keys=40, expected=80) [ 89.428884][ T5232] usb usb1: usbfs: interface 0 claimed by hub while 'syz.2.568' sets config #0 [ 89.438077][ T5232] usb usb1: usbfs: interface 0 claimed by hub while 'syz.2.568' sets config #1 [ 89.702366][ T5242] netlink: 'syz.3.581': attribute type 10 has an invalid length. [ 89.734524][ T5242] team0: Port device dummy0 removed [ 89.744615][ T5242] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 89.754780][ T5245] loop2: detected capacity change from 0 to 512 [ 89.771638][ T5246] loop3: detected capacity change from 0 to 1024 [ 89.878272][ T5254] loop3: detected capacity change from 0 to 1024 [ 89.893024][ T5254] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 89.894254][ T5257] netlink: 'syz.0.586': attribute type 10 has an invalid length. [ 89.928958][ T5254] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 89.955824][ T5254] EXT4-fs (loop3): orphan cleanup on readonly fs [ 89.962478][ T5254] EXT4-fs error (device loop3): ext4_free_blocks:6728: comm syz.3.585: Freeing blocks not in datazone - block = 0, count = 4096 [ 89.976063][ T5254] EXT4-fs (loop3): 1 orphan inode deleted [ 90.045326][ T5265] loop3: detected capacity change from 0 to 512 [ 90.055878][ T5267] netlink: 4 bytes leftover after parsing attributes in process `syz.1.590'. [ 90.072645][ T5267] xt_CT: You must specify a L4 protocol and not use inversions on it [ 90.110738][ T5265] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 90.118995][ T5265] EXT4-fs (loop3): orphan cleanup on readonly fs [ 90.126964][ T5265] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #16: comm syz.3.589: corrupted inode contents [ 90.141417][ T5265] EXT4-fs (loop3): Remounting filesystem read-only [ 90.148194][ T5265] EXT4-fs (loop3): 1 truncate cleaned up [ 90.153981][ T31] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 90.164658][ T31] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 90.175931][ T31] EXT4-fs (loop3): Quota write (off=8, len=24) cancelled because transaction is not started [ 90.201660][ T5267] loop1: detected capacity change from 0 to 512 [ 90.216910][ T5267] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 90.233201][ T5267] EXT4-fs (loop1): orphan cleanup on readonly fs [ 90.240468][ T5267] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4215: comm syz.1.590: Allocating blocks 41-42 which overlap fs metadata [ 90.259730][ T5267] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4215: comm syz.1.590: Allocating blocks 41-42 which overlap fs metadata [ 90.273851][ T5267] EXT4-fs error (device loop1): ext4_acquire_dquot:6986: comm syz.1.590: Failed to acquire dquot type 1 [ 90.287314][ T5267] EXT4-fs error (device loop1): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 90.302628][ T5267] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #12: comm syz.1.590: corrupted inode contents [ 90.429467][ T5267] EXT4-fs error (device loop1): ext4_dirty_inode:6502: inode #12: comm syz.1.590: mark_inode_dirty error [ 90.442068][ T5267] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #12: comm syz.1.590: corrupted inode contents [ 90.454970][ T5267] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #12: comm syz.1.590: mark_inode_dirty error [ 90.466962][ T5267] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #12: comm syz.1.590: corrupted inode contents [ 90.480351][ T5267] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 90.489643][ T5267] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #12: comm syz.1.590: corrupted inode contents [ 90.502802][ T5267] EXT4-fs error (device loop1): ext4_truncate:4635: inode #12: comm syz.1.590: mark_inode_dirty error [ 90.514548][ T5267] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem [ 90.525059][ T5267] EXT4-fs (loop1): 1 truncate cleaned up [ 90.850474][ T5267] openvswitch: netlink: Missing key (keys=40, expected=80) [ 91.004389][ T5291] loop4: detected capacity change from 0 to 764 [ 91.004561][ T5293] loop3: detected capacity change from 0 to 1024 [ 91.034514][ T5291] Symlink component flag not implemented [ 91.045574][ T5291] Symlink component