last executing test programs: 3.35451551s ago: executing program 0 (id=1672): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0xa, 0x4c831, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='rxrpc_local\x00', r0, 0x0, 0x80000001}, 0x18) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a00)=ANY=[], 0x10b8}, 0x8000) 3.232758369s ago: executing program 0 (id=1680): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9ee6, 0x200000005}, 0x104022, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) (async) r3 = syz_io_uring_setup(0x4b5, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, 0x0, 0x0) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000040)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) syz_clone(0x41aa1000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x3c1, 0x3, 0x3d8, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x308, 0x2e8, 0x2e8, 0x308, 0x2e8, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast1}, @mcast1, [], [0xff, 0x0, 0x0, 0xff000000], 'erspan0\x00', 'geneve1\x00'}, 0x0, 0x190, 0x1f8, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "cfcfcf0c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e67262c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x1a, 0x0, {0x80000}}}, @inet=@rpfilter={{0x28}, {0x6}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x17, 0x3, 0x6, 0x80000000, 'snmp\x00', 'syz0\x00', {0xe6}}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @broadcast}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xff, 0xff000000, 0xff000000, 0xff], [0xffffff00, 0x0, 0xffffff00], 'wg0\x00', 'nicvf0\x00', {0xff}, {0xff}, 0x0, 0xc0, 0x0, 0x14}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x4, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x438) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) (async) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x2, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r9, 0x0, 0xfffffffffffffffd}, 0x18) (async) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x68) mount$nfs4(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, 0x0) 2.148049784s ago: executing program 0 (id=1691): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e000000850000000500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000060000000000000000008500000007000000850000000e00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000fc0)=ANY=[@ANYBLOB="726177020000000000000066490000000000000000000000000000000000000002"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000012c0)={&(0x7f0000000040)='kfree\x00', r0}, 0x10) r2 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCL_BLANKSCREEN(r2, 0x4b67, &(0x7f0000000180)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) setgroups(0x0, 0x0) socket$packet(0x11, 0x2, 0x300) ioctl$KDFONTOP_SET(r2, 0x4b72, &(0x7f00000001c0)={0x0, 0x0, 0x1a, 0x3, 0x95, &(0x7f0000000540)="1b4c269056613f6a9fa3e85c9d2f975ca50536d9ac10eabf3786f3b52d6c177fe5e067ad1d72e8cff52ef50ef01e8d325bde873783d89e4baab19f0f7958cefa26359b91b89aa69faeaaae34e388de97b822ece6d9f5149bfd62c7df7ac043ddc07ac2d4c41662dd08192f63acc01ce9ce80db7e8ea6a7f7f31615e625c18e0e32e26edb6b6508c3042f03336b26b773ceee7f6cac793a6ded5c00eeac9232fb7c39760302fab021e0e8e6ae9e0294803e8ab986b351d72aff1150458e121ec8ffe4b1ebdeb4b92816d94aea5b8c6a236f512c8e4ed07fb6deb3f81a1d9084130b5b2fc3ba479fd94c3154f126c8388a032de7b65201c2f9b7ee6a02818ffa27b0ce5d7d16cc5694ea05051591eed4341bfe30bf656c2464907d97148ec534eda24fe3dc79613734bf9aedb4ec68ad90e799304dc7d8c5ff87e76d380be45e6afea419b4980039db85852094b77e85431649678beabfc73bcb814f9335aad8315ab76a93b0c43fb60ea9b1c13d7d0cd495b0d785b6757b1249761e4f3b51817ac35dbdeda0448c280bfab41b4a165a289a8eb45b039c1b4816fd032c3e6e3331a77a7c1489b2c5c490e2504052c6b8c5435c02247f6857fa8461d619f8168ecfc1592fc783147f927802c32b2c05ba5a61749c68fcac5a844ff1970bc818450f582fa1a9bd2f91536447138b48a110bdec2381e0d0f4365bb81777ced1d2d938273f28c6d5e4d9ce135619a5f247b507a49ca6044e4ab8b1f05402c0de0836226ad140f4d4e18ac951da729c61ae801be089c4fe743bfe44846e1f5c6c098c266addff78963f95d67469e049c63577d7641723b977d3eee47706a372bb80c6a18f3dd9bdec2a2a67deb4ddedc2cc067e37919016a49a84763c015edf2d54fcf1b5fd5ef5f79f4470413f840e6ec983dd594a9541c53e9036d9ab092d741911815d351f6df6aa3bc9f3c532e6b41d05eb54946055099e4ec32757c1cb0095a3783f0631c63be2456014b3c583da15005c509cd7be6d2b0c72a98ee8e8ecba13ed3cd04f07ce046f5fb4522403327f8b13fed89b4d23f89c7eaf6536bf1e7b9c8cf6632683db801616449ec616d0655318c3e0c5dc17ad0ed8df649ca7b7100fb5eb558784b80873cf8b3b3f5e4d482ca573975f8ec45498697c49f58f2de6c28c770f4c7e4613154b76d8604625a49390545293527958394dc4de6c62d8c05c27a6c2943985cd67d8ea7c1c35618fb4e19fc0fd3f2a118fbae476c86bb2f6baa9ce1a6e0978dbce43112ab64b47dbe5e48be64b25cdbd9fcb58af778ff2cc34828172ff2e41ff1a16bcfa3fc0abf95c28cbc5c10a2cbde6074a435967908d4e60a3be28101a48545d6dd818ff490c6a3929168be83bb6f58fd7320301d45b8fc3b90d8a7802f953176c5da933ff47e3ad7bf12b53a3e94d865cb77f637266b033"}) 2.100060918s ago: executing program 0 (id=1696): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000002480)="$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") bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r0}, 0x10) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x182) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x80642, 0x150) pwrite64(r2, &(0x7f0000000140)='2', 0xfdef, 0xfecc) fallocate(r1, 0x0, 0x5, 0x2000402) 1.986175556s ago: executing program 2 (id=1698): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x3e1, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081084e81f782db44b904021d080006007c06e8fe55a10a0015400100142603600e120800060000000201a80016000900014003e01100036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000001c0)='sched_switch\x00', r2, 0x0, 0x8}, 0x18) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0xd9}, 0x50) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000a80)='kfree\x00', r7, 0x0, 0x3}, 0x18) r8 = semget(0x1, 0x4, 0x39c) semop(r8, &(0x7f0000000080)=[{0x1, 0x8001, 0x1000}, {0x1, 0x5b7a, 0x800}], 0x2) semop(r8, &(0x7f00000001c0)=[{0x3, 0x3, 0x400}, {0x1, 0xbbdd, 0x1000}, {0x1, 0x1000, 0x1800}], 0x3) syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="640000000206010200000000000000000000000015000300686173683a69702c706f72742c6e6574000000000900020073797a32000000000500040000000000140007800800124000000000050015002200000005000500020000000500010006"], 0x64}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000640)={0x1c, 0x3, 0x6, 0x401, 0x0, 0x0, {0x7, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x10) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r9}, 0x18) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="24000000390007010000000000000000027c0000040000000c0001800600060086dd"], 0x24}}, 0x0) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@allocspi={0xf8, 0x16, 0x1, 0x70bd25, 0x0, {{{@in6=@local, @in=@multicast1}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x33}, @in=@broadcast, {0xffffffffffffffff, 0x0, 0x8, 0x0, 0x8}, {}, {0x0, 0x1}, 0x0, 0x0, 0xa}}}, 0xf8}}, 0x0) openat$cgroup_procs(r10, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) 1.884359294s ago: executing program 2 (id=1700): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='mpol=interleave,mpol=local']) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a000020095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000200)='kmem_cache_free\x00', r0}, 0x10) open$dir(&(0x7f0000000000)='./file0/file0\x00', 0x101042, 0x1) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) syz_emit_ethernet(0x7e, &(0x7f0000000040)={@multicast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x4, 0x70, 0x65, 0x0, 0x2, 0x1, 0x0, @rand_addr=0x64010101, @remote}, @dest_unreach={0x3, 0x3, 0x0, 0x0, 0x6, 0x1f, {0x15, 0x4, 0x3, 0x3a, 0x7ff, 0x68, 0x1ce2, 0xd9, 0x2f, 0xe5c, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x36}, {[@cipso={0x86, 0x11, 0x3, [{0x7, 0x9, "a88022eba18f92"}, {0x1, 0x2}]}, @timestamp_addr={0x44, 0x2c, 0x4c, 0x1, 0x0, [{@multicast2, 0x9}, {@loopback, 0x5}, {@multicast1, 0x20005}, {@loopback}, {@remote, 0x329}]}]}}}}}}}, 0x0) splice(r2, 0x0, r3, &(0x7f0000000180)=0x8, 0x3, 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r4}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000010000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000ac03000000000000850000003300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r6, r8, 0x25, 0x2}, 0x14) syz_emit_ethernet(0x12c, &(0x7f0000000a00)=ANY=[], 0x0) 1.838479278s ago: executing program 2 (id=1701): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x840e, &(0x7f0000000240)={[{@max_dir_size_kb}, {@jqfmt_vfsold}, {@usrquota}, {@jqfmt_vfsold}, {@bsdgroups}, {@quota}]}, 0x1, 0x43a, &(0x7f0000001100)="$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") perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={0x0, 0xffffffffffffffff, 0x0, 0x8001}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) unshare(0x20060400) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x48) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_CLEAR_HALT(r0, 0xc0105502, &(0x7f0000000300)={0x1, 0x1}) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32=0x0, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x40f00, 0x8}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000440)={0x40, 0x2, 0x6, 0x401, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x7}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000024}, 0x4040000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) setregid(0x0, 0x0) r5 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x82) fchdir(r6) fcntl$notify(0xffffffffffffffff, 0x402, 0x1a) setxattr$trusted_overlay_upper(0x0, 0x0, 0x0, 0x841, 0x1) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="6c00ecff080601020000000000000000030000000900020073797a3100000000050001000700000044000780180001801400024000000000000000000000ffffac14143a180014801400024020010000000000000000000000000000060004404e1f00000500070029000010"], 0x6c}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000a80)='kfree\x00', r1, 0x0, 0xfffffffffffffffd}, 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) newfstatat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x6000) 1.575252498s ago: executing program 2 (id=1707): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e000000850000000500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000060000000000000000008500000007000000850000000e00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000fc0)=ANY=[@ANYBLOB="726177020000000000000066490000000000000000000000000000000000000002"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000012c0)={&(0x7f0000000040)='kfree\x00', r0}, 0x10) r2 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCL_BLANKSCREEN(r2, 0x4b67, &(0x7f0000000180)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) setgroups(0x0, 0x0) ioctl$KDFONTOP_SET(r2, 0x4b72, &(0x7f00000001c0)={0x0, 0x0, 0x1a, 0x3, 0x95, &(0x7f0000000540)="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"}) 1.504423474s ago: executing program 4 (id=1710): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000000c0)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@abort}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000000a40)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==") r0 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0xdc) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r0, 0x5000) fallocate(r0, 0x0, 0x0, 0x8800000) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000160000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x18) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x14a) fallocate(r3, 0x20, 0x0, 0x8000) 1.496266514s ago: executing program 2 (id=1711): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000002700)={0x0, 0x0, 0x0}, 0x0) recvmsg(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x0) 1.358490735s ago: executing program 4 (id=1714): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r0}, &(0x7f0000000000), &(0x7f0000000180)=r1}, 0x20) r2 = syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) fsetxattr$trusted_overlay_redirect(r3, &(0x7f0000000040), 0x0, 0x0, 0x2) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmmsg$inet(r4, &(0x7f0000001680)=[{{&(0x7f0000000140)={0x2, 0x4e21, @private=0xa010102}, 0x10, &(0x7f00000015c0)=[{0x0}, {&(0x7f0000000280)="4d85605e53", 0x5}], 0x2}}], 0x1, 0x800) 1.29238323s ago: executing program 1 (id=1715): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000001a00010000000000000000000a000000", @ANYRES32=0x0, @ANYBLOB="040002041400030007000000c5000000000000000100000014000100ff8f"], 0x44}}, 0x4) 1.280437771s ago: executing program 4 (id=1716): setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001540)={&(0x7f0000000c40)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYBLOB="ff02000000000000000000000000000100000000330000000a0101010000000000000000000000000000000000004e340100000000000000000000000000000004000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000a0000002bbd70000000000000000200000000000000000008000020ffffffdf2c00", @ANYBLOB='ZO'], 0x124}}, 0x0) 1.263979092s ago: executing program 1 (id=1717): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000f00)='kfree\x00', r1, 0x0, 0x4}, 0x18) socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) pipe(&(0x7f0000000080)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) socket(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x10021, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0x7, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet_udp(0x2, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="3c34000000000000040100c910fc02000000000000000000000000000107", @ANYRES32=r2], 0x1b0) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, 0x0, 0x0) 1.260060993s ago: executing program 4 (id=1718): bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000002480)="$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") r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) r2 = socket$unix(0x1, 0x5, 0x0) bind$unix(r2, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) syz_io_uring_setup(0xb6d, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x20081e, &(0x7f0000000840)={[{@grpjquota}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xa30}}, {@grpquota}]}, 0x81, 0x52a, &(0x7f0000001440)="$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") r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}]}, &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) r5 = socket$packet(0x11, 0x3, 0x300) bind$packet(r5, &(0x7f0000000080)={0x11, 0x1a, 0x0, 0x1, 0x8, 0x6, @broadcast}, 0x14) r6 = creat(&(0x7f00000000c0)='./bus\x00', 0x182) r7 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x80642, 0x150) pwrite64(r7, &(0x7f0000000140)='2', 0xfdef, 0xfecc) fallocate(r6, 0x0, 0x5, 0x2000402) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) getsockopt$PNPIPE_IFINDEX(r7, 0x113, 0x2, &(0x7f0000000400)=0x0, &(0x7f0000000440)=0x4) sendmsg$GTP_CMD_DELPDP(r7, &(0x7f0000000680)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x1c, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@GTPA_LINK={0x8, 0x1, r8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000055}, 0x40000081) 1.218940126s ago: executing program 0 (id=1719): bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000002480)="$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") r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) r2 = socket$unix(0x1, 0x5, 0x0) bind$unix(r2, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) syz_io_uring_setup(0xb6d, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x20081e, &(0x7f0000000840)={[{@grpjquota}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xa30}}, {@grpquota}]}, 0x81, 0x52a, &(0x7f0000001440)="$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") r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}]}, &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) r5 = socket$packet(0x11, 0x3, 0x300) bind$packet(r5, &(0x7f0000000080)={0x11, 0x1a, 0x0, 0x1, 0x8, 0x6, @broadcast}, 0x14) r6 = creat(&(0x7f00000000c0)='./bus\x00', 0x182) r7 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x80642, 0x150) pwrite64(r7, &(0x7f0000000140)='2', 0xfdef, 0xfecc) fallocate(r6, 0x0, 0x5, 0x2000402) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r8 = syz_genetlink_get_family_id$gtp(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$GTP_CMD_DELPDP(r7, &(0x7f0000000680)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x1c, r8, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@GTPA_LINK={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000055}, 0x40000081) 1.201882337s ago: executing program 1 (id=1720): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0xa, 0x4c831, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='rxrpc_local\x00', r0, 0x0, 0x80000001}, 0x18) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a00)=ANY=[], 0x10b8}, 0x8000) 1.152411781s ago: executing program 1 (id=1721): bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000002480)="$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") r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) r2 = socket$unix(0x1, 0x5, 0x0) bind$unix(r2, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) syz_io_uring_setup(0xb6d, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x20081e, &(0x7f0000000840)={[{@grpjquota}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xa30}}, {@grpquota}]}, 0x81, 0x52a, &(0x7f0000001440)="$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") r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}]}, &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = creat(&(0x7f00000000c0)='./bus\x00', 0x182) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x80642, 0x150) pwrite64(r5, &(0x7f0000000140)='2', 0xfdef, 0xfecc) fallocate(r4, 0x0, 0x5, 0x2000402) 600.412393ms ago: executing program 2 (id=1725): bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000002480)="$eJzs3E+LHEUYB+B315iNG/ePGqMJiIVe9NJk9+BFL4tsQDKgJFkhEYSO26vDtDPD9LAwIkZPXv0cIojgTRBvetmL30DwthePEcSWndEko5PDSEiH5Xku80LVb6jqphuq6erD1774sLNXZXv5MBYXFmKxH5FupUixGP/4NF5+9cefnrty7fqlrVZr+3JKF7eubrySUlp9/vt3Pv7qhR+Gp9/+dvW7pThYf/fwt81fD84enDv88+oH7Sq1q9TtDVOebvR6w/xGWaTddtXJUnqrLPKqSO1uVQym2vfKXr8/Snl3d2W5PyiqKuXdUeoUozTspeFglPL383Y3ZVmWVpaD+Z24Xe18eauu64i6fjRORl3X9WOxHKfj8ViJ1ViL9Xginoyn4kw8HWfjmXg2vvnl69FRAgAAAAAAAAAAAAAAAAAAALh/5t3/f27cq+lRAwAAAAAAAAAAAAAAAAAAwPFy5dr1S1ut1vbllE5FlJ/v7+zvTH4n7Vt70Y4yirgQa/FHjHf/T0zqi2+0ti+ksfX4rLz5d/7m/s4j0/mN8ecEZuY3Jvk0nV+K5bvzm7EWZ2bnN2fmT8VLL96Vz2Itfn4velHGbhxl7+Q/2Ujp9Tdb/8qfH/cDAACA4yBLt81cv2fZvdon+TmeD0ytr4+y5080OnUiohp91MnLshgoHvriZLPD+L2u6+YPQkPFva+UpYj43/+8EBEPxwT/UzR9Z+JBuHPSmx4JAAAAAAAAAAAA83gQrxM2PUcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD+YgeOBQAAAACE+Vun0bEBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHwVAAD//+pd0x0=") r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) r2 = socket$unix(0x1, 0x5, 0x0) bind$unix(r2, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) syz_io_uring_setup(0xb6d, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x20081e, &(0x7f0000000840)={[{@grpjquota}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xa30}}, {@grpquota}]}, 0x81, 0x52a, &(0x7f0000001440)="$eJzs3c9vHFcdAPDvjL22k7h1WnoABG1oCwFFWcebNqp6gHJCCFVC9AhSauyNFWXXa3nXpTaRcM9ckajECY78AZx74s4FwY1LOSDxwwLVSBwGzezY2di7tpPYXmv385FG+9688XzfizPvzbxd7wtgbF2LiO2ImIqI9yNirtyflFu8093y4z7bebi0u/NwKYkse++fSVGe74uen8ldKc85ExE/+E7Ej5PDcdubWw8WG436epmf7zTX5tubWzfvNxdX6iv11VrtzsKdW2/dfrP2BK2ZObL0leZUmfryp3/Y/sZP82rNlnt623Gauk2v7MfJTUbE984i2BBMlO2ZGnZFeCppRLwYEa8W1/9cTBS/TQBglGXZXGRzvXkAYNSlxRxYklbLuYDZSNNqtTuH91JcThutdufGvdbG6nJ3ruxqVNJ79xv1W+Vc4dWoJHl+oUg/ytcO5G9HxAsR8YvpS0W+utRqLA/zxgcAxtiVA+P/f6a74z8AMOKO/tgMADCKjP8AMH6M/wAwfoz/ADB+uuP/pSf9sSzLfnYW1QEAzoHnfwAYP8Z/ABgr33/33XzLdsvvv17+YHPjQeuDm8v19oNqc2OputRaX6uutForxXf2NI87X6PVWlt4IzY+vPrNtXZnvr25dbfZ2ljt3C2+1/tuvVIctX0OLQMABnnhlU/+nOQj8tuXii161nKoDLVmwFlLh10BYGgmhl0BYGi6q331WaAPGHmPnvGf+EMApgdgRBx3BzDT7w+EsizLzq5KwBm7/gXz/zCuyvn/SZ8ChvFz3Px/sTawNwlhJE0OuwLA0GRZctI1/+OkBwIAF9sRc/xXz/M+BBieAe//v1i+/rZ8c+BHyweP+PgsawUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAX2976v9Vymd/ZSNNqNeK5YgGgSnLvfqN+KyKej4g/TVem8/zCkOsMADyr9G9Juf7X9bnXZx8revnKfnIqIn7yq/d++eFip7P+x4ip5F/Te/s7H5f7a8cGmzmLFgAAR9sbp4vXngf5z3YeLu1t51mfv3+7e1eQx93dmYrd/fiTMVm8zkQlIi7/OynzXUnP3MWz2P4oIj7fr/1JzBZzIN1bloPx89jPnVL8iRPFTx+Ln5YLNKflv8XnTqEuMG4+yfufd/pdf2lcK177X/8zRQ/17Mr+Lz/V0m7RBz6Kv9f/TQzo/66dNMYbv/9uN3XpcNlHEV+cjNiLvdvT/+zFTwbEf/2E8f/ypZdfHVSW/TrievSP3xtrvtNcm29vbt2831xcqa/UV2u1Owt3br11+83afDFHPT94NPjH2zeeH1SWt//ygPgzx7T/q4NOeuAp9zf/e/+HXzki/tdf6xc/jZeOiJ+PiV8b2OLHLV7+3cDn7jz+8uH2Jyf5/d84YfxP/7p1aNlwAGB42ptbDxYbjfq6hMTFT+T/ZS9ANfomvnVesaaif9HPX+te0weKsuypYg3qMU5j1g24CPYv+oj477ArAwAAAAAAAAAAAAAA9HUef7E07DYCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwuv4fAAD//9VG0+g=") r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}]}, &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = creat(&(0x7f00000000c0)='./bus\x00', 0x182) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x80642, 0x150) pwrite64(r5, &(0x7f0000000140)='2', 0xfdef, 0xfecc) fallocate(r4, 0x0, 0x5, 0x2000402) 573.215946ms ago: executing program 3 (id=1726): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x50) socket$nl_route(0x10, 0x3, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x18) mprotect(&(0x7f00008e6000/0x4000)=nil, 0x4000, 0x5) syz_open_procfs(0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @local, 0x1}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000780)="f4000900062b2c25fe80000012000000dc8b850f238466cc00007a000000ad6e911b51818462b4003a0000", 0x2b}], 0x1}, 0x40) 388.6614ms ago: executing program 3 (id=1727): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000005e00010028bd7000fedbdf2500000000", @ANYRES32=r0], 0x1c}, 0x1, 0x0, 0x0, 0x2408c495}, 0x20040800) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000c00)=@ipv6_delrule={0x5c, 0x21, 0x1, 0x70bd2c, 0x25dfdbf9, {0xa, 0x0, 0x20, 0x0, 0xfe, 0x0, 0x0, 0x1, 0x10007}, [@FIB_RULE_POLICY=@FRA_PROTOCOL={0x5, 0x15, 0x3}, @FRA_SRC={0x14, 0x2, @empty}, @FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x4, 0x6}, @FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'gre0\x00'}, @FIB_RULE_POLICY=@FRA_SUPPRESS_IFGROUP={0x8, 0xd, 0x3}]}, 0x5c}}, 0x20040000) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071000000850000000800000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4e, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000005c0)='sys_enter\x00', r3, 0x0, 0xfffffffffffffffd}, 0x18) uname(&(0x7f0000000300)=""/165) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000780)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000740)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x20004801) r4 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000000)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000180000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000f0850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r5}, 0x10) request_key(&(0x7f0000000340)='keyring\x00', &(0x7f0000000380)={'syz', 0x3}, 0x0, r4) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x18, 0x7ffc1fff}]}) syz_emit_ethernet(0x22e2, &(0x7f00000041c0)=ANY=[@ANYBLOB="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", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5002000290780000"], 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xf, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r6 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r6, 0x800448d2, &(0x7f0000001e80)={0x2, &(0x7f0000001cc0)=[{@none}, {@none}]}) 333.279075ms ago: executing program 4 (id=1728): setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001540)={&(0x7f0000000c40)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ff02000000000000000000000000000100000000330000000a0101010000000000000000000000000000000000004e340100000000000000000000000000000004000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000a0000002bbd70000000000000000200000000000000000008000020ffffffdf2c00", @ANYBLOB='ZO'], 0x124}}, 0x0) 284.422408ms ago: executing program 3 (id=1729): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x40800) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newqdisc={0x3c, 0x24, 0xd0f, 0x200000, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_NAT={0x8, 0xb, 0x1}]}}]}, 0x3c}}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r4, &(0x7f0000003240)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, 0x0}}], 0x1, 0x4000800) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000f00)='kfree\x00', r6, 0x0, 0x4}, 0x18) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x4) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000180a0500000000000000000002000000300003802c00038014000100776732000000000000000000000000001400010076657468315f746f5f627269646765000900020073797a30000000000900010073797a300000000014000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x24040089}, 0x20008000) 213.482064ms ago: executing program 3 (id=1730): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000f00)='kfree\x00', r1, 0x0, 0x4}, 0x18) socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) pipe(&(0x7f0000000080)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) socket(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x10021, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0x7, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet_udp(0x2, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="3c34000000000000040100c910fc02000000000000000000000000000107", @ANYRES32=r2], 0x1b0) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, 0x0, 0x0) 192.662505ms ago: executing program 4 (id=1731): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000002480)="$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") bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r0}, 0x10) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x182) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x80642, 0x150) pwrite64(r2, &(0x7f0000000140)='2', 0xfdef, 0xfecc) fallocate(r1, 0x0, 0x5, 0x2000402) 173.614437ms ago: executing program 0 (id=1732): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) socket$inet_sctp(0x2, 0x1, 0x84) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000540)='inet_sock_set_state\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r3}, 0x18) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c00000000010104000000000000000002001000240002801400018008000100e000000108000200e00000010c00028005000100000000001c0010800800014000000000d97405010000000008000240000000000800", @ANYRES64=r4], 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) 120.177661ms ago: executing program 1 (id=1733): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) syz_emit_ethernet(0x87a2f, 0x0, 0x0) 62.465645ms ago: executing program 3 (id=1734): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='mpol=interleave,mpol=local']) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a000020095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000200)='kmem_cache_free\x00', r0}, 0x10) open$dir(&(0x7f0000000000)='./file0/file0\x00', 0x101042, 0x1) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) syz_emit_ethernet(0x7e, &(0x7f0000000040)={@multicast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x4, 0x70, 0x65, 0x0, 0x2, 0x1, 0x0, @rand_addr=0x64010101, @remote}, @dest_unreach={0x3, 0x3, 0x0, 0x0, 0x6, 0x1f, {0x15, 0x4, 0x3, 0x3a, 0x7ff, 0x68, 0x1ce2, 0xd9, 0x2f, 0xe5c, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x36}, {[@cipso={0x86, 0x11, 0x3, [{0x7, 0x9, "a88022eba18f92"}, {0x1, 0x2}]}, @timestamp_addr={0x44, 0x2c, 0x4c, 0x1, 0x0, [{@multicast2, 0x9}, {@loopback, 0x5}, {@multicast1, 0x20005}, {@loopback}, {@remote, 0x329}]}]}}}}}}}, 0x0) splice(r2, 0x0, r3, &(0x7f0000000180)=0x8, 0x3, 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r4}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) syz_init_net_socket$x25(0x9, 0x5, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000010000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000ac03000000000000850000003300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r5, r7, 0x25, 0x2}, 0x14) syz_emit_ethernet(0x12c, &(0x7f0000000a00)=ANY=[], 0x0) 37.745167ms ago: executing program 1 (id=1735): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$tipc(0x1e, 0x1, 0x0, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000002700)={0x0, 0x0, 0x0}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x0) 0s ago: executing program 3 (id=1736): r0 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0xff, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1100, 0x0, 0xfffffffc, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000000c0)='kfree\x00', r2, 0x0, 0xfffffffffffffffd}, 0x18) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a30000000180a3f6d6f578dbe9c8b000002000000040003800900020073797a30000000000900010073797a300000000014000000020a010100000000000000000000000614000000110001"], 0x6c}}, 0x880) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000940)={r2, 0xe0, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x9, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xf7, &(0x7f0000000540)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f00000006c0), &(0x7f0000000700), 0x8, 0x34, 0x8, 0x8, &(0x7f0000000900)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x14, 0xc, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYRES64=r5], 0x0, 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r4}, &(0x7f0000000180), &(0x7f0000000000)=r1}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x3}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x10) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000000000)=0x1) kernel console output (not intermixed with test programs): committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 101.797533][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.807129][ T6738] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1036'. [ 101.811702][ T6734] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4215: comm syz.4.1035: Allocating blocks 385-513 which overlap fs metadata [ 101.816257][ T6738] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1036'. [ 101.858162][ T6734] EXT4-fs (loop4): pa ffff88810764ee70: logic 16, phys. 129, len 24 [ 101.866532][ T6734] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 8 [ 101.892859][ T3325] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.905479][ T6740] netlink: 'syz.0.1038': attribute type 1 has an invalid length. [ 101.955849][ T3500] hid_parser_main: 8 callbacks suppressed [ 101.955867][ T3500] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0 [ 101.970021][ T3500] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0 [ 101.977502][ T3500] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0 [ 101.984998][ T3500] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0 [ 101.993027][ T3500] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0 [ 102.000443][ T3500] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0 [ 102.008062][ T3500] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0 [ 102.016140][ T3500] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0 [ 102.023679][ T3500] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0 [ 102.031084][ T3500] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0 [ 102.031506][ T6748] loop3: detected capacity change from 0 to 8192 [ 102.062438][ T3500] hid-generic 0003:0004:0000.0002: hidraw0: USB HID v0.02 Device [syz0] on syz1 [ 102.080452][ T6740] loop0: detected capacity change from 0 to 1764 [ 102.147853][ T6750] loop2: detected capacity change from 0 to 8192 [ 102.274892][ T6766] netlink: 204 bytes leftover after parsing attributes in process `syz.0.1046'. [ 102.318823][ T6759] lo speed is unknown, defaulting to 1000 [ 102.456527][ T6768] loop0: detected capacity change from 0 to 1024 [ 102.495450][ T6768] EXT4-fs: Ignoring removed bh option [ 102.534765][ T6768] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.605148][ T6768] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4215: comm syz.0.1048: Allocating blocks 385-513 which overlap fs metadata [ 102.684980][ T6768] EXT4-fs (loop0): pa ffff88810764eee0: logic 16, phys. 129, len 24 [ 102.693055][ T6768] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 8 [ 102.760613][ T3321] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.885835][ T6786] loop3: detected capacity change from 0 to 512 [ 102.893029][ T6786] EXT4-fs: Ignoring removed i_version option [ 102.899180][ T6786] EXT4-fs: Ignoring removed bh option [ 102.916552][ T6786] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.933950][ T6786] ext4 filesystem being mounted at /253/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 103.019179][ T6793] loop0: detected capacity change from 0 to 1024 [ 103.027073][ T6793] EXT4-fs: Ignoring removed bh option [ 103.068984][ T6793] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.078457][ T6796] bond2: entered promiscuous mode [ 103.088951][ T6796] 8021q: adding VLAN 0 to HW filter on device bond2 [ 103.089296][ T6793] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4215: comm syz.0.1056: Allocating blocks 385-513 which overlap fs metadata [ 103.110154][ T6796] loop4: detected capacity change from 0 to 1024 [ 103.119812][ T6796] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities [ 103.198897][ T44] Bluetooth: hci0: command 0x1003 tx timeout [ 103.205036][ T3625] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 103.234117][ T6793] EXT4-fs (loop0): pa ffff88810764eee0: logic 16, phys. 129, len 24 [ 103.242216][ T6793] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 8 [ 103.328393][ T3321] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.391109][ T6802] EXT4-fs: Ignoring removed nomblk_io_submit option [ 103.434806][ T6802] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 103.463706][ T6802] System zones: 0-1, 3-36 [ 103.473311][ T6802] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.524407][ T3326] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.700648][ T6812] EXT4-fs: Ignoring removed bh option [ 103.743855][ T6812] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.777533][ T6812] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4215: comm syz.4.1062: Allocating blocks 385-513 which overlap fs metadata [ 103.845438][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.885462][ T6812] EXT4-fs (loop4): pa ffff88810764ef50: logic 16, phys. 129, len 24 [ 103.893652][ T6812] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 8 [ 103.935109][ T3325] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.963963][ T6825] FAULT_INJECTION: forcing a failure. [ 103.963963][ T6825] name failslab, interval 1, probability 0, space 0, times 0 [ 103.976701][ T6825] CPU: 0 UID: 0 PID: 6825 Comm: syz.2.1067 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 103.976741][ T6825] Tainted: [W]=WARN [ 103.976749][ T6825] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 103.976761][ T6825] Call Trace: [ 103.976769][ T6825] [ 103.976780][ T6825] __dump_stack+0x1d/0x30 [ 103.976851][ T6825] dump_stack_lvl+0xe8/0x140 [ 103.976939][ T6825] dump_stack+0x15/0x1b [ 103.976959][ T6825] should_fail_ex+0x265/0x280 [ 103.976982][ T6825] should_failslab+0x8c/0xb0 [ 103.977005][ T6825] kmem_cache_alloc_noprof+0x69/0x4b0 [ 103.977027][ T6825] ? __kernfs_new_node+0x70/0x3a0 [ 103.977106][ T6825] __kernfs_new_node+0x70/0x3a0 [ 103.977133][ T6825] ? vsnprintf+0x7ee/0x860 [ 103.977162][ T6825] kernfs_new_node+0xd0/0x140 [ 103.977189][ T6825] __kernfs_create_file+0x4b/0x180 [ 103.977221][ T6825] cgroup_addrm_files+0x519/0x670 [ 103.977328][ T6825] ? copy_from_user_nmi+0x70/0xf0 [ 103.977370][ T6825] ? sched_clock+0x3f/0x60 [ 103.977397][ T6825] css_populate_dir+0x9f/0x230 [ 103.977459][ T6825] cgroup_apply_control_enable+0x4f1/0xa30 [ 103.977510][ T6825] cgroup_apply_control+0x33/0x410 [ 103.977584][ T6825] ? __pfx_autoremove_wake_function+0x10/0x10 [ 103.977611][ T6825] ? cgroup_kn_lock_live+0x130/0x1e0 [ 103.977639][ T6825] cgroup_subtree_control_write+0x7d5/0xb80 [ 103.977718][ T6825] ? __pfx_cgroup_subtree_control_write+0x10/0x10 [ 103.977809][ T6825] cgroup_file_write+0x19d/0x350 [ 103.977842][ T6825] ? __pfx_cgroup_file_write+0x10/0x10 [ 103.977914][ T6825] kernfs_fop_write_iter+0x1eb/0x300 [ 103.977960][ T6825] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 103.977989][ T6825] vfs_write+0x52a/0x960 [ 103.978014][ T6825] ksys_write+0xda/0x1a0 [ 103.978056][ T6825] __x64_sys_write+0x40/0x50 [ 103.978118][ T6825] x64_sys_call+0x2847/0x3000 [ 103.978207][ T6825] do_syscall_64+0xd8/0x2c0 [ 103.978238][ T6825] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.978258][ T6825] RIP: 0033:0x7f2a6e85f749 [ 103.978276][ T6825] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 103.978316][ T6825] RSP: 002b:00007f2a6d2bf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 103.978336][ T6825] RAX: ffffffffffffffda RBX: 00007f2a6eab5fa0 RCX: 00007f2a6e85f749 [ 103.978349][ T6825] RDX: 0000000000000005 RSI: 0000200000000140 RDI: 0000000000000009 [ 103.978367][ T6825] RBP: 00007f2a6d2bf090 R08: 0000000000000000 R09: 0000000000000000 [ 103.978379][ T6825] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 103.978391][ T6825] R13: 00007f2a6eab6038 R14: 00007f2a6eab5fa0 R15: 00007ffdeae97fc8 [ 103.978411][ T6825] [ 103.978424][ T6825] cgroup: cgroup_addrm_files: failed to add weight.nice, err=-12 [ 104.270066][ T6833] bridge0: entered promiscuous mode [ 104.297247][ T6833] macsec1: entered promiscuous mode [ 104.374301][ T6838] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 104.422031][ T6838] ext4 filesystem being mounted at /211/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 104.437072][ T6838] EXT4-fs error (device loop2): ext4_free_blocks:6728: comm syz.2.1070: Freeing blocks not in datazone - block = 0, count = 16 [ 104.460112][ T6838] sch_tbf: burst 3298 is lower than device lo mtu (11337746) ! [ 104.560760][ T6851] EXT4-fs (loop4): 1 orphan inode deleted [ 104.581471][ T6851] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 104.622950][ T6851] ext4 filesystem being mounted at /175/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 104.683084][ T6844] EXT4-fs error (device loop4): ext4_ext_check_inode:523: inode #13: comm syz.4.1073: pblk 0 bad header/extent: invalid eh_max - magic f30a, entries 257, max 0(0), depth 0(0) [ 104.707780][ T6842] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 104.749638][ T6842] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 104.784721][ T3325] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.828203][ T6842] Symlink component flag not implemented [ 104.862988][ T6842] Symlink component flag not implemented [ 104.939884][ T6869] EXT4-fs: Ignoring removed nobh option [ 105.007804][ T6869] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.058762][ T6842] Symlink component flag not implemented (7) [ 105.065662][ T6842] Symlink component flag not implemented (116) [ 105.205783][ T187] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm kworker/u8:5: bg 0: block 112: padding at end of block bitmap is not set [ 105.236454][ T187] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 3 with error 28 [ 105.248993][ T187] EXT4-fs (loop2): This should not happen!! Data will be lost [ 105.248993][ T187] [ 105.259113][ T187] EXT4-fs (loop2): Total free blocks count 0 [ 105.265275][ T187] EXT4-fs (loop2): Free/Dirty block details [ 105.271178][ T187] EXT4-fs (loop2): free_blocks=16 [ 105.276524][ T187] EXT4-fs (loop2): dirty_blocks=80 [ 105.281698][ T187] EXT4-fs (loop2): Block reservation details [ 105.287946][ T187] EXT4-fs (loop2): i_reserved_data_blocks=5 [ 105.315907][ T187] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 37 with error 28 [ 105.437584][ T6874] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4215: comm syz.4.1079: Allocating blocks 497-513 which overlap fs metadata [ 105.466721][ T6886] random: crng reseeded on system resumption [ 105.514587][ T6874] EXT4-fs (loop4): pa ffff8881060ffb60: logic 256, phys. 385, len 8 [ 105.523502][ T6874] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 1 [ 105.769717][ T6890] EXT4-fs: Ignoring removed bh option [ 105.814699][ T6890] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.854033][ T6890] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4215: comm syz.3.1086: Allocating blocks 385-513 which overlap fs metadata [ 105.868462][ T6896] EXT4-fs (loop1): corrupt root inode, run e2fsck [ 105.884656][ T6896] EXT4-fs (loop1): mount failed [ 105.903697][ T6890] EXT4-fs (loop3): pa ffff8881060ffbd0: logic 16, phys. 129, len 24 [ 105.911762][ T6890] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 8 [ 105.946865][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.068895][ T6907] set_capacity_and_notify: 10 callbacks suppressed [ 106.068916][ T6907] loop1: detected capacity change from 0 to 512 [ 106.100627][ T3325] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.120680][ T6907] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 106.195343][ T6907] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.244384][ T6920] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.286825][ T6907] ext4 filesystem being mounted at /240/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 106.324692][ T6924] loop4: detected capacity change from 0 to 512 [ 106.359722][ T6920] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.396479][ T6924] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.453542][ T6924] ext4 filesystem being mounted at /180/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 106.514391][ T6924] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.545605][ T6920] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.565290][ T6930] loop3: detected capacity change from 0 to 8192 [ 106.608536][ T29] kauditd_printk_skb: 384 callbacks suppressed [ 106.608554][ T29] audit: type=1400 audit(1765764702.525:5901): avc: denied { read } for pid=6919 comm="syz.4.1094" path="socket:[16626]" dev="sockfs" ino=16626 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 106.641229][ T6920] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.680829][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.759440][ T815] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.777340][ T6933] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 106.792585][ T802] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.794120][ T6933] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 106.808962][ T802] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.822228][ T802] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.846844][ T6933] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1099'. [ 106.873213][ T29] audit: type=1400 audit(1765764702.795:5902): avc: denied { setattr } for pid=6934 comm="syz.1.1098" name="cgroup.procs" dev="cgroup" ino=249 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object" [ 106.906269][ T6933] loop0: detected capacity change from 0 to 512 [ 106.934992][ T6935] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1098'. [ 106.946521][ T6933] EXT4-fs error (device loop0): ext4_xattr_inode_iget:441: inode #18: comm syz.0.1099: iget: bad extra_isize 90 (inode size 256) [ 106.981864][ T6940] loop3: detected capacity change from 0 to 1024 [ 106.993247][ T6940] EXT4-fs: Ignoring removed bh option [ 107.003420][ T6933] EXT4-fs (loop0): Remounting filesystem read-only [ 107.010074][ T6933] EXT4-fs warning (device loop0): ext4_evict_inode:273: xattr delete (err -30) [ 107.021915][ T6940] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.024849][ T6933] EXT4-fs (loop0): 1 orphan inode deleted [ 107.041545][ T6933] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.080963][ T6940] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4215: comm syz.3.1100: Allocating blocks 385-513 which overlap fs metadata [ 107.106810][ T6940] EXT4-fs (loop3): pa ffff88810764eee0: logic 16, phys. 129, len 24 [ 107.115694][ T6940] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 8 [ 107.141651][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.150658][ T29] audit: type=1326 audit(1765764703.055:5903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6945 comm="syz.4.1106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6d58cf749 code=0x7ffc0000 [ 107.150730][ T29] audit: type=1326 audit(1765764703.055:5904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6945 comm="syz.4.1106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6d58cf749 code=0x7ffc0000 [ 107.150758][ T29] audit: type=1326 audit(1765764703.055:5905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6945 comm="syz.4.1106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=105 compat=0 ip=0x7fc6d58cf749 code=0x7ffc0000 [ 107.200209][ T6950] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1103'. [ 107.222487][ T29] audit: type=1326 audit(1765764703.055:5906): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6945 comm="syz.4.1106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6d58cf749 code=0x7ffc0000 [ 107.222579][ T29] audit: type=1326 audit(1765764703.055:5907): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6945 comm="syz.4.1106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6d58cf749 code=0x7ffc0000 [ 107.222606][ T29] audit: type=1326 audit(1765764703.055:5908): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6945 comm="syz.4.1106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc6d58cf749 code=0x7ffc0000 [ 107.222660][ T29] audit: type=1326 audit(1765764703.055:5909): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6945 comm="syz.4.1106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6d58cf749 code=0x7ffc0000 [ 107.222735][ T29] audit: type=1326 audit(1765764703.055:5910): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6945 comm="syz.4.1106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6d58cf749 code=0x7ffc0000 [ 107.476685][ T6959] netlink: 'syz.1.1108': attribute type 1 has an invalid length. [ 107.485263][ T6959] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1108'. [ 107.562262][ T6961] loop2: detected capacity change from 0 to 1024 [ 107.583254][ T6961] EXT4-fs: Ignoring removed bh option [ 107.611497][ T6961] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.627451][ T6961] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4215: comm syz.2.1109: Allocating blocks 385-513 which overlap fs metadata [ 107.644214][ T3321] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.644847][ T6961] EXT4-fs (loop2): pa ffff8881060ffbd0: logic 16, phys. 129, len 24 [ 107.661499][ T6961] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 8 [ 107.704397][ T3326] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.740412][ T6967] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1112'. [ 107.780356][ T6967] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1112'. [ 107.806702][ T6967] FAULT_INJECTION: forcing a failure. [ 107.806702][ T6967] name failslab, interval 1, probability 0, space 0, times 0 [ 107.819694][ T6967] CPU: 1 UID: 0 PID: 6967 Comm: syz.3.1112 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 107.819730][ T6967] Tainted: [W]=WARN [ 107.819737][ T6967] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 107.819751][ T6967] Call Trace: [ 107.819757][ T6967] [ 107.819765][ T6967] __dump_stack+0x1d/0x30 [ 107.819801][ T6967] dump_stack_lvl+0xe8/0x140 [ 107.819826][ T6967] dump_stack+0x15/0x1b [ 107.819847][ T6967] should_fail_ex+0x265/0x280 [ 107.819873][ T6967] should_failslab+0x8c/0xb0 [ 107.819898][ T6967] kmem_cache_alloc_noprof+0x69/0x4b0 [ 107.819923][ T6967] ? skb_clone+0x151/0x1f0 [ 107.819952][ T6967] skb_clone+0x151/0x1f0 [ 107.819989][ T6967] __netlink_deliver_tap+0x2c9/0x500 [ 107.820032][ T6967] __netlink_sendskb+0xc3/0xd0 [ 107.820059][ T6967] netlink_dump+0x72b/0x8a0 [ 107.820172][ T6967] netlink_recvmsg+0x420/0x550 [ 107.820205][ T6967] ? __pfx_netlink_recvmsg+0x10/0x10 [ 107.820239][ T6967] sock_recvmsg+0x139/0x170 [ 107.820296][ T6967] ____sys_recvmsg+0xf5/0x280 [ 107.820385][ T6967] ___sys_recvmsg+0x11f/0x370 [ 107.820551][ T6967] do_recvmmsg+0x1ef/0x540 [ 107.820582][ T6967] ? fput+0x8f/0xc0 [ 107.820684][ T6967] __x64_sys_recvmmsg+0xe5/0x170 [ 107.820794][ T6967] x64_sys_call+0x2b75/0x3000 [ 107.820820][ T6967] do_syscall_64+0xd8/0x2c0 [ 107.820855][ T6967] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.820878][ T6967] RIP: 0033:0x7fae1b59f749 [ 107.820962][ T6967] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 107.821068][ T6967] RSP: 002b:00007fae1a007038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 107.821092][ T6967] RAX: ffffffffffffffda RBX: 00007fae1b7f5fa0 RCX: 00007fae1b59f749 [ 107.821106][ T6967] RDX: 0000000000000001 RSI: 0000200000004f40 RDI: 0000000000000003 [ 107.821120][ T6967] RBP: 00007fae1a007090 R08: 0000000000000000 R09: 0000000000000000 [ 107.821133][ T6967] R10: 0000000040000102 R11: 0000000000000246 R12: 0000000000000001 [ 107.821207][ T6967] R13: 00007fae1b7f6038 R14: 00007fae1b7f5fa0 R15: 00007ffc709a91f8 [ 107.821276][ T6967] [ 108.085251][ T6965] SELinux: failed to load policy [ 108.166666][ T6977] loop2: detected capacity change from 0 to 8192 [ 108.179241][ T6978] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1114'. [ 108.195916][ T6980] loop0: detected capacity change from 0 to 1024 [ 108.218145][ T6980] EXT4-fs: Ignoring removed bh option [ 108.230187][ T6981] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6981 comm=syz.3.1114 [ 108.252766][ T6980] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.268432][ T6980] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4215: comm syz.0.1116: Allocating blocks 385-513 which overlap fs metadata [ 108.286210][ T6980] EXT4-fs (loop0): pa ffff8881060ff930: logic 16, phys. 129, len 24 [ 108.294447][ T6980] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 8 [ 108.314678][ T6985] loop4: detected capacity change from 0 to 512 [ 108.324085][ T6985] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 108.342749][ T6985] EXT4-fs (loop4): 1 truncate cleaned up [ 108.357716][ T6988] loop1: detected capacity change from 0 to 1024 [ 108.366013][ T6988] EXT4-fs: inline encryption not supported [ 108.371982][ T6988] EXT4-fs: Ignoring removed orlov option [ 108.379254][ T6988] EXT4-fs (loop1): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 108.379881][ T6985] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.417805][ T6988] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e840c018, mo2=0002] [ 108.426701][ T6988] System zones: 0-1, 3-12 [ 108.437249][ T6985] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1118'. [ 108.449434][ T6988] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 108.482051][ T3321] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.492329][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.806988][ T7017] 9p: Bad value for 'rfdno' [ 108.980766][ T7008] FAULT_INJECTION: forcing a failure. [ 108.980766][ T7008] name failslab, interval 1, probability 0, space 0, times 0 [ 109.019311][ T7008] CPU: 0 UID: 0 PID: 7008 Comm: syz.3.1126 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 109.019346][ T7008] Tainted: [W]=WARN [ 109.019379][ T7008] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 109.019394][ T7008] Call Trace: [ 109.019401][ T7008] [ 109.019410][ T7008] __dump_stack+0x1d/0x30 [ 109.019517][ T7008] dump_stack_lvl+0xe8/0x140 [ 109.019543][ T7008] dump_stack+0x15/0x1b [ 109.019571][ T7008] should_fail_ex+0x265/0x280 [ 109.019595][ T7008] should_failslab+0x8c/0xb0 [ 109.019615][ T7008] kmem_cache_alloc_noprof+0x69/0x4b0 [ 109.019635][ T7008] ? alloc_empty_file+0x76/0x200 [ 109.019660][ T7008] alloc_empty_file+0x76/0x200 [ 109.019765][ T7008] alloc_file_pseudo+0xc6/0x160 [ 109.019797][ T7008] hugetlb_file_setup+0x2a6/0x3d0 [ 109.019847][ T7008] ksys_mmap_pgoff+0x157/0x310 [ 109.019878][ T7008] x64_sys_call+0x16bb/0x3000 [ 109.019905][ T7008] do_syscall_64+0xd8/0x2c0 [ 109.019979][ T7008] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.020084][ T7008] RIP: 0033:0x7fae1b59f749 [ 109.020099][ T7008] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 109.020189][ T7008] RSP: 002b:00007fae1a007038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 109.020210][ T7008] RAX: ffffffffffffffda RBX: 00007fae1b7f5fa0 RCX: 00007fae1b59f749 [ 109.020296][ T7008] RDX: 000000000000000b RSI: 0000000000800000 RDI: 0000200000000000 [ 109.020308][ T7008] RBP: 00007fae1a007090 R08: ffffffffffffffff R09: 0000000000000000 [ 109.020321][ T7008] R10: 00000000000c3072 R11: 0000000000000246 R12: 0000000000000002 [ 109.020350][ T7008] R13: 00007fae1b7f6038 R14: 00007fae1b7f5fa0 R15: 00007ffc709a91f8 [ 109.020371][ T7008] [ 109.294186][ T7025] EXT4-fs: Ignoring removed bh option [ 109.326381][ T7025] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.342179][ T3325] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.361948][ T7027] FAT-fs (loop2): bogus logical sector size 0 [ 109.368446][ T7027] FAT-fs (loop2): This doesn't look like a DOS 1.x volume; no bootstrapping code [ 109.372363][ T7025] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4215: comm syz.3.1130: Allocating blocks 385-513 which overlap fs metadata [ 109.378218][ T7027] FAT-fs (loop2): Can't find a valid FAT filesystem [ 109.421367][ T7025] EXT4-fs (loop3): pa ffff8881060ff930: logic 16, phys. 129, len 24 [ 109.429651][ T7025] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 8 [ 109.500570][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.596860][ T7024] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.612792][ T7024] ext4 filesystem being mounted at /249/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 109.653351][ T7024] EXT4-fs error (device loop1): ext4_map_blocks:783: inode #2: block 18: comm syz.1.1131: lblock 23 mapped to illegal pblock 18 (length 1) [ 109.677337][ T7044] EXT4-fs: Ignoring removed bh option [ 109.706518][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.728309][ T7044] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.743623][ T7050] netlink: 'syz.3.1140': attribute type 21 has an invalid length. [ 109.755861][ T7044] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4215: comm syz.4.1137: Allocating blocks 385-513 which overlap fs metadata [ 109.800907][ T7044] EXT4-fs (loop4): pa ffff88810764ee70: logic 16, phys. 129, len 24 [ 109.809386][ T7044] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 8 [ 109.833678][ T3325] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.929524][ T7060] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1141'. [ 109.984160][ T7064] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 109.993137][ T7064] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 110.014621][ T7064] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4215: comm syz.4.1141: Allocating blocks 41-42 which overlap fs metadata [ 110.029336][ T7064] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4215: comm syz.4.1141: Allocating blocks 41-42 which overlap fs metadata [ 110.043964][ T7064] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.1141: Failed to acquire dquot type 1 [ 110.055769][ T7064] EXT4-fs error (device loop4): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 110.071140][ T7064] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #12: comm syz.4.1141: corrupted inode contents [ 110.083631][ T7064] EXT4-fs error (device loop4): ext4_dirty_inode:6502: inode #12: comm syz.4.1141: mark_inode_dirty error [ 110.095656][ T7064] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #12: comm syz.4.1141: corrupted inode contents [ 110.108254][ T7064] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #12: comm syz.4.1141: mark_inode_dirty error [ 110.120410][ T7064] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #12: comm syz.4.1141: corrupted inode contents [ 110.132886][ T7064] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 110.141867][ T7064] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #12: comm syz.4.1141: corrupted inode contents [ 110.155225][ T7064] EXT4-fs error (device loop4): ext4_truncate:4635: inode #12: comm syz.4.1141: mark_inode_dirty error [ 110.166867][ T7064] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem [ 110.176515][ T7064] EXT4-fs (loop4): 1 truncate cleaned up [ 110.183143][ T7064] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.213350][ T7064] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 110.409935][ T7027] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1132'. [ 110.476391][ T7073] SELinux: policydb version 576 does not match my version range 15-35 [ 110.485979][ T7073] SELinux: failed to load policy [ 110.494011][ T7075] hub 1-0:1.0: USB hub found [ 110.502021][ T7075] hub 1-0:1.0: 8 ports detected [ 110.618606][ T7083] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.693493][ T7083] ext4 filesystem being mounted at /204/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 110.713203][ T7079] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 110.729444][ T7079] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 110.742325][ T7079] Symlink component flag not implemented [ 110.763585][ T7083] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #2: comm syz.0.1150: corrupted inode contents [ 110.763799][ T7083] EXT4-fs error (device loop0): ext4_dirty_inode:6502: inode #2: comm syz.0.1150: mark_inode_dirty error [ 110.764037][ T7083] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #2: comm syz.0.1150: corrupted inode contents [ 110.764231][ T7083] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #2: comm syz.0.1150: mark_inode_dirty error [ 110.899848][ T7079] Symlink component flag not implemented [ 110.942228][ T3325] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.952318][ T7079] Symlink component flag not implemented (7) [ 110.959650][ T7079] Symlink component flag not implemented (116) [ 110.980598][ T7097] SELinux: ebitmap: truncated map [ 110.989741][ T7097] SELinux: failed to load policy [ 111.049001][ T3321] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.091760][ T7103] set_capacity_and_notify: 7 callbacks suppressed [ 111.091780][ T7103] loop4: detected capacity change from 0 to 1024 [ 111.110860][ T7103] EXT4-fs: Ignoring removed bh option [ 111.147933][ T7103] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.174859][ T7112] loop1: detected capacity change from 0 to 512 [ 111.200020][ T7103] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4215: comm syz.4.1152: Allocating blocks 385-513 which overlap fs metadata [ 111.215578][ T7112] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 111.223794][ T7112] System zones: 0-2, 18-18, 34-34 [ 111.234193][ T7112] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1156: bg 0: block 248: padding at end of block bitmap is not set [ 111.276183][ T7116] loop0: detected capacity change from 0 to 512 [ 111.283735][ T7103] EXT4-fs (loop4): pa ffff88810764ee70: logic 16, phys. 129, len 24 [ 111.291889][ T7103] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 8 [ 111.316448][ T7112] EXT4-fs error (device loop1): ext4_acquire_dquot:6986: comm syz.1.1156: Failed to acquire dquot type 1 [ 111.343029][ T7116] EXT4-fs warning (device loop0): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 111.355414][ T7116] EXT4-fs warning (device loop0): dx_probe:849: Enable large directory feature to access it [ 111.365588][ T7116] EXT4-fs warning (device loop0): dx_probe:934: inode #2: comm syz.0.1157: Corrupt directory, running e2fsck is recommended [ 111.379350][ T7119] loop2: detected capacity change from 0 to 8192 [ 111.388383][ T7112] EXT4-fs (loop1): 1 truncate cleaned up [ 111.419955][ T3325] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.446078][ T7112] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.483724][ T7116] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117 [ 111.492268][ T7116] EXT4-fs error (device loop0): ext4_iget_extra_inode:5073: inode #15: comm syz.0.1157: corrupted in-inode xattr: e_name out of bounds [ 111.503799][ T7112] ext4 filesystem being mounted at /253/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 111.557448][ T7116] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.1157: couldn't read orphan inode 15 (err -117) [ 111.682562][ T7127] netlink: 'syz.4.1161': attribute type 21 has an invalid length. [ 111.824950][ T29] kauditd_printk_skb: 204 callbacks suppressed [ 111.824968][ T29] audit: type=1400 audit(1765764707.745:6109): avc: denied { create } for pid=7131 comm="syz.0.1163" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=pppox_socket permissive=1 [ 111.936989][ T7140] wg2: entered promiscuous mode [ 111.941908][ T7140] wg2: entered allmulticast mode [ 112.044468][ T7137] loop0: detected capacity change from 0 to 164 [ 112.094361][ T7140] lo speed is unknown, defaulting to 1000 [ 112.160683][ T7144] lo speed is unknown, defaulting to 1000 [ 112.222565][ T3491] IPVS: starting estimator thread 0... [ 112.293685][ T7137] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 112.325231][ T7146] IPVS: using max 2016 ests per chain, 100800 per kthread [ 112.335967][ T7137] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 112.359712][ T7137] Symlink component flag not implemented [ 112.367194][ T7137] Symlink component flag not implemented [ 112.454089][ T7137] Symlink component flag not implemented (7) [ 112.461177][ T7137] Symlink component flag not implemented (116) [ 112.530759][ T7154] netlink: 'syz.2.1166': attribute type 7 has an invalid length. [ 112.608870][ T7158] loop0: detected capacity change from 0 to 1024 [ 112.625475][ T7158] EXT4-fs: Ignoring removed bh option [ 112.672795][ T7162] loop2: detected capacity change from 0 to 1024 [ 112.699113][ T7162] EXT4-fs: Ignoring removed bh option [ 112.747456][ T7158] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4215: comm syz.0.1168: Allocating blocks 385-513 which overlap fs metadata [ 112.787498][ T7162] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4215: comm syz.2.1171: Allocating blocks 385-513 which overlap fs metadata [ 112.816565][ T7162] EXT4-fs (loop2): pa ffff8881060ffd90: logic 16, phys. 129, len 24 [ 112.824677][ T7162] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 8 [ 112.829347][ T7166] SELinux: failed to load policy [ 112.838330][ T7158] EXT4-fs (loop0): pa ffff8881060ffbd0: logic 16, phys. 129, len 24 [ 112.848001][ T7158] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 8 [ 113.155285][ T7180] loop1: detected capacity change from 0 to 8192 [ 113.161873][ T7184] netlink: 'syz.3.1179': attribute type 21 has an invalid length. [ 113.182056][ T7182] loop2: detected capacity change from 0 to 164 [ 113.189070][ T7177] loop0: detected capacity change from 0 to 164 [ 113.228402][ T7184] __nla_validate_parse: 4 callbacks suppressed [ 113.228420][ T7184] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1179'. [ 113.267825][ T7182] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 113.297729][ T7182] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 113.344096][ T7182] Symlink component flag not implemented [ 113.350861][ T7182] Symlink component flag not implemented [ 113.371791][ T7177] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 113.383667][ T7182] Symlink component flag not implemented (7) [ 113.390639][ T7182] Symlink component flag not implemented (116) [ 113.473936][ T7177] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 113.513820][ T3575] loop4: p2 < > p4 [ 113.514430][ T7196] EXT4-fs: Ignoring removed bh option [ 113.518989][ T3575] loop4: p4 size 262144 extends beyond EOD, truncated [ 113.527180][ T7177] Symlink component flag not implemented [ 113.560543][ T7193] loop_reread_partitions: partition scan of loop4 () failed (rc=-16) [ 113.602412][ T7177] Symlink component flag not implemented [ 113.615360][ T7177] Symlink component flag not implemented (7) [ 113.622330][ T7177] Symlink component flag not implemented (116) [ 113.682061][ T7196] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4215: comm syz.2.1182: Allocating blocks 385-513 which overlap fs metadata [ 113.705800][ T7196] EXT4-fs (loop2): pa ffff8881060ffcb0: logic 16, phys. 129, len 24 [ 113.714008][ T7196] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 8 [ 113.724998][ T29] audit: type=1400 audit(1765764709.645:6110): avc: denied { ioctl } for pid=7203 comm="syz.4.1183" path="socket:[17396]" dev="sockfs" ino=17396 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 113.772005][ T3575] udevd[3575]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 113.796085][ T3863] udevd[3863]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 113.928172][ T7216] EXT4-fs: Ignoring removed bh option [ 113.961012][ T7220] EXT4-fs: Ignoring removed bh option [ 113.980892][ T7216] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4215: comm syz.2.1186: Allocating blocks 385-513 which overlap fs metadata [ 114.000282][ T7210] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 114.021822][ T7211] lo speed is unknown, defaulting to 1000 [ 114.048203][ T7220] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4215: comm syz.1.1187: Allocating blocks 385-513 which overlap fs metadata [ 114.068063][ T7216] EXT4-fs (loop2): pa ffff88810764ee70: logic 16, phys. 129, len 24 [ 114.076260][ T7216] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 8 [ 114.127993][ T7231] EXT4-fs: Ignoring removed bh option [ 114.136163][ T7220] EXT4-fs (loop1): pa ffff88810764ee00: logic 16, phys. 129, len 24 [ 114.144481][ T7220] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 8 [ 114.194173][ T7231] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4215: comm syz.3.1190: Allocating blocks 385-513 which overlap fs metadata [ 114.227102][ T7234] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1191'. [ 114.308053][ T7231] EXT4-fs (loop3): pa ffff88810764ee70: logic 16, phys. 129, len 24 [ 114.316413][ T7231] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 8 [ 114.381014][ T7242] ext4 filesystem being mounted at /258/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 114.401767][ T29] audit: type=1400 audit(1765764710.315:6111): avc: denied { mounton } for pid=7239 comm="syz.0.1193" path="/syzcgroup/cpu/syz0/cgroup.procs" dev="cgroup" ino=151 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object" [ 114.451017][ T7242] EXT4-fs error (device loop1): ext4_map_blocks:825: inode #15: block 3: comm syz.1.1194: lblock 3 mapped to illegal pblock 3 (length 3) [ 114.466108][ T7240] EXT4-fs: test_dummy_encryption option not supported [ 114.557349][ T7254] EXT4-fs: Ignoring removed bh option [ 114.563288][ T7242] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 114.575709][ T7242] EXT4-fs (loop1): This should not happen!! Data will be lost [ 114.575709][ T7242] [ 114.589115][ T7242] EXT4-fs error (device loop1): ext4_map_blocks:783: inode #15: block 3: comm syz.1.1194: lblock 3 mapped to illegal pblock 3 (length 1) [ 114.605055][ T7242] EXT4-fs error (device loop1): ext4_map_blocks:783: inode #15: block 3: comm syz.1.1194: lblock 3 mapped to illegal pblock 3 (length 1) [ 114.621775][ T7242] EXT4-fs error (device loop1): ext4_map_blocks:783: inode #15: block 3: comm syz.1.1194: lblock 3 mapped to illegal pblock 3 (length 1) [ 114.637310][ T7242] EXT4-fs error (device loop1): ext4_map_blocks:783: inode #15: block 3: comm syz.1.1194: lblock 3 mapped to illegal pblock 3 (length 1) [ 114.652245][ T7241] EXT4-fs error (device loop1): ext4_map_blocks:783: inode #15: block 3: comm syz.1.1194: lblock 3 mapped to illegal pblock 3 (length 1) [ 114.666902][ T7254] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4215: comm syz.4.1197: Allocating blocks 385-513 which overlap fs metadata [ 114.682227][ T7241] EXT4-fs error (device loop1): ext4_map_blocks:783: inode #15: block 3: comm syz.1.1194: lblock 3 mapped to illegal pblock 3 (length 1) [ 114.697145][ T7259] ext4: Unknown parameter 'subj_type' [ 114.703106][ T7254] EXT4-fs (loop4): pa ffff8881060ffe00: logic 16, phys. 129, len 24 [ 114.711217][ T7254] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 8 [ 114.721134][ T7242] EXT4-fs error (device loop1): ext4_map_blocks:783: inode #15: block 3: comm syz.1.1194: lblock 3 mapped to illegal pblock 3 (length 1) [ 114.721416][ T7241] EXT4-fs error (device loop1): ext4_map_blocks:783: inode #15: block 3: comm syz.1.1194: lblock 3 mapped to illegal pblock 3 (length 1) [ 114.767611][ T7241] EXT4-fs error (device loop1): ext4_map_blocks:783: inode #15: block 3: comm syz.1.1194: lblock 3 mapped to illegal pblock 3 (length 1) [ 114.933486][ T7274] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 114.972208][ T7272] EXT4-fs warning (device loop0): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 114.984634][ T7272] EXT4-fs warning (device loop0): dx_probe:849: Enable large directory feature to access it [ 114.994878][ T7272] EXT4-fs warning (device loop0): dx_probe:934: inode #2: comm syz.0.1203: Corrupt directory, running e2fsck is recommended [ 115.052130][ T29] audit: type=1326 audit(1765764710.965:6112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7280 comm="syz.2.1206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a6e85f749 code=0x7ffc0000 [ 115.076140][ T29] audit: type=1326 audit(1765764710.965:6113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7280 comm="syz.2.1206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a6e85f749 code=0x7ffc0000 [ 115.105973][ T7279] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 115.117892][ T7272] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117 [ 115.117887][ T29] audit: type=1326 audit(1765764710.995:6114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7280 comm="syz.2.1206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7f2a6e85f749 code=0x7ffc0000 [ 115.117978][ T29] audit: type=1326 audit(1765764710.995:6115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7280 comm="syz.2.1206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a6e85f749 code=0x7ffc0000 [ 115.175620][ T29] audit: type=1326 audit(1765764710.995:6116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7280 comm="syz.2.1206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=286 compat=0 ip=0x7f2a6e85f749 code=0x7ffc0000 [ 115.179222][ T7272] EXT4-fs error (device loop0): ext4_iget_extra_inode:5073: inode #15: comm syz.0.1203: corrupted in-inode xattr: e_name out of bounds [ 115.200015][ T29] audit: type=1326 audit(1765764710.995:6117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7280 comm="syz.2.1206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a6e85f749 code=0x7ffc0000 [ 115.238186][ T29] audit: type=1326 audit(1765764710.995:6118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7280 comm="syz.2.1206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a6e85f749 code=0x7ffc0000 [ 115.249089][ T7272] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.1203: couldn't read orphan inode 15 (err -117) [ 115.278534][ T7284] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1207'. [ 115.599481][ T7293] SELinux: failed to load policy [ 115.771147][ T1623] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 115.784152][ T1623] EXT4-fs (loop1): This should not happen!! Data will be lost [ 115.784152][ T1623] [ 115.907216][ T7306] lo speed is unknown, defaulting to 1000 [ 115.922280][ T7309] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1216'. [ 115.926139][ T7295] EXT4-fs: test_dummy_encryption option not supported [ 115.985002][ T7314] EXT4-fs: Ignoring removed bh option [ 115.985033][ T7311] EXT4-fs: Ignoring removed bh option [ 116.008903][ T7297] ext4: Unknown parameter 'subj_type' [ 116.026691][ T7314] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4215: comm syz.2.1218: Allocating blocks 385-513 which overlap fs metadata [ 116.057417][ T7314] EXT4-fs (loop2): pa ffff8881060ffe00: logic 16, phys. 129, len 24 [ 116.065873][ T7314] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 8 [ 116.108875][ T7311] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4215: comm syz.0.1217: Allocating blocks 385-513 which overlap fs metadata [ 116.148516][ T7319] set_capacity_and_notify: 14 callbacks suppressed [ 116.148535][ T7319] loop4: detected capacity change from 0 to 8192 [ 116.184881][ T7311] EXT4-fs (loop0): pa ffff8881060ffe00: logic 16, phys. 129, len 24 [ 116.193137][ T7311] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 8 [ 116.389640][ T7327] SELinux: failed to load policy [ 116.698224][ T7363] netlink: 'syz.0.1233': attribute type 21 has an invalid length. [ 116.706322][ T7363] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1233'. [ 116.725341][ T7369] loop3: detected capacity change from 0 to 1024 [ 116.766883][ T7369] EXT4-fs: Ignoring removed bh option [ 116.798308][ T7369] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4215: comm syz.3.1234: Allocating blocks 385-513 which overlap fs metadata [ 116.817455][ T7376] SELinux: failed to load policy [ 116.824876][ T7369] EXT4-fs (loop3): pa ffff88810764ed90: logic 16, phys. 129, len 24 [ 116.833580][ T7369] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 8 [ 116.836266][ T29] kauditd_printk_skb: 87 callbacks suppressed [ 116.836280][ T29] audit: type=1326 audit(1765764712.755:6206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7358 comm="syz.2.1231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2a6e8565e7 code=0x7ffc0000 [ 116.845993][ T7363] openvswitch: netlink: Missing key (keys=40, expected=100) [ 116.852208][ T29] audit: type=1326 audit(1765764712.765:6207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7358 comm="syz.2.1231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2a6e7fb829 code=0x7ffc0000 [ 116.904696][ T29] audit: type=1326 audit(1765764712.765:6208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7358 comm="syz.2.1231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2a6e8565e7 code=0x7ffc0000 [ 116.928690][ T29] audit: type=1326 audit(1765764712.765:6209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7358 comm="syz.2.1231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2a6e7fb829 code=0x7ffc0000 [ 116.952141][ T29] audit: type=1326 audit(1765764712.765:6210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7358 comm="syz.2.1231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7f2a6e85f749 code=0x7ffc0000 [ 116.975917][ T29] audit: type=1326 audit(1765764712.855:6211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7358 comm="syz.2.1231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2a6e8565e7 code=0x7ffc0000 [ 117.000219][ T29] audit: type=1326 audit(1765764712.855:6212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7358 comm="syz.2.1231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2a6e7fb829 code=0x7ffc0000 [ 117.024149][ T29] audit: type=1326 audit(1765764712.855:6213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7358 comm="syz.2.1231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7f2a6e85f749 code=0x7ffc0000 [ 117.047788][ T29] audit: type=1326 audit(1765764712.855:6214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7358 comm="syz.2.1231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2a6e8565e7 code=0x7ffc0000 [ 117.071371][ T29] audit: type=1326 audit(1765764712.855:6215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7358 comm="syz.2.1231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2a6e7fb829 code=0x7ffc0000 [ 117.094122][ T7384] loop0: detected capacity change from 0 to 1024 [ 117.108922][ T7384] EXT4-fs: inline encryption not supported [ 117.115586][ T7384] EXT4-fs: Ignoring removed orlov option [ 117.157723][ T7384] EXT4-fs (loop0): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 117.175040][ T7389] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1241'. [ 117.207179][ T7384] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e840c018, mo2=0002] [ 117.242914][ T7384] System zones: 0-1, 3-12 [ 117.531644][ T7411] SELinux: failed to load policy [ 117.539420][ T7414] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1250'. [ 117.570937][ T7416] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1252'. [ 117.586481][ T7414] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1250'. [ 117.670531][ T7414] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 117.685171][ T7420] loop0: detected capacity change from 0 to 164 [ 117.692909][ T7414] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1250'. [ 117.705952][ T7414] hsr_slave_0: left promiscuous mode [ 117.736557][ T7414] hsr_slave_1: left promiscuous mode [ 117.755419][ T7420] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 117.770683][ T7431] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 117.777497][ T7431] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 117.781501][ T7420] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 117.785213][ T7431] vhci_hcd vhci_hcd.0: Device attached [ 117.797704][ T7432] vhci_hcd: connection closed [ 117.823276][ T57] vhci_hcd vhci_hcd.3: stop threads [ 117.836137][ T57] vhci_hcd vhci_hcd.3: release socket [ 117.841762][ T57] vhci_hcd vhci_hcd.3: disconnect device [ 117.927604][ T7447] loop2: detected capacity change from 0 to 1024 [ 117.935018][ T7447] EXT4-fs: inline encryption not supported [ 117.935189][ T7442] loop4: detected capacity change from 0 to 8192 [ 117.940927][ T7447] EXT4-fs: Ignoring removed orlov option [ 117.953893][ T7447] EXT4-fs (loop2): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 117.955141][ T7420] Symlink component flag not implemented [ 118.002583][ T7420] Symlink component flag not implemented [ 118.011551][ T7420] Symlink component flag not implemented (7) [ 118.018308][ T7420] Symlink component flag not implemented (116) [ 118.070615][ T7450] SELinux: failed to load policy [ 118.096915][ T7447] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e840c018, mo2=0002] [ 118.106794][ T7447] System zones: 0-1, 3-12 [ 118.336425][ T7466] loop0: detected capacity change from 0 to 512 [ 118.343696][ T7466] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 118.355571][ T7466] EXT4-fs error (device loop0): ext4_iget_extra_inode:5073: inode #15: comm syz.0.1268: corrupted in-inode xattr: invalid ea_ino [ 118.371682][ T7466] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.1268: couldn't read orphan inode 15 (err -117) [ 118.371920][ T7467] loop2: detected capacity change from 0 to 512 [ 118.408836][ T7467] EXT4-fs: Ignoring removed i_version option [ 118.415032][ T7467] EXT4-fs: Ignoring removed bh option [ 118.421908][ T7470] loop3: detected capacity change from 0 to 1024 [ 118.434741][ T7470] EXT4-fs (loop3): unsupported descriptor size 4 [ 118.474441][ T7467] ext4 filesystem being mounted at /250/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 118.510529][ T7479] syzkaller0: entered promiscuous mode [ 118.516157][ T7479] syzkaller0: entered allmulticast mode [ 118.738465][ T7483] loop1: detected capacity change from 0 to 164 [ 118.766740][ T7483] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 118.814245][ T7481] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 118.878551][ T7481] Symlink component flag not implemented [ 118.888050][ T7481] Symlink component flag not implemented [ 118.976140][ T7486] __nla_validate_parse: 1 callbacks suppressed [ 118.976161][ T7486] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1275'. [ 119.070500][ T7490] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 119.128926][ T7490] SELinux: failed to load policy [ 119.155641][ T7481] Symlink component flag not implemented (7) [ 119.162421][ T7481] Symlink component flag not implemented (116) [ 119.267307][ T7499] netlink: '+}[@': attribute type 10 has an invalid length. [ 119.296267][ T7499] bridge0: port 3(dummy0) entered disabled state [ 119.303559][ T7499] dummy0: left allmulticast mode [ 119.308734][ T7499] dummy0: left promiscuous mode [ 119.314547][ T7499] bridge0: port 3(dummy0) entered disabled state [ 119.379507][ T7499] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 119.413286][ T7499] team0: Failed to send options change via netlink (err -105) [ 119.420951][ T7499] team0: Port device dummy0 added [ 119.471573][ T7515] ALSA: seq fatal error: cannot create timer (-22) [ 119.539465][ T7518] lo speed is unknown, defaulting to 1000 [ 119.688934][ T7527] netlink: 'syz.2.1287': attribute type 3 has an invalid length. [ 119.848784][ T7530] EXT4-fs: Ignoring removed bh option [ 119.876687][ T7530] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4215: comm syz.1.1288: Allocating blocks 385-513 which overlap fs metadata [ 119.893798][ T7530] EXT4-fs (loop1): pa ffff8881060ffe70: logic 16, phys. 129, len 24 [ 119.901867][ T7530] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 8 [ 119.923595][ T7527] loop2: p1 p2 p3 < > p4 < p5 p6 > [ 119.929316][ T7527] loop2: p1 start 460800 is beyond EOD, truncated [ 119.935927][ T7527] loop2: p2 size 83886080 extends beyond EOD, truncated [ 119.945366][ T7527] loop2: p5 start 460800 is beyond EOD, truncated [ 119.949922][ T7534] EXT4-fs: Ignoring removed bh option [ 119.952022][ T7527] loop2: p6 size 83886080 extends beyond EOD, truncated [ 119.978666][ T7534] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4215: comm syz.1.1289: Allocating blocks 385-513 which overlap fs metadata [ 119.994785][ T7534] EXT4-fs (loop1): pa ffff8881060ffee0: logic 16, phys. 129, len 24 [ 120.003664][ T7534] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 8 [ 120.085785][ T7544] EXT4-fs (loop4): bad geometry: first data block 32768 is beyond end of filesystem (256) [ 120.102161][ T7545] EXT4-fs: Ignoring removed bh option [ 120.146101][ T7545] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4215: comm syz.2.1290: Allocating blocks 385-513 which overlap fs metadata [ 120.161695][ T7552] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.183815][ T7545] EXT4-fs (loop2): pa ffff88810764ed90: logic 16, phys. 129, len 24 [ 120.192150][ T7545] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 8 [ 120.222717][ T7554] tipc: Started in network mode [ 120.227712][ T7554] tipc: Node identity 663da5bcdeb1, cluster identity 4711 [ 120.235001][ T7554] tipc: Enabled bearer , priority 0 [ 120.259658][ T7554] tipc: Disabling bearer [ 120.278845][ T7552] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.385632][ T7552] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.444911][ T7552] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.549219][ T291] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.567766][ T291] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.580030][ T291] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.598401][ T291] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.610737][ T7560] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 120.695008][ T7565] netlink: 'syz.0.1299': attribute type 21 has an invalid length. [ 120.723272][ T7565] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1299'. [ 120.741117][ T7565] openvswitch: netlink: Missing key (keys=40, expected=100) [ 120.811871][ T7572] EXT4-fs: Ignoring removed bh option [ 120.836201][ T7570] SELinux: failed to load policy [ 120.867416][ T7572] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4215: comm syz.0.1302: Allocating blocks 385-513 which overlap fs metadata [ 120.894468][ T7572] EXT4-fs (loop0): pa ffff88810764ee70: logic 16, phys. 129, len 24 [ 120.902727][ T7572] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 8 [ 121.020526][ T7582] netlink: 'syz.4.1303': attribute type 3 has an invalid length. [ 121.180988][ T7594] netlink: 'syz.1.1310': attribute type 21 has an invalid length. [ 121.191099][ T7594] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1310'. [ 121.218951][ T7584] set_capacity_and_notify: 9 callbacks suppressed [ 121.219130][ T7584] loop0: detected capacity change from 0 to 164 [ 121.295878][ T7584] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 121.342127][ T7584] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 121.371685][ T7584] Symlink component flag not implemented [ 121.372139][ T7582] loop4: detected capacity change from 0 to 32768 [ 121.401240][ T7584] Symlink component flag not implemented [ 121.414571][ T7584] Symlink component flag not implemented (7) [ 121.421592][ T7584] Symlink component flag not implemented (116) [ 121.490721][ T7582] loop4: p1 p2 p3 < > p4 < p5 p6 > [ 121.506707][ T7582] loop4: p1 start 460800 is beyond EOD, truncated [ 121.513387][ T7582] loop4: p2 size 83886080 extends beyond EOD, truncated [ 121.513886][ T7594] openvswitch: netlink: Missing key (keys=40, expected=100) [ 121.561635][ T7582] loop4: p5 start 460800 is beyond EOD, truncated [ 121.568387][ T7582] loop4: p6 size 83886080 extends beyond EOD, truncated [ 121.653855][ T7606] SELinux: failed to load policy [ 121.744326][ T7612] loop1: detected capacity change from 0 to 1024 [ 121.773619][ T7612] EXT4-fs: Ignoring removed bh option [ 121.799005][ T7612] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4215: comm syz.1.1316: Allocating blocks 385-513 which overlap fs metadata [ 121.814157][ T7615] netlink: 184 bytes leftover after parsing attributes in process `+}[@'. [ 121.833842][ T7612] EXT4-fs (loop1): pa ffff88810764ecb0: logic 16, phys. 129, len 24 [ 121.841908][ T7612] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 8 [ 121.908147][ T29] kauditd_printk_skb: 454 callbacks suppressed [ 121.908168][ T29] audit: type=1400 audit(1765764717.825:6670): avc: denied { ioctl } for pid=7625 comm="syz.4.1322" path="socket:[19467]" dev="sockfs" ino=19467 ioctlcmd=0xf50f scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 121.961980][ T7626] loop3: detected capacity change from 0 to 512 [ 121.971341][ T7626] EXT4-fs warning (device loop3): ext4_xattr_inode_get:560: inode #11: comm syz.3.1320: EA inode hash validation failed [ 121.984966][ T7626] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #15: comm syz.3.1320: corrupted inode contents [ 121.998173][ T7626] EXT4-fs error (device loop3): ext4_dirty_inode:6502: inode #15: comm syz.3.1320: mark_inode_dirty error [ 122.010483][ T7626] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #15: comm syz.3.1320: corrupted inode contents [ 122.023739][ T7626] EXT4-fs error (device loop3): ext4_xattr_delete_inode:3000: inode #15: comm syz.3.1320: mark_inode_dirty error [ 122.038113][ T7626] EXT4-fs error (device loop3): ext4_xattr_delete_inode:3003: inode #15: comm syz.3.1320: mark inode dirty (error -117) [ 122.051729][ T7626] EXT4-fs warning (device loop3): ext4_evict_inode:273: xattr delete (err -117) [ 122.055489][ T7631] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1323'. [ 122.067819][ T7626] EXT4-fs (loop3): 1 orphan inode deleted [ 122.087603][ T7633] loop0: detected capacity change from 0 to 1024 [ 122.094766][ T7633] EXT4-fs: Ignoring removed bh option [ 122.125380][ T29] audit: type=1400 audit(1765764718.045:6671): avc: denied { name_bind } for pid=7635 comm="syz.3.1325" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 122.175998][ T7633] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4215: comm syz.0.1324: Allocating blocks 385-513 which overlap fs metadata [ 122.204178][ T7633] EXT4-fs (loop0): pa ffff8881060ffee0: logic 16, phys. 129, len 24 [ 122.212251][ T7633] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 8 [ 122.228219][ T7640] SELinux: failed to load policy [ 122.255774][ T29] audit: type=1326 audit(1765764718.175:6672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7642 comm="syz.1.1327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd77accf749 code=0x7ffc0000 [ 122.287878][ T7645] syz_tun: refused to change device tx_queue_len [ 122.289356][ T29] audit: type=1326 audit(1765764718.205:6673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7642 comm="syz.1.1327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7fd77accf749 code=0x7ffc0000 [ 122.329818][ T29] audit: type=1400 audit(1765764718.245:6674): avc: denied { read } for pid=7646 comm="syz.0.1329" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 122.331673][ T7648] netlink: 'syz.0.1329': attribute type 1 has an invalid length. [ 122.352989][ T7650] netlink: '+}[@': attribute type 10 has an invalid length. [ 122.365689][ T7650] batman_adv: batadv0: Removing interface: dummy0 [ 122.372349][ T29] audit: type=1326 audit(1765764718.245:6675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7646 comm="syz.0.1329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6e650f749 code=0x7ffc0000 [ 122.396309][ T29] audit: type=1326 audit(1765764718.245:6676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7646 comm="syz.0.1329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6e650f749 code=0x7ffc0000 [ 122.420192][ T29] audit: type=1326 audit(1765764718.245:6677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7646 comm="syz.0.1329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb6e650f749 code=0x7ffc0000 [ 122.443746][ T29] audit: type=1326 audit(1765764718.245:6678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7646 comm="syz.0.1329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6e650f749 code=0x7ffc0000 [ 122.467611][ T29] audit: type=1326 audit(1765764718.245:6679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7646 comm="syz.0.1329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6e650f749 code=0x7ffc0000 [ 122.469089][ T7650] team0: Failed to send options change via netlink (err -105) [ 122.499394][ T7650] team0: Port device dummy0 added [ 122.541043][ T7657] loop4: detected capacity change from 0 to 1024 [ 122.548226][ T7657] EXT4-fs: Ignoring removed bh option [ 122.576688][ T7657] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4215: comm syz.4.1332: Allocating blocks 385-513 which overlap fs metadata [ 122.593657][ T7657] EXT4-fs (loop4): pa ffff88810764ecb0: logic 16, phys. 129, len 24 [ 122.601780][ T7657] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 8 [ 122.615977][ T7664] loop0: detected capacity change from 0 to 1024 [ 122.631062][ T7664] EXT4-fs: Ignoring removed bh option [ 122.649714][ T7664] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4215: comm syz.0.1334: Allocating blocks 385-513 which overlap fs metadata [ 122.668942][ T7664] EXT4-fs (loop0): pa ffff8881060fff50: logic 16, phys. 129, len 24 [ 122.677150][ T7664] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 8 [ 122.677284][ T7670] loop4: detected capacity change from 0 to 1024 [ 122.694174][ T7670] EXT4-fs: inline encryption not supported [ 122.700061][ T7670] EXT4-fs: Ignoring removed orlov option [ 122.712395][ T7670] EXT4-fs (loop4): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 122.733868][ T7670] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e840c018, mo2=0002] [ 122.742168][ T7670] System zones: 0-1, 3-12 [ 122.759809][ T7672] SELinux: failed to load policy [ 122.804636][ T7678] loop0: detected capacity change from 0 to 1024 [ 122.811798][ T7678] EXT4-fs: Ignoring removed bh option [ 122.831818][ T7678] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4215: comm syz.0.1339: Allocating blocks 385-513 which overlap fs metadata [ 122.875477][ T7678] EXT4-fs (loop0): pa ffff8881060ffe00: logic 16, phys. 129, len 24 [ 122.883976][ T7678] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 8 [ 123.174686][ T7748] loop1: detected capacity change from 0 to 164 [ 123.192466][ T7748] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 123.215258][ T7751] EXT4-fs: Ignoring removed bh option [ 123.221875][ T7748] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 123.396941][ T7748] Symlink component flag not implemented [ 123.430982][ T7748] Symlink component flag not implemented [ 123.442039][ T7748] Symlink component flag not implemented (7) [ 123.476988][ T7748] Symlink component flag not implemented (116) [ 123.525546][ T7751] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4215: comm syz.0.1346: Allocating blocks 385-513 which overlap fs metadata [ 123.616234][ T7751] EXT4-fs (loop0): pa ffff88810764ea80: logic 16, phys. 129, len 24 [ 123.625023][ T7751] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 8 [ 123.635824][ T3625] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 123.751499][ T7764] SELinux: failed to load policy [ 123.824909][ T7766] EXT4-fs: Ignoring removed bh option [ 123.874618][ T7766] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4215: comm syz.1.1350: Allocating blocks 385-513 which overlap fs metadata [ 123.927323][ T7766] EXT4-fs (loop1): pa ffff8881060ffe00: logic 16, phys. 129, len 24 [ 123.935619][ T7766] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 8 [ 123.982033][ T7772] lo speed is unknown, defaulting to 1000 [ 124.127830][ T7778] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 124.164330][ T7778] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 124.173800][ T7786] netlink: 'syz.2.1356': attribute type 21 has an invalid length. [ 124.178647][ T7778] Symlink component flag not implemented [ 124.189323][ T7786] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1356'. [ 124.214647][ T7786] openvswitch: netlink: Missing key (keys=40, expected=100) [ 124.224781][ T7778] Symlink component flag not implemented [ 124.263347][ T7778] Symlink component flag not implemented (7) [ 124.271842][ T7778] Symlink component flag not implemented (116) [ 124.282779][ T44] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 124.304865][ T7793] EXT4-fs: Ignoring removed bh option [ 124.346821][ T7800] netlink: 240 bytes leftover after parsing attributes in process `syz.2.1357'. [ 124.356686][ T7793] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4215: comm syz.3.1358: Allocating blocks 385-513 which overlap fs metadata [ 124.385989][ T7793] EXT4-fs (loop3): pa ffff88810764ea80: logic 16, phys. 129, len 24 [ 124.394098][ T7793] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 8 [ 124.412748][ T7736] Bluetooth: hci0: Frame reassembly failed (-84) [ 124.441932][ T7796] lo speed is unknown, defaulting to 1000 [ 125.129825][ T7843] EXT4-fs: Ignoring removed bh option [ 125.150641][ T7843] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4215: comm syz.1.1383: Allocating blocks 385-513 which overlap fs metadata [ 125.195926][ T7843] EXT4-fs (loop1): pa ffff88810764ea80: logic 16, phys. 129, len 24 [ 125.204670][ T7843] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 8 [ 125.433894][ T7847] lo speed is unknown, defaulting to 1000 [ 126.226442][ T7859] set_capacity_and_notify: 7 callbacks suppressed [ 126.226461][ T7859] loop2: detected capacity change from 0 to 1024 [ 126.267833][ T7863] loop3: detected capacity change from 0 to 1024 [ 126.267990][ T7859] EXT4-fs: inline encryption not supported [ 126.275853][ T7863] EXT4-fs: inline encryption not supported [ 126.280162][ T7859] EXT4-fs: Ignoring removed orlov option [ 126.292002][ T7863] EXT4-fs: Ignoring removed orlov option [ 126.294159][ T7859] EXT4-fs (loop2): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 126.307875][ T7863] EXT4-fs (loop3): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 126.352362][ T7859] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e840c018, mo2=0002] [ 126.372202][ T7863] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e840c018, mo2=0002] [ 126.394568][ T7859] System zones: 0-1, 3-12 [ 126.401212][ T7863] System zones: 0-1, 3-12 [ 126.406091][ T7872] loop4: detected capacity change from 0 to 1024 [ 126.426225][ T7872] EXT4-fs: Ignoring removed bh option [ 126.436305][ T7873] netlink: 240 bytes leftover after parsing attributes in process `syz.1.1377'. [ 126.446260][ T3625] Bluetooth: hci0: command 0x1003 tx timeout [ 126.452626][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 126.549618][ T7880] netlink: 'syz.4.1382': attribute type 21 has an invalid length. [ 126.619890][ T7880] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1382'. [ 126.717016][ T7886] loop1: detected capacity change from 0 to 1024 [ 126.732358][ T7884] SELinux: failed to load policy [ 126.738171][ T7886] EXT4-fs: Ignoring removed bh option [ 126.768208][ T7880] openvswitch: netlink: Missing key (keys=40, expected=100) [ 126.783599][ T7886] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4215: comm syz.1.1386: Allocating blocks 385-513 which overlap fs metadata [ 126.885615][ T7897] netlink: 'syz.3.1389': attribute type 21 has an invalid length. [ 126.896433][ T7886] EXT4-fs (loop1): pa ffff8881060ffe00: logic 16, phys. 129, len 24 [ 126.905055][ T7886] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 8 [ 126.919753][ T7899] bridge0: port 1(batadv2) entered blocking state [ 126.926391][ T7899] bridge0: port 1(batadv2) entered disabled state [ 126.933537][ T7899] batadv2: entered allmulticast mode [ 126.939661][ T7899] batadv2: entered promiscuous mode [ 126.945807][ T7897] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1389'. [ 126.955066][ T7899] loop4: detected capacity change from 0 to 164 [ 126.961693][ T7897] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1389'. [ 127.054723][ T7903] SELinux: failed to load policy [ 127.057192][ T7906] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1388'. [ 127.111382][ T7909] loop3: detected capacity change from 0 to 1024 [ 127.145860][ T7911] loop0: detected capacity change from 0 to 1024 [ 127.163165][ T7909] EXT4-fs: Ignoring removed bh option [ 127.169289][ T7911] EXT4-fs: Ignoring removed bh option [ 127.194529][ T7905] loop4: detected capacity change from 0 to 164 [ 127.204097][ T7904] lo speed is unknown, defaulting to 1000 [ 127.217700][ T7909] EXT4-fs mount: 73 callbacks suppressed [ 127.217771][ T7909] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 127.258700][ T7911] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 127.259983][ T7905] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 127.414601][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.442692][ T7736] batman_adv: batadv2: No IGMP Querier present - multicast optimizations disabled [ 127.449044][ T7905] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 127.452186][ T7736] batman_adv: batadv2: No MLD Querier present - multicast optimizations disabled [ 127.503236][ T7911] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4215: comm syz.0.1395: Allocating blocks 385-513 which overlap fs metadata [ 127.526778][ T7911] EXT4-fs (loop0): pa ffff88810764eaf0: logic 16, phys. 129, len 24 [ 127.534870][ T7911] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 8 [ 127.556784][ T3321] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.567473][ T7905] Symlink component flag not implemented [ 127.574232][ T7905] Symlink component flag not implemented [ 127.607613][ T7905] Symlink component flag not implemented (7) [ 127.615419][ T7905] Symlink component flag not implemented (116) [ 127.712798][ T7931] netlink: 'syz.0.1400': attribute type 21 has an invalid length. [ 127.752850][ T7931] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1400'. [ 127.776615][ T7935] loop3: detected capacity change from 0 to 512 [ 127.783446][ T7931] openvswitch: netlink: Missing key (keys=40, expected=100) [ 127.802924][ T7935] EXT4-fs: Ignoring removed i_version option [ 127.809075][ T7935] EXT4-fs: Ignoring removed bh option [ 127.844780][ T7937] loop4: detected capacity change from 0 to 1024 [ 127.845585][ T7939] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1404'. [ 127.871118][ T7937] EXT4-fs: Ignoring removed bh option [ 127.894703][ T7935] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 127.907933][ T7935] ext4 filesystem being mounted at /323/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 127.930189][ T7937] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 127.955755][ T7935] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1402'. [ 127.971837][ T7945] SELinux: failed to load policy [ 127.990362][ T7937] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4215: comm syz.4.1403: Allocating blocks 385-513 which overlap fs metadata [ 128.009695][ T7937] EXT4-fs (loop4): pa ffff88810764eaf0: logic 16, phys. 129, len 24 [ 128.018005][ T7937] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 8 [ 128.057765][ T3325] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.112971][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.935322][ T7975] netlink: 'syz.4.1415': attribute type 21 has an invalid length. [ 128.956700][ T7975] openvswitch: netlink: Missing key (keys=40, expected=100) [ 129.000399][ T7977] SELinux: failed to load policy [ 129.044169][ T7979] EXT4-fs: Ignoring removed bh option [ 129.075210][ T7979] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 129.133061][ T7979] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4215: comm syz.0.1414: Allocating blocks 385-513 which overlap fs metadata [ 129.209127][ T7979] EXT4-fs (loop0): pa ffff8881060ffe00: logic 16, phys. 129, len 24 [ 129.217203][ T7979] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 8 [ 129.262086][ T3321] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.282417][ T7988] __nla_validate_parse: 3 callbacks suppressed [ 129.282435][ T7988] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1419'. [ 129.348331][ T7993] EXT4-fs: Ignoring removed bh option [ 129.404531][ T7998] EXT4-fs: Ignoring removed bh option [ 129.413176][ T7993] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 129.458773][ T7998] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 129.473448][ T7993] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4215: comm syz.0.1418: Allocating blocks 385-513 which overlap fs metadata [ 129.525177][ T7993] EXT4-fs (loop0): pa ffff8881060ffe00: logic 16, phys. 129, len 24 [ 129.533287][ T7993] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 8 [ 129.555160][ T7998] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4215: comm syz.2.1422: Allocating blocks 385-513 which overlap fs metadata [ 129.575596][ T3321] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.611790][ T7998] EXT4-fs (loop2): pa ffff88810764eb60: logic 16, phys. 129, len 24 [ 129.620559][ T7998] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 8 [ 129.707446][ T3326] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.738976][ T8009] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 129.756760][ T8012] netlink: 'syz.2.1427': attribute type 21 has an invalid length. [ 129.772641][ T8012] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1427'. [ 129.796112][ T8009] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 129.806265][ T8012] openvswitch: netlink: Missing key (keys=40, expected=100) [ 129.823423][ T8009] Symlink component flag not implemented [ 129.829221][ T8009] Symlink component flag not implemented [ 129.919468][ T8009] Symlink component flag not implemented (7) [ 129.925795][ T8009] Symlink component flag not implemented (116) [ 129.953976][ T8015] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 129.963937][ T8015] SELinux: failed to load policy [ 131.046413][ T8042] netlink: 'syz.1.1438': attribute type 21 has an invalid length. [ 131.069917][ T8042] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1438'. [ 131.082106][ T8045] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 131.112377][ T8045] SELinux: failed to load policy [ 131.229523][ T8053] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 131.238732][ T8053] C: renamed from team_slave_0 [ 131.256980][ T8053] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1442'. [ 131.307316][ T8054] set_capacity_and_notify: 6 callbacks suppressed [ 131.307336][ T8054] loop1: detected capacity change from 0 to 8192 [ 131.322889][ T8059] netlink: 'syz.0.1442': attribute type 13 has an invalid length. [ 131.480402][ T8059] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.487713][ T8059] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.704351][ T8077] loop4: detected capacity change from 0 to 164 [ 131.711193][ T3491] lo speed is unknown, defaulting to 1000 [ 131.711905][ T7735] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.717047][ T3491] syz2: Port: 1 Link DOWN [ 131.738438][ T8077] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 131.815383][ T8077] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 131.858950][ T7735] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.889358][ T7731] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.902629][ T8077] Symlink component flag not implemented [ 131.908396][ T8077] Symlink component flag not implemented [ 131.925065][ T7731] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.972455][ T8077] Symlink component flag not implemented (7) [ 131.978526][ T8077] Symlink component flag not implemented (116) [ 132.159389][ T8088] netlink: 'syz.3.1451': attribute type 21 has an invalid length. [ 132.174984][ T8086] loop2: detected capacity change from 0 to 1024 [ 132.181760][ T8086] EXT4-fs: inline encryption not supported [ 132.187652][ T8086] EXT4-fs: Ignoring removed orlov option [ 132.192653][ T8088] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1451'. [ 132.219644][ T8086] EXT4-fs (loop2): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 132.235971][ T8090] SELinux: failed to load policy [ 132.266779][ T8095] loop0: detected capacity change from 0 to 512 [ 132.280670][ T8086] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e840c018, mo2=0002] [ 132.287542][ T8095] EXT4-fs: Ignoring removed i_version option [ 132.289540][ T8086] System zones: 0-1, 3-12 [ 132.299826][ T8086] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 132.351081][ T8095] EXT4-fs (loop0): orphan cleanup on readonly fs [ 132.369336][ T8095] EXT4-fs warning (device loop0): ext4_xattr_inode_get:560: inode #11: comm syz.0.1453: EA inode hash validation failed [ 132.399806][ T8105] loop3: detected capacity change from 0 to 1024 [ 132.407109][ T8095] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2857: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 132.421165][ T8095] EXT4-fs error (device loop0): ext4_xattr_inode_update_ref:1037: inode #11: comm syz.0.1453: EA inode 11 ref wraparound: ref_count=0 ref_change=-1 [ 132.440086][ T8095] EXT4-fs (loop0): Remounting filesystem read-only [ 132.441267][ T8105] EXT4-fs error (device loop3): ext4_orphan_get:1417: comm syz.3.1456: bad orphan inode 32512 [ 132.447053][ T8095] EXT4-fs warning (device loop0): ext4_xattr_inode_dec_ref_all:1230: inode #11: comm syz.0.1453: ea_inode dec ref err=-117 [ 132.471019][ T8095] EXT4-fs warning (device loop0): ext4_evict_inode:273: xattr delete (err -30) [ 132.485688][ T8105] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 132.517573][ T8111] loop1: detected capacity change from 0 to 1024 [ 132.525835][ T8111] EXT4-fs: Ignoring removed bh option [ 132.534064][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.535150][ T8095] EXT4-fs (loop0): 1 orphan inode deleted [ 132.550797][ T8095] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 132.628229][ T8111] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 132.644142][ T8111] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4215: comm syz.1.1458: Allocating blocks 385-513 which overlap fs metadata [ 132.660486][ T3326] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.667065][ T3321] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.674269][ T8111] EXT4-fs (loop1): pa ffff88810764eb60: logic 16, phys. 129, len 24 [ 132.686545][ T8111] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 8 [ 132.724992][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.925083][ T8118] loop3: detected capacity change from 0 to 8192 [ 133.067718][ T8122] loop0: detected capacity change from 0 to 8192 [ 133.122356][ T8129] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1466'. [ 133.138856][ T8127] SELinux: failed to load policy [ 133.212251][ T8131] netlink: 'syz.2.1466': attribute type 13 has an invalid length. [ 133.344466][ T8133] netlink: 'syz.1.1467': attribute type 21 has an invalid length. [ 133.402430][ T8133] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1467'. [ 133.561144][ T8136] loop4: detected capacity change from 0 to 164 [ 133.630020][ T29] kauditd_printk_skb: 104 callbacks suppressed [ 133.630045][ T29] audit: type=1326 audit(1765764729.545:6784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8142 comm="syz.3.1473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae1b59f749 code=0x7ffc0000 [ 133.660873][ T29] audit: type=1326 audit(1765764729.545:6785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8142 comm="syz.3.1473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae1b59f749 code=0x7ffc0000 [ 133.684757][ T8145] loop0: detected capacity change from 0 to 8192 [ 133.691471][ T29] audit: type=1326 audit(1765764729.545:6786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8142 comm="syz.3.1473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae1b59f749 code=0x7ffc0000 [ 133.715820][ T29] audit: type=1326 audit(1765764729.545:6787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8142 comm="syz.3.1473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=116 compat=0 ip=0x7fae1b59f749 code=0x7ffc0000 [ 133.739705][ T29] audit: type=1326 audit(1765764729.545:6788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8142 comm="syz.3.1473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae1b59f749 code=0x7ffc0000 [ 133.739781][ T29] audit: type=1326 audit(1765764729.545:6789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8142 comm="syz.3.1473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae1b59f749 code=0x7ffc0000 [ 133.739810][ T29] audit: type=1326 audit(1765764729.545:6790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8142 comm="syz.3.1473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae1b59f749 code=0x7ffc0000 [ 133.739838][ T29] audit: type=1326 audit(1765764729.545:6791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8142 comm="syz.3.1473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fae1b59f749 code=0x7ffc0000 [ 133.739946][ T29] audit: type=1326 audit(1765764729.545:6792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8142 comm="syz.3.1473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae1b59f749 code=0x7ffc0000 [ 133.739996][ T29] audit: type=1326 audit(1765764729.545:6793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8142 comm="syz.3.1473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae1b59f749 code=0x7ffc0000 [ 133.768255][ T8136] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 133.797909][ T8136] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 134.037225][ T8136] Symlink component flag not implemented [ 134.057491][ T8156] EXT4-fs: Ignoring removed i_version option [ 134.077543][ T8136] Symlink component flag not implemented [ 134.087066][ T8136] Symlink component flag not implemented (7) [ 134.095336][ T8136] Symlink component flag not implemented (116) [ 134.109047][ T8156] EXT4-fs (loop2): orphan cleanup on readonly fs [ 134.138895][ T8161] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1475'. [ 134.150078][ T8156] EXT4-fs warning (device loop2): ext4_xattr_inode_get:560: inode #11: comm syz.2.1474: EA inode hash validation failed [ 134.217388][ T8156] EXT4-fs error (device loop2): ext4_xattr_inode_update_ref:1037: inode #11: comm syz.2.1474: EA inode 11 ref wraparound: ref_count=0 ref_change=-1 [ 134.238149][ T8171] netlink: 'syz.1.1480': attribute type 21 has an invalid length. [ 134.245035][ T8167] SELinux: failed to load policy [ 134.246490][ T8171] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1480'. [ 134.267859][ T8169] xt_hashlimit: overflow, try lower: 0/0 [ 134.278634][ T8171] openvswitch: netlink: Missing key (keys=40, expected=100) [ 134.288559][ T8172] SELinux: Context system_u:object_r:devicekit_var_run_t:s0 is not valid (left unmapped). [ 134.319003][ T8156] EXT4-fs (loop2): Remounting filesystem read-only [ 134.325731][ T8156] EXT4-fs warning (device loop2): ext4_xattr_inode_dec_ref_all:1230: inode #11: comm syz.2.1474: ea_inode dec ref err=-117 [ 134.367396][ T8156] EXT4-fs warning (device loop2): ext4_evict_inode:273: xattr delete (err -30) [ 134.377583][ T8156] EXT4-fs (loop2): 1 orphan inode deleted [ 134.384637][ T8156] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 134.527726][ T8156] siw: device registration error -23 [ 134.549591][ T3326] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.578297][ T8183] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 134.625587][ T8187] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1496'. [ 134.637074][ T8183] C: renamed from team_slave_0 (while UP) [ 134.650807][ T8185] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1495'. [ 134.660637][ T8185] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1495'. [ 134.676943][ T8183] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1485'. [ 134.717953][ T8191] netlink: 'syz.3.1485': attribute type 13 has an invalid length. [ 134.745452][ T8190] SELinux: failed to load policy [ 134.752116][ T8192] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1495'. [ 135.154277][ T8191] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.161652][ T8191] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.543500][ T8212] netlink: 'syz.1.1493': attribute type 21 has an invalid length. [ 135.601533][ T8217] openvswitch: netlink: Missing key (keys=40, expected=100) [ 135.612606][ T8211] SELinux: failed to load policy [ 135.656984][ T8227] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1498'. [ 135.733095][ T8191] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 135.735125][ T8191] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 135.786875][ T8212] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1493'. [ 135.803367][ T7734] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.842566][ T7734] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.860029][ T8238] EXT4-fs: Ignoring removed bh option [ 135.883264][ T7734] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.906409][ T7734] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.949879][ T8241] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 135.963020][ T8238] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 135.966387][ T8241] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #16: comm syz.1.1504: invalid indirect mapped block 4294967295 (level 0) [ 136.022362][ T8241] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #16: comm syz.1.1504: invalid indirect mapped block 4294967295 (level 1) [ 136.050000][ T8238] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4215: comm syz.3.1502: Allocating blocks 385-513 which overlap fs metadata [ 136.051097][ T8241] EXT4-fs (loop1): 1 orphan inode deleted [ 136.071014][ T8241] EXT4-fs (loop1): 1 truncate cleaned up [ 136.088586][ T8238] EXT4-fs (loop3): pa ffff8881060ffd20: logic 16, phys. 129, len 24 [ 136.096774][ T8238] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 8 [ 136.113270][ T8241] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 136.133129][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.212581][ T8258] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 136.222345][ T8258] SELinux: failed to load policy [ 136.235483][ T8260] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1511'. [ 136.261439][ T8263] netlink: 'syz.3.1512': attribute type 21 has an invalid length. [ 136.281956][ T8263] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1512'. [ 136.300884][ T8256] SELinux: failed to load policy [ 136.332102][ T8263] openvswitch: netlink: Missing key (keys=40, expected=100) [ 136.387649][ T8272] set_capacity_and_notify: 5 callbacks suppressed [ 136.387671][ T8272] loop0: detected capacity change from 0 to 1024 [ 136.402015][ T8272] EXT4-fs: Ignoring removed bh option [ 136.414261][ T8272] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 136.438732][ T8278] loop2: detected capacity change from 0 to 1024 [ 136.447533][ T8278] EXT4-fs: Ignoring removed bh option [ 136.462001][ T8272] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4215: comm syz.0.1516: Allocating blocks 385-513 which overlap fs metadata [ 136.480984][ T8272] EXT4-fs (loop0): pa ffff88810764eaf0: logic 16, phys. 129, len 24 [ 136.489218][ T8272] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 8 [ 136.502100][ T8278] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 136.526634][ T3321] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.537879][ T8278] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4215: comm syz.2.1518: Allocating blocks 385-513 which overlap fs metadata [ 136.574623][ T8277] EXT4-fs (loop2): pa ffff88810764ea10: logic 16, phys. 129, len 24 [ 136.582820][ T8277] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 8 [ 136.598361][ T3326] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.656185][ T8290] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1522'. [ 136.839245][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.894429][ T8313] netlink: 'syz.2.1530': attribute type 21 has an invalid length. [ 136.896994][ T8310] loop0: detected capacity change from 0 to 1024 [ 136.928801][ T8313] openvswitch: netlink: Missing key (keys=40, expected=100) [ 136.929774][ T8310] EXT4-fs: Ignoring removed bh option [ 136.962945][ T8310] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 137.006647][ T8310] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4215: comm syz.0.1531: Allocating blocks 385-513 which overlap fs metadata [ 137.053224][ T8325] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8325 comm=syz.2.1537 [ 137.089565][ T8309] EXT4-fs (loop0): pa ffff8881060ffd20: logic 16, phys. 129, len 24 [ 137.098281][ T8309] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 8 [ 137.114345][ T3321] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.171651][ T8339] loop0: detected capacity change from 0 to 512 [ 137.205251][ T8339] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 137.205855][ T8331] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8331 comm=syz.4.1539 [ 137.262493][ T8339] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #16: comm syz.0.1542: invalid indirect mapped block 4294967295 (level 0) [ 137.264426][ T8342] loop1: detected capacity change from 0 to 164 [ 137.280163][ T8343] netlink: 'syz.4.1539': attribute type 29 has an invalid length. [ 137.302532][ T8342] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 137.310642][ T8339] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #16: comm syz.0.1542: invalid indirect mapped block 4294967295 (level 1) [ 137.317728][ T8342] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 137.329973][ T8345] loop3: detected capacity change from 0 to 8192 [ 137.338934][ T8342] Symlink component flag not implemented [ 137.350613][ T8342] Symlink component flag not implemented [ 137.353336][ T8339] EXT4-fs (loop0): 1 orphan inode deleted [ 137.356760][ T8342] Symlink component flag not implemented (7) [ 137.362019][ T8339] EXT4-fs (loop0): 1 truncate cleaned up [ 137.365079][ T8339] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 137.369180][ T8342] Symlink component flag not implemented (116) [ 137.477919][ T8351] loop4: detected capacity change from 0 to 1024 [ 137.485786][ T8351] EXT4-fs: Ignoring removed bh option [ 137.525509][ T8351] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 137.542759][ T8351] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4215: comm syz.4.1546: Allocating blocks 385-513 which overlap fs metadata [ 137.599518][ T8351] EXT4-fs (loop4): pa ffff8881060ffcb0: logic 16, phys. 129, len 24 [ 137.607618][ T8351] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 8 [ 137.655855][ T3325] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.740986][ T8362] netlink: 'syz.1.1560': attribute type 1 has an invalid length. [ 137.758436][ T8362] loop1: detected capacity change from 0 to 1764 [ 137.830273][ T8067] hid_parser_main: 8 callbacks suppressed [ 137.830316][ T8067] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 137.852082][ T8067] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 137.882600][ T8368] loop4: detected capacity change from 0 to 2048 [ 137.931586][ T8370] loop1: detected capacity change from 0 to 8192 [ 137.961898][ T8377] netlink: 'syz.2.1557': attribute type 4 has an invalid length. [ 138.002914][ T3321] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.112359][ T8380] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 138.139324][ T8063] hid-generic 0003:0004:0000.0004: unknown main item tag 0x0 [ 138.147167][ T8063] hid-generic 0003:0004:0000.0004: unknown main item tag 0x0 [ 138.154837][ T8063] hid-generic 0003:0004:0000.0004: unknown main item tag 0x0 [ 138.162307][ T8063] hid-generic 0003:0004:0000.0004: unknown main item tag 0x0 [ 138.169821][ T8063] hid-generic 0003:0004:0000.0004: unknown main item tag 0x0 [ 138.177251][ T8063] hid-generic 0003:0004:0000.0004: unknown main item tag 0x0 [ 138.185002][ T8063] hid-generic 0003:0004:0000.0004: unknown main item tag 0x0 [ 138.192644][ T8063] hid-generic 0003:0004:0000.0004: unknown main item tag 0x0 [ 138.200100][ T8063] hid-generic 0003:0004:0000.0004: unknown main item tag 0x0 [ 138.219958][ T8063] hid-generic 0003:0004:0000.0004: hidraw0: USB HID v0.02 Device [syz0] on syz1 [ 138.231100][ T8380] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 138.281147][ T8380] Symlink component flag not implemented [ 138.316245][ T8380] Symlink component flag not implemented [ 138.346610][ T8380] Symlink component flag not implemented (7) [ 138.370269][ T8380] Symlink component flag not implemented (116) [ 138.489901][ T8406] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8406 comm=syz.3.1565 [ 138.537290][ T8412] xt_hashlimit: overflow, try lower: 0/0 [ 139.530429][ T8422] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 139.610393][ T8433] netlink: 'syz.3.1578': attribute type 1 has an invalid length. [ 139.676156][ T8422] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 139.691892][ T29] kauditd_printk_skb: 324 callbacks suppressed [ 139.691909][ T29] audit: type=1326 audit(1765764735.605:7118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8435 comm="syz.3.1580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae1b59f749 code=0x7ffc0000 [ 139.708668][ T8422] Symlink component flag not implemented [ 139.725418][ T29] audit: type=1326 audit(1765764735.645:7119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8435 comm="syz.3.1580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae1b59f749 code=0x7ffc0000 [ 139.725465][ T29] audit: type=1326 audit(1765764735.645:7120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8435 comm="syz.3.1580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae1b59f749 code=0x7ffc0000 [ 139.725494][ T29] audit: type=1326 audit(1765764735.645:7121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8435 comm="syz.3.1580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=116 compat=0 ip=0x7fae1b59f749 code=0x7ffc0000 [ 139.725662][ T29] audit: type=1326 audit(1765764735.645:7122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8435 comm="syz.3.1580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae1b59f749 code=0x7ffc0000 [ 139.725704][ T29] audit: type=1326 audit(1765764735.645:7123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8435 comm="syz.3.1580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae1b59f749 code=0x7ffc0000 [ 139.725752][ T29] audit: type=1326 audit(1765764735.645:7124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8435 comm="syz.3.1580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae1b59f749 code=0x7ffc0000 [ 139.725788][ T29] audit: type=1326 audit(1765764735.645:7125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8435 comm="syz.3.1580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fae1b59f749 code=0x7ffc0000 [ 139.725843][ T29] audit: type=1326 audit(1765764735.645:7126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8435 comm="syz.3.1580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae1b59f749 code=0x7ffc0000 [ 139.725871][ T29] audit: type=1326 audit(1765764735.645:7127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8435 comm="syz.3.1580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae1b59f749 code=0x7ffc0000 [ 139.767557][ T8434] __nla_validate_parse: 8 callbacks suppressed [ 139.767578][ T8434] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1579'. [ 139.817698][ T8441] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1583'. [ 139.998044][ T8438] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 140.041275][ T8422] Symlink component flag not implemented [ 140.157438][ T8422] Symlink component flag not implemented (7) [ 140.157489][ T8422] Symlink component flag not implemented (116) [ 140.211525][ T8438] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 140.265650][ T8438] Symlink component flag not implemented [ 140.265742][ T8438] Symlink component flag not implemented [ 140.267163][ T8438] Symlink component flag not implemented (7) [ 140.267391][ T8438] Symlink component flag not implemented (116) [ 140.300592][ T8459] EXT4-fs: Ignoring removed bh option [ 140.314674][ T8459] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 140.424994][ T8459] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4215: comm syz.1.1587: Allocating blocks 385-513 which overlap fs metadata [ 140.454050][ T8459] EXT4-fs (loop1): pa ffff8881060ffcb0: logic 16, phys. 129, len 24 [ 140.462210][ T8459] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 8 [ 140.562645][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.223929][ T8219] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 141.401680][ T8474] set_capacity_and_notify: 8 callbacks suppressed [ 141.401699][ T8474] loop0: detected capacity change from 0 to 2048 [ 141.477478][ T8478] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.1592'. [ 141.504356][ T8480] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1594'. [ 141.557532][ T8482] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1595'. [ 141.639368][ T8490] loop2: detected capacity change from 0 to 2048 [ 141.712180][ T8501] loop0: detected capacity change from 0 to 1024 [ 141.719897][ T8495] infiniband syz!: set active [ 141.722926][ T8490] netlink: 'syz.2.1598': attribute type 3 has an invalid length. [ 141.725328][ T8495] infiniband syz!: added team_slave_0 [ 141.762143][ T8501] EXT4-fs: Ignoring removed bh option [ 141.769919][ T8495] RDS/IB: syz!: added [ 141.774033][ T8495] smc: adding ib device syz! with port count 1 [ 141.782631][ T8495] smc: ib device syz! port 1 has no pnetid [ 141.804192][ T8508] loop3: detected capacity change from 0 to 164 [ 141.825512][ T8508] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 141.853766][ T8501] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 