flag not implemented (129) [ 91.057777][ T5291] rock: directory entry would overflow storage [ 91.064070][ T5291] rock: sig=0x4f50, size=4, remaining=3 [ 91.069767][ T5291] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 91.105932][ T5300] netlink: 'syz.1.601': attribute type 10 has an invalid length. [ 91.124804][ T5293] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.599: bg 0: block 112: padding at end of block bitmap is not set [ 91.249751][ T5314] loop3: detected capacity change from 0 to 1024 [ 91.287995][ T5314] EXT4-fs error (device loop3): ext4_free_blocks:6728: comm syz.3.607: Freeing blocks not in datazone - block = 0, count = 16 [ 91.400034][ T31] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm kworker/u8:1: bg 0: block 112: padding at end of block bitmap is not set [ 91.415841][ T31] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 29 with max blocks 39 with error 28 [ 91.428557][ T31] EXT4-fs (loop3): This should not happen!! Data will be lost [ 91.428557][ T31] [ 91.438384][ T31] EXT4-fs (loop3): Total free blocks count 0 [ 91.444438][ T31] EXT4-fs (loop3): Free/Dirty block details [ 91.450595][ T31] EXT4-fs (loop3): free_blocks=0 [ 91.456275][ T31] EXT4-fs (loop3): dirty_blocks=64 [ 91.461592][ T31] EXT4-fs (loop3): Block reservation details [ 91.467803][ T31] EXT4-fs (loop3): i_reserved_data_blocks=4 [ 91.905243][ T5336] Symlink component flag not implemented [ 91.976828][ T5336] Symlink component flag not implemented (129) [ 91.983827][ T5336] rock: directory entry would overflow storage [ 91.990236][ T5336] rock: sig=0x4f50, size=4, remaining=3 [ 91.993201][ T5338] netlink: 'syz.1.614': attribute type 10 has an invalid length. [ 91.995819][ T5336] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 92.037268][ T5341] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.615: bg 0: block 112: padding at end of block bitmap is not set [ 92.068122][ T5338] netlink: 'syz.1.614': attribute type 10 has an invalid length. [ 92.078085][ T5338] team0: Port device dummy0 removed [ 92.089021][ T5348] netlink: 12 bytes leftover after parsing attributes in process `syz.0.618'. [ 92.104004][ T5338] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 92.148968][ T5354] netlink: 12 bytes leftover after parsing attributes in process `syz.3.619'. [ 92.202366][ T5357] netlink: 36 bytes leftover after parsing attributes in process `syz.4.621'. [ 92.211475][ T5357] netlink: 36 bytes leftover after parsing attributes in process `syz.4.621'. [ 92.237111][ T5357] netlink: 36 bytes leftover after parsing attributes in process `syz.4.621'. [ 92.256269][ T5359] EXT4-fs error (device loop1): ext4_free_blocks:6728: comm syz.1.620: Freeing blocks not in datazone - block = 0, count = 16 [ 92.299084][ T5366] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5366 comm=syz.4.621 [ 92.314952][ T31] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm kworker/u8:1: bg 0: block 112: padding at end of block bitmap is not set [ 92.330009][ T29] kauditd_printk_skb: 440 callbacks suppressed [ 92.330046][ T29] audit: type=1326 audit(188.307:6445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5346 comm="syz.0.618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=34 compat=0 ip=0x7fd0dba9f749 code=0x7ffc0000 [ 92.348056][ T31] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 29 with max blocks 39 with error 28 [ 92.362294][ T29] audit: type=1326 audit(188.307:6446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5353 comm="syz.3.619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=34 compat=0 ip=0x7f82083ff749 code=0x7ffc0000 [ 92.371706][ T31] EXT4-fs (loop1): This should not happen!! Data will be lost [ 92.371706][ T31] [ 92.371784][ T31] EXT4-fs (loop1): Total free blocks count 0 [ 92.394465][ T29] audit: type=1326 audit(188.317:6447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5356 comm="syz.4.621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd14e5df749 code=0x7ffc0000 [ 92.404841][ T31] EXT4-fs (loop1): Free/Dirty block details [ 92.410966][ T29] audit: type=1326 audit(188.317:6448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5353 comm="syz.3.619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=34 compat=0 ip=0x7f82083ff749 code=0x7ffc0000 [ 92.411004][ T29] audit: type=1326 audit(188.317:6449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5356 comm="syz.4.621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fd14e5df749 code=0x7ffc0000 [ 92.433881][ T31] EXT4-fs (loop1): free_blocks=0 [ 92.439811][ T29] audit: type=1326 audit(188.327:6450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5346 comm="syz.0.618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=34 compat=0 ip=0x7fd0dba9f749 code=0x7ffc0000 [ 92.457501][ T29] audit: type=1326 audit(188.417:6451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5346 comm="syz.0.618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=34 compat=0 ip=0x7fd0dba9f749 code=0x7ffc0000 [ 92.463102][ T31] EXT4-fs (loop1): dirty_blocks=64 [ 92.497809][ T29] audit: type=1326 audit(188.467:6452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5356 comm="syz.4.621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd14e5df749 code=0x7ffc0000 [ 92.514368][ T31] EXT4-fs (loop1): Block reservation details [ 92.537266][ T29] audit: type=1326 audit(188.467:6453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5356 comm="syz.4.621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd14e5df749 code=0x7ffc0000 [ 92.542404][ T31] EXT4-fs (loop1): i_reserved_data_blocks=4 [ 92.571626][ T29] audit: type=1326 audit(188.537:6454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5356 comm="syz.4.621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd14e5df749 code=0x7ffc0000 [ 92.741767][ T5373] EXT4-fs: Ignoring removed i_version option [ 92.980041][ T5383] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 92.989369][ T5383] EXT4-fs (loop0): orphan cleanup on readonly fs [ 93.003082][ T5383] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #16: comm syz.0.627: corrupted inode contents [ 93.016493][ T5383] EXT4-fs (loop0): Remounting filesystem read-only [ 93.023518][ T5383] EXT4-fs (loop0): 1 truncate cleaned up [ 93.029518][ T37] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 93.040204][ T37] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 93.066384][ T5387] Symlink component flag not implemented [ 93.071213][ T37] EXT4-fs (loop0): Quota write (off=8, len=24) cancelled because transaction is not started [ 93.099472][ T5387] Symlink component flag not implemented (129) [ 93.106857][ T5383] tmpfs: Unknown parameter 'ƒûï-µSYöÎ_“Hòi½uµ×1Wó·MEÄ×¾ñÍä`ÜæÎîúb­VÝÊË•V}³ÒÜÙ½¾V_\­®V7æççÞXxsáõ…Ù' [ 93.119259][ T5387] rock: directory entry would overflow storage [ 93.125571][ T5387] rock: sig=0x4f50, size=4, remaining=3 [ 93.131264][ T5387] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 93.146504][ T5389] EXT4-fs: Ignoring removed orlov option [ 93.164674][ T5389] IPv6: Can't replace route, no match found [ 93.191578][ T5389] EXT4-fs (loop4): shut down requested (2) [ 93.201967][ T5389] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=12 [ 93.212382][ T5389] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=12 [ 93.222417][ T5393] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 93.236924][ T5393] EXT4-fs (loop3): orphan cleanup on readonly fs [ 93.248766][ T5393] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #16: comm syz.3.630: corrupted inode contents [ 93.276726][ T5393] EXT4-fs (loop3): Remounting filesystem read-only [ 93.288114][ T5393] EXT4-fs (loop3): 1 truncate cleaned up [ 93.295491][ T2917] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 93.295790][ T4186] ================================================================== [ 93.306234][ T2917] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 93.314197][ T4186] BUG: KCSAN: data-race in find_get_block_common / has_bh_in_lru [ 93.314234][ T4186] [ 93.314240][ T4186] read-write to 0xffff888237d27558 of 8 bytes by task 2917 on cpu 1: [ 93.314255][ T4186] find_get_block_common+0x4b6/0x8e0 [ 93.314279][ T4186] bdev_getblk+0x4d/0x3f0 [ 93.345744][ T2917] EXT4-fs (loop3): Quota write (off=8, len=24) cancelled because transaction is not started [ 93.348633][ T4186] ext4_getblk+0x1b6/0x510 [ 93.367689][ T4186] ext4_bread+0x28/0x110 [ 93.371993][ T4186] ext4_quota_read+0xe8/0x260 [ 93.376707][ T4186] remove_tree+0x129/0x1120 [ 93.381232][ T4186] qtree_release_dquot+0x16e/0x180 [ 93.386368][ T4186] v2_release_dquot+0x98/0xd0 [ 93.391082][ T4186] dquot_release+0x10e/0x210 [ 93.395705][ T4186] ext4_release_dquot+0x1e4/0x460 [ 93.401454][ T4186] quota_release_workfn+0x256/0x530 [ 93.406693][ T4186] process_scheduled_works+0x4ce/0x9d0 [ 93.412182][ T4186] worker_thread+0x582/0x770 [ 93.416808][ T4186] kthread+0x489/0x510 [ 93.420909][ T4186] ret_from_fork+0x149/0x290 [ 93.425538][ T4186] ret_from_fork_asm+0x1a/0x30 [ 93.430526][ T4186] [ 93.432871][ T4186] read to 0xffff888237d27558 of 8 bytes by task 4186 on cpu 0: [ 93.440494][ T4186] has_bh_in_lru+0x54/0x1f0 [ 93.445141][ T4186] smp_call_function_many_cond+0x2a9/0xc40 [ 93.450980][ T4186] on_each_cpu_cond_mask+0x3c/0x80 [ 93.456232][ T4186] invalidate_bh_lrus+0x2a/0x30 [ 93.461225][ T4186] invalidate_bdev+0x42/0x70 [ 93.465859][ T4186] ext4_put_super+0x624/0x7d0 [ 93.470683][ T4186] generic_shutdown_super+0xe6/0x210 [ 93.476093][ T4186] kill_block_super+0x2a/0x70 [ 93.480793][ T4186] ext4_kill_sb+0x42/0x80 [ 93.485151][ T4186] deactivate_locked_super+0x75/0x1c0 [ 93.490557][ T4186] deactivate_super+0x97/0xa0 [ 93.495285][ T4186] cleanup_mnt+0x2a9/0x320 [ 93.499729][ T4186] __cleanup_mnt+0x19/0x20 [ 93.504175][ T4186] task_work_run+0x131/0x1a0 [ 93.508794][ T4186] do_exit+0x467/0x1590 [ 93.513000][ T4186] do_group_exit+0xff/0x140 [ 93.517539][ T4186] get_signal+0xe58/0xf70 [ 93.521911][ T4186] arch_do_signal_or_restart+0x96/0x450 [ 93.527498][ T4186] exit_to_user_mode_loop+0x6a/0x740 [ 93.532807][ T4186] do_syscall_64+0x1e1/0x2b0 [ 93.537429][ T4186] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.543342][ T4186] [ 93.545681][ T4186] value changed: 0x0000000000000000 -> 0xffff88811b1cd7b8 [ 93.552800][ T4186] [ 93.555154][ T4186] Reported by Kernel Concurrency Sanitizer on: [ 93.561319][ T4186] CPU: 0 UID: 0 PID: 4186 Comm: syz.0.241 Not tainted syzkaller #0 PREEMPT(voluntary) [ 93.570972][ T4186] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 93.581076][ T4186] ================================================================== [ 93.821109][ T31] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.870562][ T31] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.930398][ T31] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.990782][ T31] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.083454][ T31] bridge_slave_1: left allmulticast mode [ 94.089216][ T31] bridge_slave_1: left promiscuous mode [ 94.095011][ T31] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.103763][ T31] bridge_slave_0: left allmulticast mode [ 94.109570][ T31] bridge_slave_0: left promiscuous mode [ 94.115439][ T31] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.289477][ T31] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 94.299707][ T31] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 94.309463][ T31] bond0 (unregistering): Released all slaves [ 94.358975][ T31] tipc: Disabling bearer [ 94.377282][ T31] tipc: Left network mode [ 94.384185][ T31] hsr_slave_0: left promiscuous mode [ 94.397445][ T31] hsr_slave_1: left promiscuous mode [ 94.407374][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 94.414855][ T31] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 94.437626][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 94.445202][ T31] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 94.477297][ T31] veth1_macvtap: left promiscuous mode [ 94.482937][ T31] veth0_macvtap: left promiscuous mode [ 94.488833][ T31] veth1_vlan: left promiscuous mode [ 94.494247][ T31] veth0_vlan: left promiscuous mode [ 94.566689][ T31] team0 (unregistering): Port device team_slave_1 removed [ 94.580548][ T31] team0 (unregistering): Port device team_slave_0 removed [ 94.612259][ T31] team0 (unregistering): Port device dummy0 removed