141.867424][ T8503] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 141.889615][ T8503] Symlink component flag not implemented [ 141.896211][ T8503] Symlink component flag not implemented [ 141.904976][ T8503] Symlink component flag not implemented (7) [ 141.912261][ T8503] Symlink component flag not implemented (116) [ 141.920749][ T8501] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4215: comm syz.0.1605: Allocating blocks 385-513 which overlap fs metadata [ 141.967360][ T8501] EXT4-fs (loop0): pa ffff88810764ea80: logic 16, phys. 129, len 24 [ 141.976115][ T8501] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 8 [ 141.996097][ T8514] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1606'. [ 142.104097][ T3321] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.344641][ T8520] loop1: detected capacity change from 0 to 8192 [ 142.574280][ T8523] loop0: detected capacity change from 0 to 8192 [ 143.117890][ T8537] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1613'. [ 143.165530][ T3381] hid_parser_main: 10 callbacks suppressed [ 143.165551][ T3381] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 143.168337][ T8543] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1617'. [ 143.189017][ T3381] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz1] on syz0 [ 143.219197][ T8539] loop0: detected capacity change from 0 to 8192 [ 143.243414][ T8542] loop2: detected capacity change from 0 to 2048 [ 143.289092][ T8550] random: crng reseeded on system resumption [ 143.294577][ T8554] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1630'. [ 143.397548][ T8559] netlink: 'syz.2.1622': attribute type 21 has an invalid length. [ 143.443364][ T8559] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1622'. [ 143.467060][ T8559] openvswitch: netlink: Missing key (keys=40, expected=100) [ 143.501954][ T8558] loop4: detected capacity change from 0 to 8192 [ 143.871095][ T8569] loop1: detected capacity change from 0 to 8192 [ 144.427027][ T8586] EXT4-fs: Ignoring removed bh option [ 144.438925][ T8589] netlink: 'syz.0.1635': attribute type 21 has an invalid length. [ 144.452638][ T8589] openvswitch: netlink: Missing key (keys=40, expected=100) [ 144.471896][ T8586] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 144.518206][ T8594] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 144.530684][ T8594] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #16: comm syz.0.1638: invalid indirect mapped block 4294967295 (level 0) [ 144.546495][ T8594] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #16: comm syz.0.1638: invalid indirect mapped block 4294967295 (level 1) [ 144.562145][ T8594] EXT4-fs (loop0): 1 orphan inode deleted [ 144.568749][ T8594] EXT4-fs (loop0): 1 truncate cleaned up [ 144.570244][ T8586] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4215: comm syz.3.1634: Allocating blocks 385-513 which overlap fs metadata [ 144.589858][ T8594] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 144.646661][ T8586] EXT4-fs (loop3): pa ffff8881060ffcb0: logic 16, phys. 129, len 24 [ 144.654882][ T8586] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 8 [ 144.689544][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.797575][ T8606] __nla_validate_parse: 2 callbacks suppressed [ 144.797594][ T8606] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1640'. [ 145.534582][ T8626] netlink: 'syz.3.1649': attribute type 21 has an invalid length. [ 145.542535][ T8626] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1649'. [ 145.555129][ T3321] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.570745][ T8626] openvswitch: netlink: Missing key (keys=40, expected=100) [ 145.599026][ T8632] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1653'. [ 145.647122][ T29] kauditd_printk_skb: 167 callbacks suppressed [ 145.647140][ T29] audit: type=1326 audit(1765764741.565:7295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8636 comm="syz.0.1652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6e650f749 code=0x7ffc0000 [ 145.697934][ T29] audit: type=1326 audit(1765764741.615:7296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8636 comm="syz.0.1652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb6e650f749 code=0x7ffc0000 [ 145.799801][ T29] audit: type=1326 audit(1765764741.615:7297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8636 comm="syz.0.1652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6e650f749 code=0x7ffc0000 [ 145.824334][ T29] audit: type=1326 audit(1765764741.615:7298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8636 comm="syz.0.1652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6e650f749 code=0x7ffc0000 [ 145.849086][ T29] audit: type=1326 audit(1765764741.645:7299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8636 comm="syz.0.1652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb6e650f749 code=0x7ffc0000 [ 145.873522][ T29] audit: type=1326 audit(1765764741.645:7300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8636 comm="syz.0.1652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6e650f749 code=0x7ffc0000 [ 145.898248][ T29] audit: type=1326 audit(1765764741.645:7301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8636 comm="syz.0.1652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6e650f749 code=0x7ffc0000 [ 145.922674][ T29] audit: type=1326 audit(1765764741.645:7302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8636 comm="syz.0.1652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=125 compat=0 ip=0x7fb6e650f749 code=0x7ffc0000 [ 145.946791][ T29] audit: type=1326 audit(1765764741.645:7303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8636 comm="syz.0.1652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6e650f749 code=0x7ffc0000 [ 145.971556][ T29] audit: type=1326 audit(1765764741.645:7304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8636 comm="syz.0.1652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6e650f749 code=0x7ffc0000 [ 146.489435][ T8661] set_capacity_and_notify: 6 callbacks suppressed [ 146.489455][ T8661] loop0: detected capacity change from 0 to 2048 [ 146.650880][ T8661] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 146.712868][ T8669] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1664'. [ 146.837996][ T8671] netlink: 'syz.2.1665': attribute type 21 has an invalid length. [ 146.880917][ T8671] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1665'. [ 146.980938][ T8671] openvswitch: netlink: Missing key (keys=40, expected=100) [ 147.054197][ T3321] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.103086][ T8692] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1675'. [ 147.202612][ T8704] loop4: detected capacity change from 0 to 512 [ 147.213099][ T8701] loop1: detected capacity change from 0 to 8192 [ 147.233497][ T8704] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 147.252767][ T8704] ext4 filesystem being mounted at /292/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 147.283959][ T8713] loop2: detected capacity change from 0 to 512 [ 147.313582][ T3325] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.336250][ T8713] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 147.342074][ T8716] loop4: detected capacity change from 0 to 1024 [ 147.361733][ T8713] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2857: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 147.392941][ T8713] EXT4-fs (loop2): 1 truncate cleaned up [ 147.399379][ T8713] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 147.484312][ T8716] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 147.538626][ T8716] FAULT_INJECTION: forcing a failure. [ 147.538626][ T8716] name failslab, interval 1, probability 0, space 0, times 0 [ 147.551502][ T8716] CPU: 1 UID: 0 PID: 8716 Comm: syz.4.1682 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 147.551540][ T8716] Tainted: [W]=WARN [ 147.551548][ T8716] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 147.551561][ T8716] Call Trace: [ 147.551667][ T8716] [ 147.551676][ T8716] __dump_stack+0x1d/0x30 [ 147.551700][ T8716] dump_stack_lvl+0xe8/0x140 [ 147.551764][ T8716] dump_stack+0x15/0x1b [ 147.551787][ T8716] should_fail_ex+0x265/0x280 [ 147.551847][ T8716] ? __pfx_ext4_alloc_inode+0x10/0x10 [ 147.551872][ T8716] should_failslab+0x8c/0xb0 [ 147.551897][ T8716] kmem_cache_alloc_lru_noprof+0x6d/0x4c0 [ 147.551946][ T8716] ? ext4_alloc_inode+0x38/0x320 [ 147.551968][ T8716] ? __pfx_ext4_alloc_inode+0x10/0x10 [ 147.551988][ T8716] ext4_alloc_inode+0x38/0x320 [ 147.552013][ T8716] ? __pfx_ext4_alloc_inode+0x10/0x10 [ 147.552098][ T8716] alloc_inode+0x40/0x170 [ 147.552117][ T8716] iget_locked+0x101/0x440 [ 147.552159][ T8716] __ext4_iget+0x152/0x2350 [ 147.552175][ T8716] ? bpf_get_stack+0x33/0x50 [ 147.552322][ T8716] ? bpf_prog_4b3f8e3d902f6f0d+0x41/0x49 [ 147.552343][ T8716] ? bpf_get_stack_raw_tp+0x106/0x130 [ 147.552487][ T8716] ? perf_event_read_local+0x4a8/0x4f0 [ 147.552508][ T8716] ? bpf_trace_run3+0x12c/0x1e0 [ 147.552588][ T8716] ext4_nfs_get_inode+0x32/0xa0 [ 147.552637][ T8716] ? __pfx_ext4_nfs_get_inode+0x10/0x10 [ 147.552741][ T8716] generic_fh_to_dentry+0x7a/0xa0 [ 147.552766][ T8716] ext4_fh_to_dentry+0x2f/0x40 [ 147.552793][ T8716] exportfs_decode_fh_raw+0xba/0x4d0 [ 147.552823][ T8716] ? __pfx_vfs_dentry_acceptable+0x10/0x10 [ 147.552897][ T8716] ? should_failslab+0x8c/0xb0 [ 147.552979][ T8716] do_handle_to_path+0x6c/0xe0 [ 147.553010][ T8716] do_handle_open+0x500/0x710 [ 147.553040][ T8716] __x64_sys_open_by_handle_at+0x44/0x50 [ 147.553134][ T8716] x64_sys_call+0x2b6a/0x3000 [ 147.553160][ T8716] do_syscall_64+0xd8/0x2c0 [ 147.553194][ T8716] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.553278][ T8716] RIP: 0033:0x7fc6d58cf749 [ 147.553295][ T8716] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 147.553339][ T8716] RSP: 002b:00007fc6d432f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000130 [ 147.553359][ T8716] RAX: ffffffffffffffda RBX: 00007fc6d5b25fa0 RCX: 00007fc6d58cf749 [ 147.553371][ T8716] RDX: 0000000000000000 RSI: 0000200000000700 RDI: 0000000000000007 [ 147.553385][ T8716] RBP: 00007fc6d432f090 R08: 0000000000000000 R09: 0000000000000000 [ 147.553398][ T8716] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 147.553409][ T8716] R13: 00007fc6d5b26038 R14: 00007fc6d5b25fa0 R15: 00007ffc352b82a8 [ 147.553426][ T8716] [ 147.849712][ T3325] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.873648][ T8724] loop4: detected capacity change from 0 to 1024 [ 147.880755][ T8724] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 147.890632][ T8724] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 147.901714][ T8724] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 147.920180][ T8724] EXT4-fs error (device loop4): ext4_get_journal_inode:5849: inode #5: comm syz.4.1683: unexpected bad inode w/o EXT4_IGET_BAD [ 147.933923][ T8724] EXT4-fs (loop4): no journal found [ 147.950370][ T8724] loop4: detected capacity change from 0 to 512 [ 147.957694][ T8724] EXT4-fs: Ignoring removed mblk_io_submit option [ 147.958661][ T8724] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 147.958896][ T8724] EXT4-fs (loop4): orphan cleanup on readonly fs [ 147.958913][ T8724] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -13 [ 147.959451][ T8724] EXT4-fs error (device loop4): ext4_clear_blocks:876: inode #13: comm syz.4.1683: attempt to clear invalid blocks 2 len 1 [ 147.959836][ T8724] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1683: bg 0: block 456: padding at end of block bitmap is not set [ 147.960004][ T8724] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 147.960377][ T8724] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.1683: invalid indirect mapped block 1819239214 (level 0) [ 148.040470][ T8724] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.1683: invalid indirect mapped block 1819239214 (level 1) [ 148.055443][ T8724] EXT4-fs (loop4): 1 truncate cleaned up [ 148.062610][ T8724] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 148.104276][ T8730] netlink: 'syz.3.1684': attribute type 21 has an invalid length. [ 148.117342][ T8730] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1684'. [ 148.134930][ T8730] openvswitch: netlink: Missing key (keys=40, expected=100) [ 148.217904][ T3325] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.297802][ T3326] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.327699][ T8752] loop3: detected capacity change from 0 to 1024 [ 148.335719][ T8750] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1692'. [ 148.348288][ T8756] netlink: 'syz.1.1695': attribute type 1 has an invalid length. [ 148.363049][ T8752] EXT4-fs: Ignoring removed bh option [ 148.370691][ T8756] 8021q: adding VLAN 0 to HW filter on device bond2 [ 148.385755][ T8752] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 148.399407][ T8751] loop0: detected capacity change from 0 to 8192 [ 148.407059][ T8752] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4215: comm syz.3.1693: Allocating blocks 385-513 which overlap fs metadata [ 148.424154][ T8752] EXT4-fs (loop3): pa ffff8881060ffcb0: logic 16, phys. 129, len 24 [ 148.432304][ T8752] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 8 [ 148.444543][ T8756] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1695'. [ 148.472410][ T8756] bond2 (unregistering): Released all slaves [ 148.481720][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.491278][ T8766] loop4: detected capacity change from 0 to 8192 [ 148.503206][ T8767] openvswitch: netlink: Missing key (keys=40, expected=100) [ 148.537184][ T8766] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 148.578611][ T8775] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 148.614249][ T8775] EXT4-fs (loop2): 1 truncate cleaned up [ 148.679118][ T8781] lo speed is unknown, defaulting to 1000 [ 148.713815][ T8775] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 148.765550][ T8775] usb usb8: usbfs: process 8775 (syz.2.1701) did not claim interface 0 before use [ 148.804865][ T3326] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.906082][ T8796] EXT4-fs: Ignoring removed bh option [ 148.946713][ T8796] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 148.965523][ T8796] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4215: comm syz.4.1710: Allocating blocks 385-513 which overlap fs metadata [ 148.996865][ T8804] EXT4-fs: inline encryption not supported [ 149.004948][ T8796] EXT4-fs (loop4): pa ffff8881060ffd90: logic 16, phys. 129, len 24 [ 149.013121][ T8796] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 8 [ 149.036892][ T8804] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 149.050800][ T3325] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.073800][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.119512][ T8811] netlink: 'syz.1.1715': attribute type 3 has an invalid length. [ 149.594652][ T8836] EXT4-fs: Ignoring removed bh option [ 149.635781][ T8836] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4215: comm syz.3.1724: Allocating blocks 385-513 which overlap fs metadata [ 149.709828][ T8836] EXT4-fs (loop3): pa ffff8881060ffd90: logic 16, phys. 129, len 24 [ 149.718138][ T8836] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 8 [ 150.335216][ T8855] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1732'. [ 150.412048][ T8862] ================================================================== [ 150.420186][ T8862] BUG: KCSAN: data-race in fat16_ent_put / fat_mirror_bhs [ 150.427351][ T8862] [ 150.429697][ T8862] write to 0xffff888106db730c of 2 bytes by task 8853 on cpu 1: [ 150.437426][ T8862] fat16_ent_put+0x28/0x60 [ 150.441950][ T8862] fat_ent_write+0x6c/0xe0 [ 150.446393][ T8862] fat_chain_add+0x15d/0x440 [ 150.451200][ T8862] fat_get_block+0x46c/0x5e0 [ 150.455903][ T8862] __block_write_begin_int+0x400/0xf90 [ 150.461569][ T8862] cont_write_begin+0x5ff/0x970 [ 150.466553][ T8862] fat_write_begin+0x4f/0xe0 [ 150.471273][ T8862] generic_perform_write+0x184/0x490 [ 150.476677][ T8862] __generic_file_write_iter+0x9e/0x120 [ 150.482242][ T8862] generic_file_write_iter+0x8d/0x2f0 [ 150.487675][ T8862] vfs_write+0x52a/0x960 [ 150.492018][ T8862] __x64_sys_pwrite64+0xfd/0x150 [ 150.497081][ T8862] x64_sys_call+0x9f7/0x3000 [ 150.501675][ T8862] do_syscall_64+0xd8/0x2c0 [ 150.506204][ T8862] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.512193][ T8862] [ 150.514516][ T8862] read to 0xffff888106db7200 of 512 bytes by task 8862 on cpu 0: [ 150.522318][ T8862] fat_mirror_bhs+0x1df/0x320 [ 150.527089][ T8862] fat_alloc_clusters+0x98b/0xa80 [ 150.532205][ T8862] fat_get_block+0x258/0x5e0 [ 150.536806][ T8862] __block_write_begin_int+0x400/0xf90 [ 150.542794][ T8862] cont_write_begin+0x5ff/0x970 [ 150.547740][ T8862] fat_write_begin+0x4f/0xe0 [ 150.552424][ T8862] cont_write_begin+0x1b0/0x970 [ 150.557436][ T8862] fat_write_begin+0x4f/0xe0 [ 150.562151][ T8862] generic_cont_expand_simple+0xb0/0x150 [ 150.567873][ T8862] fat_cont_expand+0x3e/0x170 [ 150.572651][ T8862] fat_fallocate+0x177/0x1c0 [ 150.577245][ T8862] vfs_fallocate+0x3b6/0x400 [ 150.581846][ T8862] __x64_sys_fallocate+0x7a/0xd0 [ 150.586892][ T8862] x64_sys_call+0x1cd4/0x3000 [ 150.591595][ T8862] do_syscall_64+0xd8/0x2c0 [ 150.596130][ T8862] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.602032][ T8862] [ 150.604356][ T8862] Reported by Kernel Concurrency Sanitizer on: [ 150.610513][ T8862] CPU: 0 UID: 0 PID: 8862 Comm: syz.4.1731 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 150.622166][ T8862] Tainted: [W]=WARN [ 150.626041][ T8862] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 150.636202][ T8862] ================================================================== [ 150.656761][ T8865] EXT4-fs: Ignoring removed bh option [ 150.685689][ T8865] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4215: comm syz.0.1737: Allocating blocks 385-513 which overlap fs metadata [ 150.725040][ T8865] EXT4-fs (loop0): pa ffff88810764ea80: logic 16, phys. 129, len 24 [ 150.733174][ T8865] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 8